Tech Support Forum - View Single Post - reformatted after winsock takeover, still having problems

tinkerbellnhl · 01-05-2006, 04:39 PM

Here are the results from virusscan.jotti.org and the log results from rootkitrevealer. When I was trying to save the log results from rootkit to the desktop a pop-up told me that the dektop was unavailable. I also saved it to my documents. It would not display in either location, so I did a search for the file. It turned up in C:\WINDOWS\system32 and opened in Notepad.

I am still cleaning the disablenotify issue through spybot daily. Today a new issue had presented. When I open up my laptop from standby the wireless internet is not connected. It says that there are no wireless networks available even though there are always at least 4 available when mine is not working. I have to repair the connection in order to connect.

Thanks for all the help!

Service load: 0% 100%

File: 26c40.msi
Status: OK (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 af89dcec30ba284bc29d7651c16e77be
Packers detected: -
Scanner results
AntiVir Found nothing
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found nothing
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found nothing
NOD32 Found nothing
Norman Virus Control Found nothing
UNA Found nothing
VBA32 Found nothing

C:\Documents and Settings\bobbie\Cookies\bobbie@www.musecube[2].txt 1/5/2006 5:02 PM 159 bytes Hidden from Windows API.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\45CXGB8L\rd1-muselogo[1].gif 1/5/2006 5:03 PM 2.51 KB Hidden from Windows API.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\CL2RSDI3\mail[2].htm 1/5/2006 4:39 PM 18.44 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\CL2RSDI3\mail[3].htm 1/5/2006 4:41 PM 5.31 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\CL2RSDI3\rd1-bgimg[1].gif 1/5/2006 5:03 PM 199 bytes Hidden from Windows API.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\SXU5EFI9\mail[1].htm 1/5/2006 4:53 PM 1.35 KB Visible in Windows API, but not in MFT or directory index.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\SXU5EFI9\rd-default[1].css 1/5/2006 5:03 PM 1.19 KB Hidden from Windows API.
C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\SXU5EFI9\rd1-crumbbg[1].jpg 1/5/2006 5:03 PM 1.13 KB Hidden from Windows API.
C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf 1/5/2006 5:07 PM 53.21 KB Hidden from Windows API.

01-05-2006, 04:39 PM	#5 (permalink)
tinkerbellnhl Registered User Join Date: Jan 2006 Posts: 25 OS: Windows XP	Here are the results from virusscan.jotti.org and the log results from rootkitrevealer. When I was trying to save the log results from rootkit to the desktop a pop-up told me that the dektop was unavailable. I also saved it to my documents. It would not display in either location, so I did a search for the file. It turned up in C:\WINDOWS\system32 and opened in Notepad. I am still cleaning the disablenotify issue through spybot daily. Today a new issue had presented. When I open up my laptop from standby the wireless internet is not connected. It says that there are no wireless networks available even though there are always at least 4 available when mine is not working. I have to repair the connection in order to connect. Thanks for all the help! Service load: 0% 100% File: 26c40.msi Status: OK (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database) MD5 af89dcec30ba284bc29d7651c16e77be Packers detected: - Scanner results AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing UNA Found nothing VBA32 Found nothing C:\Documents and Settings\bobbie\Cookies\bobbie@www.musecube[2].txt 1/5/2006 5:02 PM 159 bytes Hidden from Windows API. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\45CXGB8L\rd1-muselogo[1].gif 1/5/2006 5:03 PM 2.51 KB Hidden from Windows API. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\CL2RSDI3\mail[2].htm 1/5/2006 4:39 PM 18.44 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\CL2RSDI3\mail[3].htm 1/5/2006 4:41 PM 5.31 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\CL2RSDI3\rd1-bgimg[1].gif 1/5/2006 5:03 PM 199 bytes Hidden from Windows API. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\SXU5EFI9\mail[1].htm 1/5/2006 4:53 PM 1.35 KB Visible in Windows API, but not in MFT or directory index. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\SXU5EFI9\rd-default[1].css 1/5/2006 5:03 PM 1.19 KB Hidden from Windows API. C:\Documents and Settings\bobbie\Local Settings\Temporary Internet Files\Content.IE5\SXU5EFI9\rd1-crumbbg[1].jpg 1/5/2006 5:03 PM 1.13 KB Hidden from Windows API. C:\WINDOWS\Prefetch\REGEDIT.EXE-1B606482.pf 1/5/2006 5:07 PM 53.21 KB Hidden from Windows API.