Tech Support Forum - View Single Post

chash · 01-12-2006, 10:30 AM

Done again and the computer seems to be working much better with no infection balloons and no popups. it is a bit faster also.

Logfile of HijackThis v1.99.1
Scan saved at 12:23:31 PM, on 1/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\HPQ\One-Touch\OneTouch.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\carpserv.exe
C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\HijackThis\HijackThis.exe

O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK
O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d
O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [CARPService] carpserv.exe
O4 - HKLM\..\Run: [AutoTBar] C:\hp\bin\autotbar.exe
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKCU\..\Run: [HijackThis startup scan] C:\HijackThis.exe /startupscan
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://us8l.hpwis.com
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab
O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{770B91E1-B6E3-491F-A2EF-90A2291037FF}: NameServer = 216.220.230.24 216.220.230.25
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

-------------------------------------------------------------------------------
KASPERSKY ON-LINE SCANNER REPORT
Thursday, January 12, 2006 12:21:26
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.67.0
Kaspersky Anti-Virus database last update: 12/01/2006
Kaspersky Anti-Virus database records: 170732
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\

Scan Statistics:
Total number of scanned objects: 39747
Number of viruses found: 40
Number of infected objects: 100
Number of suspicious objects: 1
Duration of the scan process: 3211 sec

Infected Object Name - Virus Name
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc10.exe Infected: Trojan-Clicker.Win32.VB.kc
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc11.exe/data0010 Infected: Trojan-Dropper.Win32.Small.qn
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc11.exe Infected: Trojan-Dropper.Win32.Small.qn
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc12.tmp Infected: Trojan-Downloader.Win32.Zlob.dl
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc13.txt Infected: not-virus:Hoax.Win32.Renos.aj
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc14.exe Infected: not-virus:Hoax.Win32.Renos.aj
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc15.tmp Infected: Trojan-Downloader.Win32.Zlob.dm
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc16.fr7 Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc17.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc18.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc19.tmp Infected: Trojan-Downloader.Win32.Zlob.dl
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc20.dll Infected: not-a-virus:Dialer.Win32.E-Group.q
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc21.exe Infected: Trojan.Win32.Dialer.ay
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc23.exe Infected: Trojan.Win32.Pakes
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc25.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc26.exe Infected: Trojan-Downloader.Win32.PurityScan.ax
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc30.dat Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc31.dll Infected: not-a-virus:AdWare.Win32.SurfSide.ai
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc32.exe Infected: Trojan-Downloader.Win32.Tiny.al
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc33.exe Infected: Trojan-Clicker.Win32.VB.kc
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc34.exe Infected: Trojan-PSW.Win32.Agent.bu
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc35.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc36.exe Infected: Trojan.Win32.Pakes
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc37.exe Infected: not-a-virus:AdWare.Win32.SurfSide.ai
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc39.dat Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc4.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc40.dat Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc41.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc42.exe Infected: Trojan.Win32.Pakes
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc43.dll Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc44.fr0 Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc45.dll Infected: not-a-virus:AdWare.Win32.SurfSide.aa
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc46.cpl Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc47.exe Infected: Trojan.Win32.StartPage.agt
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc48.exe Infected: Trojan.Win32.Zapchast.ad
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc49.dll Infected: not-a-virus:Dialer.Win32.E-Group.d
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc5.tmp Infected: Trojan-Downloader.Win32.Zlob.dm
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc50.dll Infected: not-a-virus:Dialer.Win32.E-Group.l
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc51.exe Infected: not-virus:Hoax.Win32.Renos.aj
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc52.dll Infected: Trojan-Spy.Win32.Small.dg
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc53.dll Infected: Trojan-PSW.Win32.Agent.bu
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc54.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc55.txt Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc56.exe Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc57.txt Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc58.fr8 Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc59.exe Infected: Trojan-Clicker.Win32.VB.kc
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc6.dll Infected: not-virus:Hoax.Win32.Renos.af
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc60.txt Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc61.exe Infected: SpamTool.Win32.Mailbot.q
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.p
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe Infected: Trojan-Downloader.Win32.TSUpdate.f
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc63.dll Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc64.exe Infected: Trojan-Clicker.Win32.VB.kc
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc65.dll Infected: not-a-virus:AdWare.Win32.NaviPromo.m
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc66.dat Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc67.exe Infected: Trojan-Downloader.Win32.Small.buy
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc68.tmp Infected: Trojan-Downloader.Win32.Zlob.dm
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc69.exe/data0002/data0006 Infected: Trojan-Dropper.Win32.VB.kk
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc69.exe/data0002 Infected: Trojan-Dropper.Win32.VB.kk
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc69.exe Infected: Trojan-Dropper.Win32.VB.kk
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc7.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/SskBho.dll Infected: not-a-virus:AdWare.Win32.SurfSide.ai
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/SskCore.dll Infected: not-a-virus:AdWare.Win32.SurfSide.aa
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/Ssk.exe Infected: not-a-virus:AdWare.Win32.SurfSide.ai
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/Ssk3RepairInstall.exe Infected: not-a-virus:AdWare.Win32.SurfSide.aa
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB Infected: not-a-virus:AdWare.Win32.SurfSide.aa
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe Infected: not-a-virus:AdWare.Win32.SurfSide.aa
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc71.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc72.exe Infected: Trojan.Win32.StartPage.aw
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc73.exe Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc74.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc75.exe Infected: Trojan.Win32.Pakes
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc76.dll Infected: not-a-virus:AdWare.Win32.NaviPromo.m
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc77.dll Infected: Trojan-Clicker.Win32.Agent.ac
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc78.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc79.exe Infected: Trojan-Downloader.Win32.Zlob.do
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc8.tmp Infected: Trojan-Downloader.Win32.Zlob.dm
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc80.exe Infected: Trojan-Downloader.Win32.Adload.l
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc81.exe Infected: Trojan-Dropper.Win32.Small.qn
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc82.exe Infected: Trojan-Downloader.Win32.Adload.l
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc83.exe Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc84.txt Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc85.txt Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc86.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc87.exe Infected: Trojan.Win32.Pakes
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc88.tmp Infected: not-a-virus:AdWare.Win32.SurfSide.j
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc89.exe Infected: Trojan-Downloader.Win32.TSUpdate.o
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc9.tmp Infected: Trojan-Downloader.Win32.Zlob.dp
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc90.exe Infected: Trojan-Dropper.Win32.VB.kk
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc91.exe Infected: Trojan-Downloader.Win32.Adload.j
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc92.exe Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc93.exe Infected: Packed.Win32.Klone.b
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc94.cpl Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc95.dat Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc96.exe Infected: Trojan-Downloader.Win32.Qoologic.at
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc97.htm Suspicious: Exploit.HTML.Mht
C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc98.tmp Infected: Trojan-Downloader.Win32.Zlob.dm

Scan process completed.

01-12-2006, 10:30 AM	#6 (permalink)
chash Registered User Join Date: Jan 2006 Posts: 5 OS: XP	At wits end Done again and the computer seems to be working much better with no infection balloons and no popups. it is a bit faster also. Logfile of HijackThis v1.99.1 Scan saved at 12:23:31 PM, on 1/12/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\ewido\security suite\ewidoctrl.exe C:\Program Files\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\Program Files\HPQ\One-Touch\OneTouch.EXE C:\Program Files\Synaptics\SynTP\SynTPLpr.exe C:\Program Files\Synaptics\SynTP\SynTPEnh.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\WINDOWS\system32\carpserv.exe C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\Program Files\HijackThis\HijackThis.exe O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe O4 - HKLM\..\Run: [QT4HPOT] C:\Program Files\HPQ\One-Touch\OneTouch.EXE O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe O4 - HKLM\..\Run: [TV Now] C:\Program Files\HPQ\Notebook Utilities\TvNow.exe /RK O4 - HKLM\..\Run: [srmclean] C:\Cpqs\Scom\srmclean.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [PreloadApp] c:\hp\drivers\printers\photosmart\hphprld.exe c:\hp\drivers\printers\photosmart\setup.exe -d O4 - HKLM\..\Run: [Display Settings] C:\Program Files\HPQ\Notebook Utilities\hptasks.exe /s O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [CARPService] carpserv.exe O4 - HKLM\..\Run: [AutoTBar] C:\hp\bin\autotbar.exe O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Roxio\Easy CD Creator 5\DirectCD\DirectCD.exe" O4 - HKCU\..\Run: [HijackThis startup scan] C:\HijackThis.exe /startupscan O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes0521.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://us8l.hpwis.com O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab O16 - DPF: {556DDE35-E955-11D0-A707-000000521957} - http://www.xblock.com/download/xclean_micro.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{770B91E1-B6E3-491F-A2EF-90A2291037FF}: NameServer = 216.220.230.24 216.220.230.25 O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe ------------------------------------------------------------------------------- KASPERSKY ON-LINE SCANNER REPORT Thursday, January 12, 2006 12:21:26 Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky On-line Scanner version: 5.0.67.0 Kaspersky Anti-Virus database last update: 12/01/2006 Kaspersky Anti-Virus database records: 170732 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ Scan Statistics: Total number of scanned objects: 39747 Number of viruses found: 40 Number of infected objects: 100 Number of suspicious objects: 1 Duration of the scan process: 3211 sec Infected Object Name - Virus Name C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc10.exe Infected: Trojan-Clicker.Win32.VB.kc C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc11.exe/data0010 Infected: Trojan-Dropper.Win32.Small.qn C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc11.exe Infected: Trojan-Dropper.Win32.Small.qn C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc12.tmp Infected: Trojan-Downloader.Win32.Zlob.dl C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc13.txt Infected: not-virus:Hoax.Win32.Renos.aj C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc14.exe Infected: not-virus:Hoax.Win32.Renos.aj C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc15.tmp Infected: Trojan-Downloader.Win32.Zlob.dm C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc16.fr7 Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc17.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc18.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc19.tmp Infected: Trojan-Downloader.Win32.Zlob.dl C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc20.dll Infected: not-a-virus:Dialer.Win32.E-Group.q C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc21.exe Infected: Trojan.Win32.Dialer.ay C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc23.exe Infected: Trojan.Win32.Pakes C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc25.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc26.exe Infected: Trojan-Downloader.Win32.PurityScan.ax C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc30.dat Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc31.dll Infected: not-a-virus:AdWare.Win32.SurfSide.ai C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc32.exe Infected: Trojan-Downloader.Win32.Tiny.al C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc33.exe Infected: Trojan-Clicker.Win32.VB.kc C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc34.exe Infected: Trojan-PSW.Win32.Agent.bu C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc35.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc36.exe Infected: Trojan.Win32.Pakes C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc37.exe Infected: not-a-virus:AdWare.Win32.SurfSide.ai C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc39.dat Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc4.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc40.dat Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc41.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc42.exe Infected: Trojan.Win32.Pakes C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc43.dll Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc44.fr0 Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc45.dll Infected: not-a-virus:AdWare.Win32.SurfSide.aa C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc46.cpl Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc47.exe Infected: Trojan.Win32.StartPage.agt C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc48.exe Infected: Trojan.Win32.Zapchast.ad C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc49.dll Infected: not-a-virus:Dialer.Win32.E-Group.d C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc5.tmp Infected: Trojan-Downloader.Win32.Zlob.dm C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc50.dll Infected: not-a-virus:Dialer.Win32.E-Group.l C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc51.exe Infected: not-virus:Hoax.Win32.Renos.aj C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc52.dll Infected: Trojan-Spy.Win32.Small.dg C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc53.dll Infected: Trojan-PSW.Win32.Agent.bu C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc54.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc55.txt Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc56.exe Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc57.txt Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc58.fr8 Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc59.exe Infected: Trojan-Clicker.Win32.VB.kc C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc6.dll Infected: not-virus:Hoax.Win32.Renos.af C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc60.txt Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc61.exe Infected: SpamTool.Win32.Mailbot.q C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0009.BIN Infected: Trojan-Downloader.Win32.TSUpdate.n C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0010.BIN Infected: Trojan-Downloader.Win32.TSUpdate.p C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0011.BIN Infected: Trojan-Downloader.Win32.TSUpdate.l C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe/WISE0012.BIN Infected: Trojan-Downloader.Win32.TSUpdate.f C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc62.exe Infected: Trojan-Downloader.Win32.TSUpdate.f C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc63.dll Infected: not-a-virus:Porn-Dialer.Win32.InstantAccess.f C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc64.exe Infected: Trojan-Clicker.Win32.VB.kc C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc65.dll Infected: not-a-virus:AdWare.Win32.NaviPromo.m C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc66.dat Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc67.exe Infected: Trojan-Downloader.Win32.Small.buy C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc68.tmp Infected: Trojan-Downloader.Win32.Zlob.dm C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc69.exe/data0002/data0006 Infected: Trojan-Dropper.Win32.VB.kk C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc69.exe/data0002 Infected: Trojan-Dropper.Win32.VB.kk C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc69.exe Infected: Trojan-Dropper.Win32.VB.kk C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc7.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/SskBho.dll Infected: not-a-virus:AdWare.Win32.SurfSide.ai C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/SskCore.dll Infected: not-a-virus:AdWare.Win32.SurfSide.aa C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/Ssk.exe Infected: not-a-virus:AdWare.Win32.SurfSide.ai C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB/Ssk3RepairInstall.exe Infected: not-a-virus:AdWare.Win32.SurfSide.aa C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe/InpB Infected: not-a-virus:AdWare.Win32.SurfSide.aa C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc70.exe Infected: not-a-virus:AdWare.Win32.SurfSide.aa C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc71.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc72.exe Infected: Trojan.Win32.StartPage.aw C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc73.exe Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc74.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc75.exe Infected: Trojan.Win32.Pakes C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc76.dll Infected: not-a-virus:AdWare.Win32.NaviPromo.m C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc77.dll Infected: Trojan-Clicker.Win32.Agent.ac C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc78.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc79.exe Infected: Trojan-Downloader.Win32.Zlob.do C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc8.tmp Infected: Trojan-Downloader.Win32.Zlob.dm C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc80.exe Infected: Trojan-Downloader.Win32.Adload.l C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc81.exe Infected: Trojan-Dropper.Win32.Small.qn C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc82.exe Infected: Trojan-Downloader.Win32.Adload.l C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc83.exe Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc84.txt Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc85.txt Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc86.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc87.exe Infected: Trojan.Win32.Pakes C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc88.tmp Infected: not-a-virus:AdWare.Win32.SurfSide.j C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc89.exe Infected: Trojan-Downloader.Win32.TSUpdate.o C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc9.tmp Infected: Trojan-Downloader.Win32.Zlob.dp C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc90.exe Infected: Trojan-Dropper.Win32.VB.kk C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc91.exe Infected: Trojan-Downloader.Win32.Adload.j C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc92.exe Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc93.exe Infected: Packed.Win32.Klone.b C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc94.cpl Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc95.dat Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc96.exe Infected: Trojan-Downloader.Win32.Qoologic.at C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc97.htm Suspicious: Exploit.HTML.Mht C:\RECYCLER\S-1-5-21-1399826384-2718059322-1914771934-1006\Dc98.tmp Infected: Trojan-Downloader.Win32.Zlob.dm Scan process completed.