|
|
|||||||||
|
|||||||||
| |||||||||
|
|
|
| |||||||||
|
|
«
Previous Thread
|
Next Thread
»
|
Thread Tools | Search this Thread | Rate Thread | Display Modes |
|
|
|
Get inside! Sample the range of functionality easily built with JMSL Library for Time Series Data Analysis, Heat Maps, Portfolio Optimization, Monte Carlo Simulation, Stock Price Charting and more. Download Now! |
|
#1
|
|||
|
|||
|
Help needed: cannot access drives, task manager and run command disabled !!
Dear Friends,
recently i was hit by trojan/viruses/malware and I tried to clean my system with AVG anti-spyware. After cleaning my system, I still have problems accessing my hard-drive ( msg: cannot find copy.exe etc), my task manager option is disabled, Run command is inaccesible from start menu etc etc. Though I am able to access drives by explore option but same fails when i try to access it through My computer. Also after cleaning, Twice I have got windows message that my system is low on virtual memory and its size is being adjusted. I read your rules for posting queries but i could not complete step 1 and step 4 i.e cleanup software is getting downloaded in faulty state and online cleaning status is not visible when i hit 'clean now' button.... I will appreciate if you can help me come out of this situation. Thanx ![]() |
|
#2
|
|||
|
|||
|
---------------------------------------------------------
AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 3:28:27 AM 4/12/2008 + Scan result: C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP157\A0018550.exe -> Backdoor.Small.lo : Cleaned with backup (quarantined). C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP157\A0018567.exe -> Backdoor.Small.lo : Cleaned with backup (quarantined). C:\WINDOWS\system32\temp2.exe -> Backdoor.Small.lo : Cleaned with backup (quarantined). C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP135\A0014086.exe -> Downloader.Small : Cleaned with backup (quarantined). C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP135\A0014216.exe -> Downloader.Small : Cleaned with backup (quarantined). C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP157\A0018648.exe -> Dropper.Small.apl : Cleaned with backup (quarantined). C:\host.exe -> Dropper.Small.apl : Cleaned with backup (quarantined). D:\host.exe -> Dropper.Small.apl : Cleaned with backup (quarantined). E:\host.exe -> Dropper.Small.apl : Cleaned with backup (quarantined). F:\host.exe -> Dropper.Small.apl : Cleaned with backup (quarantined). :mozilla.477:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.478:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.479:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.480:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.481:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.482:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.483:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.484:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.485:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.486:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.487:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.488:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.489:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.490:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.491:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.492:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.493:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.494:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.495:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.496:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.497:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.498:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.595:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@2o7[2].txt -> TrackingCookie.2o7 : Cleaned. :mozilla.125:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.126:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.127:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.128:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.156:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned. :mozilla.274:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adengage : Cleaned. :mozilla.275:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adengage : Cleaned. :mozilla.276:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adengage : Cleaned. :mozilla.277:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adengage : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@media.adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned. :mozilla.741:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.354:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.355:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.356:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.357:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.358:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@advertising[2].txt -> TrackingCookie.Advertising : Cleaned. :mozilla.392:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.871:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned. :mozilla.298:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.301:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.302:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@burstnet[2].txt -> TrackingCookie.Burstnet : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@www.burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned. :mozilla.303:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.304:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.305:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.306:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.307:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.308:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.309:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.310:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.311:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.157:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Clickhype : Cleaned. :mozilla.757:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Com : Cleaned. :mozilla.758:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@com[1].txt -> TrackingCookie.Com : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@whitepapers.techrepublic.com[1].txt -> TrackingCookie.Com : Cleaned. :mozilla.960:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned. :mozilla.170:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.317:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.318:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.319:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.320:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.321:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.322:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.684:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned. :mozilla.685:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned. :mozilla.234:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.235:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.687:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.688:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.811:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.812:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.920:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.965:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.966:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@ehg-ittoolbox.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.459:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned. :mozilla.460:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned. :mozilla.828:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Information : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@search.live[1].txt -> TrackingCookie.Live : Cleaned. :mozilla.892:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned. :mozilla.893:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned. :mozilla.543:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Masterstats : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@auto.search.msn[1].txt -> TrackingCookie.Msn : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@search.msn[2].txt -> TrackingCookie.Msn : Cleaned. :mozilla.400:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.404:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.405:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.406:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Overture : Cleaned. :mozilla.186:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Paypal : Cleaned. :mozilla.596:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.597:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.598:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.599:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.600:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.601:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.602:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.603:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned. :mozilla.461:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.462:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@real[1].txt -> TrackingCookie.Real : Cleaned. :mozilla.869:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revenue : Cleaned. :mozilla.555:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.556:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.557:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.558:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.559:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.560:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. :mozilla.561:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Revsci : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@revsci[2].txt -> TrackingCookie.Revsci : Cleaned. :mozilla.418:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.419:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.420:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.421:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.422:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.423:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.428:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.466:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. |
|
#3
|
|||
|
|||
|
continued--log report AVG anti spyware
:mozilla.467:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.468:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.469:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.471:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.472:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.473:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.696:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.697:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@adopt.specificclick[2].txt -> TrackingCookie.Specificclick : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@specificclick[1].txt -> TrackingCookie.Specificclick : Cleaned. :mozilla.100:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.101:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.102:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.103:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.104:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.105:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.106:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.107:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.108:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.109:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.110:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.111:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.112:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.113:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.116:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.117:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.118:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.119:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.120:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.121:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.75:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.76:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.77:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.78:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.79:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.80:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.81:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.85:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.86:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.87:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.88:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.89:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.90:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.91:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.92:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.93:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.94:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.95:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.96:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.97:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.98:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.99:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.313:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.314:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.315:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.316:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.415:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned. :mozilla.27:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Toplist : Cleaned. :mozilla.323:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.328:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.329:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.330:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned. :mozilla.435:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : Cleaned. :mozilla.37:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.38:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.39:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.40:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.41:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.42:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.43:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.44:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.45:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.46:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.47:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.134:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.135:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.136:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.137:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.138:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.139:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.140:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.141:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. :mozilla.142:C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\3y7trjx1.default\cookies.txt -> TrackingCookie.Zedo : Cleaned. C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt -> TrackingCookie.Zedo : Cleaned. C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP157\A0018566.exe -> Trojan.Copier : Cleaned with backup (quarantined). C:\WINDOWS\xcopy.exe -> Trojan.Copyself : Cleaned with backup (quarantined). C:\copy.exe -> Trojan.Copyself : Cleaned with backup (quarantined). D:\copy.exe -> Trojan.Copyself : Cleaned with backup (quarantined). E:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP157\A0018647.exe -> Trojan.Copyself : Cleaned with backup (quarantined). F:\copy.exe -> Trojan.Copyself : Cleaned with backup (quarantined). C:\System Volume Information\_restore{E3536418-8A9A-4438-BDED-9B242547A6ED}\RP157\A0018646.exe -> Worm.VB.ck : Cleaned with backup (quarantined). C:\WINDOWS\system\lsass.exe -> Worm.VB.ck : Cleaned with backup (quarantined). ::Report end |
|
#4
|
|||
|
|||
|
step-2 - MALWARE BYTES log report ( note- all problems were fixed)
Malwarebytes' Anti-Malware 1.11 Database version: 616 Scan type: Full Scan (C:\|D:\|E:\|F:\|) Objects scanned: 170119 Time elapsed: 48 minute(s), 5 second(s) Memory Processes Infected: 1 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 11 Memory Processes Infected: C:\WINDOWS\system32\svehost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\system32\svehost.exe (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.01 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.03 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.05 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.07 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.09 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.11 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.13 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.15 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.17 (Heuristics.Reserved.Word.Exploit) -> No action taken. C:\WINDOWS\system32\drivers\etc\services.19 (Heuristics.Reserved.Word.Exploit) -> No action taken. |
|
#5
|
|||
|
|||
|
log report- super antispyware
SUPERAntiSpyware Scan Log Generated 04/12/2008 at 08:50 PM Application Version : 4.0.1154 Core Rules Database Version : 3437 Trace Rules Database Version: 1429 Scan type : Complete Scan Total Scan Time : 00:26:17 Memory items scanned : 413 Memory threats detected : 0 Registry items scanned : 5272 Registry threats detected : 6 File items scanned : 18475 File threats detected : 32 Unclassified.Unknown Origin HKLM\Software\Classes\CLSID\{598F4775-6FB6-477B-9842-E0426824E077} HKCR\CLSID\{598F4775-6FB6-477B-9842-E0426824E077} HKCR\CLSID\{598F4775-6FB6-477B-9842-E0426824E077} HKCR\CLSID\{598F4775-6FB6-477B-9842-E0426824E077}\InprocServer32 HKCR\CLSID\{598F4775-6FB6-477B-9842-E0426824E077}\InprocServer32#ThreadingModel C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMP\~DP1F4.DLL HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{598F4775-6FB6-477B-9842-E0426824E077} Adware.Tracking Cookie C:\Documents and Settings\Administrator\Cookies\administrator@apmebf[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@atdmt[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@1064535546[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@1070698946[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@emp3finder[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@statse.webtrendslive[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@specificclick[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@revsci[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@tribalfusion[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@2o7[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@ehg-ittoolbox.hitbox[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@fcstats.bcentral[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@richmedia.yahoo[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@kontera[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@doubleclick[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@burstnet[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@fastclick[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@advertising[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@ads.ozonemedia.co[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@media.adrevolver[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@zedo[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@adinterax[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@ad.yieldmanager[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@www.burstnet[1].txt C:\Documents and Settings\Administrator\Cookies\administrator@adopt.specificclick[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@www.emp3finder[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@tacoda[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@hitbox[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@casalemedia[2].txt C:\Documents and Settings\Administrator\Cookies\administrator@accounts[2].txt Trojan.Downloader C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\MSCONFIG.EXE |
|
#6
|
|||
|
|||
|
step 4- online scanning was not responsive so here is HIJACK THIS log report
Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:09:33 PM, on 4/12/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\PROGRA~1\Grisoft\AVG7\avgemc.exe C:\Program Files\Network Associates\VirusScan\Mcshield.exe C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Dell\QuickSet\Quickset.exe C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 128.1.2.1:8080 R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file) O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O4 - HKLM\..\Run: [SigmaTel StacMon] C:\Program Files\SigmaTel\SigmaTel AC97 Audio Drivers\stacmon.exe O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\Program Files\Stardock\WinCustomize\BootSkin\BootSkin.exe" /StartupJobs O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\Quickset.exe O4 - HKLM\..\Run: [Microsoft Updates] svehost.exe O4 - HKLM\..\Run: [MSKDetectorExe] C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zlclient.exe O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\RunServices: [Microsoft Updates] svehost.exe O4 - HKCU\..\Run: [Yahoo! Pager] "C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.EXE" -quiet O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 6\PCSuite.exe" -onlytray O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'Default user') O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/mcinsctl/4,0,0,101/mcinsctl.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{D8BB99EF-1AA7-41CF-B8B7-C5E748E10766}: NameServer = 59.144.127.16,59.144.127.17 O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINDOWS\system32\ZoneLabs\vsmon.exe -- End of file - 7078 bytes |
|
#7
|
|||
|
|||
|
uninstall list- Hijack this
Adobe Flash Player 9 ActiveX Adobe Flash Player Plugin Adobe Reader 6.0.1 Applian FLV Player AVG 7.5 AVG Anti-Spyware 7.5 BCM V.92 56K Modem BootSkin Broadcom 440x 10/100 Integrated Controller DB2 Enterprise Server Edition Dell Resource CD Glarysoft Registry Repair 2.7 Google Earth Google Talk (remove only) HijackThis 2.0.2 HP Customer Participation Program 7.0 HP Document Viewer 7.0 HP Imaging Device Functions 7.0 HP Photosmart Essential HP Photosmart Premier Software 6.5 HP Photosmart, Officejet and Deskjet 7.0.A HP Software Update HP Solution Center 7.0 IsoBuster 1.2 J2SE Runtime Environment 5.0 Update 11 Jetfighter V Homeland Protector K-Lite Mega Codec Pack 2.01 Kundli for Windows (Lite Edition) Malwarebytes' Anti-Malware McAfee VirusScan Enterprise Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft Office Professional Edition 2003 Mojo Master Winamp Visualizer for Winamp (remove only) Mozilla Firefox (1.5.0.12) MSVC80_x86 Nokia Connectivity Cable Driver Nokia PC Suite Nokia PC Suite NVIDIA Drivers OCR Software by I.R.I.S 7.0 PC Connectivity Solution Picasa 2 PowerDVD 5.1 PowerQuest PartitionMagic 7.0 QuickSet SigmaTel AC97 Audio Drivers Sonic DLA Sonic RecordNow! Sonic Update Manager SUPERAntiSpyware Free Edition Synaptics Pointing Device Driver VideoLAN VLC media player 0.8.2 Winamp (remove only) Windows Driver Package - Nokia Modem (08/03/2007 6.84.0.2) Windows Driver Package - Nokia Modem (10/12/2007 3.6) Windows Media Format Runtime Windows Media Player 10 WinRAR archiver WinZip Wondershare Photo Collage Studio (4.2.0) Trial Version Yahoo! Messenger ZoneAlarm Pro |
|
#8
|
||||
|
||||
|
Welcome, Thanks for working the steps in the Sticky. Lets move on to the more advanced tools. Download Combofix from the link below. You must rename it before saving it. Save it to your desktop. I suggest that you rename it to Combo-Fix.exe. The tool will suggest that name as default any way. >> Download ComboFix << -------------------------------------------------------------------- 1. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix. * Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results" * Remember to re enable the protection again afterwards. 2. Double click on Combo-Fix.exe & follow the prompts. * When finished, it will produce a report for you. Please post the C |