Chemist,
Java has been updated and older versions deleted.
Installed and ran ATF-Cleaner.
I ran into some problems with the Kaspersky online Scanner and was unable to run the scan. As the program was downloading, the computer crashed and rebooted itself. Subsequent attempts to download Kaspersky resulted in the following error: "Program has failed to start. Program has failed to start. Close the Kaspersky Online Scanner 7.0 window and open it again to install the program. [Error: java.lang.NullPointerException]". I tried to install the program several times, but kept getting the same error.
Assuming I need to first resolve the Kaspersky problem, I did not run a new HJT scan.
In general, the system seems to be operating much better. However, everytime I reboot the computer I get the same two errors:
1. "Symantec Antivirus has encountered a problem and needs to close." I don't understand this message, since I've turned off all my antivirus programs (including Symantec).
2. "Rtvscan.exe-Application error. Instruction at 0x0012e482 referenced memory at 0x00000000. The memory could not be read."
The ComboFix-quarantined-files.txt file is provided below.
Thanks,
Raynman
1601-01-01 00:00:00 0 C:\Qoobox\Quarantine\C\Program Files\Common Files\DOBE~1\?dobe\
1989-12-12 15:10:10 550,000 C:\Qoobox\Quarantine\C\WINDOWS\vsrkfrl.exe.vir
2004-11-02 19:08:22 197 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_inner_bottom.gif.vir
2004-11-02 19:08:22 284 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_header_cp.gif.vir
2004-11-02 19:08:22 378 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_header_av.gif.vir
2004-11-02 19:08:22 400 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_header_up.gif.vir
2004-11-02 19:08:22 43 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\s.gif.vir
2004-11-02 19:08:22 440 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_tab1_off.gif.vir
2004-11-02 19:08:22 489 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_tab2_off.gif.vir
2004-11-02 19:08:22 608 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_tab1_on.gif.vir
2004-11-02 19:08:22 65 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_inner_bg.gif.vir
2004-11-02 19:08:23 1,037 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vwpt_logo.gif.vir
2004-11-02 19:08:23 55 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_tab_bg.gif.vir
2004-11-02 19:08:23 697 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\images\vm_tab2_on.gif.vir
2004-11-08 19:58:18 26,694 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\ViewCPData\viewpoint.ico.vir
2005-03-15 19:20:44 43 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\s.gif.vir
2005-06-27 21:36:04 7,139 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\header_middle.gif.vir
2005-06-27 21:36:54 8,094 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\header_logo.gif.vir
2005-06-27 21:38:42 7,005 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\congratulations.gif.vir
2005-06-27 21:40:12 2,251 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\top_left_top.gif.vir
2005-06-27 21:41:58 43 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\gray.gif.vir
2005-06-27 21:42:48 2,445 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\top_right_top.gif.vir
2005-06-27 21:43:50 11,042 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\top_left_mid.jpg.vir
2005-06-27 21:45:40 13,073 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\top_right_mid.jpg.vir
2005-06-27 21:46:28 2,342 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\top_left_bottom.gif.vir
2005-06-27 21:46:50 1,997 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\top_right_bottom.gif.vir
2005-06-27 21:52:26 1,235 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\header_left.gif.vir
2005-06-28 20:53:26 2,288 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\orange1.gif.vir
2005-06-28 21:01:16 1,862 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\button_signup.gif.vir
2005-06-28 21:26:50 44 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\gr.gif.vir
2005-06-28 21:43:26 43 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\left.gif.vir
2005-06-28 21:57:18 50 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\right.gif.vir
2005-06-28 22:15:28 644 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\bottom.gif.vir
2005-06-28 22:33:32 425 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\yellow_bot.gif.vir
2005-06-28 22:37:02 1,821 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\signup_2.gif.vir
2005-06-28 22:59:22 804 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\lets_get.gif.vir
2005-06-28 23:02:30 6,355 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\helper.gif.vir
2005-06-28 23:05:24 1,125 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\results_you_see.gif.vir
2005-06-28 23:13:48 16,281 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\bar_screen.gif.vir
2005-06-28 23:17:28 8,795 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\bar_big.gif.vir
2005-06-28 23:36:40 1,729 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\box.gif.vir
2005-06-28 23:52:36 836 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\support.gif.vir
2005-06-28 23:55:58 892 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\privacy.gif.vir
2005-06-28 23:58:12 770 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\about.gif.vir
2005-06-29 00:01:00 856 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\browser_settings.gif.vir
2005-06-29 00:37:32 7,581 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\text_yell.gif.vir
2005-10-25 18:39:32 1,093 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_08.jpg.vir
2005-10-25 18:39:32 1,191 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_01.jpg.vir
2005-10-25 18:39:32 1,353 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_04.jpg.vir
2005-10-25 18:39:32 1,858 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_03.jpg.vir
2005-10-25 18:39:32 14,116 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_13.jpg.vir
2005-10-25 18:39:32 2,031 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_15.jpg.vir
2005-10-25 18:39:32 21,962 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_05.jpg.vir
2005-10-25 18:39:32 39,870 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_11.jpg.vir
2005-10-25 18:39:32 43 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\spacer.gif.vir
2005-10-25 18:39:32 48,437 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_09.jpg.vir
2005-10-25 18:39:32 532 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_14.jpg.vir
2005-10-25 18:39:32 6,130 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_02.jpg.vir
2005-10-25 18:39:32 7,781 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_07.jpg.vir
2005-10-25 18:39:32 781 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_10.jpg.vir
2005-10-25 18:39:32 910 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_12.jpg.vir
2005-10-27 01:15:25 1,391 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\back_to_toolbar\header_thankyou.gif.vir
2005-10-27 01:15:25 27,424 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\images\install_landing-4_06.jpg.vir
2005-10-27 01:15:25 3,007 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\back_to_toolbar\logo_fotomat.gif.vir
2005-10-27 01:15:25 4,232 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\barintro.html.vir
2005-11-12 02:25:58 24,610 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\ViewpointPhotosDeviceConnect.ico.vir
2005-11-16 22:14:54 1,135 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\back_to_toolbar\app_return.html.vir
2005-11-16 22:14:54 1,136 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\back_to_toolbar\app_return1.html.vir
2005-11-21 22:57:16 132,792 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\ViewBarInstaller.exe.vir
2005-11-21 22:57:23 1,345,160 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\ViewBar.dll.vir
2005-11-21 22:57:29 34,456 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\ViewBarBHO.dll.vir
2005-11-21 22:57:36 718,472 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\SWFView.dll.vir
2005-11-21 22:57:42 718,480 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\VETScriptInterpreter.dll.vir
2005-11-21 22:57:49 140,880 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\FotomatDeviceConnect.exe.vir
2005-11-21 22:58:02 79,552 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Toolbar V35\ViewpointPhotosShellExt.dll.vir
2006-01-29 16:49:00 663,616 C:\Qoobox\Quarantine\C\Program Files\Viewpoint\Viewpoint Manager\VETScriptInterpreter.dll.vir
2006-02-17 00:51:36 0 C:\Qoobox\Quarantine\C\WINDOWS\gimmygames91.dat.vir
2006-02-21 23:23:06 0 C:\Qoobox\Quarantine\C\WINDOWS\gimmygames101.dat.vir
2006-03-05 19:05:39 22 C:\Qoobox\Quarantine\C\WINDOWS\MediaGateway.exe.bin.vir
2006-03-19 02:23:15 0 C:\Qoobox\Quarantine\C\302.exe.vir
2006-03-31 23:30:33 0 C:\Qoobox\Quarantine\C\328520.exe.vir
2006-04-08 12
50 28,032 C:\Qoobox\Quarantine\C\Documents and Settings\HP_Owner\drsmartload348a.exe.vir
2006-04-10 19:28:36 32,768 C:\Qoobox\Quarantine\C\WINDOWS\win321010459962052006.exe.vir
2006-04-10 19:38:13 0 C:\Qoobox\Quarantine\C\WINDOWS\win320805104599622006.exe.vir
2006-04-10 19:50:37 0 C:\Qoobox\Quarantine\C\WINDOWS\ms0596205104592006.exe.vir
2006-04-13 19:01:36 319,294 C:\Qoobox\Quarantine\C\WINDOWS\YOINSI.exe.vir
2006-04-13 19:01:42 175,362 C:\Qoobox\Quarantine\C\Program Files\Common Files\EliteMediaGroupOinUninstaller.exe.vir
2006-12-03 01
42 53 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML.vir
2006-12-17 01:23:56 1,196 C:\Qoobox\Quarantine\C\Documents and Settings\Guest\Cookies\guest@ad[1].txt.vir
2007-02-06 13:18:44 1,118 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@www.masterthelowend[1].txt.vir
2007-02-06 14:05:53 1,318 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@www.bassguitarsecrets[1].txt.vir
2007-04-09 13:10:22 53 C:\Qoobox\Quarantine\C\Documents and Settings\Guest\Local Settings\Application Data\Microsoft\Windows Media\10.0\WMSDKNSD.XML.vir
2008-02-24 21:23:39 1,620 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@contextweb[2].txt.vir
2008-03-04 21:04:50 84 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol.vir
2008-03-22 10:13:30 1,376 C:\Qoobox\Quarantine\C\Documents and Settings\Guest\Cookies\guest@webreports.digitalinsight[2].txt.vir
2008-03-23 17:47:47 1,485 C:\Qoobox\Quarantine\C\Documents and Settings\Guest\Cookies\guest@myspace[1].txt.vir
2008-03-27 23:24:23 139 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Application Data\Macromedia\Flash Player\#SharedObjects\PU8E2Z8Y\interclick.com\ud.sol.vir
2008-03-27 23:24:23 84 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#interclick.com\settings.sol.vir
2008-03-29 19:02:53 139 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Application Data\Macromedia\Flash Player\#SharedObjects\98ADDTWU\interclick.com\ud.sol.vir
2008-05-20 22:26:09 1,331 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@slide[2].txt.vir
2008-05-22 19:56:32 2,191 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@delb.opt.fimserve[2].txt.vir
2008-05-25 13:58:06 1,237 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@hp.wildgames[1].txt.vir
2008-05-26 12:31:36 1,099 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@bigfishgames[2].txt.vir
2008-05-27 21:56:54 1,682 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@ask[1].txt.vir
2008-05-28 21:00:49 3,193 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@myspace[2].txt.vir
2008-06-03 21:51:02 1,027 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@deviantart[2].txt.vir
2008-06-07 18:57:09 1,249 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@myspace[4].txt.vir
2008-06-22 12:16:20 1,366 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@demr.opt.fimserve[1].txt.vir
2008-06-22 12:17:14 1,988 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@delb.opt.fimserve[1].txt.vir
2008-07-18 14:20:41 5,057 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@insightexpressai[2].txt.vir
2008-07-18 14:24:10 1,215 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@www.addictinggames[1].txt.vir
2008-07-29 12:41:45 1,260 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@myspace[1].txt.vir
2008-08-05 23:18:37 1,053 C:\Qoobox\Quarantine\C\Documents and Settings\Chris\Cookies\chris@afy11[1].txt.vir
2008-08-07 20:36:19 84,992 C:\Qoobox\Quarantine\C\WINDOWS\system32\amvo2.dll.vir
2008-08-08 21:32:47 89,992 C:\Qoobox\Quarantine\C\x0.cmd.vir
2008-08-10 16:30:39 90,816 C:\Qoobox\Quarantine\C\tyktjfww.exe.vir
2008-08-10 20:03:25 1,430 C:\Qoobox\Quarantine\C\Documents and Settings\Carli\Cookies\carli@www.pandasecurity[1].txt.vir
2008-08-10 21:48:22 90,295 C:\Qoobox\Quarantine\C\r2nl.com.vir
2008-08-10 21:48:22 90,295 C:\Qoobox\Quarantine\C\WINDOWS\system32\amvo.exe.vir
2008-08-10 21:48:26 84,992 C:\Qoobox\Quarantine\C\WINDOWS\system32\amvo1.dll.vir
2008-08-15 00:43:20 84,992 C:\Qoobox\Quarantine\C\WINDOWS\system32\amvo0.dll.vir
2008-08-15 00:58:35 84,992 C:\Qoobox\Quarantine\C\WINDOWS\system32\ckvo0.dll.vir
2008-08-15 00:59:15 89,901 C:\Qoobox\Quarantine\C\t1ypkh.exe.vir
2008-08-15 00:59:15 89,901 C:\Qoobox\Quarantine\C\WINDOWS\system32\ckvo.exe.vir
2008-08-15 00:59:16 84,992 C:\Qoobox\Quarantine\C\WINDOWS\system32\ckvo1.dll.vir
2008-08-15 02:44:09 542 C:\Qoobox\Quarantine\C\autorun.inf.vir
2008-08-16 20:45:28 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-CFSServ.exe.reg.dat
2008-08-16 20:45:28 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-NDSTray.exe.reg.dat
2008-08-16 20:45:28 0 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-TFncKy.reg.dat
2008-08-16 20:45:30 124 C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-kamsoft.reg.dat
2008-08-16 20:45:30 180 C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-Uniblue RegistryBooster 2.reg.dat
2008-08-16 20:45:30 90 C:\Qoobox\Quarantine\Registry_backups\HKCU-Run-Aim6.reg.dat
2008-08-16 20:45:31 232 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-ImInstaller_IncrediMail.reg.dat
2008-08-16 20:45:31 99 C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-PCDrProfiler.reg.dat
2008-08-16 22:10:55 2,922 C:\Qoobox\Quarantine\Registry_backups\Service_SVSAV.reg.dat
2008-08-16 22:10:55 822 C:\Qoobox\Quarantine\Registry_backups\Legacy_SVSAV.reg.dat
2008-08-16 22:11:07 6,878 C:\Qoobox\Quarantine\catchme2008-08-16_181107.90.zip
2008-08-16 23:21:11 427 C:\Qoobox\Quarantine\catchme.log