 Worm.win32.netbooster, Infected |
Welcome Guest ( Log In | Click here to Register a free account now! )
Register a free account to unlock additional features at BleepingComputer.com
Welcome to Bleeping Computer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
When posting your problem, do not run and post a ComboFix logs. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.
To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.
  |
 Apr 12 2008, 11:50 PM
Post
#1
|
|
|
Member  Group: Members Posts: 107 Joined: 30-November 07 Member No.: 173,617  |
Thanks in advance for any help. Delaine --------------------------------------------------------- AVG Anti-Spyware - Scan Report --------------------------------------------------------- + Created at: 9:06:45 PM 4/12/2008 + Scan result: C:\Documents and Settings\Delaine\Cookies\delaine@ehg-myspaceinc.hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Delaine\Cookies\delaine@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned. C:\Documents and Settings\Delaine\Cookies\delaine@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned. ::Report end SmitFraudFix v2.312 Scan done at 21:36:40.00, Sat 04/12/2008 Run from C:\Documents and Settings\Delaine\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» Killing process »»»»»»»»»»»»»»»»»»»»»»»» hosts 127.0.0.1 localhost 127.0.0.1 007guard.com 127.0.0.1 www.007guard.com 127.0.0.1 008i.com 127.0.0.1 008k.com 127.0.0.1 www.008k.com 127.0.0.1 00hq.com 127.0.0.1 www.00hq.com 127.0.0.1 010402.com 127.0.0.1 032439.com 127.0.0.1 www.032439.com 127.0.0.1 1001-search.info 127.0.0.1 www.1001-search.info 127.0.0.1 100888290cs.com 127.0.0.1 www.100888290cs.com 127.0.0.1 100sexlinks.com 127.0.0.1 www.100sexlinks.com 127.0.0.1 10sek.com 127.0.0.1 www.10sek.com 127.0.0.1 123topsearch.com 127.0.0.1 www.123topsearch.com 127.0.0.1 132.com 127.0.0.1 www.132.com 127.0.0.1 136136.net 127.0.0.1 www.136136.net 127.0.0.1 139mm.com 127.0.0.1 www.139mm.com 127.0.0.1 163ns.com 127.0.0.1 www.163ns.com 127.0.0.1 171203.com 127.0.0.1 17-plus.com 127.0.0.1 1800searchonline.com 127.0.0.1 www.1800searchonline.com 127.0.0.1 180searchassistant.com 127.0.0.1 www.180searchassistant.com 127.0.0.1 180solutions.com 127.0.0.1 www.180solutions.com 127.0.0.1 181.365soft.info 127.0.0.1 www.181.365soft.info 127.0.0.1 1987324.com 127.0.0.1 www.1987324.com 127.0.0.1 1-domains-registrations.com 127.0.0.1 www.1-domains-registrations.com 127.0.0.1 1-extreme.biz 127.0.0.1 www.1-extreme.biz 127.0.0.1 1sexparty.com 127.0.0.1 www.1sexparty.com 127.0.0.1 1stantivirus.com 127.0.0.1 www.1stantivirus.com 127.0.0.1 1stpagehere.com 127.0.0.1 www.1stpagehere.com 127.0.0.1 1stsearchportal.com 127.0.0.1 www.1stsearchportal.com 127.0.0.1 2.82211.net 127.0.0.1 www.2006ooo.com 127.0.0.1 2007-download.com 127.0.0.1 www.2007-download.com 127.0.0.1 2020search.com 127.0.0.1 www.2020search.com 127.0.0.1 20x2p.com 127.0.0.1 24.365soft.info 127.0.0.1 www.24.365soft.info 127.0.0.1 24-7pharmacy.info 127.0.0.1 www.24-7pharmacy.info 127.0.0.1 24-7searching-and-more.com 127.0.0.1 www.24-7searching-and-more.com 127.0.0.1 24teen.com 127.0.0.1 www.24teen.com 127.0.0.1 2every.net 127.0.0.1 www.2every.net 127.0.0.1 2ndpower.com 127.0.0.1 2search.com 127.0.0.1 www.2search.com 127.0.0.1 2search.org 127.0.0.1 www.2search.org 127.0.0.1 2squared.com 127.0.0.1 www.2squared.com 127.0.0.1 3322.org 127.0.0.1 www.3322.org 127.0.0.1 365soft.info 127.0.0.1 36site.com 127.0.0.1 www.36site.com 127.0.0.1 3721.com 127.0.0.1 39-93.com 127.0.0.1 3abetterinternet.com 127.0.0.1 www.3abetterinternet.com 127.0.0.1 3bay.it 127.0.0.1 www.3bay.it 127.0.0.1 3ebay.it 127.0.0.1 www.3ebay.it 127.0.0.1 404dns.com 127.0.0.1 www.404dns.com 127.0.0.1 4199.com 127.0.0.1 www.4199.com 127.0.0.1 4corn.net 127.0.0.1 www.4corn.net 127.0.0.1 4ebay.it 127.0.0.1 www.4ebay.it 127.0.0.1 4klm.com 127.0.0.1 4repubblica.it 127.0.0.1 www.4repubblica.it 127.0.0.1 4softget.com 127.0.0.1 www.4softget.com 127.0.0.1 5iscali.it 127.0.0.1 www.5iscali.it 127.0.0.1 5repubblica.it 127.0.0.1 www.5repubblica.it 127.0.0.1 5starvideos.com 127.0.0.1 www.5starvideos.com 127.0.0.1 5tiscali.it 127.0.0.1 www.5tiscali.it 127.0.0.1 5zgmu7o20kt5d8yq.com 127.0.0.1 www.5zgmu7o20kt5d8yq.com 127.0.0.1 6iscali.it 127.0.0.1 www.6iscali.it 127.0.0.1 6sek.com 127.0.0.1 www.6sek.com 127.0.0.1 6tiscali.it 127.0.0.1 www.6tiscali.it 127.0.0.1 7322.com 127.0.0.1 www.7322.com 127.0.0.1 75tz.com 127.0.0.1 777search.com 127.0.0.1 www.777search.com 127.0.0.1 777top.com 127.0.0.1 www.777top.com 127.0.0.1 7939.com 127.0.0.1 www.7939.com 127.0.0.1 7search.com 127.0.0.1 www.7search.com 127.0.0.1 80gw6ry3i3x3qbrkwhxhw.032439.com 127.0.0.1 82211.net 127.0.0.1 8866.org 127.0.0.1 888.com 127.0.0.1 www.888.com 127.0.0.1 8ad.com 127.0.0.1 www.8ad.com 127.0.0.1 9505.com 127.0.0.1 www.9505.com 127.0.0.1 971searchbox.com 127.0.0.1 www.971searchbox.com 127.0.0.1 a.bestmanage.org 127.0.0.1 aaasexypics.com 127.0.0.1 aaawebfinder.com 127.0.0.1 www.aaawebfinder.com 127.0.0.1 aavc.com 127.0.0.1 abc-find.info 127.0.0.1 www.abc-find.info 127.0.0.1 abetterinternet.com 127.0.0.1 www.abetterinternet.com 127.0.0.1 abnetsoft.info 127.0.0.1 www.abnetsoft.info 127.0.0.1 aboutclicker.com 127.0.0.1 www.aboutclicker.com 127.0.0.1 abrp.net 127.0.0.1 www.abrp.net 127.0.0.1 absolutee.com 127.0.0.1 www.absolutee.com 127.0.0.1 abyssmedia.com 127.0.0.1 www.abyssmedia.com 127.0.0.1 ac66.cn 127.0.0.1 www.ac66.cn 127.0.0.1 access.Navinetwork.com 127.0.0.1 access.rapid-pass.net 127.0.0.1 accessactivexvideo.com 127.0.0.1 www.accessactivexvideo.com 127.0.0.1 accessclips.com 127.0.0.1 www.accessclips.com 127.0.0.1 access-dvd.com 127.0.0.1 www.access-dvd.com 127.0.0.1 accesskeygenerator.com 127.0.0.1 www.accesskeygenerator.com 127.0.0.1 accessorygeeks.com 127.0.0.1 www.accessorygeeks.com 127.0.0.1 accessthefuture.net 127.0.0.1 www.accessthefuture.net 127.0.0.1 accessvid.net 127.0.0.1 www.accessvid.net 127.0.0.1 acemedic.com 127.0.0.1 www.acemedic.com 127.0.0.1 ace-webmaster.com 127.0.0.1 www.ace-webmaster.com 127.0.0.1 acjp.com 127.0.0.1 acrobat-2007.com 127.0.0.1 www.acrobat-2007.com 127.0.0.1 acrobat-8.com 127.0.0.1 www.acrobat-8.com 127.0.0.1 acrobat-center.com 127.0.0.1 www.acrobat-center.com 127.0.0.1 acrobat-hq.com 127.0.0.1 www.acrobat-hq.com 127.0.0.1 acrobatreader-8.com 127.0.0.1 www.acrobatreader-8.com 127.0.0.1 acrobat-reader-8.de 127.0.0.1 www.acrobat-reader-8.de 127.0.0.1 acrobat-stop.com 127.0.0.1 www.acrobat-stop.com 127.0.0.1 actionbreastcancer.org 127.0.0.1 www.actionbreastcancer.org 127.0.0.1 activesearcher.info 127.0.0.1 www.activesearcher.info 127.0.0.1 activexaccessobject.com 127.0.0.1 www.activexaccessobject.com 127.0.0.1 activexaccessvideo.com 127.0.0.1 www.activexaccessvideo.com 127.0.0.1 activexemedia.com 127.0.0.1 www.activexemedia.com 127.0.0.1 activexmediaobject.com 127.0.0.1 www.activexmediaobject.com 127.0.0.1 activexmediapro.com 127.0.0.1 www.activexmediapro.com 127.0.0.1 activexmediasite.com 127.0.0.1 www.activexmediasite.com 127.0.0.1 activexmediasoftware.com 127.0.0.1 www.activexmediasoftware.com 127.0.0.1 activexmediasource.com 127.0.0.1 www.activexmediasource.com 127.0.0.1 activexmediatool.com 127.0.0.1 www.activexmediatool.com 127.0.0.1 activexmediatour.com 127.0.0.1 www.activexmediatour.com 127.0.0.1 activexsoftwares.com 127.0.0.1 www.activexsoftwares.com 127.0.0.1 activexsource.com 127.0.0.1 www.activexsource.com 127.0.0.1 activexupdate.com 127.0.0.1 www.activexupdate.com 127.0.0.1 activexvideo.com 127.0.0.1 www.activexvideo.com 127.0.0.1 activexvideotool.com 127.0.0.1 www.activexvideotool.com 127.0.0.1 ad.marketingsector.com 127.0.0.1 www.ad.marketingsector.com 127.0.0.1 ad.mokead.com 127.0.0.1 www.ad.mokead.com 127.0.0.1 ad.yieldmanager.com 127.0.0.1 www.ad.yieldmanager.com 127.0.0.1 ad25.com 127.0.0.1 ad45.com 127.0.0.1 ad77.com 127.0.0.1 ad86.com 127.0.0.1 adamsupportgroup.org 127.0.0.1 www.adamsupportgroup.org 127.0.0.1 adarmor.com 127.0.0.1 www.adarmor.com 127.0.0.1 adasearch.com 127.0.0.1 www.adasearch.com 127.0.0.1 adaware.cc 127.0.0.1 adawarenow.com 127.0.0.1 www.adawarenow.com 127.0.0.1 addictivetechnologies.com 127.0.0.1 www.addictivetechnologies.com 127.0.0.1 addictivetechnologies.net 127.0.0.1 www.addictivetechnologies.net 127.0.0.1 add-manager.com 127.0.0.1 www.add-manager.com 127.0.0.1 adgate.info 127.0.0.1 www.adgate.info 127.0.0.1 adipics.com 127.0.0.1 www.adipics.com 127.0.0.1 admin2cash.biz 127.0.0.1 www.admin2cash.biz 127.0.0.1 adnet-plus.com 127.0.0.1 adobe-download-now.com 127.0.0.1 adobe-downloads.com 127.0.0.1 www.adobe-downloads.com 127.0.0.1 adobe-reader-8.fr 127.0.0.1 www.adobe-reader-8.fr 127.0.0.1 adprotect.com 127.0.0.1 www.adprotect.com 127.0.0.1 ads.centralmedia.ws 127.0.0.1 ads.k8l.info 127.0.0.1 ads.kmpads.com 127.0.0.1 ads.marketingsector.com 127.0.0.1 ads.searchingbooth.com 127.0.0.1 ads.z-quest.com 127.0.0.1 ads183.com 127.0.0.1 www.ads183.com 127.0.0.1 adscontex.com 127.0.0.1 www.adscontex.com 127.0.0.1 adservices1.enhance.com 127.0.0.1 www.adservices1.enhance.com 127.0.0.1 adservs.com 127.0.0.1 adsextend.net 127.0.0.1 www.adsextend.net 127.0.0.1 adshttp.com 127.0.0.1 www.adshttp.com 127.0.0.1 adsonwww.com 127.0.0.1 www.adsonwww.com 127.0.0.1 adspics.com 127.0.0.1 www.adspics.com 127.0.0.1 adtrak.net 127.0.0.1 www.adtrak.net 127.0.0.1 adtrgt.com 127.0.0.1 adult777search.info 127.0.0.1 www.adult777search.info 127.0.0.1 adultan.com 127.0.0.1 www.adultan.com 127.0.0.1 adult-engine-search.com 127.0.0.1 www.adult-engine-search.com 127.0.0.1 adult-erotic-guide.net 127.0.0.1 www.adult-erotic-guide.net 127.0.0.1 adultfilmsite.com 127.0.0.1 www.adultfilmsite.com 127.0.0.1 adult-friends-finder.net 127.0.0.1 www.adult-friends-finder.net 127.0.0.1 adultgambling.org 127.0.0.1 adult-host.org 127.0.0.1 adulthyperlinks.com 127.0.0.1 www.adulthyperlinks.com 127.0.0.1 adultmovieplus.com 127.0.0.1 www.adultmovieplus.com 127.0.0.1 adult-personal.us 127.0.0.1 adultsgames.net 127.0.0.1 adultsper.com 127.0.0.1 www.adultsper.com 127.0.0.1 adulttds.com 127.0.0.1 www.adulttds.com 127.0.0.1 adultzoneworld.com 127.0.0.1 www.adultzoneworld.com 127.0.0.1 advcash.biz 127.0.0.1 www.advcash.biz 127.0.0.1 advert.exaccess.ru 127.0.0.1 advertisemoney.info 127.0.0.1 www.advertisemoney.info 127.0.0.1 advertising.paltalk.com 127.0.0.1 advertising-money.info 127.0.0.1 www.advertising-money.info 127.0.0.1 ad-ware.cc 127.0.0.1 ad-w-a-r-e.com 127.0.0.1 www.ad-w-a-r-e.com 127.0.0.1 a-d-w-a-r-e.com 127.0.0.1 www.a-d-w-a-r-e.com 127.0.0.1 adwarebazooka.com 127.0.0.1 www.adwarebazooka.com 127.0.0.1 adwarefinder.com 127.0.0.1 www.adwarefinder.com 127.0.0.1 adwareprotectionsite.com 127.0.0.1 www.adwareprotectionsite.com 127.0.0.1 adwarepunisher.com 127.0.0.1 www.adwarepunisher.com 127.0.0.1 aflgate.com 127.0.0.1 www.aflgate.com 127.0.0.1 africaspromise.org 127.0.0.1 agava.com 127.0.0.1 agava.ru 127.0.0.1 agentstudio.com 127.0.0.1 aginegialle.it 127.0.0.1 www.aginegialle.it 127.0.0.1 www.aifind.info 127.0.0.1 aifind.info 127.0.0.1 airtleworld.com 127.0.0.1 www.airtleworld.com 127.0.0.1 aitalia.it 127.0.0.1 www.aitalia.it 127.0.0.1 akamai.downloadv3.com 127.0.0.1 aklitalia.it 127.0.0.1 www.aklitalia.it 127.0.0.1 akril.com 127.0.0.1 alcatel.ws 127.0.0.1 alfacleaner.com 127.0.0.1 www.alfacleaner.com 127.0.0.1 alfa-search.com 127.0.0.1 alialia.it 127.0.0.1 www.alialia.it 127.0.0.1 aliotalia.it 127.0.0.1 www.aliotalia.it 127.0.0.1 alirtalia.it 127.0.0.1 www.alirtalia.it 127.0.0.1 alitaia.it 127.0.0.1 www.alitaia.it 127.0.0.1 alitaklia.it 127.0.0.1 www.alitaklia.it 127.0.0.1 alitala.it 127.0.0.1 www.alitala.it 127.0.0.1 alitali.it 127.0.0.1 www.alitali.it 127.0.0.1 alitaliaq.it 127.0.0.1 www.alitaliaq.it 127.0.0.1 alitalias.it 127.0.0.1 www.alitalias.it 127.0.0.1 alitaliaz.it 127.0.0.1 www.alitaliaz.it 127.0.0.1 alitalioa.it 127.0.0.1 www.alitalioa.it 127.0.0.1 alitalisa.it 127.0.0.1 www.alitalisa.it 127.0.0.1 alitaliua.it 127.0.0.1 www.alitaliua.it 127.0.0.1 alitalkia.it 127.0.0.1 www.alitalkia.it 127.0.0.1 alitaloia.it 127.0.0.1 www.alitaloia.it 127.0.0.1 alitaluia.it 127.0.0.1 www.alitaluia.it 127.0.0.1 alitaslia.it 127.0.0.1 www.alitaslia.it 127.0.0.1 alitlia.it 127.0.0.1 www.alitlia.it 127.0.0.1 alitralia.it 127.0.0.1 www.alitralia.it 127.0.0.1 alitsalia.it 127.0.0.1 www.alitsalia.it 127.0.0.1 aliutalia.it 127.0.0.1 www.aliutalia.it 127.0.0.1 ALL1COUNT.NET 127.0.0.1 www.ALL1COUNT.NET 127.0.0.1 all4internet.com 127.0.0.1 www.all4internet.com 127.0.0.1 allabtcars.com 127.0.0.1 allabtjeeps.com 127.0.0.1 all-bittorrent.com 127.0.0.1 www.all-bittorrent.com 127.0.0.1 www.allcybersearch.com 127.0.0.1 allcybersearch.com 127.0.0.1 alldnserrors.com 127.0.0.1 www.alldnserrors.com 127.0.0.1 all-downloads-now.com 127.0.0.1 www.all-downloads-now.com 127.0.0.1 all-edonkey.com 127.0.0.1 www.all-edonkey.com 127.0.0.1 allforadult.com 127.0.0.1 allhyperlinks.com 127.0.0.1 alliesecurity.com 127.0.0.1 www.alliesecurity.com 127.0.0.1 all-inet.com 127.0.0.1 allinternetbusiness.com 127.0.0.1 all-limewire.com 127.0.0.1 www.all-limewire.com 127.0.0.1 allmegabucks.com 127.0.0.1 www.allmegabucks.com 127.0.0.1 allprotections.com 127.0.0.1 www.allprotections.com 127.0.0.1 allresultz.net 127.0.0.1 www.allresultz.net 127.0.0.1 allsecuritynotes.com 127.0.0.1 www.allsecuritynotes.com 127.0.0.1 allsecuritysite.com 127.0.0.1 www.allsecuritysite.com 127.0.0.1 allstarsvideos.net 127.0.0.1 www.allstarsvideos.net 127.0.0.1 alltruesoftware.com 127.0.0.1 www.alltruesoftware.com 127.0.0.1 allvideoactivex.com 127.0.0.1 www.allvideoactivex.com 127.0.0.1 almanah.biz 127.0.0.1 www.almanah.biz 127.0.0.1 almarvideos.com 127.0.0.1 aloitalia.it 127.0.0.1 www.aloitalia.it 127.0.0.1 aluitalia.it 127.0.0.1 www.aluitalia.it 127.0.0.1 amaena.com 127.0.0.1 www.amaena.com 127.0.0.1 amandamountains.com 127.0.0.1 amateurliveshow.com 127.0.0.1 www.amateurliveshow.com 127.0.0.1 amediasoftware.com 127.0.0.1 www.amediasoftware.com 127.0.0.1 amediasource.com 127.0.0.1 www.amediasource.com 127.0.0.1 americancarbargains.com 127.0.0.1 www.americancarbargains.com 127.0.0.1 american-teens.net 127.0.0.1 amigeek.com 127.0.0.1 amisbusiness.com 127.0.0.1 ampmsearch.com 127.0.0.1 www.ampmsearch.com 127.0.0.1 analcord.com 127.0.0.1 www.analcord.com 127.0.0.1 analmovi.com 127.0.0.1 anarchylolita.com 127.0.0.1 www.anarchylolita.com 127.0.0.1 anarchyporn.com 127.0.0.1 andromedical.com 127.0.0.1 www.andromedical.com 127.0.0.1 animepornmag.com 127.0.0.1 www.animepornmag.com 127.0.0.1 anin.org 127.0.0.1 anjpn-avxiz.biz 127.0.0.1 www.anjpn-avxiz.biz 127.0.0.1 anjpnzqav.biz 127.0.0.1 www.anjpnzqav.biz 127.0.0.1 anjpn-zqav.biz 127.0.0.1 www.anjpn-zqav.biz 127.0.0.1 annaromeo.com 127.0.0.1 antiddos.us 127.0.0.1 www.antiddos.us 127.0.0.1 Antiespiadorado.com 127.0.0.1 www.Antiespiadorado.com 127.0.0.1 Antiespionspack.com 127.0.0.1 www.Antiespionspack.com 127.0.0.1 Antigusanos2008.com 127.0.0.1 www.Antigusanos2008.com 127.0.0.1 Antispionage.com 127.0.0.1 www.Antispionage.com 127.0.0.1 Antispionagepro.com 127.0.0.1 www.Antispionagepro.com 127.0.0.1 antispydns.biz 127.0.0.1 www.antispydns.biz 127.0.0.1 antispylab.com 127.0.0.1 www.antispylab.com 127.0.0.1 antispysolutions.com 127.0.0.1 www.antispysolutions.com 127.0.0.1 antispyware.com 127.0.0.1 www.antispyware.com 127.0.0.1 antispywarebot.com 127.0.0.1 www.antispywarebot.com 127.0.0.1 antispywarebox.com 127.0.0.1 www.antispywarebox.com 127.0.0.1 antispywaredownloads.com 127.0.0.1 www.antispywaredownloads.com 127.0.0.1 Antispywaresuite.com 127.0.0.1 www.Antispywaresuite.com 127.0.0.1 Antispyweb.net 127.0.0.1 www.Antispyweb.net 127.0.0.1 Antiver2008.com 127.0.0.1 www.Antiver2008.com 127.0.0.1 antivermins.com 127.0.0.1 www.antivermins.com 127.0.0.1 anti-vermins.com 127.0.0.1 www.anti-vermins.com 127.0.0.1 antivir2007.com 127.0.0.1 www.antivir2007.com 127.0.0.1 antivirgear.com 127.0.0.1 www.antivirgear.com 127.0.0.1 antivirus.fastfreedownload.com 127.0.0.1 www.antivirus.fastfreedownload.com 127.0.0.1 antivirusgolden.com 127.0.0.1 www.antivirusgolden.com 127.0.0.1 antivirus-hq.net 127.0.0.1 www.antivirus-hq.net 127.0.0.1 anti-virus-pro.com 127.0.0.1 www.anti-virus-pro.com 127.0.0.1 antivirusprotector.com 127.0.0.1 www.antivirusprotector.com 127.0.0.1 antivirussecuritypro.com 127.0.0.1 www.antivirussecuritypro.com 127.0.0.1 antivirus-stop.com 127.0.0.1 www.antivirus-stop.com 127.0.0.1 Antiworm2008.com 127.0.0.1 www.Antiworm2008.com 127.0.0.1 Antiwurm2008.com 127.0.0.1 www.Antiwurm2008.com 127.0.0.1 antrocity.com 127.0.0.1 anyofus.com 127.0.0.1 www.anyofus.com 127.0.0.1 anysn.seproger.com 127.0.0.1 www.anysn.seproger.com 127.0.0.1 anything4health.com 127.0.0.1 apicpreview.com 127.0.0.1 www.apicpreview.com 127.0.0.1 appealcircuit.com 127.0.0.1 www.appealcircuit.com 127.0.0.1 approvedlinks.com 127.0.0.1 www.approvedlinks.com 127.0.0.1 apps.deskwizz.com 127.0.0.1 apps.webservicehost.com 127.0.0.1 aprotectedpage.com 127.0.0.1 www.aprotectedpage.com 127.0.0.1 apsua.com 127.0.0.1 archiviosex.net 127.0.0.1 www.archiviosex.net 127.0.0.1 aregay.com 127.0.0.1 ares-freebie.com 127.0.0.1 www.ares-freebie.com 127.0.0.1 arespro2007.com 127.0.0.1 www.arespro2007.com 127.0.0.1 aresultra.com 127.0.0.1 www.aresultra.com 127.0.0.1 ares-usa.com 127.0.0.1 www.ares-usa.com 127.0.0.1 arheo.com 127.0.0.1 arizonaweb.org 127.0.0.1 armitageinn.com 127.0.0.1 arquivojpgs.smtp.ru 127.0.0.1 www.arquivojpgs.smtp.ru 127.0.0.1 artachnid.com 127.0.0.1 art-func.com 127.0.0.1 art-xxx.com 127.0.0.1 asafebrowser.com 127.0.0.1 www.asafebrowser.com 127.0.0.1 asafetynotice.com 127.0.0.1 www.asafetynotice.com 127.0.0.1 asafetypage.com 127.0.0.1 www.asafetypage.com 127.0.0.1 asdbiz.biz 127.0.0.1 www.asdbiz.biz 127.0.0.1 asdeykuddq.com 127.0.0.1 www.asdeykuddq.com 127.0.0.1 asecurebar.com 127.0.0.1 www.asecurebar.com 127.0.0.1 asecureboard.com 127.0.0.1 www.asecureboard.com 127.0.0.1 asecurevalue.com 127.0.0.1 www.asecurevalue.com 127.0.0.1 asecurityissue.com here is another virus scan AntiVir PersonalEdition Classic Report file date: Saturday, April 12, 2008 23:51 Scanning for 1198942 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: SYSTEM Computer name: TRIBESMAN Version information: BUILD.DAT : 270 15603 Bytes 9/19/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 8/23/2007 20:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 8/16/2007 19:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 8/14/2007 22:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 8/21/2007 19:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 21:27:15 ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 3/7/2008 16:38:31 ANTIVIR2.VDF : 7.0.3.156 795136 Bytes 4/11/2008 01:26:50 ANTIVIR3.VDF : 7.0.3.158 61952 Bytes 4/11/2008 01:26:50 AVEWIN32.DLL : 7.6.0.85 3461632 Bytes 4/12/2008 01:26:50 AVWINLL.DLL : 1.0.0.7 14376 Bytes 2/26/2007 17:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 7/18/2007 14:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 20:16:24 AVPACK32.DLL : 7.6.0.3 360488 Bytes 1/22/2008 02:55:51 AVREG.DLL : 7.0.1.6 30760 Bytes 7/18/2007 14:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 8/28/2007 19:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 7/18/2007 14:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 3/8/2007 18:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 8/7/2007 19:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 8/21/2007 19:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 7/23/2007 16:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: C:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: off Scan all files...................: Intelligent file selection Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Macro heuristic..................: on File heuristic...................: medium Start of the scan: Saturday, April 12, 2008 23:51 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'ycommon.exe' - '1' Module(s) have been scanned Scan process 'iexplore.exe' - '1' Module(s) have been scanned Scan process 'iPodService.exe' - '1' Module(s) have been scanned Scan process 'mpbtn.exe' - '1' Module(s) have been scanned Scan process 'wmpnscfg.exe' - '1' Module(s) have been scanned Scan process 'CTFMON.EXE' - '1' Module(s) have been scanned Scan process 'MotiveSB.exe' - '1' Module(s) have been scanned Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned Scan process 'realsched.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'zlclient.exe' - '0' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avgas.exe' - '1' Module(s) have been scanned Scan process 'ALG.EXE' - '1' Module(s) have been scanned Scan process 'wmpnetwk.exe' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'KodakCCS.exe' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned Scan process 'guard.exe' - '1' Module(s) have been scanned Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'vsmon.exe' - '0' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'SVCHOST.EXE' - '1' Module(s) have been scanned Scan process 'LSASS.EXE' - '1' Module(s) have been scanned Scan process 'SERVICES.EXE' - '1' Module(s) have been scanned Scan process 'WINLOGON.EXE' - '1' Module(s) have been scanned Scan process 'CSRSS.EXE' - '1' Module(s) have been scanned Scan process 'SMSS.EXE' - '1' Module(s) have been scanned 36 processes with 36 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '20' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! End of the scan: Sunday, April 13, 2008 02:55 Used time: 3:03:49 min The scan has been done completely. 9889 Scanning directories 305146 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 305146 Files not concerned 9874 Archives were scanned 1 Warnings 1 Notes SmitFraudFix v2.312 Scan done at 3:14:22.93, Sun 04/13/2008 Run from C:\Documents and Settings\Delaine\Desktop\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\drivers\KodakCCS.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe C:\Program Files\QuickTime\QTTask.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\iTunes\iTunesHelper.exe C:\PROGRA~1\SBCSEL~1\SMARTB~1\MotiveSB.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\Program Files\SBC Self Support Tool\bin\mpbtn.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\PROGRA~1\Yahoo!\browser\ycommon.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\notepad.exe C:\Program Files\internet explorer\iexplore.exe C:\WINDOWS\system32\cmd.exe C:\WINDOWS\system32\CSCRIPT.EXE »»»»»»»»»»»»»»»»»»»»»»»» hosts »»»»»»»»»»»»»»»»»»»»»»»» C:\ »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32 »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Delaine »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Delaine\Application Data »»»»»»»»»»»»»»»»»»»»»»»» Start Menu »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\Delaine\FAVORI~1 C:\DOCUME~1\Delaine\FAVORI~1\Error Cleaner.url FOUND ! C:\DOCUME~1\Delaine\FAVORI~1\Privacy Protector.url FOUND ! C:\DOCUME~1\Delaine\FAVORI~1\Spyware?Malware Protection.url FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» Desktop C:\DOCUME~1\Delaine\Desktop\Error Cleaner.url FOUND ! C:\DOCUME~1\Delaine\Desktop\Privacy Protector.url FOUND ! C:\DOCUME~1\Delaine\Desktop\Spyware?Malware Protection.url FOUND ! »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files »»»»»»»»»»»»»»»»»»»»»»»» Corrupted keys »»»»»»»»»»»»»»»»»»»»»»»» Desktop Components [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0] "Source"="file:///C:\\WINDOWS\\privacy_danger\\index.htm" "SubscribedURL"="" "FriendlyName"="Privacy Protection" »»»»»»»»»»»»»»»»»»»»»»»» IEDFix !!!Attention, following keys are not inevitably infected!!! IEDFix Credits: Malware Analysis & Diagnostic Code: S!Ri »»»»»»»»»»»»»»»»»»»»»»»» VACFix !!!Attention, following keys are not inevitably infected!!! SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "AppInit_DLLs"="C:\\PROGRA~1\\Google\\GOOGLE~2\\GOEC62~1.DLL" "LoadAppInit_DLLs"=dword:00000001 »»»»»»»»»»»»»»»»»»»»»»»» Winlogon !!!Attention, following keys are not inevitably infected!!! [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] "Userinit"="C:\\WINDOWS\\system32\\userinit.exe," "System"="" »»»»»»»»»»»»»»»»»»»»»»»» Rustock »»»»»»»»»»»»»»»»»»»»»»»» DNS Description: Intel® PRO/100 VE Network Connection - Packet Scheduler Miniport DNS Server Search Order: 68.94.156.1 DNS Server Search Order: 68.94.157.1 HKLM\SYSTEM\CCS\Services\Tcpip\..\{140EF3B1-C175-450D-91A1-97CBEBDB7B9D}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CCS\Services\Tcpip\..\{140EF3B1-C175-450D-91A1-97CBEBDB7B9D}: NameServer=68.94.156.1,68.94.157.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{140EF3B1-C175-450D-91A1-97CBEBDB7B9D}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS1\Services\Tcpip\..\{140EF3B1-C175-450D-91A1-97CBEBDB7B9D}: NameServer=68.94.156.1,68.94.157.1 HKLM\SYSTEM\CS3\Services\Tcpip\..\{140EF3B1-C175-450D-91A1-97CBEBDB7B9D}: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS3\Services\Tcpip\..\{140EF3B1-C175-450D-91A1-97CBEBDB7B9D}: NameServer=68.94.156.1,68.94.157.1 HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1 »»»»»»»»»»»»»»»»»»»»»»»» Scanning for wininet.dll infection »»»»»»»»»»»»»»»»»»»»»»»» End This post has been edited by Delaine: Apr 13 2008, 03:24 AM |
 |
 
|
|
Apr 13 2008, 07:56 AM
Post
#2
|
|
 Bleepin' Janitor Group: Global Moderator Posts: 18,036 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
Please print out and follow the instructions for using SDFix in BC's self-help tutorial "How to use SDFix".
-- When using this tool, you must use the Administrator's account or an account with "Administrative rights" -- Disconnect from the Internet and temporarily disable your anti-virus and any anti-malware real time protection before performing a scan. When done, the SDFix report log will open in notepad and automatically be saved in the SDFix folder as Report.txt. Please copy and paste the contents of Report.txt in your next reply. Be sure to renable you anti-virus and and other security programs before connecting to the Internet. Please download Malwarebytes Anti-Malware and save it to your desktop. alternate download link 1 alternate download link 2
-------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2009  Member of UNITE, Unified Network of Instructors and Trusted Eliminators |
|
|
|
|
Apr 13 2008, 07:54 PM
Post
#3
|
|
|
Member Group: Members Posts: 107 Joined: 30-November 07 Member No.: 173,617 |
Thank you. Before I do this I'll tell you I decided to do system restore back to an earlier date and it appears to have work. Do you think it's still important to do this??
Thanks again ' |
|
|
|
|
Apr 14 2008, 07:10 AM
Post
#4
|
|
|
Bleepin' Janitor Group: Global Moderator Posts: 18,036 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
System Restore will back up the good as well as the bad files so when malware is present on the system it gets included in restore points. Although you used System Restore to resolve the issue by returning to an earlier date some of this malware may still be present in other restore points still on your computer and those restore points should be removed. Further, System Restore is limited and you still could have some malware on your pc even if your not experiencing any problems. I suggest you still use MBAM as instructed above.
Then when done, if everthing is ok, you can Create a New Restore Point and use Disk Cleanup to remove all but the most recently created Restore Point. -------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2009 Member of UNITE, Unified Network of Instructors and Trusted Eliminators |
|
|
|
|
Apr 14 2008, 05:43 PM
Post
#5
|
|
|
Member Group: Members Posts: 107 Joined: 30-November 07 Member No.: 173,617 |
Ok done. Here's the log,
Thanks Delaine Malwarebytes' Anti-Malware 1.11 Database version: 629 Scan type: Quick Scan Objects scanned: 35218 Time elapsed: 8 minute(s), 29 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 17 Registry Values Infected: 3 Registry Data Items Infected: 0 Folders Infected: 2 Files Infected: 5 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\AppID\{032706c0-eb72-4df0-abf6-b89958d2a6cc} (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\toolbar.htmlmenuui (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\toolbar.htmlmenuui.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\instie.hbinstobj (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\instie.hbinstobj.1 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\568267acfc5644dab06f058006ddbae3 (Adware.Zango) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{288c5f13-7e52-4ada-a32e-f5bf9d125f99} (Trojan.Downloader) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{450b9e4d-4014-4de3-b34e-014a81468293} (Trojan.Downloader) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\qiawpbjj.msdn_hlp (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\videoPl.chl (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully. Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\WINDOWS\privacy_danger (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\privacy_danger\images (Trojan.FakeAlert) -> Quarantined and deleted successfully. Files Infected: C:\WINDOWS\privacy_danger\index.htm (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\privacy_danger\images\capt.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\privacy_danger\images\danger.jpg (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\privacy_danger\images\down.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\WINDOWS\privacy_danger\images\spacer.gif (Trojan.FakeAlert) -> Quarantined and deleted successfully. |
|
|
|
|
Apr 15 2008, 08:15 AM
Post
#6
|
|
|
Bleepin' Janitor Group: Global Moderator Posts: 18,036 Joined: 9-July 05 From: Virginia, USA Member No.: 26,513 |
I thought we would find some more malware lurking on your system. How is you computer running now? Any more reports/signs of infection?
-------------------- "THE BAD GUYS DON'T NEED A SEARCH WARRANT. ARE YOU PROTECTED?"
Microsoft MVP - Windows Security 2007-2009 Member of UNITE, Unified Network of Instructors and Trusted Eliminators |
|
|
|
|
1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)
0 Members:
| Lo-Fi Version | Time is now: 21st November 2009 - 02:09 AM |
© 2003-2009 All Rights Reserved Bleeping Computer LLC.