Shadowkid

Malwarebytes log

Malwarebytes' Anti-Malware 1.38
Database version: 2339
Windows 5.1.2600 Service Pack 3

6/27/2009 1:03:53 AM
mbam-log-2009-06-27 (01-03-53).txt

Scan type: Full Scan (C:\|G:\|)
Objects scanned: 300395
Time elapsed: 2 hour(s), 3 minute(s), 49 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Qoobox\quarantine\C\WINDOWS\system32\SKYNETuekypbwq.dll.vir (Trojan.TDSS) -> Quarantined and deleted successfully.
c:\system volume information\_restore{d684add8-48a9-4206-9b37-b9033d69500b}\RP51\A0008802.dll (Trojan.TDSS) -> Quarantined and deleted successfully.



Kaspersky Log

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Monday, June 29, 2009
Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Sunday, June 28, 2009 22:52:59
Records in database: 2399975
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
I:\

Scan statistics:
Files scanned: 205700
Threat name: 1
Infected objects: 23
Suspicious objects: 0
Duration of the scan: 05:54:58


File name / Threat name / Threats count
C:\Documents and Settings\All Users\Application Data\IJJIGame\FireFoxRestarter1.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\All Users\Application Data\IJJIGame\ijjinotify2FxB.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\All Users\Application Data\IJJIGame\ijjiPreNotify2FxB.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\All Users\Application Data\IJJIGame\ijjiPrePLauncher.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\All Users\Application Data\IJJIGame\ijjiPreStarter2FxB.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\All Users\Application Data\IJJIGame\ijjistarter2FxB.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\All Users\Application Data\IJJIGame\ijjiUninstall.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\Owner\Application Data\ijjigame\ijjistarter2FxB.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Documents and Settings\Owner\Application Data\ijjigame\U_GBOUND_setup.exe Infected: Trojan.Win32.GoPackages.a 1
C:\Program Files\Mozilla Firefox\plugins\npijjiautoinstallpluginff.dll Infected: Trojan.Win32.GoPackages.a 1
C:\Program Files\Mozilla Firefox\plugins\npijjiCHPlugin.dll Infected: Trojan.Win32.GoPackages.a 1
C:\System Volume Information\_restore{D684ADD8-48A9-4206-9B37-B9033D69500B}\RP48\A0008178.dll Infected: Trojan.Win32.GoPackages.a 1
C:\System Volume Information\_restore{D684ADD8-48A9-4206-9B37-B9033D69500B}\RP48\A0008190.exe Infected: Trojan.Win32.GoPackages.a 1
C:\System Volume Information\_restore{D684ADD8-48A9-4206-9B37-B9033D69500B}\RP48\A0008191.exe Infected: Trojan.Win32.GoPackages.a 1
C:\System Volume Information\_restore{D684ADD8-48A9-4206-9B37-B9033D69500B}\RP8\A0001134.exe Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\Downloaded Program Files\ijjiNotify2.exe Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\Downloaded Program Files\ijjiPreNotify2.exe Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\Downloaded Program Files\ijjiPreStarter2.exe Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\Downloaded Program Files\ijjiSetup1010.dll Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\Downloaded Program Files\ijjistarter2.exe Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\system32\ijjiPlugin2.dll Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\system32\ijjiProcessRestarter.exe Infected: Trojan.Win32.GoPackages.a 1
C:\WINDOWS\system32\ijjiSetup.exe Infected: Trojan.Win32.GoPackages.a 1

The selected area was scanned.