1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive-A Your-04CB4C8045 network.

Discussion in 'Malware and Virus Removal Archive' started by Cabal18, 2013/04/10.

Thread Status:
Not open for further replies.
Page 2 of 2
  1. 2013/04/12
    Cabal18

    Cabal18 Inactive Thread Starter

    Joined:
    2010/07/28
    Messages:
    51
    Likes Received:
    0
    2012-11-06 07:33:46 253512 ----a-w- C:\Windows\System32\audiodg.exe
    2012-11-06 07:33:45 490064 ----a-w- C:\Windows\System32\AudioEng.dll
    2012-11-06 07:33:45 447792 ----a-w- C:\Windows\System32\AudioSes.dll
    2012-11-06 07:33:30 1566432 ----a-w- C:\Windows\System32\ole32.dll
    2012-11-06 05:00:06 463768 ----a-w- C:\Windows\SysWow64\AUDIOKSE.dll
    2012-11-06 05:00:06 427568 ----a-w- C:\Windows\SysWow64\AudioEng.dll
    2012-11-06 05:00:06 324344 ----a-w- C:\Windows\SysWow64\AudioSes.dll
    2012-11-06 04:48:27 1150160 ----a-w- C:\Windows\SysWow64\ole32.dll
    2012-11-06 04:19:59 470016 ----a-w- C:\Windows\System32\wlanmsm.dll
    2012-11-06 04:18:58 84992 ----a-w- C:\Windows\SysWow64\fdWCN.dll
    2012-11-06 04:17:58 110080 ----a-w- C:\Windows\System32\dafWCN.dll
    2012-11-06 04:17:42 785920 ----a-w- C:\Windows\System32\audiosrv.dll
    2012-11-06 04:17:41 169472 ----a-w- C:\Windows\System32\AudioEndpointBuilder.dll
    2012-11-06 04:17:32 212992 ----a-w- C:\Windows\System32\bthprops.cpl
    2012-11-06 04:00:44 99328 ----a-w- C:\Windows\System32\wushareduxresources.dll
    2012-11-06 04:00:17 16384 ----a-w- C:\Windows\System32\iscsilog.dll
    2012-11-06 03:58:53 9728 ----a-w- C:\Windows\System32\wlanhlp.dll
    2012-11-06 03:56:35 9728 ----a-w- C:\Windows\SysWow64\wlanhlp.dll
    2012-11-06 03:55:44 22528 ----a-w- C:\Windows\System32\drivers\fxppm.sys
    2012-11-06 03:55:02 90624 ----a-w- C:\Windows\System32\drivers\amdk8.sys
    2012-11-06 03:55:02 89088 ----a-w- C:\Windows\System32\drivers\intelppm.sys
    2012-11-06 03:55:02 88064 ----a-w- C:\Windows\System32\drivers\amdppm.sys
    2012-11-06 03:55:02 87552 ----a-w- C:\Windows\System32\drivers\processr.sys
    2012-11-06 03:54:09 859136 ----a-w- C:\Windows\System32\drivers\http.sys
    2012-11-06 03:53:44 560640 ----a-w- C:\Windows\System32\drivers\afd.sys
    2012-11-06 03:51:47 665600 ----a-w- C:\Windows\SysWow64\KernelBase.dll
    2012-11-03 05:26:59 132096 ----a-w- C:\Windows\System32\sysreset.exe
    2012-11-03 05:26:40 34816 ----a-w- C:\Windows\System32\dpnsvr.exe
    2012-11-03 05:26:12 32256 ----a-w- C:\Windows\SysWow64\dpnsvr.exe
    2012-11-03 05:25:40 945152 ----a-w- C:\Windows\System32\resetengmig.dll
    2012-11-03 05:24:34 8192 ----a-w- C:\Windows\SysWow64\dpnhupnp.dll
    2012-11-03 05:24:34 8192 ----a-w- C:\Windows\SysWow64\dpnhpast.dll
    2012-11-03 05:24:34 58880 ----a-w- C:\Windows\SysWow64\dpnathlp.dll
    2012-11-03 05:24:34 375808 ----a-w- C:\Windows\SysWow64\dpnet.dll
    2012-11-03 05:24:11 9216 ----a-w- C:\Windows\System32\dpnhupnp.dll
    2012-11-03 05:24:11 9216 ----a-w- C:\Windows\System32\dpnhpast.dll
    2012-11-03 05:24:11 67584 ----a-w- C:\Windows\System32\dpnathlp.dll
    2012-11-03 05:24:11 463872 ----a-w- C:\Windows\System32\dpnet.dll
    2012-11-03 05:04:21 4096 ----a-w- C:\Windows\System32\dpnlobby.dll
    2012-11-03 05:04:19 3584 ----a-w- C:\Windows\System32\dpnaddr.dll
    2012-11-03 05:00:54 3072 ----a-w- C:\Windows\SysWow64\dpnlobby.dll
    2012-11-03 05:00:53 2560 ----a-w- C:\Windows\SysWow64\dpnaddr.dll
    2012-11-02 05:20:09 48640 ----a-w- C:\Windows\System32\wups2.dll
    2012-11-01 04:41:15 1802240 ----a-w- C:\Windows\SysWow64\msxml6.dll
    2012-11-01 04:41:15 1438720 ----a-w- C:\Windows\SysWow64\msxml3.dll
    2012-11-01 04:40:20 2361344 ----a-w- C:\Windows\System32\msxml6.dll
    2012-11-01 04:40:20 1836032 ----a-w- C:\Windows\System32\msxml3.dll
    2012-11-01 04:21:51 2048 ----a-w- C:\Windows\System32\msxml6r.dll
    2012-11-01 04:21:50 2048 ----a-w- C:\Windows\System32\msxml3r.dll
    2012-11-01 04:20:44 2048 ----a-w- C:\Windows\SysWow64\msxml6r.dll
    2012-11-01 04:20:37 2048 ----a-w- C:\Windows\SysWow64\msxml3r.dll
    2012-10-24 04:54:04 396008 ----a-w- C:\Windows\System32\hal.dll
    2012-10-24 03:25:41 26624 ----a-w- C:\Windows\System32\ReAgentc.exe
    2012-10-24 03:25:40 13312 ----a-w- C:\Windows\System32\pcalua.exe
    2012-10-24 03:24:35 405504 ----a-w- C:\Windows\System32\pcasvc.dll
    2012-10-24 03:24:35 31232 ----a-w- C:\Windows\System32\pcadm.dll
    2012-10-24 03:05:31 11776 ----a-w- C:\Windows\System32\pcaevts.dll
    2012-10-24 02:48:12 24064 ----a-w- C:\Windows\SysWow64\ReAgentc.exe
    2012-10-20 02:25:35 310784 ----a-w- C:\Windows\apppatch\AcRes.dll
    2012-10-17 04:32:52 1172992 ----a-w- C:\Windows\System32\mfnetsrc.dll
    2012-10-17 04:32:51 677888 ----a-w- C:\Windows\System32\mfnetcore.dll
    2012-10-17 04:32:51 673280 ----a-w- C:\Windows\System32\mfmpeg2srcsnk.dll
    2012-10-17 04:32:50 1048064 ----a-w- C:\Windows\System32\mfasfsrcsnk.dll
    2012-10-17 03:57:37 929792 ----a-w- C:\Windows\SysWow64\mfnetsrc.dll
    2012-10-17 03:57:37 568832 ----a-w- C:\Windows\SysWow64\mfnetcore.dll
    2012-10-17 03:57:37 513024 ----a-w- C:\Windows\SysWow64\mfmpeg2srcsnk.dll
    2012-10-17 03:57:36 850944 ----a-w- C:\Windows\SysWow64\mfasfsrcsnk.dll
    .
    ============= FINISH: 11:44:29.97 ===============
     
    Cabal18,
    #21
  2. 2013/04/12
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    [​IMG] Download RogueKiller on the desktop
    • Close all the running programs
    • Windows Vista/7 users: right click on RogueKiller.exe, click Run as Administrator
    • Otherwise just double-click on RogueKiller.exe
    • Pre-scan will start. Let it finish.
    • Click on SCAN button.
    • Wait until the Status box shows Scan Finished
    • Click on Delete.
    • Wait until the Status box shows Deleting Finished.
    • Click on Report and copy/paste the content of the Notepad into your next reply.
    • RKreport.txt could also be found on your desktop.
    • If more than one log is produced post all logs.
    • If RogueKiller has been blocked, do not hesitate to try a few times more. If really won't run, rename it to winlogon.exe (or winlogon.com) and try again

    [​IMG] Download Malwarebytes Anti-Rootkit (MBAR) from HERE
    • Unzip downloaded file.
    • Open the folder where the contents were unzipped and run mbar.exe
    • Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
    • Click on the Cleanup button to remove any threats and reboot if prompted to do so.
    • Wait while the system shuts down and the cleanup process is performed.
    • Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
    • When done, please post the two logs produced they will be in the MBAR folder..... mbar-log-xxxxx.txt and system-log.txt
     
    broni,
    #22


  3. to hide this advert.

  4. 2013/04/16
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Still with me?
     
    broni,
    #23
  5. 2013/04/21
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    This topic is marked as abandoned and closed due to inactivity.

    This member will NOT be eligible to receive any more help in malware removal forum.
     
    broni,
    #24
Page 2 of 2
Thread Status:
Not open for further replies.

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...