hello, this is my first post here, and it juuust might be my last on this computer.
it seems that it's coming to the end for this thing. there's definitely a huge amount of viruses and spyware and junk on it.
it's a windows xp, sp2, compaq presario sr2010nx. i don't know what other details you need...except for the symptoms i guess.
here they are, as i encountered them...
-at first, the computer was just running really slow.
-aol wouldn't open up. it said something like "low memory" or something, but i was not running anything else at the time. luckily, before this all happened, i had downloaded a win xp startup disc, which took care of the aol problem. but it got a lot worse.
-sometimes, the computer just doesn't start. i had to restart it a couple times to get it to startup.
-explorer.exe sometimes likes to close and open back up again for no reason. sometimes, it does not open back up, and i have to Run it myself.
-on startup, it says "explorer.exe - Bad Image" or something of the sort.
-then when it starts up, it says jkkjk.exe not found.
-about a week ago, desktop buttons for "uncensored porn" and "bsdm galleries" (probably the same thing) appeared.
-just today now, there's taskbar icon things for "windows security alerts", yellow triangles with a ! in it.
-POPUPS ALL OVER THE PLACE, again, this just started happening today.
that's all i can think of for now. it's very, very hard to even do anything on this computer anymore. i would do a system recovery, but when i do, it comes up a blue screen and says "windows logon process terminated unexpectedly" and then a message. and it sits there, and i have to shut the power completely off and start it up normally. system restore doesn't work either. so if anything, i would like to just do a complete system recovery...if you can get it to work...
thanks in advance to anyone that replies.
Full Version: Computer's About To Die--spyware...
Hello and welcome ,please do this first.
NOTE: all blue wording are links to instructions or tools
First you will need to follow the instructions in our Tutorial
How to remove the Smitfraud / Generic Zlob
Now Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..
DO NOT run yet.
Open SUPER from icon and install and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.
Click the "Close" button to leave the control center screen and exit the program.
DO NOT run yet.
Now reboot into Safe Mode:
Safe Mode Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.
Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox or the Opera browser click on that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.
To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.
Please ask any needed questions,post logs and Let us know how your PC in running now.
NOTE: all blue wording are links to instructions or tools
First you will need to follow the instructions in our Tutorial
How to remove the Smitfraud / Generic Zlob
Now Download Attribune's ATF Cleaner and then SUPERAntiSpyware , Free Home Version. Save both to desktop ..
DO NOT run yet.
Open SUPER from icon and install and Update it
Under Scanner Options make sure the following are checked (leave all others unchecked):
Close browsers before scanning.
Scan for tracking cookies.
Terminate memory threats before quarantining.
Click the "Close" button to leave the control center screen and exit the program.
DO NOT run yet.
Now reboot into Safe Mode:
Safe Mode Using the F8 Method
Restart your computer.
When the machine first starts again it will generally list some equipment that is installed in your machine, amount of memory, hard drives installed etc. At this point you should gently tap the F8 key repeatedly until you are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Then press enter on your keyboard to boot into Safe Mode.
Double-click ATF-Cleaner.exe to run the program.
Under Main "Select Files to Delete" choose: Select All.
Click the Empty Selected button.
If you use Firefox or the Opera browser click on that browser at the top and choose: Select All
Click the Empty Selected button.
If you would like to keep your saved passwords, please click No at the prompt.
Click Exit on the Main menu to close the program.
NOW Scan with SUPER
Open from the desktop icon or the program Files list
On the left, make sure you check C:\Fixed Drive.
Perform a Complete scan. After scan,Verify they are all checked.
Click OK on the summary screen to quarantine all found items.
If asked if you want to reboot, click "Yes" and reboot normally.
To retrieve the removal information after reboot, launch SUPERAntispyware again.
Click Preferences, then click the Statistics/Logs tab.
Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
If there are several logs, click the current dated log and press View log.
A text file will open in your default text editor.
Please copy and paste the Scan Log results in your next reply.
Click Close to exit the program.
Please ask any needed questions,post logs and Let us know how your PC in running now.
well, here's the log. the scan didn't really do much. aol still doesn't start without the startup disc, it's still displaying that "windows has detected spyware infection" with the yellow triangle in the taskbar, still pop ups, the only thing i noticed is that it started up a little quicker.
the log:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 02/10/2008 at 08:27 AM
Application Version : 3.9.1008
Core Rules Database Version : 3399
Trace Rules Database Version: 1391
Scan type : Complete Scan
Total Scan Time : 05:15:37
Memory items scanned : 172
Memory threats detected : 3
Registry items scanned : 7060
Registry threats detected : 36
File items scanned : 143577
File threats detected : 266
Adware.Vundo-Variant/PolyMorph-A
C:\WINDOWS\SYSTEM32\DDCCBAA.DLL
C:\WINDOWS\SYSTEM32\DDCCBAA.DLL
Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\ddccbaa
C:\WINDOWS\SYSTEM32\SSQPQRO.DLL
Adware.Vundo Variant
C:\WINDOWS\SYSTEM32\JKKJK.DLL
C:\WINDOWS\SYSTEM32\JKKJK.DLL
HKLM\Software\Classes\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}
HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}
HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}\InprocServer32
HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}\InprocServer32
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}\InprocServer32#ThreadingModel
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FA16FE06-B462-470E-9653-79C54B1871FF}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{FA16FE06-B462-470E-9653-79C54B1871FF}
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}
C:\WINDOWS\SYSTEM32\VTUTT.DLL
Trojan.Vundo/Variant-Installer/A
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
[HostManager] C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE.EXE
[AOLDialer] C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE
[SUPERAntiSpyware] C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\MSCONFIG.EXE
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE
C:\PROGRAM FILES\ACCELERATION SOFTWARE\ANTI-VIRUS\STOPSIGNAV.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOL .EXE
C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE .EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL .EXE
C:\PROGRAM FILES\EACCELERATION\STATION\STATION.EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE
C:\WINDOWS\Prefetch\AOLDIAL.EXE-13C23121.pf
C:\WINDOWS\Prefetch\AOLSOFTWARE.EXE-103E22F7.pf
C:\WINDOWS\Prefetch\SUPERANTISPYWARE.EXE-07994D9B.pf
Worm.Rbot Variant
[Spoolsv] C:\WINDOWS\SYSTEM32\SPOOLVS.EXE
C:\WINDOWS\SYSTEM32\SPOOLVS.EXE
Trojan.Vundo/Variant-Installer
[load] C:\WINDOWS\SYSTEM32\JKKJK.EXE
C:\WINDOWS\SYSTEM32\JKKJK.EXE
[load] C:\WINDOWS\SYSTEM32\JKKJK.EXE
[load] C:\WINDOWS\SYSTEM32\JKKJK.EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMP\RCX10.TMP
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMP\RCXB.TMP
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\MY DOCUMENTS\OTHER STUFF\JKKJK.EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE
C:\WINDOWS\SYSTEM32\IEUPDATES.EXE
C:\WINDOWS\SYSTEM32\PMNNM.EXE
C:\WINDOWS\SYSTEM32\RCX12.TMP
C:\WINDOWS\SYSTEM32\RCX13.TMP
C:\WINDOWS\SYSTEM32\RCX14.TMP
C:\WINDOWS\SYSTEM32\RCX15C9.TMP
C:\WINDOWS\SYSTEM32\RCX16.TMP
C:\WINDOWS\SYSTEM32\RCX17.TMP
C:\WINDOWS\SYSTEM32\RCX19.TMP
C:\WINDOWS\SYSTEM32\RCX19F2.TMP
C:\WINDOWS\SYSTEM32\RCX1B.TMP
C:\WINDOWS\SYSTEM32\RCX1D.TMP
C:\WINDOWS\SYSTEM32\RCX20.TMP
C:\WINDOWS\SYSTEM32\RCX2F.TMP
C:\WINDOWS\SYSTEM32\RCX384.TMP
C:\WINDOWS\SYSTEM32\RCX38A4.TMP
C:\WINDOWS\SYSTEM32\RCX6F7A.TMP
C:\WINDOWS\SYSTEM32\RCXD.TMP
C:\WINDOWS\SYSTEM32\RCXD9E.TMP
C:\WINDOWS\SYSTEM32\SSTQR.EXE
C:\WINDOWS\Prefetch\FINDFAST .EXE-2689B7E5.pf
C:\WINDOWS\Prefetch\FINDFAST .EXE-178209D4.pf
C:\WINDOWS\Prefetch\IEUPDATES.EXE-04E09A91.pf
C:\WINDOWS\Prefetch\JKKJK.EXE-332A4B1F.pf
Adware.Vundo-Variant/Small-A
HKLM\Software\Classes\CLSID\{44516c8c-2ead-4a71-bb41-652785629fba}
HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}
HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}\InprocServer32
HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}\InprocServer32#ThreadingModel
C:\WINDOWS\SYSTEM32\TYJRNOQH.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44516c8c-2ead-4a71-bb41-652785629fba}
C:\WINDOWS\SYSTEM32\GPGGBULP.DLL
C:\WINDOWS\SYSTEM32\KCVQBWXA.DLL
C:\WINDOWS\SYSTEM32\LOBJUQXQ.DLL
C:\WINDOWS\SYSTEM32\RDVJYQEE.DLL
C:\WINDOWS\SYSTEM32\SNJUWIQW.DLL
C:\WINDOWS\SYSTEM32\TENGIBHR.DLL
C:\WINDOWS\SYSTEM32\TMSUXUIM.DLL
C:\WINDOWS\SYSTEM32\TSTMKMDR.DLL
C:\WINDOWS\SYSTEM32\VSBTOEIM.DLL
C:\WINDOWS\SYSTEM32\YLKWSSBC.DLL
Trojan.Unknown Origin
HKLM\SOFTWARE\Microsoft\MSSMGR
HKLM\SOFTWARE\Microsoft\MSSMGR#Brnd
HKLM\SOFTWARE\Microsoft\MSSMGR#PSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#SSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#SCLIST
HKLM\SOFTWARE\Microsoft\MSSMGR#SSLIST
HKLM\SOFTWARE\Microsoft\MSSMGR#BSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#Data
HKLM\SOFTWARE\Microsoft\MSSMGR#LSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#MSLIST
Malware.System Defender
C:\Program Files\SystemDefender
Malware.LocusSoftware Inc/PCPrivacyTool
C:\Documents and Settings\Compaq_Owner\Application Data\ultra\uninstall.bat
C:\Documents and Settings\Compaq_Owner\Application Data\ultra
Trojan.ZenoSearch
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\AOL\C_AMERICA ONLINE 9.0\OPTCLEAN.EXE
C:\RECYCLER\S-1-5-21-972137851-1090960623-1148931742-1008\DC224.EXE
Adware.Tracking Cookie
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a.findarticles[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adopt.euroclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.associatedcontent[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bridgetrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.digitaljournal[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.expedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.linerider[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.mediamayhemcorp[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.movieweb[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pno[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.realtechnetwork[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.web.aol[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@clicksor[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.auctionworks[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.surfcounters[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@crackserialkeygen[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@drivecleaner[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wfk4eldpico.stats.esomniture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wgl4qlczehp.stats.esomniture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ecnext.advertserve[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-knightridder.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-myspaceinc.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-viacom.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findarticles[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@image.masterstats[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@indextools[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@keygen[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.hotels[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@partner2profit[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@phg.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@qnsr[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@richmedia.yahoo[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@scot.valueclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serialdevil[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serialsgalore[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sitestat.mayoclinic[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sound-taxi.crack.serial.keygen.ddlone[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.drivecleaner[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.sphere[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.sphere[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tracking.ezd3[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traffic.buyservices[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@valueclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@warezreleases[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@winantivirus[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.directnetadvertising[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.drivecleaner[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.fullreleases[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ad.yieldmanager[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adbrite[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adinterax[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adlegend[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adopt.euroclick[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adopt.specificclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adrevolver[3].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.addynamix[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.bridgetrack[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.pointroll[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adserver.activediner[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adserver[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@advertising[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@anad.tacoda[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@anat.tacoda[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@apmebf[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ar.atwola[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@atdmt[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@atwola[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@azjmp[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@bluestreak[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@bs.serving-sys[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@burstnet[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@casalemedia[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter.hitslink[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter7.sextracker[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@data3.perf.overture[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@doubleclick[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ehg-foxsports.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@enhance[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@gayteensex[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@goclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@medhelpinternational.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@media.medhelp[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@media6degrees[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@mediaplex[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@msnportal.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@overture[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@perf.overture[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@questionmarket[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@realmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@reunioncom.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@revsci[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@richmedia.yahoo[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@serving-sys[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@sextracker[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@specificclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@statcounter[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@statse.webtrendslive[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@synacor.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@tacoda[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@trafficmp[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@tribalfusion[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@www.burstnet[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@www.clickmanage[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@zedo[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@2o7[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@advertising[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@atdmt[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@atwola[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@cpvfeed[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@doubleclick[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@hotlog[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@questionmarket[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@realmedia[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@revsci[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@short-media[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@shortmedia.us.intellitxt[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@spylog[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@www.short-media[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@zedo[1].txt
Adware.Search2Find
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\6LW3MJQR\1202592936[1].EXE
C:\PROGRAM FILES\TMP554828.EXE
C:\PROGRAM FILES\TMP7367734.EXE
C:\WINDOWS\Prefetch\TMP554828.EXE-1F3C6331.pf
C:\WINDOWS\Prefetch\TMP7367734.EXE-10956F1C.pf
Malware.SpywareSheriff
C:\DOCUMENTS AND SETTINGS\GUEST.YOUR-D0F670B45A\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\NJQ8C4AG\SPYWARESHERIFF_SETUP[1].EXE
Adware.k8l
C:\PROGRAM FILES\COMMON FILES\RTENEFS.HTML
Trojan.Downloader-NoName
C:\PROGRAM FILES\TMP1645640.EXE
C:\PROGRAM FILES\TMP1646250.EXE
C:\PROGRAM FILES\TMP1647640.EXE
C:\PROGRAM FILES\TMP7364218.EXE
C:\PROGRAM FILES\TMP7364500.EXE
C:\PROGRAM FILES\TMP9128578.EXE
C:\WINDOWS\Prefetch\TMP1645640.EXE-3591BCCA.pf
C:\WINDOWS\Prefetch\TMP1646250.EXE-3558F141.pf
C:\WINDOWS\Prefetch\TMP1647640.EXE-3883A753.pf
C:\WINDOWS\Prefetch\TMP7364218.EXE-0B742A8F.pf
C:\WINDOWS\Prefetch\TMP7364500.EXE-1205FE08.pf
C:\WINDOWS\Prefetch\TMP9128578.EXE-3322C447.pf
Malware.Ultimate Defender
C:\PROGRAM FILES\UCLEANER_SETUP.EXE
C:\WINDOWS\Prefetch\UCLEANER_SETUP.EXE-1EF3F23D.pf
Trojan.Downloader-SpyTool
C:\VUNDOFIX BACKUPS\ADSPKHYD.DLL.BAD
C:\VUNDOFIX BACKUPS\CTUYYPBP.DLL.BAD
C:\VUNDOFIX BACKUPS\JYUFKWTC.DLL.BAD
C:\VUNDOFIX BACKUPS\MSCIJAGM.DLL.BAD
C:\VUNDOFIX BACKUPS\MXVAKRSI.DLL.BAD
C:\VUNDOFIX BACKUPS\NHBYIYVO.DLL.BAD
C:\VUNDOFIX BACKUPS\NIGSHXTR.DLL.BAD
C:\VUNDOFIX BACKUPS\PCBULLWL.DLL.BAD
C:\VUNDOFIX BACKUPS\PNGDUBPG.DLL.BAD
C:\VUNDOFIX BACKUPS\POVELURO.DLL.BAD
C:\VUNDOFIX BACKUPS\TYWCHGET.DLL.BAD
C:\VUNDOFIX BACKUPS\UGFGELDY.DLL.BAD
C:\VUNDOFIX BACKUPS\WVKNVWUA.DLL.BAD
C:\VUNDOFIX BACKUPS\XUXFKCEC.DLL.BAD
C:\VUNDOFIX BACKUPS\YYQPCWHA.DLL.BAD
Trojan.Downloader-Gen/HardFall
C:\VUNDOFIX BACKUPS\AWVTQ.DLL.BAD
Trojan.Downloader-Gen/LIB
C:\VUNDOFIX BACKUPS\HBMKAELK.DLL.BAD
Trojan.Unclassified/SysOld
C:\WINDOWS\111UNINST.EXE
Spyware.Melkosoft (CoolWebSearch Variant)
C:\WINDOWS\INSTALLER\{71F7149C-09BA-468B-B437-A22DA42185B8}\ZIP.DLL
C:\WINDOWS\INSTALLER\{9E0A8340-FF2A-45BC-9C70-B8CB250CE2EF}\ZIP.DLL
C:\WINDOWS\INSTALLER\{BB74A9C9-6178-4616-A236-85AACA174C93}\ZIP.DLL
C:\WINDOWS\INSTALLER\{BF04DDBB-0809-4264-87D6-9D00518E0AFA}\ZIP.DLL
C:\WINDOWS\INSTALLER\{D0DA0EAE-CA90-4A24-B644-EA6BCD111F20}\ZIP.DLL
C:\WINDOWS\INSTALLER\{D4998737-DFD7-476F-927B-93A6AA359D96}\ZIP.DLL
Trojan.Downloader-Gen/ASE
C:\WINDOWS\MS05274114209.EXE
Trojan.Unclassified/DRV-Slice
C:\WINDOWS\SYSTEM32\DRVPAS.DLL
Malware.WinAntiSpyware-Installer
C:\WINDOWS\SYSTEM32\DRVPASR.DLL
Trojan.Downloader-Gen/Suspicious
C:\WINDOWS\SYSTEM32\IEUPDATES .EXE
C:\WINDOWS\Prefetch\IEUPDATES .EXE-1397FE88.pf
Adware.Vundo Variant/Rel
C:\WINDOWS\SYSTEM32\KJKKJ.INI
Unclassified.Unknown Origin/System
C:\WINDOWS\SYSTEM32\UPDATE32.EXE
C:\WINDOWS\Prefetch\UPDATE32.EXE-211BE755.pf
Trojan.WinUpdate
C:\WINDOWS\SYSTEM32\WINUPDATE.EXE
C:\WINDOWS\Prefetch\WINUPDATE.EXE-0F50C4F5.pf
Trojan.Unclassifed/WowFX
C:\WINDOWS\SYSTEM32\WOWFX.DLL
Trojan.Downloader-XLIB
C:\WINDOWS\SYSTEM32\XLIBGFL254.DLL
Adware.OuterInfo-Installer
C:\WINDOWS\TEMP\WIN96D3.EXE
C:\WINDOWS\TEMP\WIN9EEE.EXE
Trojan.Downloader-Gen/Uni
C:\WINDOWS\UNI_EH10.EXE
the log:
SUPERAntiSpyware Scan Log
http://www.superantispyware.com
Generated 02/10/2008 at 08:27 AM
Application Version : 3.9.1008
Core Rules Database Version : 3399
Trace Rules Database Version: 1391
Scan type : Complete Scan
Total Scan Time : 05:15:37
Memory items scanned : 172
Memory threats detected : 3
Registry items scanned : 7060
Registry threats detected : 36
File items scanned : 143577
File threats detected : 266
Adware.Vundo-Variant/PolyMorph-A
C:\WINDOWS\SYSTEM32\DDCCBAA.DLL
C:\WINDOWS\SYSTEM32\DDCCBAA.DLL
Software\Microsoft\Windows NT\CurrentVersion\WinLogon\Notify\ddccbaa
C:\WINDOWS\SYSTEM32\SSQPQRO.DLL
Adware.Vundo Variant
C:\WINDOWS\SYSTEM32\JKKJK.DLL
C:\WINDOWS\SYSTEM32\JKKJK.DLL
HKLM\Software\Classes\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}
HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}
HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}\InprocServer32
HKCR\CLSID\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}\InprocServer32#ThreadingModel
HKLM\Software\Classes\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}\InprocServer32
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}\InprocServer32#ThreadingModel
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5EC1E1CB-6716-4DAB-A012-DAFAC6CAAC7A}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FA16FE06-B462-470E-9653-79C54B1871FF}
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks#{FA16FE06-B462-470E-9653-79C54B1871FF}
HKCR\CLSID\{FA16FE06-B462-470E-9653-79C54B1871FF}
C:\WINDOWS\SYSTEM32\VTUTT.DLL
Trojan.Vundo/Variant-Installer/A
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
[HostManager] C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE.EXE
[AOLDialer] C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL.EXE
[SUPERAntiSpyware] C:\PROGRAM FILES\SUPERANTISPYWARE\SUPERANTISPYWARE.EXE
C:\WINDOWS\PCHEALTH\HELPCTR\BINARIES\MSCONFIG.EXE
HKLM\Software\Microsoft\Windows\CurrentVersion\App Paths\MSCONFIG.EXE
C:\PROGRAM FILES\ACCELERATION SOFTWARE\ANTI-VIRUS\STOPSIGNAV.EXE
C:\PROGRAM FILES\AMERICA ONLINE 9.0\AOL .EXE
C:\PROGRAM FILES\COMMON FILES\AOL\1198532047\EE\AOLSOFTWARE .EXE
C:\PROGRAM FILES\COMMON FILES\AOL\ACS\AOLDIAL .EXE
C:\PROGRAM FILES\EACCELERATION\STATION\STATION.EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK .EXE
C:\PROGRAM FILES\QUICKTIME\QTTASK.EXE
C:\WINDOWS\Prefetch\AOLDIAL.EXE-13C23121.pf
C:\WINDOWS\Prefetch\AOLSOFTWARE.EXE-103E22F7.pf
C:\WINDOWS\Prefetch\SUPERANTISPYWARE.EXE-07994D9B.pf
Worm.Rbot Variant
[Spoolsv] C:\WINDOWS\SYSTEM32\SPOOLVS.EXE
C:\WINDOWS\SYSTEM32\SPOOLVS.EXE
Trojan.Vundo/Variant-Installer
[load] C:\WINDOWS\SYSTEM32\JKKJK.EXE
C:\WINDOWS\SYSTEM32\JKKJK.EXE
[load] C:\WINDOWS\SYSTEM32\JKKJK.EXE
[load] C:\WINDOWS\SYSTEM32\JKKJK.EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMP\RCX10.TMP
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMP\RCXB.TMP
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\MY DOCUMENTS\OTHER STUFF\JKKJK.EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\START MENU\PROGRAMS\STARTUP\FINDFAST .EXE
C:\WINDOWS\SYSTEM32\IEUPDATES.EXE
C:\WINDOWS\SYSTEM32\PMNNM.EXE
C:\WINDOWS\SYSTEM32\RCX12.TMP
C:\WINDOWS\SYSTEM32\RCX13.TMP
C:\WINDOWS\SYSTEM32\RCX14.TMP
C:\WINDOWS\SYSTEM32\RCX15C9.TMP
C:\WINDOWS\SYSTEM32\RCX16.TMP
C:\WINDOWS\SYSTEM32\RCX17.TMP
C:\WINDOWS\SYSTEM32\RCX19.TMP
C:\WINDOWS\SYSTEM32\RCX19F2.TMP
C:\WINDOWS\SYSTEM32\RCX1B.TMP
C:\WINDOWS\SYSTEM32\RCX1D.TMP
C:\WINDOWS\SYSTEM32\RCX20.TMP
C:\WINDOWS\SYSTEM32\RCX2F.TMP
C:\WINDOWS\SYSTEM32\RCX384.TMP
C:\WINDOWS\SYSTEM32\RCX38A4.TMP
C:\WINDOWS\SYSTEM32\RCX6F7A.TMP
C:\WINDOWS\SYSTEM32\RCXD.TMP
C:\WINDOWS\SYSTEM32\RCXD9E.TMP
C:\WINDOWS\SYSTEM32\SSTQR.EXE
C:\WINDOWS\Prefetch\FINDFAST .EXE-2689B7E5.pf
C:\WINDOWS\Prefetch\FINDFAST .EXE-178209D4.pf
C:\WINDOWS\Prefetch\IEUPDATES.EXE-04E09A91.pf
C:\WINDOWS\Prefetch\JKKJK.EXE-332A4B1F.pf
Adware.Vundo-Variant/Small-A
HKLM\Software\Classes\CLSID\{44516c8c-2ead-4a71-bb41-652785629fba}
HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}
HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}\InprocServer32
HKCR\CLSID\{44516C8C-2EAD-4A71-BB41-652785629FBA}\InprocServer32#ThreadingModel
C:\WINDOWS\SYSTEM32\TYJRNOQH.DLL
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{44516c8c-2ead-4a71-bb41-652785629fba}
C:\WINDOWS\SYSTEM32\GPGGBULP.DLL
C:\WINDOWS\SYSTEM32\KCVQBWXA.DLL
C:\WINDOWS\SYSTEM32\LOBJUQXQ.DLL
C:\WINDOWS\SYSTEM32\RDVJYQEE.DLL
C:\WINDOWS\SYSTEM32\SNJUWIQW.DLL
C:\WINDOWS\SYSTEM32\TENGIBHR.DLL
C:\WINDOWS\SYSTEM32\TMSUXUIM.DLL
C:\WINDOWS\SYSTEM32\TSTMKMDR.DLL
C:\WINDOWS\SYSTEM32\VSBTOEIM.DLL
C:\WINDOWS\SYSTEM32\YLKWSSBC.DLL
Trojan.Unknown Origin
HKLM\SOFTWARE\Microsoft\MSSMGR
HKLM\SOFTWARE\Microsoft\MSSMGR#Brnd
HKLM\SOFTWARE\Microsoft\MSSMGR#PSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#SSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#SCLIST
HKLM\SOFTWARE\Microsoft\MSSMGR#SSLIST
HKLM\SOFTWARE\Microsoft\MSSMGR#BSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#Data
HKLM\SOFTWARE\Microsoft\MSSMGR#LSTV
HKLM\SOFTWARE\Microsoft\MSSMGR#MSLIST
Malware.System Defender
C:\Program Files\SystemDefender
Malware.LocusSoftware Inc/PCPrivacyTool
C:\Documents and Settings\Compaq_Owner\Application Data\ultra\uninstall.bat
C:\Documents and Settings\Compaq_Owner\Application Data\ultra
Trojan.ZenoSearch
C:\DOCUMENTS AND SETTINGS\ALL USERS\APPLICATION DATA\AOL\C_AMERICA ONLINE 9.0\OPTCLEAN.EXE
C:\RECYCLER\S-1-5-21-972137851-1090960623-1148931742-1008\DC224.EXE
Adware.Tracking Cookie
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@a.findarticles[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adinterax[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@adopt.euroclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.associatedcontent[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.bridgetrack[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.digitaljournal[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.expedia[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.linerider[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.mediamayhemcorp[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.movieweb[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.pno[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.realtechnetwork[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ads.web.aol[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@clicksor[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@collective-media[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.auctionworks[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@counter.surfcounters[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@crackserialkeygen[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@doubleclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@drivecleaner[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wfk4eldpico.stats.esomniture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@e-2dj6wgl4qlczehp.stats.esomniture[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ecnext.advertserve[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-knightridder.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-myspaceinc.hitbox[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@ehg-viacom.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@fastclick[3].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@findarticles[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@image.masterstats[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@indextools[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@keygen[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media.hotels[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@media6degrees[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@partner2profit[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@phg.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@qnsr[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@revsci[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@richmedia.yahoo[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@scot.valueclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serialdevil[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@serialsgalore[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sitestat.mayoclinic[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@sound-taxi.crack.serial.keygen.ddlone[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.drivecleaner[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.sphere[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@stats.sphere[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@tracking.ezd3[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@traffic.buyservices[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@valueclick[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@warezreleases[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@winantivirus[2].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.directnetadvertising[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.drivecleaner[1].txt
C:\Documents and Settings\Compaq_Owner\Cookies\compaq_owner@www.fullreleases[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ad.yieldmanager[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adbrite[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adinterax[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adlegend[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adopt.euroclick[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adopt.specificclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adrevolver[3].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.adbrite[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.addynamix[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.bridgetrack[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ads.pointroll[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adserver.activediner[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@adserver[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@advertising[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@anad.tacoda[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@anat.tacoda[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@apmebf[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ar.atwola[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@atdmt[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@atwola[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@azjmp[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@bluestreak[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@bs.serving-sys[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@burstnet[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@casalemedia[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter.hitslink[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter7.sextracker[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@counter[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@data3.perf.overture[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@doubleclick[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@ehg-foxsports.hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@enhance[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@fastclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@gayteensex[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@goclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@hitbox[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@medhelpinternational.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@media.medhelp[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@media6degrees[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@mediaplex[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@msnportal.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@overture[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@perf.overture[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@questionmarket[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@realmedia[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@reunioncom.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@revsci[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@richmedia.yahoo[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@serving-sys[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@sextracker[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@specificclick[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@statcounter[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@statse.webtrendslive[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@synacor.112.2o7[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@tacoda[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@trafficmp[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@tribalfusion[1].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@www.burstnet[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@www.clickmanage[2].txt
C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\Cookies\compaq_owner@zedo[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@2o7[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@advertising[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@atdmt[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@atwola[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@cpvfeed[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@doubleclick[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@hotlog[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@questionmarket[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@realmedia[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@revsci[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@short-media[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@shortmedia.us.intellitxt[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@spylog[1].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@www.short-media[2].txt
C:\Documents and Settings\Guest.YOUR-D0F670B45A\Cookies\guest@zedo[1].txt
Adware.Search2Find
C:\DOCUMENTS AND SETTINGS\COMPAQ_OWNER\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\6LW3MJQR\1202592936[1].EXE
C:\PROGRAM FILES\TMP554828.EXE
C:\PROGRAM FILES\TMP7367734.EXE
C:\WINDOWS\Prefetch\TMP554828.EXE-1F3C6331.pf
C:\WINDOWS\Prefetch\TMP7367734.EXE-10956F1C.pf
Malware.SpywareSheriff
C:\DOCUMENTS AND SETTINGS\GUEST.YOUR-D0F670B45A\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\NJQ8C4AG\SPYWARESHERIFF_SETUP[1].EXE
Adware.k8l
C:\PROGRAM FILES\COMMON FILES\RTENEFS.HTML
Trojan.Downloader-NoName
C:\PROGRAM FILES\TMP1645640.EXE
C:\PROGRAM FILES\TMP1646250.EXE
C:\PROGRAM FILES\TMP1647640.EXE
C:\PROGRAM FILES\TMP7364218.EXE
C:\PROGRAM FILES\TMP7364500.EXE
C:\PROGRAM FILES\TMP9128578.EXE
C:\WINDOWS\Prefetch\TMP1645640.EXE-3591BCCA.pf
C:\WINDOWS\Prefetch\TMP1646250.EXE-3558F141.pf
C:\WINDOWS\Prefetch\TMP1647640.EXE-3883A753.pf
C:\WINDOWS\Prefetch\TMP7364218.EXE-0B742A8F.pf
C:\WINDOWS\Prefetch\TMP7364500.EXE-1205FE08.pf
C:\WINDOWS\Prefetch\TMP9128578.EXE-3322C447.pf
Malware.Ultimate Defender
C:\PROGRAM FILES\UCLEANER_SETUP.EXE
C:\WINDOWS\Prefetch\UCLEANER_SETUP.EXE-1EF3F23D.pf
Trojan.Downloader-SpyTool
C:\VUNDOFIX BACKUPS\ADSPKHYD.DLL.BAD
C:\VUNDOFIX BACKUPS\CTUYYPBP.DLL.BAD
C:\VUNDOFIX BACKUPS\JYUFKWTC.DLL.BAD
C:\VUNDOFIX BACKUPS\MSCIJAGM.DLL.BAD
C:\VUNDOFIX BACKUPS\MXVAKRSI.DLL.BAD
C:\VUNDOFIX BACKUPS\NHBYIYVO.DLL.BAD
C:\VUNDOFIX BACKUPS\NIGSHXTR.DLL.BAD
C:\VUNDOFIX BACKUPS\PCBULLWL.DLL.BAD
C:\VUNDOFIX BACKUPS\PNGDUBPG.DLL.BAD
C:\VUNDOFIX BACKUPS\POVELURO.DLL.BAD
C:\VUNDOFIX BACKUPS\TYWCHGET.DLL.BAD
C:\VUNDOFIX BACKUPS\UGFGELDY.DLL.BAD
C:\VUNDOFIX BACKUPS\WVKNVWUA.DLL.BAD
C:\VUNDOFIX BACKUPS\XUXFKCEC.DLL.BAD
C:\VUNDOFIX BACKUPS\YYQPCWHA.DLL.BAD
Trojan.Downloader-Gen/HardFall
C:\VUNDOFIX BACKUPS\AWVTQ.DLL.BAD
Trojan.Downloader-Gen/LIB
C:\VUNDOFIX BACKUPS\HBMKAELK.DLL.BAD
Trojan.Unclassified/SysOld
C:\WINDOWS\111UNINST.EXE
Spyware.Melkosoft (CoolWebSearch Variant)
C:\WINDOWS\INSTALLER\{71F7149C-09BA-468B-B437-A22DA42185B8}\ZIP.DLL
C:\WINDOWS\INSTALLER\{9E0A8340-FF2A-45BC-9C70-B8CB250CE2EF}\ZIP.DLL
C:\WINDOWS\INSTALLER\{BB74A9C9-6178-4616-A236-85AACA174C93}\ZIP.DLL
C:\WINDOWS\INSTALLER\{BF04DDBB-0809-4264-87D6-9D00518E0AFA}\ZIP.DLL
C:\WINDOWS\INSTALLER\{D0DA0EAE-CA90-4A24-B644-EA6BCD111F20}\ZIP.DLL
C:\WINDOWS\INSTALLER\{D4998737-DFD7-476F-927B-93A6AA359D96}\ZIP.DLL
Trojan.Downloader-Gen/ASE
C:\WINDOWS\MS05274114209.EXE
Trojan.Unclassified/DRV-Slice
C:\WINDOWS\SYSTEM32\DRVPAS.DLL
Malware.WinAntiSpyware-Installer
C:\WINDOWS\SYSTEM32\DRVPASR.DLL
Trojan.Downloader-Gen/Suspicious
C:\WINDOWS\SYSTEM32\IEUPDATES .EXE
C:\WINDOWS\Prefetch\IEUPDATES .EXE-1397FE88.pf
Adware.Vundo Variant/Rel
C:\WINDOWS\SYSTEM32\KJKKJ.INI
Unclassified.Unknown Origin/System
C:\WINDOWS\SYSTEM32\UPDATE32.EXE
C:\WINDOWS\Prefetch\UPDATE32.EXE-211BE755.pf
Trojan.WinUpdate
C:\WINDOWS\SYSTEM32\WINUPDATE.EXE
C:\WINDOWS\Prefetch\WINUPDATE.EXE-0F50C4F5.pf
Trojan.Unclassifed/WowFX
C:\WINDOWS\SYSTEM32\WOWFX.DLL
Trojan.Downloader-XLIB
C:\WINDOWS\SYSTEM32\XLIBGFL254.DLL
Adware.OuterInfo-Installer
C:\WINDOWS\TEMP\WIN96D3.EXE
C:\WINDOWS\TEMP\WIN9EEE.EXE
Trojan.Downloader-Gen/Uni
C:\WINDOWS\UNI_EH10.EXE
Hi , You sure had a lot of crapola on this PC. Do you have an Antivius program installed?
Lets's get all the stuff off first than we'll get AOL back.
Run these online scans
ESET Online Scanner
Panda ActiveScan?
Then follow this BC Tutorial
How to Remove WinFixer / Virtumonde
Tell us how the PC is running now.
Lets's get all the stuff off first than we'll get AOL back.
Run these online scans
ESET Online Scanner
Panda ActiveScan?
Then follow this BC Tutorial
How to Remove WinFixer / Virtumonde
Tell us how the PC is running now.
i told you my computer was junk.
and i don't have an antivirus installed...
also, i should've told you before i have dial-up...that sure makes things more difficult for me. an 8 MB download is like a big thing. then the eset online scanner said 'update failed' and it just sat there for 20 minutes with that message displayed.
i'm trying the vundofix now.
is there any way you could just get the computer to a point where system recovery will work? because i think it would just be easier to do that than go through all this mess...system recovery would get rid of all the viruses and junk, right? i don't care if i lose programs or anything...i just want it to work...
i'll let you know how it goes after vundofix i guess.
and i don't have an antivirus installed...
also, i should've told you before i have dial-up...that sure makes things more difficult for me. an 8 MB download is like a big thing. then the eset online scanner said 'update failed' and it just sat there for 20 minutes with that message displayed.
i'm trying the vundofix now.
is there any way you could just get the computer to a point where system recovery will work? because i think it would just be easier to do that than go through all this mess...system recovery would get rid of all the viruses and junk, right? i don't care if i lose programs or anything...i just want it to work...
i'll let you know how it goes after vundofix i guess.
vundofix removed 2 things. i don't know if there's a log and where to find it, or if you need it.
the log for the virtumundobegone: (apparently nothing)
[02/10/2008, 14:52:09] - VirtumundoBeGone v1.5 ( "C:\Documents and
Settings\Compaq_Owner\My Documents\VirtumundoBeGone.exe" )
[02/10/2008, 14:52:14] - Detected System Information:
[02/10/2008, 14:52:14] - Windows Version: 5.1.2600, Service Pack 2
[02/10/2008, 14:52:14] - Current Username: Compaq_Owner (Admin)
[02/10/2008, 14:52:14] - Windows is in SAFE mode with Networking.
[02/10/2008, 14:52:14] - Searching for Browser Helper Objects:
[02/10/2008, 14:52:14] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar
Helper)
[02/10/2008, 14:52:14] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj
Class)
[02/10/2008, 14:52:14] - BHO 3: {4ED31630-1471-430F-8A2D-3C167FAB415F} ()
[02/10/2008, 14:52:14] - WARNING: BHO has no default name. Checking for Winlogon reference.
[02/10/2008, 14:52:14] - Checking for HKLM\...\Winlogon\Notify\jkkjk
[02/10/2008, 14:52:14] - Key not found: HKLM\...\Winlogon\Notify\jkkjk, continuing.
[02/10/2008, 14:52:14] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper
Class)
[02/10/2008, 14:52:14] - BHO 5: {8600AC1E-BE58-4FFC-BD5D-F2A8EC38C838}
(SnapToolbarHelper Class)
[02/10/2008, 14:52:14] - BHO 6: {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} (hpWebHelper
Class)
[02/10/2008, 14:52:14] - Finished Searching Browser Helper Objects
[02/10/2008, 14:52:14] - Finishing up...
[02/10/2008, 14:52:14] - Nothing found! Exiting...
hm. i wonder if i can say my dog ate my computer, and best buy will give me another one.
the log for the virtumundobegone: (apparently nothing)
[02/10/2008, 14:52:09] - VirtumundoBeGone v1.5 ( "C:\Documents and
Settings\Compaq_Owner\My Documents\VirtumundoBeGone.exe" )
[02/10/2008, 14:52:14] - Detected System Information:
[02/10/2008, 14:52:14] - Windows Version: 5.1.2600, Service Pack 2
[02/10/2008, 14:52:14] - Current Username: Compaq_Owner (Admin)
[02/10/2008, 14:52:14] - Windows is in SAFE mode with Networking.
[02/10/2008, 14:52:14] - Searching for Browser Helper Objects:
[02/10/2008, 14:52:14] - BHO 1: {02478D38-C3F9-4EFB-9B51-7695ECA05670} (Yahoo! Toolbar
Helper)
[02/10/2008, 14:52:14] - BHO 2: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} (AcroIEHlprObj
Class)
[02/10/2008, 14:52:14] - BHO 3: {4ED31630-1471-430F-8A2D-3C167FAB415F} ()
[02/10/2008, 14:52:14] - WARNING: BHO has no default name. Checking for Winlogon reference.
[02/10/2008, 14:52:14] - Checking for HKLM\...\Winlogon\Notify\jkkjk
[02/10/2008, 14:52:14] - Key not found: HKLM\...\Winlogon\Notify\jkkjk, continuing.
[02/10/2008, 14:52:14] - BHO 4: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper
Class)
[02/10/2008, 14:52:14] - BHO 5: {8600AC1E-BE58-4FFC-BD5D-F2A8EC38C838}
(SnapToolbarHelper Class)
[02/10/2008, 14:52:14] - BHO 6: {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} (hpWebHelper
Class)
[02/10/2008, 14:52:14] - Finished Searching Browser Helper Objects
[02/10/2008, 14:52:14] - Finishing up...
[02/10/2008, 14:52:14] - Nothing found! Exiting...
hm. i wonder if i can say my dog ate my computer, and best buy will give me another one.
Well you're pretty clean now. You should start a new topic in the proper Operating system forum with your other problem. Or tolearn how to restore or format.
well it doesn't seem like i'm clean, the computer's still starting up pretty slow, the 'windows security alert' is still in the taskbar, still spyware alerts popping up, and aol still doesn't work without the startup disc in.
do you have any other ideas?
and btw, thanks for helping me get whatever i got off of here so far.
do you have any other ideas?
and btw, thanks for helping me get whatever i got off of here so far.
You cn run the scans again they may still find pieces and left overs that could not be fully cleaned. But If you are going to travel the net without at least an AV it won't be long till your PC just shuts itself back down.
You can also post a HiJack This log here and get further help deep cleaning the machine
Preparation Guide for use before posting a HijackThis Log
And You're welcome.
You can also post a HiJack This log here and get further help deep cleaning the machine
Preparation Guide for use before posting a HijackThis Log
And You're welcome.
like i said before, i have dial-up, and i like to skip downloading things if i can. therefore, i went straight to downloading hijackthis...i don't know if that is a big deal or not. but i have the log...i don't know what to fix or anything or what's wrong, but i guess that's why my computer is so screwed up...
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:49:41 PM, on 2/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\windows\shell.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\windows\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\windows\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\America Online 9.0\waol.exe
C:\Program Files\America Online 9.0\shellmon.exe
C:\windows\explorer.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\windows\shell.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4ED31630-1471-430F-8A2D-3C167FAB415F} - C:\WINDOWS\system32\jkkjk.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: SnapToolbarHelper Class - {8600AC1E-BE58-4FFC-BD5D-F2A8EC38C838} - C:\Program Files\Snap Visual Search\snapbar.dll
O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Snap Visual Search - {EF56413F-9398-4DF5-BC88-6FC3B227D5C5} - C:\Program Files\Snap Visual Search\snapbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Printer] C:\windows\system32\printer.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b
O4 - HKCU\..\Run: [Spoolsv] C:\windows\system32\spoolvs.exe
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: findfast.exe
O4 - Global Startup: autorun.exe
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://aol.musicnotes.com/download/mnviewer.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C7383C0-5E53-4477-9A84-91B4943243CC}: NameServer = 205.188.146.145
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: winepi32 - winepi32.dll (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD DE\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
--
End of file - 6493 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:49:41 PM, on 2/10/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\windows\shell.exe
C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\windows\system32\nvsvc32.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\windows\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\Program Files\America Online 9.0\waol.exe
C:\Program Files\America Online 9.0\shellmon.exe
C:\windows\explorer.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
F2 - REG:system.ini: Shell=Explorer.exe C:\windows\shell.exe
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {4ED31630-1471-430F-8A2D-3C167FAB415F} - C:\WINDOWS\system32\jkkjk.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: SnapToolbarHelper Class - {8600AC1E-BE58-4FFC-BD5D-F2A8EC38C838} - C:\Program Files\Snap Visual Search\snapbar.dll
O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: Snap Visual Search - {EF56413F-9398-4DF5-BC88-6FC3B227D5C5} - C:\Program Files\Snap Visual Search\snapbar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Printer] C:\windows\system32\printer.exe
O4 - HKCU\..\Run: [AOL Fast Start] "C:\Program Files\America Online 9.0\AOL.EXE" -b
O4 - HKCU\..\Run: [Spoolsv] C:\windows\system32\spoolvs.exe
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Startup: findfast.exe
O4 - Global Startup: autorun.exe
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1239CC52-59EF-4DFA-8C61-90FFA846DF7E} (Musicnotes Viewer) - http://aol.musicnotes.com/download/mnviewer.cab
O16 - DPF: {48DD0448-9209-4F81-9F6D-D83562940134} (MySpace Uploader Control) - http://lads.myspace.com/upload/MySpaceUploader1005.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C7383C0-5E53-4477-9A84-91B4943243CC}: NameServer = 205.188.146.145
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: winepi32 - winepi32.dll (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL TopSpeed Monitor (AOL TopSpeedMonitor) - America Online, Inc - C:\Program Files\Common Files\AOL\TopSpeed\2.0\aoltsmon.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD DE\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\windows\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
--
End of file - 6493 bytes
I have moved your Topic that includes a HijackThis log here to the Misplaced HJT Logs forum. You posted your log in a forum not intended for HijackThis logs analysis and probably missed the directions we provide to those who require assistance. We can only allow topics with such logs in the HijackThis Logs and Malware Removal forum. This restriction is to ensure you get the best help available, from those who specialize in malware anlaysis and removal. It also should prevent you from receiving ineffective or even potentially dangerous advice, whether well meaning or not.
Prior to posting a HJT log, we ask that you please read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log. Following the steps in this Guide will allow the HJT Team to quickly help you with specific fixes for what may remain on your system.
Please complete all the steps in the Guide. If you have performed some of them already, then just continue with the next. If you can't perform a step, then skip it and continue with the next. The last step will include downloading and using the most current version of HijackThis if the first line of your log does not appear as follows:
Logfile of Trend Micro HijackThis v2.0.2
Please note that it is important that HijackThis be run and a log created while in normal mode. If you run it and create your log while in safe mode, you will be asked to redo it again properly. When you have completed those steps, start a new topic in the HijackThis Logs and Malware Removal forum as directed in the Guide to post a new log.
Please DO NOT post any more logs to this topic, or post a log again in the wrong forum.
The Misplaced HJT Logs forum is strictly a holding area where the BC Staff can assist you with preparations for and to properly post your log. If you have a question or encounter a problem in the Prep Guide, please do post back to this topic; that is what it is here for.
When your new HJT log is posted in the proper forum, please reply to this topic with a link to your new topic. Once that is done, a Member of the HJT Team will analyze your log and assist you with step by step instructions to clean your computer or otherwise advise what needs to be done.
Thanks for your cooperation and good luck.
The BC Staff
Prior to posting a HJT log, we ask that you please read and follow all instructions in the pinned topic titled Preparation Guide For Use Before Posting A Hijackthis Log. Following the steps in this Guide will allow the HJT Team to quickly help you with specific fixes for what may remain on your system.
Please complete all the steps in the Guide. If you have performed some of them already, then just continue with the next. If you can't perform a step, then skip it and continue with the next. The last step will include downloading and using the most current version of HijackThis if the first line of your log does not appear as follows:
Logfile of Trend Micro HijackThis v2.0.2
Please note that it is important that HijackThis be run and a log created while in normal mode. If you run it and create your log while in safe mode, you will be asked to redo it again properly. When you have completed those steps, start a new topic in the HijackThis Logs and Malware Removal forum as directed in the Guide to post a new log.
Please DO NOT post any more logs to this topic, or post a log again in the wrong forum.
The Misplaced HJT Logs forum is strictly a holding area where the BC Staff can assist you with preparations for and to properly post your log. If you have a question or encounter a problem in the Prep Guide, please do post back to this topic; that is what it is here for.
When your new HJT log is posted in the proper forum, please reply to this topic with a link to your new topic. Once that is done, a Member of the HJT Team will analyze your log and assist you with step by step instructions to clean your computer or otherwise advise what needs to be done.
Thanks for your cooperation and good luck.
The BC Staff
Now that your log is properly posted, you should NOT make further changes to your computer (install/uninstall programs, use special fix tools, delete files, edit the registry, etc) unless advised by a HJT Team member, nor should you continue to ask for help elsewhere. Doing so can result in system changes which may not show it the log you already posted. Further, any modifications you make may cause confusion for the member assisting you and could complicate the malware removal process which would extend the time it takes to clean your computer.
From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.
Please be patient. It may take a while to get a response because the HJT Team members are very busy working on logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond
If after 5 days you still have received no response, then post a link to your HJT log in the thread titled "Haven't Had A Reply In Five Days?".
To avoid confusion, I am closing this topic.
From this point on the HJT Team should be the only members that you take advice from, until they have verified your log as clean.
Please be patient. It may take a while to get a response because the HJT Team members are very busy working on logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT make another reply until it has been responded to by a member of the HJT Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond
If after 5 days you still have received no response, then post a link to your HJT log in the thread titled "Haven't Had A Reply In Five Days?".
To avoid confusion, I am closing this topic.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.