View Single Post
Old 07-29-2006, 07:05 AM   #3 (permalink)
willmon18
Registered User
 
willmon18's Avatar
 
Join Date: Apr 2006
Location: Missouri
Posts: 386
OS: Windows XP Professional Service Pack 3

My System

Send a message via AIM to willmon18 Send a message via MSN to willmon18 Send a message via Yahoo to willmon18
I was wanting to point out that you put on the post Ewido Anti-Malware, but it was updated to Ewido Antispyware and is no longer Ewido Anti-Malware. But your instructions seemed to of been exactly right when doing the Ewido scan so I assumed that you just put Anti-Malware on there still. Well anyways here is some stuff my Zone-Alarm Security Suite picked up on a scheduled scan right when I was reading the post. All of this stuff was automatically cleaned and deleted by my Zone-Alarm Security Suite.
Virus's:Java.ByteVerify!exploit, Win32.MS05-002!exploit, Win32.MS05-002!exploit, Win32.Worto
JS.MS05-054!exploit, JS.SillyDIScript.BG, JS.MS05-054!exploit, JS.MS05-054!exploit
Tracking Cookies:2o7, Ads.addynamix, Advertising, Atdmt, Doubleclick, Falkag, Hitbox, Mediaplex, Questionmarketm, Serving-sys, Statcounter, Tribalfusion, Zedo
Here is my Ewido log don't ask me how my alarm clock set up is a infection. It is just an installer for Karen's alarm clock well that is what it is called anyways.
Ewido anti-spyware - Scan Report
Created at:3:19:23 PM 7/28/2006
Scan result:HKU\S-1-5-21-1390067357-507921405-842925246-1004\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{590FFB84-6A29-4797-9C0E-B15DF2C4CDCB} -> Adware.TrustCleaner : No action taken.
C:\WINDOWS\Setup1.exe -> Backdoor.Agobot.xb : No action taken.
E:\ptalarm-setup.exe/PTAlarm.CAB/SETUP1.EXE -> Backdoor.Agobot.xb : No action taken.
Report end
And here is my Panda Active Scan Log Some second opinion in Security software detecting spyware cookies...
Incident: Status Location
Spyware:Cookie/Advertising:Not disinfected:C:\Documents and Settings\William\Cookies\william@advertising[2].txt
Spyware:Cookie/Doubleclick:Not disinfected:C:\Documents and Settings\William\Cookies\william@doubleclick[1].txt Spyware:Cookie/QuestionMarket:Not disinfected:C:\Documents and Settings\William\Cookies\william@questionmarket[2].txt Spyware:Cookie/Atlas DMT:Not disinfected:C:\Documents and Settings\William\Cookies\william@atdmt[1].txt
Well I think that my zone alarm should of had a scheduled scan before I posted this. I usally run a Zonealarm scan before I post but it didn't find anything at the time. I have Ad-Aware Professional if you want me to scan with it some time. Also I rewrote the logs to save space. All of the data is still on there.
willmon18 is offline