Jump to content


Photo

vundo file detected cannot remove


  • This topic is locked This topic is locked
3 replies to this topic

#1 serfman

serfman

    Member

  • New Member
  • Pip
  • 1 posts

Posted 08 June 2007 - 09:27 PM

I cant boot my system in normal mode. Its been running very very sluggish and I am getting a lot of pop ups like mania TV, and some about Win antivirus or somehting dont remember. I removed a bunch of programs that i never instsalled then I keep getting an Alert from Mcafee that I have a file that cant be cleaned or removed that is infected with Vundo. File location c:\windows\system32\jkkjk.dll freaking alert does not stop poping up and brings everything to a crawl. So I've been using safemode. Please help below is the AVG File and the Hijack this file.

Thanks
serfman :rant:

AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 10:08:55 PM 6/8/2007

+ Scan result:



[1464] C:\WINDOWS\System32\jkkjk.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
[352] C:\WINDOWS\System32\jkkjk.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
[700] C:\WINDOWS\System32\jkkjk.dll -> Adware.Virtumonde : Cleaned with backup (quarantined).
C:\WINDOWS\system32\j7221433.dll -> Hijacker.Small.mw : Cleaned with backup (quarantined).
:mozilla.461:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned.
:mozilla.10:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.11:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.12:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.13:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.14:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.15:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.16:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.17:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.18:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.19:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.20:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.21:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.225:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.22:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.23:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.24:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.25:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.26:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.27:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.28:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.332:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.630:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.802:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.8:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
:mozilla.9:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@meetupcom.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@usatoday1.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@aavalue[1].txt -> TrackingCookie.Aavalue : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@arn.aavalue[1].txt -> TrackingCookie.Aavalue : Cleaned.
:mozilla.205:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.207:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
:mozilla.208:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@ads.adbrite[1].txt -> TrackingCookie.Adbrite : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@adrevolver[1].txt -> TrackingCookie.Adrevolver : Cleaned.
:mozilla.838:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.839:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Adtech : Cleaned.
:mozilla.29:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.30:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.31:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.32:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.33:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
:mozilla.112:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
:mozilla.76:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Bfast : Cleaned.
:mozilla.134:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned.
:mozilla.596:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.597:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.598:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.599:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Bridgetrack : Cleaned.
:mozilla.588:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Burstbeacon : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@www.burstbeacon[1].txt -> TrackingCookie.Burstbeacon : Cleaned.
:mozilla.586:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.587:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.589:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@www.burstnet[1].txt -> TrackingCookie.Burstnet : Cleaned.
:mozilla.182:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.183:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.184:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.185:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.186:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.187:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.188:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.189:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.190:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.191:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned.
:mozilla.193:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Clickbank : Cleaned.
:mozilla.333:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Cnn : Cleaned.
:mozilla.694:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Com : Cleaned.
:mozilla.732:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Coremetrics : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@cpvfeed[2].txt -> TrackingCookie.Cpvfeed : Cleaned.
:mozilla.74:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
:mozilla.113:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.114:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.117:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.118:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
:mozilla.119:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@fastclick[2].txt -> TrackingCookie.Fastclick : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@findwhat[1].txt -> TrackingCookie.Findwhat : Cleaned.
:mozilla.486:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.665:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.760:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned.
:mozilla.339:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.340:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.341:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.428:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.430:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.500:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.602:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@ehg-dig.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@ehg-meevee.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
:mozilla.248:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.249:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Imrworldwide : Cleaned.
:mozilla.480:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.698:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Liveperson : Cleaned.
:mozilla.200:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@search.msn[2].txt -> TrackingCookie.Msn : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@ssl-hints.netflame[1].txt -> TrackingCookie.Netflame : Cleaned.
:mozilla.450:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.451:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.452:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.453:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Overture : Cleaned.
:mozilla.761:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Paypal : Cleaned.
:mozilla.135:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.136:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.137:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.138:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.139:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.140:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Pointroll : Cleaned.
:mozilla.109:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.110:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.111:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned.
:mozilla.459:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Realmedia : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@realmedia[1].txt -> TrackingCookie.Realmedia : Cleaned.
:mozilla.691:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.692:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.693:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.695:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.696:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Revsci : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@revsci[1].txt -> TrackingCookie.Revsci : Cleaned.
:mozilla.73:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.75:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Ru4 : Cleaned.
:mozilla.770:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.771:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.772:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.773:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.774:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.775:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
:mozilla.160:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.161:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.162:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.165:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.166:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.481:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.482:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.483:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.484:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.485:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Specificclick : Cleaned.
:mozilla.315:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.319:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.320:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.321:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.322:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.323:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.324:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.325:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
:mozilla.168:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.169:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.170:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.171:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.172:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
:mozilla.214:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@anad.tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@anat.tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@tacoda[1].txt -> TrackingCookie.Tacoda : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned.
:mozilla.120:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
:mozilla.792:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.793:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.794:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Web-stat : Cleaned.
:mozilla.35:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.741:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.742:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Webtrendslive : Cleaned.
:mozilla.141:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.142:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.143:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned.
C:\Documents and Settings\Serf\Cookies\serf@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.
:mozilla.631:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.632:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
:mozilla.633:C:\Documents and Settings\Serf\Application Data\Mozilla\Firefox\Profiles\lsg7re9q.default\cookies.txt -> TrackingCookie.Zedo : Cleaned.
C:\WINDOWS\system32\gygugssk.exe -> Trojan.Agent.anr : Cleaned with backup (quarantined).
C:\WINDOWS\system32\ofneofyk.exe -> Trojan.Agent.anr : Cleaned with backup (quarantined).
C:\WINDOWS\system32\tpiltndc.exe -> Trojan.Agent.anr : Cleaned with backup (quarantined).
C:\WINDOWS\system32\wprifllj.exe -> Trojan.Agent.anr : Cleaned with backup (quarantined).


::Report end


Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:18:14 PM, on 6/8/2007
Platform: Windows XP (WinNT 5.01.2600)
Boot mode: Safe mode with network support

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\Serf\Desktop\HiJackThis_v2.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearsh...ar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.bearsh...ar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.bearsh...ar.html?src=ssb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearsh...ar.html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.icannnews...I...1&rnd=24742
R3 - URLSearchHook: (no name) - <default> - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe,fqimaka.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O2 - BHO: (no name) - {2C8970E4-E775-4456-BCEF-EE4C8A804895} - C:\WINDOWS\System32\nnnnkih.dll (file missing)
O2 - BHO: (no name) - {32BC02D1-3B2C-4993-BD4E-D854D35C5791} - C:\WINDOWS\System32\djryftkr.dll (file missing)
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll
O2 - BHO: (no name) - {6D043C87-B0E6-4838-AC25-B6D150015676} - C:\WINDOWS\System32\jkkjk.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - c:\program files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {A0A6700F-3419-418A-AB1B-8C637A8E3330} - C:\WINDOWS\System32\pmnnm.dll (file missing)
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O2 - BHO: PsapiAnalyzer Object - {CB8B69CF-31AF-40D0-A119-5A8435BC1534} - c:\windows\help\tours\sysc.dll
O2 - BHO: (no name) - {d88eacb6-38f5-4297-8bee-765dd0065948} - C:\WINDOWS\System32\fvr.dll (file missing)
O2 - BHO: (no name) - {E12BFF69-38A7-406e-A8EF-2738107A7831} - C:\WINDOWS\System32\wspxhaek.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\en-us\msntb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: McAfee SiteAdvisor - {0BF43445-2F28-4351-9252-17FE6E806AA0} - C:\Program Files\SiteAdvisor\6066\SiteAdv.dll
O4 - HKLM\..\Run: [ApachInc] rundll32.exe "C:\WINDOWS\System32\fyruqymv.dll",realset
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [Fuiyob] C:\WINDOWS\System32\n?lookup.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Wtdc] C:\Program Files\crru\tsrp.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Fuiyob] C:\WINDOWS\System32\n?lookup.exe (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O15 - Trusted Zone: *.crosskirknet.com
O15 - Trusted Zone: *.dollarrevenue.com
O15 - Trusted Zone: *.filesharingaccess.com
O15 - Trusted Zone: *.gimmysmileys.com
O15 - Trusted Zone: *.imagesrvr.com
O15 - Trusted Zone: *.kabum.pl
O15 - Trusted Zone: *.kazaa-forum.com
O15 - Trusted Zone: *.traffic-stats.org
O15 - Trusted Zone: *.crosskirknet.com (HKLM)
O15 - Trusted Zone: *.dollarrevenue.com (HKLM)
O15 - Trusted Zone: *.filesharingaccess.com (HKLM)
O15 - Trusted Zone: *.gimmysmileys.com (HKLM)
O15 - Trusted Zone: *.imagesrvr.com (HKLM)
O15 - Trusted Zone: *.kabum.pl (HKLM)
O15 - Trusted Zone: *.kazaa-forum.com (HKLM)
O15 - Trusted Zone: *.traffic-stats.org (HKLM)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft....k/?linkid=39204
O20 - Winlogon Notify: jkkjk - C:\WINDOWS\System32\jkkjk.dll
O20 - Winlogon Notify: nnnnkih - nnnnkih.dll (file missing)
O20 - Winlogon Notify: sysc - c:\windows\help\tours\sysc.dll
O20 - Winlogon Notify: winzxe32 - winzxe32.dll (file missing)
O21 - SSODL: AUMxAWdeHunl - {C434D848-6E9E-72E2-9F39-FB10ABB06EF6} - C:\WINDOWS\System32\xu.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: McAfee E-mail Proxy (Emproxy) - McAfee, Inc. - C:\PROGRA~1\COMMON~1\McAfee\EmProxy\emproxy.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: McAfee HackerWatch Service - McAfee, Inc. - C:\Program Files\Common Files\McAfee\HackerWatch\HWAPI.exe
O23 - Service: McAfee Update Manager (mcmispupdmgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\program files\common files\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection Manager (mcpromgr) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Redirector Service (McRedirector) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
O23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShowGold\ScsiAccess.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: SiteAdvisor Service - McAfee, Inc. - C:\Program Files\SiteAdvisor\6066\SAService.exe

--
End of file - 8891 bytes

#2 SWI Support Robot

SWI Support Robot

    Helper robot

  • SWI Bot
  • PipPipPipPipPip
  • 23,523 posts

Posted 11 June 2007 - 06:30 AM

Welcome to SWI. We apologize for the delay; our helpers have been very busy.
If you have not received help after 3 days, please CLICK HERE, and post a link to your log and the date it was originally posted.

Thank you for your patience.

[this is an automated reply]
This is an automated message. It does not count as help.

#3 Chancellor

Chancellor

    Forum Deity

  • Emeritus
  • PipPipPipPipPip
  • 3,020 posts

Posted 21 June 2007 - 03:49 PM

Hi,

Sorry youve had to wait for a few days but all of the helpers here are volunteers and weve been really busy recently.

First, please download ComboFix from Here or Here to your Desktop.
  • Double click combofix.exe and follow the prompts.
  • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall

Once you have run ComboFix and before posting your log from that scan, please download Dr.Web CureIt to the desktop:
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
  • Doubleclick the drweb-cureit.exe file and Allow to run the express scan
  • This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan.
  • Once the short scan has finished, Click Options > Change settings
  • Choose the "Scan"-tab, remove the mark at "Heuristic analysis".
  • Back at the main window, mark the drives that you want to scan.
  • Select all drives. A red dot shows which drives have been chosen.
  • Click the green arrow at the right, and the scan will start.
  • Click 'Yes to all' if it asks if you want to cure/move the file.
  • When the scan has finished, look if you can click next icon next to the files found: Posted Image
  • If so, click it and then click the next icon right below and select Move incurable as you'll see in next image:
    Posted Image
    This will move it to the %userprofile%\DoctorWeb\quarantaine-folder if it can't be cured. (this in case if we need samples)
  • After selecting, in the Dr.Web CureIt menu on top, click file and choose save report list
  • Save the report to your desktop. The report will be called DrWeb.csv
  • Close Dr.Web Cureit.
  • Reboot your computer!! Because it could be possible that files in use will be moved/deleted during reboot.
  • After reboot, post the contents of the log from Dr.Web you saved previously in your next reply.
Ill look out for your reply :)
Chancellor

Please consider a donation to help Support SWI
Malware Complaints - Report them here and fight back!
Member of ASAP Since 2006 (Alliance of Security Analysis Professionals)
Please read the FAQ and the article "So how did I get infected in the first place?".

#4 Chancellor

Chancellor

    Forum Deity

  • Emeritus
  • PipPipPipPipPip
  • 3,020 posts

Posted 01 July 2007 - 08:01 AM

Due to the lack of feedback, this topic is closed.

If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic.
Chancellor

Please consider a donation to help Support SWI
Malware Complaints - Report them here and fight back!
Member of ASAP Since 2006 (Alliance of Security Analysis Professionals)
Please read the FAQ and the article "So how did I get infected in the first place?".




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button