lancebass

Not sure what is going on. Here is my log from avtivescan:

Incident Status Location

Virus:Generic Trojan Disinfected Operating system
Adware:Adware/Yazzle Not disinfected C:\1.tmp
Virus:Trj/Downloader.MDW Not disinfected C:\2.tmp[BndDrive.dll]
Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Admin\Cookies\admin@2o7[2].txt
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Admin\Cookies\admin@ad.yieldmanager[1].txt
Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Admin\Cookies\admin@ad.yieldmanager[3].txt
Spyware:Cookie/AdDynamix Not disinfected C:\Documents and Settings\Admin\Cookies\admin@ads.addynamix[1].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Admin\Cookies\admin@ads.pointroll[1].txt
Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Admin\Cookies\admin@ads.pointroll[2].txt
Spyware:Cookie/Adserver Not disinfected C:\Documents and Settings\Admin\Cookies\admin@adserver.easyad[2].txt
Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Admin\Cookies\admin@advertising[1].txt
Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Admin\Cookies\admin@atdmt[1].txt
Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Admin\Cookies\admin@burstnet[2].txt
Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Admin\Cookies\admin@com[1].txt
Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Admin\Cookies\admin@doubleclick[2].txt
Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Admin\Cookies\admin@fastclick[1].txt
Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Admin\Cookies\admin@mediaplex[1].txt
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Admin\Cookies\admin@overture[1].txt
Spyware:Cookie/Overture Not disinfected C:\Documents and Settings\Admin\Cookies\admin@perf.overture[1].txt
Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Admin\Cookies\admin@realmedia[2].txt
Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Admin\Cookies\admin@trafficmp[1].txt
Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Admin\Cookies\admin@tribalfusion[1].txt
Spyware:Cookie/BurstBeacon Not disinfected C:\Documents and Settings\Admin\Cookies\admin@www.burstbeacon[2].txt
Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Admin\Cookies\admin@zedo[1].txt
Adware:Adware/Yazzle Not disinfected C:\Program Files\Common Files\Yazzle1552OinUninstaller.exe
Virus:Trj/Downloader.MDW Disinfected C:\Program Files\ISM\BndDrive.dll
Virus:Generic Trojan Disinfected C:\WINDOWS\WebAssist.dll
Virus:Generic Trojan Disinfected C:\WINDOWS\xhelper.dll
Virus:Trj/Downloader.MDW Disinfected C:\WINDOWS\xmlhelper.dll
Virus:Generic Malware Disinfected C:\WINDOWS\xmlhelper2.dll
Virus:Generic Malware Disinfected C:\WINDOWS\xmlhelper4.dll

tetonbob

Hello -

From your thread in WindowsXP forum, you should have followed all the steps outlined by chauffeur2, which would have also had you posting logs from Deckard's System Scanner.

Please do this now:

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.

Note:

DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

1. Close all applications and windows.
2. Double-click on dss.exe to run it, and follow the prompts
   
   
   If the following message from DSS appears, please click on "Yes" to allow it to download HijackThis, if you don't already have it.
   
   
   
   Allow DSS through your firewall to download HijackThis by clicking "OK"
   
   
   
   
   DSS has installed HijackThis, and placed a shortcut on your desktop. Click "OK" to allow the scan to continue.
   
   
   
   
   .
3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt <-this one will be minimized
4. Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt here.
5. Please attach extra.txt to your post.

To attach a file to a new post, simply

1. Click the[Manage Attachments] button under Additional Options > Attach Files on the post composition page, and
2. copy and paste the following into the "Upload File from your Computer" box:

   C:\Deckard\System Scanner\extra.txt
   

3. Click Upload.

What DSS will do:

• create a new System Restore point in Windows XP and Vista.
• clean your Temporary Files, Downloaded Program Files, and Internet Cache Files, and also empty the Recycle Bin on all drives.
• check some important areas of your system and produce a report for your analyst to review. DSS automatically runs HijackThis for you, but it will also install and place a shortcut to HijackThis on your desktop if you do not already have HijackThis installed.

__________________

** PC Safety and Security--What Do I Need? **

Proud Member of ASAP since 2005
Proud Member of UNITE since 2006