1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Solved Need help with Spyware and Virus Removal Please

Discussion in 'Malware and Virus Removal Archive' started by Rey, 2008/09/14.

  1. 2008/09/14
    Rey

    Rey Inactive Thread Starter

    Joined:
    2008/09/14
    Messages:
    6
    Likes Received:
    0
    [Resolved] Need help with Spyware and Virus Removal Please

    Hi I am new to this site,

    I have some viruses and spyware on my computer and here is a overview of what is wrong:

    -Spyware re-directs all google searches, and I cannot access any sites that will help me such as online virus scanning sites like www.housecall.trendmicro.com

    -Blue Windows Error screen shows up if I leave my computer on longer than 20 minutes or so, saying windows needs to shut down to prevent damage.

    -Computer freezes and crashes often.


    I downloaded 'AntiVir PE Classic' virus protection, and usually it freezes up before it completes the scan but last time it finished. However, I still have viruses because these problems have not gone away. I could not download any other virus protection (or anything else) as when I do so, and try to open it on my desktop, it says the file is corrupted.

    I could not even download the HijackThisâ„¢ version 2.0.2 from TrendMicroâ„¢ because it does not let me view the site.

    If anyone can help it would be greatly appreciated.

    Than you,
    Rey
     
    Rey,
    #1
  2. 2008/09/14
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Welcome to WindowsBBS Rey :)

    First, see if you can get MBAM installed and ran.

    Please download Malwarebytes' Anti-Malware (MBAM) from here or here and save the file to your desktop.

    Double click mbam-setup.exe to install the application.
    • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    • If an update is found, it will download and install the latest version.
    • Once the program has loaded, select 'Perform Quick Scan', then click Scan.
    • The scan may take some time to finish,so please be patient.
    • When the scan is complete, click OK, then Show Results to view the results.
    • Make sure that everything is checked, and click Remove Selected.
    • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Note below)
    • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
    • Post the entire report in your next reply.

    Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts. Click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.


    If you cannot download MBAM, proceed as follows.
    • Click here
    • If it launches a file download dialog for download_file.exe from noahdfear.net, click Run.
    • download_file.vbs file should appear on the desktop, and shortly there-after a renamed copy of ComboFix.
    • Please note that the vbs file is recognized by some security programs as a Trojan-Downloader.JS and may try to block it. I assure you, the file is safe.
    • If successful, shut down all open windows and programs, double click the renamed ComboFix and follow the prompts.
    • It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall
     
    noahdfear,
    #2


  3. to hide this advert.

  4. 2008/09/15
    Rey

    Rey Inactive Thread Starter

    Joined:
    2008/09/14
    Messages:
    6
    Likes Received:
    0
    ComboFix 08-09-14.06 - Rehman Mukhtar 2008-09-15 12:00:32.1 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.209 [GMT -5:00]
    Running from: C:\Documents and Settings\Rehman Mukhtar\Desktop\FomboCix.exe
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
    C:\Documents and Settings\Guest1\Application Data\rhcjq4j0e3ea
    C:\Documents and Settings\Guest1\Cookies\guest1@ad.yieldmanager[1].txt
    C:\Documents and Settings\Rehman Mukhtar\Application Data\Microsoft\Internet Explorer\Quick Launch\Antivirus XP 2008.lnk
    C:\Documents and Settings\Rehman Mukhtar\Application Data\rhcjq4j0e3ea
    C:\WINDOWS\system32\blphcnq4j0e3ea.scr
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML
    C:\WINDOWS\system32\drivers\svchost.exe
    C:\WINDOWS\system32\tdssadw.dll
    C:\WINDOWS\system32\tdssinit.dll
    C:\WINDOWS\system32\tdssl.dll
    C:\WINDOWS\system32\tdsslog.dll
    C:\WINDOWS\system32\tdssmain.dll
    C:\WINDOWS\system32\tdssserf.dll
    C:\WINDOWS\system32\tdssservers.dat

    .
    ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    -------\Legacy_SYSREST.SYS


    ((((((((((((((((((((((((( Files Created from 2008-08-15 to 2008-09-15 )))))))))))))))))))))))))))))))
    .

    2008-09-13 00:55 . 2008-09-13 18:55 <DIR> d-------- C:\Documents and Settings\Guest1\.housecall6.6
    2008-09-12 20:58 . 2008-09-12 23:26 <DIR> d-------- C:\Documents and Settings\Guest1\Application Data\Winamp
    2008-09-07 20:55 . 2008-09-15 12:08 54,156 --ah----- C:\WINDOWS\QTFont.qfn
    2008-09-07 20:55 . 2008-09-07 20:56 1,409 --a------ C:\WINDOWS\QTFont.for
    2008-09-07 20:48 . 2008-09-07 20:48 2 --a------ C:\WINDOWS\msoffice.ini
    2008-09-07 14:33 . 2008-09-07 14:33 268 --ah----- C:\sqmdata08.sqm
    2008-09-07 14:33 . 2008-09-07 14:33 244 --ah----- C:\sqmnoopt08.sqm
    2008-09-05 14:00 . 2008-09-05 14:00 180 --a------ C:\Documents and Settings\Guest1\Application Data\wklnhst.dat
    2008-09-04 17:25 . 2008-09-04 17:25 268 --ah----- C:\sqmdata07.sqm
    2008-09-04 17:25 . 2008-09-04 17:25 244 --ah----- C:\sqmnoopt07.sqm
    2008-08-27 15:33 . 2001-08-17 13:48 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
    2008-08-27 15:33 . 2001-08-17 14:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
    2008-08-24 17:54 . 2008-08-24 17:54 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
    2008-08-24 16:28 . 2008-08-24 16:28 <DIR> d-------- C:\Program Files\Avira
    2008-08-24 16:28 . 2008-08-24 16:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avira
    2008-08-24 12:23 . 2008-08-24 12:37 <DIR> d--h----- C:\$AVG8.VAULT$
    2008-08-24 12:17 . 2008-08-24 15:17 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8
    2008-08-17 22:10 . 2008-08-17 22:10 268 --ah----- C:\sqmdata06.sqm
    2008-08-17 22:10 . 2008-08-17 22:10 244 --ah----- C:\sqmnoopt06.sqm
    2008-08-16 17:09 . 2008-08-16 17:09 268 --ah----- C:\sqmdata05.sqm
    2008-08-16 17:09 . 2008-08-16 17:09 244 --ah----- C:\sqmnoopt05.sqm

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-09-11 02:35 --------- d-----w C:\Documents and Settings\Guest1\Application Data\LimeWire
    2008-09-08 01:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-09-08 01:50 --------- d-----w C:\Program Files\iPod
    2008-09-08 01:49 --------- d-----w C:\Program Files\Common Files\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Rehman Mukhtar\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Guest1\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Guest\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Administrator\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Administrator.REHMAN\Application Data\AOL
    2008-09-05 19:19 --------- d-----w C:\Program Files\Lx_cats
    2008-08-22 16:30 24 ----a-w C:\Documents and Settings\Rehman Mukhtar\jagex_runescape_preferences.dat
    2008-08-22 04:34 24 ----a-w C:\Documents and Settings\Guest1\jagex_runescape_preferences.dat
    2008-08-22 01:11 --------- d-----w C:\Documents and Settings\Rehman Mukhtar\Application Data\Apple Computer
    2008-08-19 18:36 25,222 ----a-w C:\Documents and Settings\Rehman Mukhtar\Application Data\wklnhst.dat
    2008-08-19 15:09 --------- d-----w C:\Program Files\McAfee
    2008-08-19 15:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee
    2008-08-16 18:58 --------- d--h--w C:\Program Files\Zero G Registry
    2008-08-16 18:58 --------- d-----w C:\Program Files\Maple 10
    2008-08-16 18:56 --------- d-----w C:\Program Files\MINITAB 14 Student
    2008-08-16 18:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\SiteAdvisor
    2008-08-14 22:50 --------- d-----w C:\Documents and Settings\Guest1\Application Data\Apple Computer
    2008-07-28 17:33 --------- d-----w C:\Documents and Settings\Guest1\Application Data\GTek
    2008-07-26 05:11 23 ----a-w C:\Documents and Settings\Guest\jagex_runescape_preferences.dat
    2008-07-26 05:09 --------- d-----w C:\Documents and Settings\Guest\Application Data\LimeWire
    2008-07-23 20:10 798 ----a-w C:\Documents and Settings\Guest\Application Data\wklnhst.dat
    2008-07-22 17:45 --------- d-----w C:\Documents and Settings\Guest\Application Data\ArcSoft
    2008-07-21 23:16 --------- d-----w C:\Documents and Settings\Guest\Application Data\Winamp
    2008-07-19 01:54 --------- d-----w C:\Documents and Settings\Guest\Application Data\Apple Computer
    2008-07-18 03:45 --------- d-----w C:\Documents and Settings\Guest\Application Data\GTek
    2007-02-27 17:29 72,432 ----a-w C:\Documents and Settings\Rehman Mukhtar\Application Data\GDIPFONTCACHEV1.DAT
    2007-05-22 04:17 88 --sh--r C:\WINDOWS\system32\02129678AC.sys
    2007-05-22 04:17 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
    .

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr "= "C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
    "ctfmon.exe "= "C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15360]
    "WeatherEye "= "C:\Program Files\TheWeatherNetwork\WeatherEye\WeatherEye.exe" [2008-02-01 4487064]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "igfxtray "= "C:\WINDOWS\system32\igfxtray.exe" [2005-10-14 94208]
    "igfxhkcmd "= "C:\WINDOWS\system32\hkcmd.exe" [2005-10-14 77824]
    "igfxpers "= "C:\WINDOWS\system32\igfxpers.exe" [2005-10-14 114688]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 36975]
    "SynTPEnh "= "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
    "IntelWireless "= "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
    "dla "= "C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-12-06 127035]
    "ISUSPM Startup "= "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
    "ISUSScheduler "= "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
    "lxdcamon "= "C:\Program Files\Lexmark 1300 Series\lxdcamon.exe" [2007-02-05 20480]
    "LXDCCATS "= "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDCtime.dll" [2007-01-22 102400]
    "iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-15 267048]
    "SigmatelSysTrayApp "= "stsystra.exe" [2006-03-24 C:\WINDOWS\stsystra.exe]

    C:\Documents and Settings\Guest\Start Menu\Programs\Startup\
    LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2008-02-08 147456]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-09-13 24576]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
    2004-09-07 16:08 110592 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
    backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
    backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
    --a------ 2008-06-12 14:28 266497 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
    --------- 2005-02-23 16:19 53248 C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
    --a------ 2006-09-13 16:44 169984 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    --a------ 2007-11-15 14:11 267048 C:\Program Files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ModemOnHold]
    --------- 2003-09-10 02:24 20480 C:\Program Files\NetWaiting\netwaiting.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKDetectorExe]
    --a------ 2006-11-07 15:49 1121280 C:\Program Files\McAfee\SpamKiller\MSKDetct.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    --a------ 2007-11-15 00:43 286720 C:\Program Files\QuickTime\QTTask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    --a------ 2008-02-12 16:07 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "usnjsvc "=3 (0x3)
    "ose "=3 (0x3)
    "gusvc "=3 (0x3)
    "DSBrokerService "=3 (0x3)
    "AOL ACS "=2 (0x2)
    "AntiVirService "=2 (0x2)
    "AntiVirScheduler "=2 (0x2)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "C:\\Program Files\\LimeWire\\LimeWire.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "C:\\WINDOWS\\system32\\lxdccoms.exe "=
    "C:\\Program Files\\Lexmark 1300 Series\\lxdcamon.exe "=
    "C:\\Program Files\\Lexmark 1300 Series\\App4R.exe "=
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe "=
    "C:\\Program Files\\MSN Messenger\\livecall.exe "=
    "C:\\Program Files\\QuickTime\\QuickTimePlayer.exe "=
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe "=
    "C:\\WINDOWS\\system32\\usmt\\migwiz.exe "=
    "C:\\Program Files\\iTunes\\iTunes.exe "=

    R2 lxdc_device;lxdc_device;C:\WINDOWS\system32\lxdccoms.exe [2007-02-12 537520]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
    \Shell\AutoRun\command - F:\LaunchU3.exe -a
    .
    - - - - ORPHANS REMOVED - - - -

    MSConfigStartUp-lphcnq4j0e3ea - C:\WINDOWS\system32\lphcnq4j0e3ea.exe
    MSConfigStartUp-SMrhcjq4j0e3ea - C:\Program Files\rhcjq4j0e3ea\rhcjq4j0e3ea.exe
    MSConfigStartUp-sysrest32 - C:\WINDOWS\system32\sysrest32.exe


    .
    ------- Supplementary Scan -------
    .
    FireFox -: Profile - C:\Documents and Settings\Rehman Mukhtar\Application Data\Mozilla\Firefox\Profiles\wdl34b0j.default\
    FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.brocku.ca/
    FF -: plugin - C:\Program Files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
    FF -: plugin - C:\Program Files\DivX\DivX Content Uploader\npUpload.dll
    FF -: plugin - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava11.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava12.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava13.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava14.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJava32.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
    FF -: plugin - C:\Program Files\Java\jre1.5.0_06\bin\NPOJI610.dll
    FF -: plugin - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll
    FF -: plugin - C:\Program Files\Viewpoint\Viewpoint Experience Technology\npViewpoint.dll
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-15 12:08:13
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINDOWS\explorer.exe
    -> C:\PROGRA~1\Google\GOOGLE~1\GOA66E~1.DLL
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
    C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Dell\QuickSet\NicConfigSvc.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\iPod\bin\iPodService.exe
    .
    **************************************************************************
    .
    Completion time: 2008-09-15 12:13:43 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-09-15 17:13:39

    Pre-Run: 26,594,004,992 bytes free
    Post-Run: 28,285,292,544 bytes free

    219 --- E O F --- 2008-09-10 23:45:31
     
    Rey,
    #3
  5. 2008/09/15
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Lets see if we missed anything. Please do an online scan with Kaspersky Online Scanner

    Click Accept, when prompted to download and install the program files and database of malware definitions.
    • Click Run at the Security prompt.
    • The program will then begin downloading and installing and will also update the database.
    • Please be patient as this can take several minutes.
    • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
    • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
    • Click View scan report at the bottom.
    • Click the Save Report As... button.
    • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
    **Note**

    To optimize scanning time and produce a more sensible report for review:
    • Close any open programs.
    • Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
    Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.


    Post the Kaspersky log here, along with a fresh HijackThis log.
     
    noahdfear,
    #4
  6. 2008/09/16
    Rey

    Rey Inactive Thread Starter

    Joined:
    2008/09/14
    Messages:
    6
    Likes Received:
    0
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 9:31:15 PM, on 9/16/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Intel\Wireless\Bin\ZcfgSvc.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\WINDOWS\system32\lxdccoms.exe
    C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\igfxpers.exe
    C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
    C:\WINDOWS\stsystra.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
    C:\Program Files\Lexmark 1300 Series\lxdcamon.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\TheWeatherNetwork\WeatherEye\WeatherEye.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.brocku.ca/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.ca.dell.com/content/default.aspx?c=ca&l=en&s=gen
    R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.ca/ig/dell?hl=en&client=dell-row&channel=ca&ibd=6060913
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.google.ca/ig/dell?hl=en&client=dell-row&channel=ca&ibd=6060913
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
    O3 - Toolbar: Lexmark Toolbar - {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - C:\Program Files\Lexmark Toolbar\toolband.dll
    O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
    O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [IntelWireless] C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe /tf Intel PROSet/Wireless
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup
    O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
    O4 - HKLM\..\Run: [lxdcamon] "C:\Program Files\Lexmark 1300 Series\lxdcamon.exe "
    O4 - HKLM\..\Run: [LXDCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDCtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe "
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [WeatherEye] C:\Program Files\TheWeatherNetwork\WeatherEye\WeatherEye.exe
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
    O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Common Files\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {37A273C2-5129-11D5-BF37-00A0CCE8754B} (TTestGenXInstallObject) - http://asp.mathxl.com/wizmodules/testgen/installers/TestGenXInstall.cab
    O16 - DPF: {4FE89055-5300-469E-AFAD-DEB3181EDE76} (PearsonAsstX Control) - http://asp.mathxl.com/applets/PearsonInstallAsst.cab
    O16 - DPF: {5C6698D9-7BE4-4122-8EC5-291D84DBD4A0} (Facebook Photo Uploader 4 Control) - http://upload.facebook.com/controls/FacebookPhotoUploader3.cab
    O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
    O16 - DPF: {9D190AE6-C81E-4039-8061-978EBAD10073} (F-Secure Online Scanner 3.0) - http://www.cogeco.com/en/OLS3/fscax.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {EEC9DBCC-04AD-4A1B-BEA7-C6DAD9515D5A} (Pearson MyEconLab Player Control) - http://asp.mathxl.com/books/_Players/EconPlayer.cab
    O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    O23 - Service: EvtEng - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: lxdc_device - - C:\WINDOWS\system32\lxdccoms.exe
    O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
    O23 - Service: RegSrvc - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    O23 - Service: WLANKEEPER - Intel® Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

    --
    End of file - 8117 bytes
     
    Rey,
    #5
  7. 2008/09/16
    Rey

    Rey Inactive Thread Starter

    Joined:
    2008/09/14
    Messages:
    6
    Likes Received:
    0
    --------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER 7 REPORT
    Tuesday, September 16, 2008
    Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
    Kaspersky Online Scanner 7 version: 7.0.25.0
    Program database last update: Tuesday, September 16, 2008 19:17:59
    Records in database: 1242200
    --------------------------------------------------------------------------------

    Scan settings:
    Scan using the following database: extended
    Scan archives: yes
    Scan mail databases: yes

    Scan area - My Computer:
    C:\
    D:\

    Scan statistics:
    Files scanned: 54269
    Threat name: 10
    Infected objects: 201
    Suspicious objects: 2
    Duration of the scan: 01:14:26


    File name / Threat name / Threats count
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\43CE7FDFd01 Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\57B9C672d01 Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\74800CC8d01 Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\9F6E93C0d01 Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\C88D0B82d01 Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\E154C9C6d01 Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Documents and Settings\Guest\My Documents\LimeWire\Saved\Rihanna - Selfish girl.mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\giant matthew good.mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Matthew Good Band - Giant.mp3 Infected: Trojan-Downloader.WMA.GetCodec.b 1
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Pearl Jam - Green Disease.wma Infected: Trojan-Downloader.WMA.GetCodec.b 1
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\soul to squeeze rhcp.mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
    C:\Documents and Settings\Rehman Mukhtar\Desktop\download_file.exe Suspicious: Trojan-Downloader.JS.gen 1
    C:\Documents and Settings\Rehman Mukhtar\Desktop\download_file.vbs Suspicious: Trojan-Downloader.JS.gen 1
    C:\Documents and Settings\Rehman Mukhtar\Shared\5.Ja Rule feat Black Child,Young Merc,D.O Cannon - Change Gon' Come [Dissin G-unit] - .mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
    C:\Documents and Settings\Rehman Mukhtar\Shared\bachna ae haseeno.mp3 Infected: Trojan-Downloader.WMA.Wimad.n 1
    C:\Qoobox\Quarantine\C\WINDOWS\system32\drivers\svchost.exe.vir Infected: Backdoor.Win32.Agent.poh 1
    C:\Qoobox\Quarantine\C\WINDOWS\system32\tdssadw.dll.vir Infected: Rootkit.Win32.Clbd.jg 1
    C:\Qoobox\Quarantine\C\WINDOWS\system32\tdssl.dll.vir Infected: Trojan-Downloader.Win32.Small.acri 1
    C:\Qoobox\Quarantine\C\WINDOWS\system32\tdsslog.dll.vir Infected: Backdoor.Win32.Agent.rfv 1
    C:\Qoobox\Quarantine\C\WINDOWS\system32\tdssmain.dll.vir Infected: Backdoor.Win32.Agent.rfw 1
    C:\Qoobox\Quarantine\C\WINDOWS\system32\tdssserf.dll.vir Infected: Trojan-Downloader.Win32.FraudLoad.vbxt 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\;sz=300x250;ord=2031283[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[12].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[13].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[14].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[15].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[16].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[17].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[18].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[19].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[20].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[21].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[22].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\BigBoxAd[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId86912;clip=86912;sz=300x250;ord=2938231[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId86912;clip=86912;sz=300x250;ord=3842377[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId86912;clip=86912;sz=300x250;ord=5127075[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId89121;clip=89121;sz=300x250;ord=9977212[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\coad;coad=205913029;sz=300x250;ord=3768421[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\coad;coad=207020993;sz=300x250;ord=2343026[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\components[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\dugosearch[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ModBodyText_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ModChannelDisplay_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\StoryFinder[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ypinredir[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\011125122634[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\8050517[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\CA2ZMZIX.htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ClipId86912;clip=86912;sz=300x250;ord=5473645[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ClipId89121;clip=89121;sz=300x250;ord=3166419[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\coad;coad=205913029;sz=300x250;ord=6944574[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\listings[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ModDetailedStories_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ypinredir[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\1602809@x15[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\1831728@x92[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\;sz=300x250;ord=4744543[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\;sz=300x250;ord=7848754[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[12].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[13].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[14].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[15].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[16].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[17].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[18].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[19].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[20].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[21].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[22].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[23].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[24].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[25].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[26].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[27].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[28].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[29].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[30].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[31].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[32].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[33].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[34].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[35].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[36].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[37].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[38].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[39].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[40].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[41].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[42].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[43].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[44].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[45].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[46].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[47].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ClipId86912;clip=86912;sz=300x250;ord=8232686[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ClipId86912;clip=86912;sz=300x250;ord=8274184[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ClipId89121;clip=89121;sz=300x250;ord=2899607[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\coad;coad=207020993;sz=300x250;ord=7625208[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\empty[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\empty[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\fastportal[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\listings[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\mad-men-ep-206-maidenform[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\mad-men-ep-207-the-gold-violin[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\main[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ModBodyText_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\nowask[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\session-saver[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\01446568472[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[12].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[13].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[14].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[15].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[16].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[17].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[18].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[19].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[20].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[21].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[22].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[23].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[24].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[25].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[26].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[27].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[28].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[29].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[30].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[31].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[32].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[33].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[34].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\CAF2SZ3T.htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\CAGTE34L.htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ClipId89121;clip=89121;sz=300x250;ord=4551736[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ClipId89121;clip=89121;sz=300x250;ord=8988144[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ClipId89121;clip=89121;sz=300x250;ord=9649211[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\coad;coad=203401945;sz=300x250;ord=4512296[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\coad;coad=206681002;sz=300x250;ord=1246513[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\coad;coad=206681002;sz=300x250;ord=197907[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\empty[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\empty[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ModStoriesNav_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\searchfeed[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\StoryFinder[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1

    The selected area was scanned.
     
    Rey,
    #6
  8. 2008/09/17
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Great! Lets finish cleaning up.

    Once again, please disable any realtime protection applications. Highlight and copy the contents of the code box below and paste it into a blank notepad, then save it to your desktop as;

    Filename: CFScript.txt
    Save As Type: All Files (*.*)

    Code:
    KillAll::
File::
C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\43CE7FDFd01
C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\57B9C672d01
C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\74800CC8d01
C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\9F6E93C0d01
C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\C88D0B82d01
C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\E154C9C6d01
C:\Documents and Settings\Guest\My Documents\LimeWire\Saved\Rihanna - Selfish girl.mp3
C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\giant matthew good.mp3
C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Matthew Good Band - Giant.mp3
C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Pearl Jam - Green Disease.wma
C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\soul to squeeze rhcp.mp3
C:\Documents and Settings\Rehman Mukhtar\Desktop\download_file.exe
C:\Documents and Settings\Rehman Mukhtar\Desktop\download_file.vbs
C:\Documents and Settings\Rehman Mukhtar\Shared\5.Ja Rule feat Black Child,Young Merc,D.O Cannon - Change Gon' Come [Dissin G-unit] - .mp3
C:\Documents and Settings\Rehman Mukhtar\Shared\bachna ae haseeno.mp3
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F
    Close all other windows and programs. Now drag the CFScript.txt onto the renamed ComboFix and drop it, using the left mouse button. Combofix should run and may reboot the computer when it's done. A log will open when it's complete. Post the contents of that log.

    Please do not click on the ComboFix window while it is running a scan. This can cause it to stall.

    **NOTE - Allow ComboFix to update if prompted.
     
    noahdfear,
    #7
  9. 2008/09/19
    Rey

    Rey Inactive Thread Starter

    Joined:
    2008/09/14
    Messages:
    6
    Likes Received:
    0
    ComboFix 08-09-16.05 - Rehman Mukhtar 2008-09-19 8:40:33.2 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.299 [GMT -5:00]
    Running from: C:\Documents and Settings\Rehman Mukhtar\Desktop\FomboCix.exe
    Command switches used :: C:\Documents and Settings\Rehman Mukhtar\Desktop\CFScript.txt
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\43CE7FDFd01
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\57B9C672d01
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\74800CC8d01
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\9F6E93C0d01
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\C88D0B82d01
    C:\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\E154C9C6d01
    C:\Documents and Settings\Guest\My Documents\LimeWire\Saved\Rihanna - Selfish girl.mp3
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\giant matthew good.mp3
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Matthew Good Band - Giant.mp3
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Pearl Jam - Green Disease.wma
    C:\Documents and Settings\Guest1\My Documents\LimeWire\Saved\soul to squeeze rhcp.mp3
    C:\Documents and Settings\Rehman Mukhtar\Desktop\download_file.exe
    C:\Documents and Settings\Rehman Mukhtar\Desktop\download_file.vbs
    C:\Documents and Settings\Rehman Mukhtar\Shared\5.Ja Rule feat Black Child,Young Merc,D.O Cannon - Change Gon' Come [Dissin G-unit] - .mp3
    C:\Documents and Settings\Rehman Mukhtar\Shared\bachna ae haseeno.mp3

    .
    ((((((((((((((((((((((((( Files Created from 2008-08-19 to 2008-09-19 )))))))))))))))))))))))))))))))
    .

    2008-09-16 21:30 . 2008-09-16 21:30 <DIR> d-------- C:\Program Files\Trend Micro
    2008-09-13 00:55 . 2008-09-13 18:55 <DIR> d-------- C:\Documents and Settings\Guest1\.housecall6.6
    2008-09-12 20:58 . 2008-09-12 23:26 <DIR> d-------- C:\Documents and Settings\Guest1\Application Data\Winamp
    2008-09-07 20:55 . 2008-09-19 08:46 54,156 --ah----- C:\WINDOWS\QTFont.qfn
    2008-09-07 20:55 . 2008-09-07 20:56 1,409 --a------ C:\WINDOWS\QTFont.for
    2008-09-07 20:48 . 2008-09-07 20:48 2 --a------ C:\WINDOWS\msoffice.ini
    2008-09-07 14:33 . 2008-09-07 14:33 268 --ah----- C:\sqmdata08.sqm
    2008-09-07 14:33 . 2008-09-07 14:33 244 --ah----- C:\sqmnoopt08.sqm
    2008-09-05 14:00 . 2008-09-05 14:00 180 --a------ C:\Documents and Settings\Guest1\Application Data\wklnhst.dat
    2008-09-04 17:25 . 2008-09-04 17:25 268 --ah----- C:\sqmdata07.sqm
    2008-09-04 17:25 . 2008-09-04 17:25 244 --ah----- C:\sqmnoopt07.sqm
    2008-08-27 15:33 . 2001-08-17 13:48 12,160 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
    2008-08-27 15:33 . 2001-08-17 14:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
    2008-08-24 17:54 . 2008-08-24 17:54 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
    2008-08-24 16:28 . 2008-08-24 16:28 <DIR> d-------- C:\Program Files\Avira
    2008-08-24 16:28 . 2008-08-24 16:28 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avira
    2008-08-24 12:23 . 2008-08-24 12:37 <DIR> d--h----- C:\$AVG8.VAULT$
    2008-08-24 12:17 . 2008-08-24 15:17 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\avg8

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-09-11 02:35 --------- d-----w C:\Documents and Settings\Guest1\Application Data\LimeWire
    2008-09-08 01:50 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-09-08 01:50 --------- d-----w C:\Program Files\iPod
    2008-09-08 01:49 --------- d-----w C:\Program Files\Common Files\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Rehman Mukhtar\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Guest1\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Guest\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Administrator\Application Data\AOL
    2008-09-08 01:49 --------- d-----w C:\Documents and Settings\Administrator.REHMAN\Application Data\AOL
    2008-09-05 19:19 --------- d-----w C:\Program Files\Lx_cats
    2008-08-22 16:30 24 ----a-w C:\Documents and Settings\Rehman Mukhtar\jagex_runescape_preferences.dat
    2008-08-22 04:34 24 ----a-w C:\Documents and Settings\Guest1\jagex_runescape_preferences.dat
    2008-08-22 01:11 --------- d-----w C:\Documents and Settings\Rehman Mukhtar\Application Data\Apple Computer
    2008-08-19 18:36 25,222 ----a-w C:\Documents and Settings\Rehman Mukhtar\Application Data\wklnhst.dat
    2008-08-19 15:09 --------- d-----w C:\Program Files\McAfee
    2008-08-19 15:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee
    2008-08-16 18:58 --------- d--h--w C:\Program Files\Zero G Registry
    2008-08-16 18:58 --------- d-----w C:\Program Files\Maple 10
    2008-08-16 18:56 --------- d-----w C:\Program Files\MINITAB 14 Student
    2008-08-16 18:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\SiteAdvisor
    2008-08-14 22:50 --------- d-----w C:\Documents and Settings\Guest1\Application Data\Apple Computer
    2008-07-28 17:33 --------- d-----w C:\Documents and Settings\Guest1\Application Data\GTek
    2008-07-26 05:11 23 ----a-w C:\Documents and Settings\Guest\jagex_runescape_preferences.dat
    2008-07-26 05:09 --------- d-----w C:\Documents and Settings\Guest\Application Data\LimeWire
    2008-07-23 20:10 798 ----a-w C:\Documents and Settings\Guest\Application Data\wklnhst.dat
    2008-07-22 17:45 --------- d-----w C:\Documents and Settings\Guest\Application Data\ArcSoft
    2008-07-21 23:16 --------- d-----w C:\Documents and Settings\Guest\Application Data\Winamp
    2008-07-19 01:54 --------- d-----w C:\Documents and Settings\Guest\Application Data\Apple Computer
    2007-02-27 17:29 72,432 ----a-w C:\Documents and Settings\Rehman Mukhtar\Application Data\GDIPFONTCACHEV1.DAT
    2007-05-22 04:17 88 --sh--r C:\WINDOWS\system32\02129678AC.sys
    2007-05-22 04:17 3,766 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
    .

    ((((((((((((((((((((((((((((( snapshot@2008-09-15_12.13.15.54 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2008-09-15 16:51:36 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
    + 2008-09-15 18:20:08 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
    - 2008-09-15 16:51:36 196,608 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    + 2008-09-15 18:20:08 196,608 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat
    - 2008-09-15 16:51:36 606,208 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    + 2008-09-15 18:20:08 606,208 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr "= "C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]
    "ctfmon.exe "= "C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15360]
    "WeatherEye "= "C:\Program Files\TheWeatherNetwork\WeatherEye\WeatherEye.exe" [2008-02-01 4487064]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "igfxtray "= "C:\WINDOWS\system32\igfxtray.exe" [2005-10-14 94208]
    "igfxhkcmd "= "C:\WINDOWS\system32\hkcmd.exe" [2005-10-14 77824]
    "igfxpers "= "C:\WINDOWS\system32\igfxpers.exe" [2005-10-14 114688]
    "SunJavaUpdateSched "= "C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe" [2005-11-10 36975]
    "SynTPEnh "= "C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 761947]
    "IntelWireless "= "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2004-10-30 385024]
    "dla "= "C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-12-06 127035]
    "ISUSPM Startup "= "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-06-10 249856]
    "ISUSScheduler "= "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-06-10 81920]
    "lxdcamon "= "C:\Program Files\Lexmark 1300 Series\lxdcamon.exe" [2007-02-05 20480]
    "LXDCCATS "= "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXDCtime.dll" [2007-01-22 102400]
    "iTunesHelper "= "C:\Program Files\iTunes\iTunesHelper.exe" [2007-11-15 267048]
    "SigmatelSysTrayApp "= "stsystra.exe" [2006-03-24 C:\WINDOWS\stsystra.exe]

    C:\Documents and Settings\Guest\Start Menu\Programs\Startup\
    LimeWire On Startup.lnk - C:\Program Files\LimeWire\LimeWire.exe [2008-02-08 147456]

    C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
    Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-09-13 24576]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IntelWireless]
    2004-09-07 16:08 110592 C:\Program Files\Intel\Wireless\Bin\LgNotify.dll

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
    backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

    [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
    path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
    backup=C:\WINDOWS\pss\Microsoft Office.lnkCommon Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avgnt]
    --a------ 2008-06-12 14:28 266497 C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DVDLauncher]
    --------- 2005-02-23 16:19 53248 C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Desktop Search]
    --a------ 2006-09-13 16:44 169984 C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
    --a------ 2007-11-15 14:11 267048 C:\Program Files\iTunes\iTunesHelper.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ModemOnHold]
    --------- 2003-09-10 02:24 20480 C:\Program Files\NetWaiting\netwaiting.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKDetectorExe]
    --a------ 2006-11-07 15:49 1121280 C:\Program Files\McAfee\SpamKiller\MSKDetct.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
    --a------ 2007-11-15 00:43 286720 C:\Program Files\QuickTime\QTTask.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    --a------ 2008-02-12 16:07 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
    "usnjsvc "=3 (0x3)
    "ose "=3 (0x3)
    "gusvc "=3 (0x3)
    "DSBrokerService "=3 (0x3)
    "AOL ACS "=2 (0x2)
    "AntiVirService "=2 (0x2)
    "AntiVirScheduler "=2 (0x2)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe "=
    "C:\\Program Files\\LimeWire\\LimeWire.exe "=
    "%windir%\\Network Diagnostic\\xpnetdiag.exe "=
    "C:\\WINDOWS\\system32\\lxdccoms.exe "=
    "C:\\Program Files\\Lexmark 1300 Series\\lxdcamon.exe "=
    "C:\\Program Files\\Lexmark 1300 Series\\App4R.exe "=
    "C:\\Program Files\\MSN Messenger\\msnmsgr.exe "=
    "C:\\Program Files\\MSN Messenger\\livecall.exe "=
    "C:\\Program Files\\QuickTime\\QuickTimePlayer.exe "=
    "C:\\Program Files\\Real\\RealPlayer\\realplay.exe "=
    "C:\\WINDOWS\\system32\\usmt\\migwiz.exe "=
    "C:\\Program Files\\iTunes\\iTunes.exe "=

    R2 lxdc_device;lxdc_device;C:\WINDOWS\system32\lxdccoms.exe [2007-02-12 537520]

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\F]
    \Shell\AutoRun\command - F:\LaunchU3.exe -a
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-09-19 08:46:20
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
    C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
    C:\Program Files\Intel\Wireless\Bin\WLKEEPER.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\Dell\QuickSet\NicConfigSvc.exe
    C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Program Files\Intel\Wireless\Bin\ZCfgSvc.exe
    C:\WINDOWS\system32\igfxsrvc.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\WINDOWS\system32\rundll32.exe
    C:\FomboCix\pv.cfexe
    .
    **************************************************************************
    .
    Completion time: 2008-09-19 8:51:23 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-09-19 13:51:19
    ComboFix2.txt 2008-09-15 17:13:44

    Pre-Run: 27,968,565,248 bytes free
    Post-Run: 28,112,080,896 bytes free

    199 --- E O F --- 2008-09-10 23:45:31
     
    Rey,
    #8
  10. 2008/09/20
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Looks good. How the computer behaving now?

    Recommend you run a new Kaspersky online scan and let me know the results.

    Since a number of you're infections were picked up via file sharing, you get the P2P speech too. ;) I'm not passing judgment on file-sharing as a concept. However, I will warn you that engaging in this activity and having this kind of software installed on your machine will always make you more susceptible to re-infections. This page will give you further information.

    Please note: Even if you are using a "safe" P2P program, it is only the program that is safe. You will be sharing files from uncertified sources, and these are often infected. The bad guys use P2P filesharing as a major conduit to spread their wares.

    References for the risk of these programs are here,
    here and here.

    I would strongly recommend that you uninstall them, however that choice is up to you. If you choose to remove these programs, you can do so via Control Panel >> Add or Remove Programs.
     
    noahdfear,
    #9
  11. 2008/09/28
    Rey

    Rey Inactive Thread Starter

    Joined:
    2008/09/14
    Messages:
    6
    Likes Received:
    0
    The Kaspersky scanner keeps picking up infected objects, but my AVG anti-virus is not. Why is this? Apart from that, the computer is working great. Thank you very much for the help, I appreciate it.

    --------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER 7 REPORT
    Sunday, September 28, 2008
    Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
    Kaspersky Online Scanner 7 version: 7.0.25.0
    Program database last update: Sunday, September 28, 2008 16:00:14
    Records in database: 1268153
    --------------------------------------------------------------------------------

    Scan settings:
    Scan using the following database: extended
    Scan archives: yes
    Scan mail databases: yes

    Scan area - My Computer:
    C:\
    D:\

    Scan statistics:
    Files scanned: 56807
    Threat name: 2
    Infected objects: 189
    Suspicious objects: 0
    Duration of the scan: 02:15:17


    File name / Threat name / Threats count
    C:\Qoobox\Quarantine\C\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\43CE7FDFd01.vir Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Qoobox\Quarantine\C\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\57B9C672d01.vir Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Qoobox\Quarantine\C\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\74800CC8d01.vir Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Qoobox\Quarantine\C\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\9F6E93C0d01.vir Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Qoobox\Quarantine\C\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\C88D0B82d01.vir Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Qoobox\Quarantine\C\Documents and Settings\Administrator.REHMAN\Local Settings\Application Data\Mozilla\Firefox\Profiles\cvczm47v.default\Cache\E154C9C6d01.vir Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\Qoobox\Quarantine\C\Documents and Settings\Guest1\My Documents\LimeWire\Saved\Pearl Jam - Green Disease.wma.vir Infected: Trojan-Downloader.WMA.GetCodec.a 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\;sz=300x250;ord=2031283[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[12].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[13].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[14].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[15].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[16].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[17].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[18].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[19].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[20].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[21].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[22].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\BigBoxAd[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId86912;clip=86912;sz=300x250;ord=2938231[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId86912;clip=86912;sz=300x250;ord=3842377[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId86912;clip=86912;sz=300x250;ord=5127075[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ClipId89121;clip=89121;sz=300x250;ord=9977212[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\coad;coad=205913029;sz=300x250;ord=3768421[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\coad;coad=207020993;sz=300x250;ord=2343026[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\components[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\dugosearch[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ModBodyText_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ModChannelDisplay_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\StoryFinder[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\I1K3SN6D\ypinredir[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\011125122634[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\8050517[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\CA2ZMZIX.htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ClipId86912;clip=86912;sz=300x250;ord=5473645[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ClipId89121;clip=89121;sz=300x250;ord=3166419[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\coad;coad=205913029;sz=300x250;ord=6944574[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\listings[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ModDetailedStories_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\MZUVKXYZ\ypinredir[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\1602809@x15[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\1831728@x92[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\;sz=300x250;ord=4744543[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\;sz=300x250;ord=7848754[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[12].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[13].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[14].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[15].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[16].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[17].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[18].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[19].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[20].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[21].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[22].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[23].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[24].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[25].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[26].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[27].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[28].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[29].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[30].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[31].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[32].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[33].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[34].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[35].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[36].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[37].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[38].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[39].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[40].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[41].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[42].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[43].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[44].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[45].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[46].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[47].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ClipId86912;clip=86912;sz=300x250;ord=8232686[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ClipId86912;clip=86912;sz=300x250;ord=8274184[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ClipId89121;clip=89121;sz=300x250;ord=2899607[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\coad;coad=207020993;sz=300x250;ord=7625208[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\empty[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\empty[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\fastportal[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\jump1[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\listings[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\mad-men-ep-206-maidenform[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\mad-men-ep-207-the-gold-violin[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\main[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\ModBodyText_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\nowask[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\O7WL45CP\session-saver[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\01446568472[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[10].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[11].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[12].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[13].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[14].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[15].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[16].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[17].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[18].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[19].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[20].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[21].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[22].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[23].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[24].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[25].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[26].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[27].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[28].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[29].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[30].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[31].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[32].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[33].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[34].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[6].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[7].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[8].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ac[9].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\CAF2SZ3T.htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\CAGTE34L.htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ClipId89121;clip=89121;sz=300x250;ord=4551736[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ClipId89121;clip=89121;sz=300x250;ord=8988144[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ClipId89121;clip=89121;sz=300x250;ord=9649211[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\coad;coad=203401945;sz=300x250;ord=4512296[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\coad;coad=206681002;sz=300x250;ord=1246513[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\coad;coad=206681002;sz=300x250;ord=197907[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\empty[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\empty[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[2].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[3].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[4].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\jump1[5].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\ModStoriesNav_dsp[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\searchfeed[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1
    C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\WFSNUV8F\StoryFinder[1].htm Infected: Trojan-Downloader.JS.Agent.cnn 1

    The selected area was scanned.
     
    Rey,
    #10
  12. 2008/09/28
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    The Kaspersky scanner has a good database for malware detection. AVG is more geared towards true viruses.

    Please navigate to C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 and delete all folders present in the Content.IE5 folder.

    Now open MBAM and remove any items quarantined. Do the same with your resident antivirus.

    Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This action will also reset the System Restore points, removing any infected files there as well.
    Verify the C:\Qoobox and C:\ComboFix folders were removed, as well as the C:\ComboFix.txt file.
    You can delete any other logs that were created/saved too.

    Download ATF Cleaner by Atribune and save it to your Desktop.
    • Double click ATF-Cleaner.exe to run the program.
    • Check the boxes to the left of:

      • Windows Temp
      • Current User Temp
      • All Users Temp
      • Temporary Internet Files
      • Prefetch
      • Java Cache
      • Recycle bin

    • The rest are optional - if you want it to remove everything check "Select All ".
    • Finally, click Empty Selected. When you get the "Done Cleaning" message, click OK.
    Reboot


    That should give you a clean bill on Kaspersky, and wrap things up here.
     
    noahdfear,
    #11

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...