|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| Resolved HJT Threads Resolved spyware and popup issues. |
|
|
LinkBack | Thread Tools |
07-01-2007, 12:06 PM
|
#1 (permalink) |
|
Registered User
Join Date: Sep 2005
Posts: 8
OS: xp
|
Need help here msn virus - Log
Hi people my msn automatically sends msgs to my contacts saying something about clicking a link to seea snap.
Here's my log. THX a LOT in advance people ! Logfile of Trend Micro HijackThis v2.0.0 (BETA) Scan saved at 16:04:44, on 01/07/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Archivos de programa\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\ARCHIV~1\Grisoft\AVG7\avgamsvr.exe C:\ARCHIV~1\Grisoft\AVG7\avgupsvc.exe C:\ARCHIV~1\Grisoft\AVG7\avgemc.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\explorer.exe C:\Archivos de programa\Creative\SBAudigy\Surround Mixer\CTSysVol.exe C:\windows\winvhost2.exe C:\WINDOWS\system32\Rundll32.exe C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe C:\Archivos de programa\Razer\Habu\razerhid.exe C:\Archivos de programa\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\WINDOWS\system32\JVM0.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\system32\wscntfy.exe C:\Archivos de programa\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE C:\Archivos de programa\Archivos comunes\Logitech\LCD Manager\Applets\LCDClock.exe C:\Archivos de programa\Archivos comunes\Logitech\LCD Manager\Applets\LCDPOP3.exe C:\Archivos de programa\Archivos comunes\Logitech\LCD Manager\Applets\LCDMedia.exe C:\Archivos de programa\Widgets\YahooWidgetEngine.exe C:\Archivos de programa\Razer\Habu\razerofa.exe C:\Archivos de programa\Widgets\YahooWidgetEngine.exe C:\Archivos de programa\Widgets\YahooWidgetEngine.exe C:\Archivos de programa\Widgets\YahooWidgetEngine.exe C:\Archivos de programa\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\Archivos de programa\MSN Messenger\msnmsgr.exe C:\Archivos de programa\MSN Messenger\usnsvc.exe C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE C:\Documents and Settings\Vaaaron\Escritorio\HiJackThis_v2.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos F2 - REG:system.ini: Shell=explorer.exe c:\windows\winvhost2.exe O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\Archivos de programa\DAP\DAPBHO.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\ARCHIV~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: PDF de Adobe - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [CTSysVol] C:\Archivos de programa\Creative\SBAudigy\Surround Mixer\CTSysVol.exe /r O4 - HKLM\..\Run: [P17Helper] Rundll32 P17.dll,P17Helper O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE O4 - HKLM\..\Run: [EPSON Stylus CX4100 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEL.EXE /P26 "EPSON Stylus CX4100 Series" /O6 "USB001" /M "Stylus CX4100" O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [GrooveMonitor] "C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [Babylon Client] C:\Archivos de programa\Babylon\Babylon-Pro\Babylon.exe -AutoStart O4 - HKLM\..\Run: [Habu] C:\Archivos de programa\Razer\Habu\razerhid.exe O4 - HKLM\..\Run: [Launch LCDMon] "C:\Archivos de programa\Archivos comunes\Logitech\LCD Manager\lcdmon.exe" O4 - HKLM\..\Run: [Launch LGDCore] "C:\Archivos de programa\Archivos comunes\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Archivos de programa\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [JVM0] C:\WINDOWS\system32\JVM0.exe O4 - HKLM\..\Run: [AVG7_CC] C:\ARCHIV~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKCU\..\Run: [StartCCC] C:\Archivos de programa\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [igndlm.exe] C:\Archivos de programa\IGN\Download Manager\DLM.exe /windowsstart /startifwork O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Archivos de programa\SUPERAntiSpyware\SUPERAntiSpyware.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL') O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\ARCHIV~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICIO LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: Yahoo! Widget Engine.lnk = C:\Archivos de programa\Widgets\YahooWidgetEngine.exe O4 - Global Startup: Inicio rápido de Adobe Acrobat.lnk = ? O8 - Extra context menu item: &Download with &DAP - C:\ARCHIV~1\DAP\dapextie.htm O8 - Extra context menu item: Convertir a PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir a PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir destino de vínculo a PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir destino de vínculo en archivo PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir selección a archivo PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir selección a PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir vínculos seleccionados a PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convertir vínculos seleccionados a PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Download &all with DAP - C:\ARCHIV~1\DAP\dapextie2.htm O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARCHIV~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARCHIV~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\ARCHIV~1\DAP\DAP.EXE O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Archivos de programa\Yahoo!\Common\Yinsthelper.dll O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (CDownloadCtrl Object) - http://www.fileplanet.com/fpdlmgr/ca..._2.3.2.100.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by140fd.bay140.hotmail.msn.co...s/MsnPUpld.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\ARCHIV~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: !SASWinLogon - C:\Archivos de programa\SUPERAntiSpyware\SASWINLO.DLL O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Archivos de programa\Ares\chatServer.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Archivos de programa\Grisoft\AVG Anti-Spyware 7.5\guard.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVG7\avgemc.exe O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe -- End of file - 11304 bytes |
|
     |
| Sponsored Links |
|
07-01-2007, 12:50 PM
|
#2 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,246
OS: N/A
|
Re: Need help here msn virus - Log
Before fixing anything, Please download the Suspicious File Packer → http://www.safer-networking.org/files/sfp.zip
Unzip it to the desktop and run it. Paste the following list of filepaths into the Suspicious File Packer window: C:\windows\winvhost2.exe C:\WINDOWS\system32\JVM0.exe Allow SFP to pack the files. This will generate a CAB archive on your desktop. Please submit it to this site → http://www.bleepingcomputer.com/subm....php?channel=4 Please include a link to this topic in the message. The file must be uploaded before proceeding to the next step. --------------- Do a HijackThis scan & place a check next to these items and select "Fix checked": F2 - REG:system.ini: Shell=explorer.exe c:\windows\winvhost2.exe O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [JVM0] C:\WINDOWS\system32\JVM0.exe --------------- Download & save this file to Desktop -> http://download.bleepingcomputer.com...a/ComboFix.exe Open notepad and copy/paste the text in the quotebox below into it: Code:
File:: C:\windows\winvhost2.exe C:\WINDOWS\system32\JVM0.exe Folder:: Driver:: Registry::  Refering to the picture above, drag ComboFix-Do.txt into ComboFix.exe Then post the resultant log --------------- Please perform an online scan using Internet Explorer at http://www.kaspersky.com/virusscanner Answer Yes, when prompted to install an ActiveX component.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%. --------------- In your next post, please include fresh logs from:
__________________
|
|
|
|
|
07-01-2007, 06:44 PM
|
#3 (permalink) |
|
Registered User
Join Date: Sep 2005
Posts: 8
OS: xp
|
Re: Need help here msn virus - Log
This is the combo fix report
"Vaaaron" - 2007-07-01 22:41:51 - ComboFix 07-07-02.3 - Service Pack 2 Command switches used :: C:\Documents and Settings\Vaaaron\Escritorio\ComboFix-Do.txt ((((((((((((((((((((((((( Files Created from 2007-06-02 to 2007-07-02 ))))))))))))))))))))))))))))))) 2007-07-01 22:39 49,152 --a------ C:\WINDOWS\nircmd.exe 2007-07-01 16:09 <DIR> d-------- C:\WINDOWS\system32\ActiveScan 2007-07-01 16:09 <DIR> d-------- C:\WINDOWS\LastGood 2007-06-30 13:52 <DIR> d-------- C:\Archivos de programa\CCleaner 2007-06-30 13:45 <DIR> d-------- C:\DOCUME~1\Vaaaron\DATOSD~1\SUPERAntiSpyware.com 2007-06-30 13:45 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATOSD~1\SUPERAntiSpyware.com 2007-06-30 13:45 <DIR> d-------- C:\Archivos de programa\SUPERAntiSpyware 2007-06-30 13:45 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Wise Installation Wizard 2007-06-30 13:38 <DIR> d-------- C:\Archivos de programa\FileASSASSIN 2007-06-28 21:03 <DIR> d-------- C:\Archivos de programa\The All-Seeing Eye 2007-06-28 20:58 30,240 --a------ C:\Archivos de programa\SETUP.EXE 2007-06-28 20:57 231,936 --a------ C:\WINDOWS\system32\SNWValid.dll 2007-06-28 20:57 1,022,976 --a------ C:\WINDOWS\system32\SierraNW.dll 2007-06-28 20:57 <DIR> d-------- C:\Archivos de programa\Sierra On-Line 2007-06-28 20:57 <DIR> d-------- C:\Archivos de programa\Half-Life 2007-06-27 22:35 <DIR> d-------- C:\WINDOWS\Logo Design Studio Pro 2007-06-27 22:35 <DIR> d-------- C:\Archivos de programa\Logo Design Studio Pro 2007-06-26 16:29 <DIR> d-------- C:\Archivos de programa\ASIO4ALL v2 2007-06-26 16:15 16 --a------ C:\WINDOWS\system32\msvcsv60.dll 2007-06-26 16:15 16 --a------ C:\WINDOWS\msocreg32.dat 2007-06-25 09:04 81,768 --a------ C:\WINDOWS\system32\xinput1_3.dll 2007-06-25 09:04 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll 2007-06-25 09:04 443,752 --a------ C:\WINDOWS\system32\d3dx10_34.dll 2007-06-25 09:04 443,752 --a------ C:\WINDOWS\system32\d3dx10_33.dll 2007-06-25 09:04 3,497,832 --a------ C:\WINDOWS\system32\d3dx9_34.dll 2007-06-25 09:04 3,495,784 --a------ C:\WINDOWS\system32\d3dx9_33.dll 2007-06-25 09:04 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2007-06-25 09:04 266,088 --a------ C:\WINDOWS\system32\xactengine2_8.dll 2007-06-25 09:04 261,480 --a------ C:\WINDOWS\system32\xactengine2_7.dll 2007-06-25 09:04 255,848 --a------ C:\WINDOWS\system32\xactengine2_6.dll 2007-06-25 09:04 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2007-06-25 09:04 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll 2007-06-25 09:04 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll 2007-06-25 09:04 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll 2007-06-25 09:04 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll 2007-06-25 09:04 18,280 --a------ C:\WINDOWS\system32\x3daudio1_2.dll 2007-06-25 09:04 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2007-06-25 09:04 1,124,720 --a------ C:\WINDOWS\system32\D3DCompiler_34.dll 2007-06-25 09:04 1,123,696 --a------ C:\WINDOWS\system32\D3DCompiler_33.dll 2007-06-25 09:04 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2007-06-25 09:03 <DIR> d-------- C:\Archivos de programa\id Software 2007-06-24 23:21 <DIR> d-------- C:\DOCUME~1\Vaaaron\DATOSD~1\IGN_DLM 2007-06-24 23:21 <DIR> d-------- C:\Archivos de programa\IGN 2007-06-24 02:24 <DIR> d-------- C:\DOCUME~1\Vaaaron\DATOSD~1\SecondLife 2007-06-24 02:24 <DIR> d-------- C:\Archivos de programa\SecondLife 2007-06-24 01:14 32,768 --a------ C:\WINDOWS\system32\LogLCD.dll 2007-06-21 22:00 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\DATOSD~1\Logitech 2007-06-21 22:00 <DIR> d-------- C:\Archivos de programa\Logitech 2007-06-21 22:00 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Logitech 2007-06-20 11:46 <DIR> d-------- C:\WINDOWS\Flash Menu Factory 2007-06-20 11:41 <DIR> d-------- C:\WINDOWS\SxsCaPendDel 2007-06-20 11:40 <DIR> d-------- C:\Archivos de programa\Metronomo 2007-06-19 11:25 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll 2007-06-19 11:25 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll 2007-06-18 21:31 <DIR> d-------- C:\Archivos de programa\SeaStorm 3D Screensaver 2007-06-18 21:25 2 --a------ C:\WINDOWS\system32\drivers\vim.sys 2007-06-12 21:29 23,552 --a------ C:\WINDOWS\system32\drivers\habu.sys 2007-06-12 21:29 14,592 --a------ C:\WINDOWS\system32\drivers\USBICP.sys 2007-06-12 21:29 <DIR> d-------- C:\Archivos de programa\Razer 2007-06-12 20:24 21,504 --a------ C:\WINDOWS\system32\hidserv.dll 2007-06-12 20:24 14,976 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys 2007-06-10 17:44 <DIR> d-------- C:\Archivos de programa\Anim-FX 2007-06-10 15:37 9,907,200 --a------ C:\WINDOWS\system32\Koi Fish 3D Screensaver.exe 2007-06-10 15:37 769,536 --a------ C:\WINDOWS\system32\Koi_Fish_3D_Screensaver.scr 2007-06-10 15:37 <DIR> d-------- C:\Archivos de programa\Koi Fish 3D Screensaver 2007-06-10 13:43 <DIR> d-------- C:\Archivos de programa\Amara - Flash Menu Builder 2007-06-10 13:18 <DIR> d-------- C:\Archivos de programa\eMule 2007-06-07 00:52 <DIR> d-------- C:\DOCUME~1\Vaaaron\DATOSD~1\teamspeak2 2007-06-07 00:52 <DIR> d-------- C:\Archivos de programa\Teamspeak 2007-06-06 17:55 93,664 -ra------ C:\WINDOWS\QTW16DEL.EXE 2007-06-06 17:55 92,208 -ra------ C:\WINDOWS\system\WING.DLL 2007-06-06 17:55 8,304 -ra------ C:\WINDOWS\system\QTHNDLR.DLL 2007-06-06 17:55 77,664 -ra------ C:\WINDOWS\system\IR21.DLL 2007-06-06 17:55 74,496 -ra------ C:\WINDOWS\PLAYER.EXE 2007-06-06 17:55 73,712 -ra------ C:\WINDOWS\system\QTOLE.DLL 2007-06-06 17:55 7,168 --a------ C:\WINDOWS\system\DISPDIB.DLL 2007-06-06 17:55 61,568 -ra------ C:\WINDOWS\VIEWER.EXE 2007-06-06 17:55 57,328 --a------ C:\WINDOWS\system\OLE2CONV.DLL 2007-06-06 17:55 51,712 --a------ C:\WINDOWS\system\OLE2PROX.DLL 2007-06-06 17:55 50,016 -ra------ C:\WINDOWS\system\IYVU9.DLL 2007-06-06 17:55 49,616 -ra------ C:\WINDOWS\system\MSACM.DLL 2007-06-06 17:55 429,424 -ra------ C:\WINDOWS\system\QTIM.DLL 2007-06-06 17:55 4,320 -ra------ C:\WINDOWS\system\MCIQTENU.DLL 2007-06-06 17:55 4,176 -ra------ C:\WINDOWS\system\QTNOTIFY.EXE 2007-06-06 17:55 329,744 --a------ C:\WINDOWS\system\WINHLP32.EXE 2007-06-06 17:55 304,640 --a------ C:\WINDOWS\system\OLE2.DLL 2007-06-06 17:55 29,184 --a------ C:\WINDOWS\system\WINMM16.DLL 2007-06-06 17:55 28,113 --a------ C:\WINDOWS\system\OLE2.REG 2007-06-06 17:55 2,041,344 -ra------ C:\WINDOWS\QTINSTAL.EXE 2007-06-06 17:55 188,960 -ra------ C:\WINDOWS\system\WINGDE.DLL 2007-06-06 17:55 177,824 --a------ C:\WINDOWS\system\TYPELIB.DLL 2007-06-06 17:55 17,536 -ra------ C:\WINDOWS\VIEWENU.DLL 2007-06-06 17:55 167,424 --a------ C:\WINDOWS\system\WIN32S16.DLL 2007-06-06 17:55 165,008 --a------ C:\WINDOWS\system\OLE2DISP.DLL 2007-06-06 17:55 16,928 -ra------ C:\WINDOWS\PLAYENU.DLL 2007-06-06 17:55 157,696 --a------ C:\WINDOWS\system\STORAGE.DLL 2007-06-06 17:55 152,976 --a------ C:\WINDOWS\system\OLE2NLS.DLL 2007-06-06 17:55 151,056 -ra------ C:\WINDOWS\system\IR32.DLL 2007-06-06 17:55 14,544 -ra------ C:\WINDOWS\system\QTIMCMGR.DLL 2007-06-06 17:55 14,208 --a------ C:\WINDOWS\system\CTL3D.DLL (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) 2007-12-11 07:59:40 33,792 ----a-w C:\WINDOWS\system32\drivers\cledx.sys 2007-12-09 03:32:44 487,424 ----a-w C:\WINDOWS\system32\msvcp70.dll 2007-12-09 03:32:44 344,064 ----a-w C:\WINDOWS\system32\msvcr70.dll 2007-12-09 03:32:40 87,040 ----a-w C:\WINDOWS\system32\ra32sipr.dll 2007-12-09 03:32:40 85,504 ----a-w C:\WINDOWS\system32\encdnet.dll 2007-12-09 03:32:40 81,920 ----a-w C:\WINDOWS\system32\ra3214_4.dll 2007-12-09 03:32:40 72,704 ----a-w C:\WINDOWS\system32\ra3228_8.dll 2007-12-09 03:32:40 61,952 ----a-w C:\WINDOWS\system32\decdnet.dll 2007-12-09 03:32:40 487,936 ----a-w C:\WINDOWS\system32\rmbe3260.dll 2007-12-09 03:32:40 352,768 ----a-w C:\WINDOWS\system32\pngu3263.dll 2007-12-09 03:32:40 21,504 ----a-w C:\WINDOWS\system32\ra32dnet.dll 2007-12-09 03:32:40 131,072 ----a-w C:\WINDOWS\system32\pneng50.dll 2007-12-09 03:32:40 130,560 ----a-w C:\WINDOWS\system32\pnc3250.dll 2007-07-01 19:31:13 -------- d-----w C:\Archivos de programa\Widgets 2007-07-01 19:30:13 -------- d-----w C:\Archivos de programa\MSN Messenger 2007-07-01 19:19:00 -------- d-----w C:\Archivos de programa\DAP 2007-06-30 19:45:46 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\Babylon 2007-06-28 03:52:08 -------- d-----w C:\Archivos de programa\dBpowerAMP 2007-06-27 21:29:47 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\Skype 2007-06-25 12:04:09 -------- d--h--w C:\Archivos de programa\InstallShield Installation Information 2007-06-23 15:45:27 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\AdobeUM 2007-06-20 15:22:33 -------- d-----w C:\Archivos de programa\ABF software 2007-06-13 15:24:36 -------- d-----w C:\Archivos de programa\FlashFXP 2007-06-03 05:47:56 -------- d-----w C:\Archivos de programa\Garritan Personal Orchestra 2007-05-25 16:25:03 -------- d-----w C:\Archivos de programa\Sony 2007-05-24 18:56:20 63,040 ----a-w C:\WINDOWS\system32\pnkbstra.exe 2007-05-24 01:21:11 -------- d-----w C:\Archivos de programa\Archivos comunes\InstallShield 2007-05-24 01:20:37 81,442 ----a-w C:\WINDOWS\system32\perfc00A.dat 2007-05-24 01:20:37 462,404 ----a-w C:\WINDOWS\system32\perfh00A.dat 2007-05-24 01:11:37 -------- d-----w C:\Archivos de programa\Steinberg 2007-05-24 01:11:02 -------- d-----w C:\Archivos de programa\IPA93 2007-05-24 01:08:43 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\Sony 2007-05-24 01:01:22 143,360 ----a-w C:\WINDOWS\system32\SpoonUninstall.exe 2007-05-24 01:01:22 1,981 ----a-w C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Mp3 Blade Codec.dat 2007-05-24 01:00:14 67,584 ----a-w C:\WINDOWS\system32\xanalyze.dll 2007-05-24 01:00:14 14,860 ----a-w C:\WINDOWS\system32\SpoonUninstall-dBpowerAMP Music Converter.dat 2007-05-23 22:32:28 -------- d-----w C:\Archivos de programa\MixMeister BPM Analyzer 2007-05-23 20:24:52 -------- d-----w C:\Archivos de programa\Babylon 2007-05-22 01:25:22 -------- d-----w C:\Archivos de programa\QuickTime 2007-05-22 01:24:47 28,672 ----a-w C:\WINDOWS\system32\qttask.exe 2007-05-20 17:58:40 -------- d-----w C:\Archivos de programa\Skype 2007-05-20 17:58:37 -------- d-----w C:\Archivos de programa\Archivos comunes\Skype 2007-05-20 17:17:25 -------- d-----w C:\Archivos de programa\Microsoft Works 2007-05-20 17:17:16 -------- d-----w C:\Archivos de programa\MSBuild 2007-05-20 17:16:22 -------- d-----w C:\Archivos de programa\Microsoft.NET 2007-05-20 17:14:17 -------- d-----w C:\Archivos de programa\Microsoft Visual Studio 8 2007-05-19 16:08:15 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\Ahead 2007-05-19 16:07:42 -------- d-----w C:\Archivos de programa\Nero 2007-05-19 16:07:42 -------- d-----w C:\Archivos de programa\Archivos comunes\Ahead 2007-05-19 15:53:32 -------- d-----w C:\Archivos de programa\Ares 2007-05-19 15:52:10 -------- d-----w C:\Archivos de programa\Archivos comunes\Adobe Systems Shared 2007-05-19 15:27:35 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\Steinberg 2007-05-19 14:46:47 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\ACD Systems 2007-05-19 14:41:03 -------- d-----w C:\Archivos de programa\Archivos comunes\ACD Systems 2007-05-19 14:41:03 -------- d-----w C:\Archivos de programa\ACD Systems 2007-05-19 14:41:02 9,856 ----a-w C:\WINDOWS\system32\drivers\pfc.sys 2007-05-19 14:36:21 -------- d-----w C:\Archivos de programa\Winamp 2007-05-19 06:32:52 -------- d-----w C:\Archivos de programa\EA GAMES 2007-05-19 06:29:22 -------- d-----w C:\Archivos de programa\epson 2007-05-18 23:11:50 -------- d-----w C:\Archivos de programa\DAEMON Tools 2007-05-18 23:11:49 223,128 ----a-w C:\WINDOWS\system32\drivers\dtscsi.sys 2007-05-18 23:10:15 642,560 ----a-w C:\WINDOWS\system32\drivers\sptd.sys 2007-05-18 23:10:14 96,256 ----a-w C:\WINDOWS\system32\drivers\sptd9805.sys 2007-05-18 23:00:44 -------- d-----w C:\Archivos de programa\Yahoo! 2007-05-18 22:15:34 -------- d-----w C:\DOCUME~1\Vaaaron\DATOSD~1\ATI 2007-05-18 22:14:24 -------- d-----w C:\Archivos de programa\ATI Technologies 2007-05-18 22:02:29 -------- d-----w C:\Archivos de programa\Creative 2007-05-18 20:40:53 -------- d-----w C:\Archivos de programa\microsoft frontpage 2007-05-18 20:40:35 0 --sha-r C:\MSDOS.SYS 2007-05-18 20:40:35 0 --sha-r C:\IO.SYS 2007-05-18 20:40:35 0 ----a-w C:\CONFIG.SYS 2007-05-18 20:40:35 0 ----a-w C:\AUTOEXEC.BAT 2007-05-18 20:39:29 -------- d--h--w C:\Archivos de programa\WindowsUpdate 2007-05-18 20:38:40 -------- d-----w C:\Archivos de programa\Archivos comunes\MSSoap 2007-05-18 20:38:32 -------- d-----w C:\Archivos de programa\Movie Maker 2007-05-18 20:37:46 21,900 ----a-w C:\WINDOWS\system32\emptyregdb.dat 2007-05-18 20:37:24 -------- d-----w C:\Archivos de programa\Online Services 2007-05-18 20:37:20 -------- d-----w C:\Archivos de programa\Messenger 2007-05-18 20:37:15 -------- d-----w C:\Archivos de programa\MSN Gaming Zone 2007-05-18 20:37:07 -------- d-----w C:\Archivos de programa\Windows NT 2007-05-18 16:32:16 -------- d-----w C:\Archivos de programa\Archivos comunes\ODBC 2007-05-18 16:32:14 -------- d-----w C:\Archivos de programa\Archivos comunes\SpeechEngines ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0000CC75-ACF3-4cac-A0A9-DD3868E06852}] 2007-05-19 05:07 98304 --a------ C:\Archivos de programa\DAP\DAPBHO.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}] 2007-05-10 16:09 722472 --a------ C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}] 2006-10-27 00:48 2210608 --a------ C:\ARCHIV~1\MICROS~2\Office12\GRA8E1~1.DLL [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTSysVol"="C:\Archivos de programa\Creative\SBAudigy\Surround Mixer\CTSysVol.exe" [2005-02-15 16:10] "P17Helper"="P17.dll" [2005-05-03 08:38 C:\WINDOWS\system32\P17.dll] "GrooveMonitor"="C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47] "Babylon Client"="C:\Archivos de programa\Babylon\Babylon-Pro\Babylon.exe" [2007-05-23 17:30] "Habu"="C:\Archivos de programa\Razer\Habu\razerhid.exe" [2006-08-23 11:20] "Launch LCDMon"="C:\Archivos de programa\Archivos comunes\Logitech\LCD Manager\lcdmon.exe" [2007-04-26 16:54] "Launch LGDCore"="C:\Archivos de programa\Archivos comunes\Logitech\G-series Software\LGDCore.exe" [2007-04-26 17:22] "Acrobat Assistant 7.0"="C:\Archivos de programa\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2006-01-12 20:52] "AVG7_CC"="C:\ARCHIV~1\Grisoft\AVG7\avgcc.exe" [2007-06-30 01:15] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "StartCCC"="C:\Archivos de programa\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 12:35] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 10:42] "igndlm.exe"="C:\Archivos de programa\IGN\Download Manager\DLM.exe" [2007-03-05 13:57] "SUPERAntiSpyware"="C:\Archivos de programa\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-30 14:01] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="C:\Archivos de programa\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll" [2006-09-28 11:13] "{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"="C:\ARCHIV~1\MICROS~2\Office12\GRA8E1~1.DLL" [2006-10-27 00:48] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"="C:\Archivos de programa\SUPERAntiSpyware\SASSEH.DLL" [2006-12-20 12:55] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] C:\Archivos de programa\SUPERAntiSpyware\SASWINLO.DLL ************************************************************************** catchme 0.3.721 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net Rootkit scan 2007-07-01 22:43:09 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** Completion time: 2007-07-01 22:43:42 --- E O F --- |
|
|
|
|
07-01-2007, 06:56 PM
|
#4 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,246
OS: N/A
|
Re: Need help here msn virus - Log
Please perform an online scan using Internet Explorer at http://www.kaspersky.com/virusscanner
Answer Yes, when prompted to install an ActiveX component.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.
__________________
|
|
|
|
|
07-01-2007, 10:31 PM
|
#5 (permalink) |
|
Registered User
Join Date: Sep 2005
Posts: 8
OS: xp
|
Re: Need help here msn virus - Log
Here is my log SubS
Thx so much for your time =) ------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER REPORT Monday, July 02, 2007 2:30:35 AM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 2/07/2007 Kaspersky Anti-Virus database records: 356332 ------------------------------------------------------------------------------- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: false Scan Target - My Computer: A:\ C:\ D:\ E:\ F:\ Scan Statistics: Total number of scanned objects: 92960 Number of viruses found: 0 Number of infected objects: 0 / 0 Number of suspicious objects: 0 Duration of the scan process: 01:05:53 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Datos de programa\avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Datos de programa\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Media Player\CurrentDatabase_219.wmdb Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Messenger\hernanbovo@hotmail.com\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Messenger\hernanbovo@hotmail.com\SharingMetadata\pending.dat Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Messenger\hernanbovo@hotmail.com\SharingMetadata\Working\database_F6D4_C7EA_D4C7_AB67\dfsr.db Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Messenger\hernanbovo@hotmail.com\SharingMetadata\Working\database_F6D4_C7EA_D4C7_AB67\fsr.log Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Messenger\hernanbovo@hotmail.com\SharingMetadata\Working\database_F6D4_C7EA_D4C7_AB67\fsrtmp.log Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Messenger\hernanbovo@hotmail.com\SharingMetadata\Working\database_F6D4_C7EA_D4C7_AB67\tmp.edb Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\hernanbovo@hotmail.com\real\members.stg Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Microsoft\Windows Live Contacts\hernanbovo@hotmail.com\shadow\members.stg Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Datos de programa\Yahoo\Widget Engine\Widgets DB\widgets.db Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Historial\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Historial\History.IE5\MSHist012007070220070703\index.dat Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Temp\~DF8FDC.tmp Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Temp\~DFCF3.tmp Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Temp\~DFD41.tmp Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Temp\~DFF6A9.tmp Object is locked skipped C:\Documents and Settings\Vaaaron\Configuración local\Temp\~DFF6C9.tmp Object is locked skipped C:\Documents and Settings\Vaaaron\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Vaaaron\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Vaaaron\ntuser.dat.LOG Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped C:\WINDOWS\system32\config\OSession.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\dtscsi.sys Object is locked skipped C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped C:\WINDOWS\system32\drivers\sptd9805.sys Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed. |
|
|
|
|
07-02-2007, 12:32 AM
|
#6 (permalink) |
|
Asst Manager Security, Expert Analyst, Moderator, Security Team; Rangemaster, Moderator, TSF Academy
Join Date: May 2005
Posts: 23,246
OS: N/A
|
Re: Need help here msn virus - Log
Now that your system is clean, kindly follow these simple steps in order to keep your computer clean and secure:
Update all these programs regularly. Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released. Follow this list and your potential for being infected again will reduce dramatically. Here are some additional utilities that will further enhance your safety.
To find out more information about how you got infected in the first place and some great guidelines to follow to prevent future infections you can read this article by Tony Klein - http://computercops.biz/postlite7736-.html After doing all these, your system will be optimised against future threats. It's okay to delete the Hijack This folder in a couple weeks if everything is working okay. Have a safe & happy computing day.  Please respond to this thread one more time so we can mark this thread as resolved.
__________________
|
|
|
|
| Thread Tools | |
|
|
