Antivirus Protection
 
Forums: » Register « |  User CP |  Games |  Calendar |  Members |  FAQs |  Sitemap |  Support | 
User Name:
Password:
Remember me
Go Back   Dev Shed Forums > System Administration > Antivirus Protection
Reload this Page

Trojan.Zlob et al

Discuss Trojan.Zlob et al in the Antivirus Protection forum on Dev Shed.
Trojan.Zlob et al Antivirus Protection forum discussing issues relating to antivirus programs, spyware, hijack protection, and personal firewalls for all operating systems. Keep your systems protected from hackers and other hazards.

Reply
Add This Thread To:
  Del.icio.us   Digg   Google   Spurl   Blink   Furl   Simpy   Y! MyWeb 
« Previous Thread | Next Thread »  
Thread Tools Search this Thread Rate Thread Display Modes
 
Unread Dev Shed Forums Sponsor:
  #1  
Old July 14th, 2006, 07:25 AM
ElijaTheGold's Avatar
ElijaTheGold ElijaTheGold is offline
Moderator
Dev Shed Novice (500 - 999 posts)
  
Join Date: May 2006
Location: Kent, England
Posts: 844 ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 1 Month 2 Days 20 h 47 m 12 sec
Reputation Power: 569
Trojan.Zlob et al
A friend (no really ) of mine is having problems with some
persistent little critters and I am out of ideas.

This is the relevant bits of his last email

Quote:
Originally Posted by Ferg
I ran a full antivirus scan in Safe mode and it detected one virus ismon.exe (Trojan.Zlob) which it could not repair but enabled me to quarantine. When I rebooted and launched IE it opened sysnetsecurity.net webpage with a popup explaining that the pc is infected with virus W32.Myzor.FK@yf.

I am also getting system alerts telling me the pc is infected with spyware managing popup adverts (OHPE ver $.12_23). I have just done yet another full scan with McAfee antispyware which removed dialer 211 but it keeps telling me that the dialer is still there after I remove it….


Has anyone got a fix for this?

Cheers
Elija
Reply With Quote
  #2  
Old July 14th, 2006, 08:55 AM
displeaser's Avatar
displeaser displeaser is offline
Periodically energetic Perler
Dev Shed Regular (2000 - 2499 posts)
  
Join Date: May 2005
Location: Dublin, Ireland
Posts: 2,266 displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 76661 Folding Title: Intermediate FolderFolding Points: 76661 Folding Title: Intermediate FolderFolding Points: 76661 Folding Title: Intermediate FolderFolding Points: 76661 Folding Title: Intermediate Folder
Time spent in forums: 4 Weeks 5 h 23 m 13 sec
Reputation Power: 532
heres a link which goes into how to remove it.

Get you mate to also download adaware, spybot and ewdio (commercial but free trial). Get him to update all of them & make sure he has updated his virus scanner as well.

When scanning get him to turn off system restore, reboot into safemode and run full scans against his machine.

A trip to pandasoft probably wouldnt go amiss either.

This should remove most/all of the nasty critters from his machine.

Displeaser
Comments on this post
aitken325i agrees!
__________________
Vi Veri Veniversum Vivus Vici.
Reply With Quote
  #3  
Old July 14th, 2006, 12:44 PM
aitken325i's Avatar
aitken325i aitken325i is offline
At a NO MA'AM meeting . . . .
Dev Shed God 18th Plane (13500 - 13999 posts)
  
Join Date: Mar 2004
Location: nr Edinburgh, Scotland
Posts: 13,549 aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)  Folding Points: 10110 Folding Title: Novice Folder
Time spent in forums: 5 Months 2 Weeks 1 Day 11 h 6 m 9 sec
Reputation Power: 1953
If still having problems after, run HijackThis and post the log on here for us to have a look at.
__________________
The No Ma'am commandments:

1.) It is O.K. to call hooters 'knockers' and sometimes snack trays
2.) It is wrong to be French
3.) It is O.K. to put all bad people in a giant meat grinder
4.) Lawyers, see rule 3
5.) It is O.K. to drive a gas guzzler if it helps you get babes
6.) Everyone should car pool but me
7.) Bring back the word 'stewardesses'
8.) Synchronized swimming is not a sport
9.) Mud wrestling is a sport
Reply With Quote
  #4  
Old July 14th, 2006, 01:31 PM
ElijaTheGold's Avatar
ElijaTheGold ElijaTheGold is offline
Moderator
Dev Shed Novice (500 - 999 posts)
  
Join Date: May 2006
Location: Kent, England
Posts: 844 ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 1 Month 2 Days 20 h 47 m 12 sec
Reputation Power: 569
Thanks guys, I have sent this info on to him. Now I just have to
wait and see...
Reply With Quote
  #5  
Old July 23rd, 2006, 09:10 AM
ElijaTheGold's Avatar
ElijaTheGold ElijaTheGold is offline
Moderator
Dev Shed Novice (500 - 999 posts)
  
Join Date: May 2006
Location: Kent, England
Posts: 844 ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 1 Month 2 Days 20 h 47 m 12 sec
Reputation Power: 569
OK, I have finally received a HijackThis log which I have attached. Also
this is the contents of his email

Quote:
Originally Posted by Ferg
Ive done almost everything that was on the list (I couldn’t run McAfee antispyware in safe mode because it said it needed internet access to load) but otherwise everything – each program says it finds infections and removes them but during the scan I get the pop up “Urgent systems message – your computer is infected with last version of internet Trojan (iworm_attck_v122.02a) which doesn’t disapper when the removals tale place and various other pop ups etc.

I ran pandasoft’s scan and it detected 19 spyware, 3 hacking tools, 2 dialers but should I pay another £18.99??
Attached Files
File Type: txt hijackthis.txt (9.0 KB, 111 views)
Reply With Quote
  #6  
Old July 23rd, 2006, 10:33 AM
aitken325i's Avatar
aitken325i aitken325i is offline
At a NO MA'AM meeting . . . .
Dev Shed God 18th Plane (13500 - 13999 posts)
  
Join Date: Mar 2004
Location: nr Edinburgh, Scotland
Posts: 13,549 aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)  Folding Points: 10110 Folding Title: Novice Folder
Time spent in forums: 5 Months 2 Weeks 1 Day 11 h 6 m 9 sec
Reputation Power: 1953
Can you also get him to download, update the definitions and run Trojan Hunter but in normal mode. After which, post a fresh HJT log for us to look at.
Reply With Quote
  #7  
Old August 1st, 2006, 08:30 AM
ElijaTheGold's Avatar
ElijaTheGold ElijaTheGold is offline
Moderator
Dev Shed Novice (500 - 999 posts)
  
Join Date: May 2006
Location: Kent, England
Posts: 844 ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 1 Month 2 Days 20 h 47 m 12 sec
Reputation Power: 569
Quote:
Originally Posted by aitken325i
Can you also get him to download, update the definitions and run Trojan Hunter but in normal mode. After which, post a fresh HJT log for us to look at.


I now have a new Hijack this log for you.... Finally checked my
spam folder and it had been put there...
Attached Files
File Type: txt hijackthis260706.txt (9.5 KB, 122 views)
Reply With Quote
  #8  
Old August 1st, 2006, 08:50 AM
displeaser's Avatar
displeaser displeaser is offline
Periodically energetic Perler
Dev Shed Regular (2000 - 2499 posts)
  
Join Date: May 2005
Location: Dublin, Ireland
Posts: 2,266 displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)displeaser User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 76661 Folding Title: Intermediate FolderFolding Points: 76661 Folding Title: Intermediate FolderFolding Points: 76661 Folding Title: Intermediate FolderFolding Points: 76661 Folding Title: Intermediate Folder
Time spent in forums: 4 Weeks 5 h 23 m 13 sec
Reputation Power: 532
Quote:
Originally Posted by ElijaTheGold
I now have a new Hijack this log for you.... Finally checked my
spam folder and it had been put there...


Hi,

I think your still infected.

Did your friend download, install, update and run full system scans of the software above?

Can you download smitfraudfix. Turn off system restores. Reboot into safemode and run smitfraudfix, it creates a log so can you post that here. If he hasnt run ewido,adaware etc he should run full system scans now. Run hijackthis, delete the following lines if they still exist.

O2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:\WINDOWS\System32\ixt0.dll
O4 - HKCU\..\Run: [srshost.exe] C:\WINDOWS\system32\srshost.exe

save the hijackthis log and post that here with the smitfraudfix log.

Displeaser
Reply With Quote
  #9  
Old August 1st, 2006, 09:01 AM
ElijaTheGold's Avatar
ElijaTheGold ElijaTheGold is offline
Moderator
Dev Shed Novice (500 - 999 posts)
  
Join Date: May 2006
Location: Kent, England
Posts: 844 ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)ElijaTheGold User rank is Colonel (50000 - 60000 Reputation Level)  Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4Folding Points: 1707307 Folding Title: Super Ultimate Folder - Level 4
Time spent in forums: 1 Month 2 Days 20 h 47 m 12 sec
Reputation Power: 569
Quote:
Originally Posted by displeaser
Did your friend download, install, update and run full system scans of the software above?

He did

I'll pass your comments on and see where we go..

Thanks
Reply With Quote
  #10  
Old August 1st, 2006, 09:57 AM
aitken325i's Avatar
aitken325i aitken325i is offline
At a NO MA'AM meeting . . . .
Dev Shed God 18th Plane (13500 - 13999 posts)
  
Join Date: Mar 2004
Location: nr Edinburgh, Scotland
Posts: 13,549 aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)aitken325i User rank is General 15th Grade (Above 100000 Reputation Level)  Folding Points: 10110 Folding Title: Novice Folder
Time spent in forums: 5 Months 2 Weeks 1 Day 11 h 6 m 9 sec
Reputation Power: 1953
Also, on the HJT log, have it fix:

C:\WINDOWS\System32\issearch.exe
O4 - HKLM\..\Run: [Teammagsdeaddelete] C:\Documents and Settings\All Users\Application Data\dog error team mags\flag hope.exe
O4 - HKCU\..\Run: [srshost.exe] C:\WINDOWS\system32\srshost.exe
O4 - HKCU\..\Run: [SinglesMSetup.exe] C:\DOCUME~1\TEMP\MYDOCU~1\MYRECE~1\SINGLE~1.EXE /r
O16 - DPF: {139DD48B-3684-2520-4309-46B93A6200BA} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {1B4E983C-601B-6D87-F023-71FC5E4095E9} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {1D07629B-8870-2324-6802-7E6E668C5794} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {28FD1044-F4F3-70EE-CD23-0B4B01F4D199} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {4141B288-1E4E-067C-2CD4-7DCC0308114D} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {6025F285-BB51-45A9-C03E-071C301EB37D} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {64D6A350-C621-20E6-7534-483C36830328} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {68AED5DC-4277-5892-53E9-5714695AE40C} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {6D3B5277-D6AE-6EC5-DE5B-54265DD49D53} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {7D970B90-BB1D-00C9-8024-1E6401973EC7} - http://85.255.113.214/1/gdnFR2218.exe
O16 - DPF: {FF3F0F03-0F01-131A-A3F9-08F02B23E0CC} - http://207.226.177.98/dba2218.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{369DB834-937A-4775-B34E-BE61092B9192}: NameServer = 195.112.4.4,195.112.4.7
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O21 - SSODL: fairydom - {5839511e-ec1b-4f91-ace3-fb88e52f5239} - (no file)
Reply With Quote
Reply

Viewing: Dev Shed Forums > System Administration > Antivirus Protection > Trojan.Zlob et al

« Previous Thread | Next Thread »