BleepingComputer.com: Trojan

Jump to content

Forum Rules

When posting your problem, do not run and post a ComboFix log. ComboFix is a tool that should only be run under the supervision of someone who has been trained in its use. Using it on your own can cause problems with your computer. Any posts containing CF Logs will be ignored.

To receive help, you should instead provide a detailed description of your problem, detailed word-for-word error messages that you are receiving, screenshots of strange behaviour, and your operating system. This information is much more useful to our helpers than a ComboFix log.

If you have not received help after three days, please post a link to your topic HERE.
Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Trojan Do I need to take any further steps?

#1 User is offline   Christineakaasia 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 10
  • Joined: 11-October 10
  • Gender:Female

Posted 14 October 2010 - 01:09 PM

Hi there !

I just ran the free version of McAfee Stinger and it found 3 different Trojans. It also reported removing the 3 files. Below is the list of things it found I just want to make sure there is no further steps I should be doing to complete the removal. Thank you so much for your time!!!

AdClicker-EV
Adclicker-GV
AFXRootkit
Apropos
BackDoor-ALI
BackDoor-AQJ
BackDoor-AQJ.b
BackDoor-AWQ
BackDoor-AWQ.b
BackDoor-AXO
BackDoor-BAC
BackDoor-CEB
BackDoor-CEB!bat
BackDoor-CEB!hosts
BackDoor-CEB.b
BackDoor-CEB.c
BackDoor-CEB.d
BackDoor-CEB.dll
BackDoor-CEB.dr
BackDoor-CEB.e
BackDoor-CEB.f
BackDoor-CEB.sys
BackDoor-CFB
BackDoor-CSX
BackDoor-CSY
BackDoor-CUX
BackDoor-CWD
BackDoor-DIX
BackDoor-DJF
BackDoor-DJZ
BackDoor-DKI!mem
Backdoor-DOI
BackDoor-DOQ
BackDoor-EMI!mem
BackDoor-JZ
BackDoor-JZ.dam
BackDoor-JZ.dr
BackDoor-JZ.gen
BackDoor-JZ.gen.b
BackDoor-Spyeye
Bat/Autorun.worm.h
Bat/Autorun.worm.ni
Bat/Autorun.worm.zr
Bat/Autorun.worm.zr!vbs
Bat/Autorun.worm.zw
Bat/Mumu.worm
Bredolab.gen.a
Bredolab.gen.c
Cleanup
CoreFlood
Coreflood!psexec
Coreflood.dldr
CoreFlood.dll
CoreFlood.dr
Cutwail
Danmec
DNSChanger.f
Downloader-ARR
Downloader-AUE
Downloader-AXJ
Downloader-BAI
Downloader-BCS
Downloader-BVV
Downloader-CEV
Downloader-CEW
Downloader-CEW.a
Downloader-CEW.b
Downloader-CEW.c
Downloader-CEW.d
Downloader-CEW.e
Downloader-CEW.f
Downloader-CEW.g
Downloader-CEW.h
Downloader-CIP
Downloader-CJX
Downloader-CJX!env
Downloader-CJX!lnk
Downloader-CJX.gen.a
Downloader-CJX.gen.b
Downloader-CJX.gen.c
Downloader-CJX.gen.d
Downloader-CJX.gen.e
Downloader-CJX.gen.f
Downloader-CJX.gen.g
Downloader-CJX.gen.g!dr
Downloader-CJX.gen.h
Downloader-CJX.gen.i
Downloader-CJX.gen.j
Downloader-CJX.gen.k
Downloader-DN.a
Downloader-DN.b
Downloader-QO
Downloader-ZQ
Exploit-CVE-2010-2562
Exploit-CVE2010-2568
Exploit-CVE-2010-2568
Exploit-CVE-2010-2883
Exploit-DcomRpc
Exploit-DcomRpc.b
Exploit-DcomRpc.dll
Exploit-Lsass
Exploit-Lsass.dll
Exploit-MS04-011
Exploit-MS04-011.gen
Exploit-MSExcel.k
Exploit-MSExcel.l
Exploit-MSExcel.m
Exploit-MSExcel.n
Exploit-MSExcel.o
Exploit-MSExcel.p
Exploit-MSExcel.q
Exploit-MSExcel.r
Exploit-PDF.b
Exploit-PDF.b.gen
Exploit-PDF.b.gen.b
Exploit-PDF.c
Exploit-PDF.ca
Exploit-PDF.ca!stream
Exploit-PDF.cd
Exploit-PDF.d
Exploit-PDF.e
Exploit-PDF.f
Exploit-PDF.g
Exploit-PDF.h
Exploit-PDF.i
Exploit-PDF.i.gen
Exploit-PDF.j
Exploit-PDF.k
Exploit-PDF.l
Exploit-XMLhttp.d
Exploit-XMLhttp.d.gen
Exploit-XMLhttp.d.gen.b
Exploit-XMLhttpd.d
Exploit-XMLhttpd.gen.c
FakeAlert
FakeAlert-AA
FakeAlert-AB
FakeAlert-AB!htm
FakeAlert-AB.dldr
FakeAlert-AB.dr
FakeAlert-AC
FakeAlert-AD
FakeAlert-AE
FakeAlert-AF
FakeAlert-AG
FakeAlert-AG.gen.b
FakeAlert-AG.gen.c
FakeAlert-AH
FakeAlert-AI
FakeAlert-AJ
FakeAlert-AK
FakeAlert-AL
FakeAlert-AM
FakeAlert-AN
FakeAlert-AntiMalwareDoc
FakeAlert-AntiSpywarePro
FakeAlert-AntiSpywarePro.dll
FakeAlert-AntiVirusPlus
FakeAlert-AntiVirusPro
FakeAlert-AntiVirusPro!hosts
FakeAlert-AntiVirusXP
FakeAlert-AO
FakeAlert-AP
FakeAlert-AQ
FakeAlert-AR
FakeAlert-AS
FakeAlert-AT
FakeAlert-AU
FakeAlert-av2009
FakeAlert-av360
FakeAlert-AV7
FakeAlert-AVPSec
FakeAlert-AVPsec!env
FakeAlert-AVPSec!env.a
FakeAlert-AVPSec!env.b
FakeAlert-AVPSec!env.c
FakeAlert-AVPSec!env.d
FakeAlert-AVPSec!env.e
FakeAlert-AVPSec!env.f
FakeAlert-AVPSec!env.g
FakeAlert-AVPSec!env.h
FakeAlert-AVPSec!env.i
FakeAlert-AVPSec.a
FakeAlert-AVSoft
FakeAlert-AVSoft!env
FakeAlert-AW
FakeAlert-AZ
FakeAlert-AZ!htm
FakeAlert-B
FakeAlert-B.dldr
FakeAlert-B.dr
FakeAlert-BA
FakeAlert-BB
FakeAlert-BC
FakeAlert-BD
FakeAlert-BE
FakeAlert-BE.gen
FakeAlert-BF
FakeAlert-BG.dldr
FakeAlert-BH.dldr
FakeAlert-BI
FakeAlert-BJ
FakeAlert-BK
FakeAlert-BL
FakeAlert-BM
FakeAlert-BN
FakeAlert-BO
FakeAlert-BO.dldr
FakeAlert-BP
FakeAlert-BQ
FakeAlert-BR
FakeAlert-BS
FakeAlert-BS.dll
FakeAlert-BT
FakeAlert-BU
FakeAlert-BV
FakeAlert-BV.dldr
FakeAlert-BW
FakeAlert-BX
FakeAlert-BY
FakeAlert-BZ
FakeAlert-C
FakeAlert-C.dr
FakeAlert-C.gen
FakeAlert-CA
FakeAlert-CB
FakeAlert-CC
FakeAlert-CC.dr
FakeAlert-CD
FakeAlert-CE
FakeAlert-CF
FakeAlert-CG
FakeAlert-CH
FakeAlert-CI
FakeAlert-CJ
FakeAlert-CK
FakeAlert-CL
FakeAlert-CleanUpAv
FakeAlert-CleanUpAv!vbs
FakeAlert-CM
FakeAlert-CN
FakeAlert-CN.gen.a
FakeAlert-CO
FakeAlert-CoreGuard
FakeAlert-CP
FakeAlert-CPA
FakeAlert-CQ
FakeAlert-CR
FakeAlert-CS
FakeAlert-CT
FakeAlert-CU
FakeAlert-CV
FakeAlert-CW
FakeAlert-CX
FakeAlert-CY
FakeAlert-CZ
FakeAlert-D
FakeAlert-DA
FakeAlert-DB
FakeAlert-DC
FakeAlert-DD
FakeAlert-DE
FakeAlert-DefCnt!env.a
FakeAlert-DefCnt!env.b
FakeAlert-DefCnt!env.c
FakeAlert-DefCnt.a
FakeAlert-DefCnt.b
FakeAlert-DefCnt.c
FakeAlert-DefCnt.d
FakeAlert-DefenceLab
FakeAlert-DeskTopSec
FakeAlert-DeskTopSec!grb
FakeAlert-DeskTopSec.gen
FakeAlert-DeskTopSecurity2010
FakeAlert-DF
FakeAlert-DG
FakeAlert-DH
FakeAlert-DHA
FakeAlert-DI
FakeAlert-DJ
FakeAlert-DK
FakeAlert-DL
FakeAlert-DM
FakeAlert-DN
FakeAlert-DO
FakeAlert-DP
FakeAlert-DQ
FakeAlert-DR
FakeAlert-DS
FakeAlert-DT
FakeAlert-DU
FakeAlert-DV
FakeAlert-DW
FakeAlert-DX
FakeAlert-DY
FakeAlert-DZ
FakeAlert-E
FakeAlert-EA
FakeAlert-EB
FakeAlert-EC
FakeAlert-ED
FakeAlert-EE
FakeAlert-EF
FakeAlert-EG
FakeAlert-EH
FakeAlert-EI
FakeAlert-EJ
FakeAlert-EJA
FakeAlert-EJB
FakeAlert-EK
FakeAlert-EL
FakeAlert-EM
FakeAlert-EN
FakeAlert-EO
FakeAlert-EQ
FakeAlert-EQ.a
FakeAlert-EQ.b
FakeAlert-EQ.c
FakeAlert-ER
FakeAlert-ES
FakeAlert-ET
FakeAlert-EU
FakeAlert-EV
FakeAlert-EW
FakeAlert-EX
FakeAlert-EY
FakeAlert-EZ
FakeAlert-F
FakeAlert-FA
FakeAlert-FakeAVBW!env.b
FakeAlert-FakeSpy!env
FakeAlert-FakeSpy!env.a
FakeAlert-FakeSpy!env.b
FakeAlert-FakeSpy!env.c
FakeAlert-FakeSpy!env.d
FakeAlert-FB
FakeAlert-FC
FakeAlert-FD
FakeAlert-FE
FakeAlert-FF
FakeAlert-FG.dldr
FakeAlert-FH
FakeAlert-FI
FakeAlert-FJ
FakeAlert-FK
FakeAlert-FL
FakeAlert-FM
FakeAlert-FN
FakeAlert-FO
FakeAlert-FP
FakeAlert-FQ
FakeAlert-FR
FakeAlert-FS
FakeAlert-FT
FakeAlert-FU
FakeAlert-FU.dr
FakeAlert-FV
FakeAlert-FV.dll
FakeAlert-FW
FakeAlert-FX
FakeAlert-FY
FakeAlert-FZ
FakeAlert-G
FakeAlert-GA
FakeAlert-GA!htm
FakeAlert-GA.dll
FakeAlert-GA.gen
FakeAlert-GB
FakeAlert-GC
FakeAlert-GD
FakeAlert-GE
FakeAlert-Gen
FakeAlert-Gen.a
FakeAlert-Gen.b
FakeAlert-Generalav
FakeAlert-GF
FakeAlert-GG
FakeAlert-GH
FakeAlert-GI
FakeAlert-GJ
FakeAlert-GK
FakeAlert-GL
FakeAlert-GM
FakeAlert-GN
FakeAlert-GO
FakeAlert-GP
FakeAlert-GQ
FakeAlert-GR
FakeAlert-GreenAV
FakeAlert-GS
FakeAlert-GT
FakeAlert-GT.dr
FakeAlert-GU
FakeAlert-GV
FakeAlert-GW
FakeAlert-GX
FakeAlert-GY
FakeAlert-GZ
FakeAlert-H
FakeAlert-HA
FakeAlert-HB
FakeAlert-HC
FakeAlert-HD
FakeAlert-HE
FakeAlert-HF
FakeAlert-HG
FakeAlert-HH
FakeAlert-HI
FakeAlert-HJ
FakeAlert-HK
FakeAlert-HL
FakeAlert-HM
FakeAlert-HN
FakeAlert-HO
FakeAlert-HP
FakeAlert-HQ
FakeAlert-HR
FakeAlert-HS
FakeAlert-HT
FakeAlert-HU
FakeAlert-HV
FakeAlert-HW
FakeAlert-HX
FakeAlert-HY
FakeAlert-HZ
FakeAlert-I
FakeAlert-IA
FakeAlert-IB
FakeAlert-IC
FakeAlert-ID
FakeAlert-IE
FakeAlert-IF
FakeAlert-IG
FakeAlert-IH
FakeAlert-II
FakeAlert-IJ
FakeAlert-IK
FakeAlert-IL
FakeAlert-IM
FakeAlert-IN
FakeAlert-IO
FakeAlert-IP
FakeAlert-IQ
FakeAlert-IR
FakeAlert-IS
FakeAlert-IS2010.dldr
FakeAlert-IT
FakeAlert-IU
FakeAlert-IV
FakeAlert-IW
FakeAlert-IX
FakeAlert-IY
FakeAlert-IZ
FakeAlert-J
FakeAlert-JA
FakeAlert-JB
FakeAlert-JC
FakeAlert-JD
FakeAlert-JE
FakeAlert-JF
FakeAlert-JG
FakeAlert-JH
FakeAlert-JI
FakeAlert-JJ
FakeAlert-JK
FakeAlert-JL
FakeAlert-JM
FakeAlert-JM.gen.a
FakeAlert-JM.gen.d
FakeAlert-JM.gen.e
FakeAlert-JM.gen.f
FakeAlert-JN
FakeAlert-JO
FakeAlert-JP
FakeAlert-JQ
FakeAlert-JR
FakeAlert-JT
FakeAlert-JU
FakeAlert-JV
FakeAlert-JW
FakeAlert-JX
FakeAlert-JY
FakeAlert-JZ
FakeAlert-JZ.dll
FakeAlert-K
FakeAlert-KA
FakeAlert-KB
FakeAlert-KC
FakeAlert-KC.a
FakeAlert-KC.b
FakeAlert-KC.c
FakeAlert-KC.d
FakeAlert-KC.e
FakeAlert-KC.f
FakeAlert-KD
FakeAlert-KE
FakeAlert-KF
FakeAlert-KG
FakeAlert-KH
FakeAlert-KI
FakeAlert-KJ
FakeAlert-KK
FakeAlert-KL
FakeAlert-KM
FakeAlert-KN
FakeAlert-KN!grb
FakeAlert-KN.a
FakeAlert-KN.b
FakeAlert-KN.c
FakeAlert-KN.dldr
FakeAlert-KN.dldr.gen
FakeAlert-KN.dldr.gen.a
FakeAlert-KN.dldr.gen.b
FakeAlert-KN.dldr.gen.c
FakeAlert-KN.dldr.gen.d
FakeAlert-KN.gen
FakeAlert-KN.gen.a
FakeAlert-KN.gen.b
FakeAlert-KO
FakeAlert-KP
FakeAlert-KQ
FakeAlert-KR
FakeAlert-Krypt!env.a
FakeAlert-Krypt!env.b
FakeAlert-Krypt!env.c
FakeAlert-Krypt!env.d
FakeAlert-Krypt!env.e
FakeAlert-Krypt.d
Fakealert-KS
FakeAlert-KS!lnk
FakeAlert-KS.a
FakeAlert-KT
FakeAlert-KU
FakeAlert-KV
FakeAlert-KW
FakeAlert-KW!htm
FakeAlert-KW!lnk
FakeAlert-KW.a
FakeAlert-KW.b
FakeAlert-KW.c
FakeAlert-KW.d
FakeAlert-KW.e
FakeAlert-KW.f
FakeAlert-KW.g
FakeAlert-KW.h
FakeAlert-KW.i
FakeAlert-KW.j
FakeAlert-KW.k
FakeAlert-KW.l
FakeAlert-KW.m
FakeAlert-KX
FakeAlert-KY
FakeAlert-KYA
FakeAlert-KYB
FakeAlert-KYC
FakeAlert-KYD
FakeAlert-KYE
FakeAlert-KYF
FakeAlert-KYG
FakeAlert-KZ
FakeAlert-KZA
FakeAlert-KZB
FakeAlert-KZC
FakeAlert-L
FakeAlert-LA
FakeAlert-LA.a
FakeAlert-LastDefender
FakeAlert-LB
FakeAlert-LC
FakeAlert-LD
FakeAlert-LE
FakeAlert-LF
FakeAlert-LG
FakeAlert-LH
FakeAlert-LI
FakeAlert-LivePCGuard
FakeAlert-LivePCGuard!hosts
FakeAlert-LiveSeurity
FakeAlert-LJ
FakeAlert-LK
FakeAlert-LL
FakeAlert-LM
FakeAlert-LN
FakeAlert-LO
FakeAlert-LP
FakeAlert-LQ
FakeAlert-LR
FakeAlert-LS
FakeAlert-LT
FakeAlert-LU
FakeAlert-LV
FakeAlert-LW
FakeAlert-LX
FakeAlert-LY
FakeAlert-LZ
FakeAlert-M
FakeAlert-MA
FakeAlert-MA.dr
FakeAlert-MA.gen
FakeAlert-MA.gen.b
FakeAlert-MaCatte
FakeAlert-MalDef
FakeAlert-MalDef.dldr
FakeAlert-MalDef.dll
FakeAlert-MalDef.gen.a
FakeAlert-MalDef.gen.b
FakeAlert-MalDef.gen.c
FakeAlert-MB
FakeAlert-MC
FakeAlert-MCodec
FakeAlert-MCodec!htm
FakeAlert-MD
FakeAlert-ME
FakeAlert-MF
FakeAlert-MG
FakeAlert-MH
FakeAlert-MI
FakeAlert-MJ
FakeAlert-MK
FakeAlert-ML
FakeAlert-MM
FakeAlert-MN
FakeAlert-MO
FakeAlert-MP
FakeAlert-MQ
FakeAlert-MR
FakeAlert-MS
FakeAlert-MT
FakeAlert-MU
FakeAlert-MV
FakeAlert-MW
FakeAlert-MX
FakeAlert-MY
FakeAlert-MY.a
FakeAlert-MY.b
FakeAlert-MY.c
FakeAlert-MY.dldr
FakeAlert-MY.gen
FakeAlert-MZ
FakeAlert-N
FakeAlert-N.dldr
FakeAlert-NA
FakeAlert-NB
FakeAlert-NC
FakeAlert-ND
FakeAlert-NE
FakeAlert-NF
FakeAlert-NG
FakeAlert-NH
FakeAlert-NI
FakeAlert-NJ
FakeAlert-NK
FakeAlert-NL
FakeAlert-NM
FakeAlert-NN
FakeAlert-NO
FakeAlert-NP
FakeAlert-NR
FakeAlert-NS
FakeAlert-NT
FakeAlert-NU
FakeAlert-NV
FakeAlert-NW
FakeAlert-NX
FakeAlert-NY
FakeAlert-NZ
FakeAlert-O
FakeAlert-OA
FakeAlert-OB
FakeAlert-OC
FakeAlert-OD
FakeAlert-OE
FakeAlert-OF
FakeAlert-OG
FakeAlert-OH
FakeAlert-OI
FakeAlert-OJ
FakeAlert-OK
FakeAlert-OK.a
FakeAlert-OK.b
FakeAlert-OL
FakeAlert-OM
FakeAlert-ON
FakeAlert-OnlineSecurity
FakeAlert-OP
FakeAlert-OQ
FakeAlert-OR
FakeAlert-OS
FakeAlert-OT
FakeAlert-OU
FakeAlert-OV
FakeAlert-OW
FakeAlert-OX
FakeAlert-OY
FakeAlert-OZ
FakeAlert-P
FakeAlert-PA
FakeAlert-PB
FakeAlert-PC
FakeAlert-PC-Care
FakeAlert-PD
FakeAlert-PD.gen
FakeAlert-PE
FakeAlert-PerfectDefender
FakeAlert-PerfectDefender.dll
FakeAlert-PersonalAV
FakeAlert-PersonalSecurity
FakeAlert-PF
FakeAlert-PG
FakeAlert-PH
FakeAlert-PI
FakeAlert-PJ
FakeAlert-PrivacyCenter
FakeAlert-Q
FakeAlert-R
FakeAlert-RealAV
FakeAlert-RegistryDefender
FakeAlert-S
FakeAlert-S.dll
FakeAlert-SafetyAntiSpy
FakeAlert-SafetyCenter
FakeAlert-SafetyCenter.dldr
FakeAlert-SaftyManager
FakeAlert-SaveDefence
FakeAlert-SecureKeeper
FakeAlert-SecurityAntivirus
FakeAlert-SecurityCentral
FakeAlert-SecurityMasterAV
FakeAlert-SecurityMasterAV.a
FakeAlert-SecurityMasterAV.b
FakeAlert-SecurityMasterAV.c
FakeAlert-SecurityMasterAV.d
FakeAlert-SecurityMasterAV.e
FakeAlert-SecurityTool
FakeAlert-SecurityTool.a
FakeAlert-SecurityTool.b
FakeAlert-SecurityTool.c
FakeAlert-SecurityTool.d
FakeAlert-SecurityTool.e
FakeAlert-SecurityTool.f
FakeAlert-SecurityTool.g
FakeAlert-SecurityTool.h
FakeAlert-SecurityTool.i
FakeAlert-SecurityTool.j
FakeAlert-SecurityTool.k
FakeAlert-SecurityTools
FakeAlert-SpyKiller
FakeAlert-SpyPro
FakeAlert-SpyPro!dam
FakeAlert-SpyPro.gen.a
FakeAlert-SpyPro.gen.aa
FakeAlert-SpyPro.gen.ab
FakeAlert-SpyPro.gen.ac
FakeAlert-SpyPro.gen.ad
FakeAlert-SpyPro.gen.ae
FakeAlert-SpyPro.gen.af
FakeAlert-SpyPro.gen.ag
FakeAlert-SpyPro.gen.ah
FakeAlert-SpyPro.gen.ai
FakeAlert-SpyPro.gen.aj
FakeAlert-SpyPro.gen.ak
FakeAlert-SpyPro.gen.al
FakeAlert-SpyPro.gen.b
FakeAlert-SpyPro.gen.c
FakeAlert-SpyPro.gen.d
FakeAlert-SpyPro.gen.e
FakeAlert-SpyPro.gen.f
FakeAlert-SpyPro.gen.g
FakeAlert-SpyPro.gen.h
FakeAlert-SpyPro.gen.i
FakeAlert-SpyPro.gen.j
FakeAlert-SpyPro.gen.k
FakeAlert-SpyPro.gen.l
FakeAlert-SpyPro.gen.m
FakeAlert-SpyPro.gen.n
FakeAlert-SpyPro.gen.o
FakeAlert-SpyPro.gen.p
FakeAlert-SpyPro.gen.q
FakeAlert-SpyPro.gen.r
FakeAlert-SpyPro.gen.s
FakeAlert-SpyPro.gen.t
FakeAlert-SpyPro.gen.u
FakeAlert-SpyPro.gen.v
FakeAlert-SpyPro.gen.x
FakeAlert-SpyPro.gen.y
FakeAlert-SpyPro.gen.z
FakeAlert-SpywareGuard
FakeAlert-SpywareGuard.gen.b
FakeAlert-SpywareProtect
FakeAlert-SysAV
FakeAlert-SysAV.a
FakeAlert-SysAV.b
FakeAlert-SysIntAV!env.a
FakeAlert-SysIntAV!env.b
FakeAlert-SysIntAV!env.c
FakeAlert-SysIntAV!env.d
FakeAlert-SystemSecurity
FakeAlert-T
FakeAlert-TotalPCDefender
FakeAlert-U
FakeAlert-V
FakeAlert-W
FakeAlert-WinPolicePro
FakeAlert-WinWebSec!env.a
FakeAlert-WinWebSec!env.b
FakeAlert-WinWebSec!env.c
FakeAlert-WinWebSec!env.d
FakeAlert-WinWebSec!env.e
FakeAlert-WinwebSecurity
FakeAlert-WPS
FakeAlert-WPS.gen.c
FakeAlert-WPS.gen.d
FakeAlert-WPS.gen.d!hosts
FakeAlert-WwSec.b
FakeAlert-WwSec.c
FakeAlert-WwSec.d
FakeAlert-WwSec.e
FakeAlert-X
FakeAlert-XPA!env
FakeAlert-XPA!env.a
FakeAlert-XPAntivirus
FakeAlert-XPPoliceAntivirus
FakeAlert-XPSecCenter
FakeAlert-XPSpy
FakeAlert-Y
FakeAlert-Y.dr
FakeAlert-Z
FakeMS
FakeMS.a
FakeMS.b
Generic Downloader.ab
Generic Downloader.gb
Generic Downloader.gc
Generic Downloader.gd
Generic Downloader.ge
Generic Downloader.gf
Generic Downloader.gg
Generic Downloader.z
Generic Fakealert
Generic FakeAlert!data
Generic FakeAlert!lnk
Generic FakeAlert.aa
Generic FakeAlert.ab
Generic FakeAlert.ac
Generic FakeAlert.ad
Generic FakeAlert.ae
Generic FakeAlert.af
Generic FakeAlert.ag
Generic FakeAlert.b
Generic FakeAlert.d
Generic FakeAlert.d!gen
Generic FakeAlert.e
Generic FakeAlert.f
Generic FakeAlert.g
Generic Fakealert.gen.a
Generic FakeAlert.h
Generic FakeAlert.j
Generic FakeAlert.k
Generic FakeAlert.l
Generic FakeAlert.m
Generic FakeAlert.n
Generic FakeAlert.o
Generic FakeAlert.p
Generic FakeAlert.q
Generic FakeAlert.r
Generic FakeAlert.s
Generic FakeAlert.t
Generic FakeAlert.u
Generic FakeAlert.v
Generic FakeAlert.w
Generic FakeAlert.x
Generic FakeAlert.y
Generic FakeAlert.z
Generic PWS.y!mem
Generic RootKit.a
Generic Rootkit.d
Generic RootKit.e
Generic RootKit.f
Generic Rootkit.g
Generic!atr
Generic.dx
HackerDefender
HE4Hook
Hidden-Process.a
HideVault!sys
HideWindow
HideWindow.dll
Htool-SAD
HTool-T2W
Ilomo
IPCScan
IRC/Flood.ap
IRC/Flood.ap.bat
IRC/Flood.ap.dr
IRC/Flood.bi
IRC/Flood.bi.dr
IRC/Flood.cd
IRCbot.gen.ah
JS/Autorun.worm.ci
JS/Downloader-AUE
JS/Downloader-BHX
JS/FakeAlert
JS/FakeAlert-AB
JS/FakeAlert-AB.dldr
Keylog-Powered
Lando
MadCodeHook
NTRootkit-E
NTRootKit-H
NTRootKit-I
NTRootKit-J
NTRootkit-S
NTRootkit-U
NTRootkit-Z
NTServiceLoader
Patched-Import
ProcKill
Proxy-Agent.af
Proxy-Agent.af.dr
Puper
PWS-Banker.df
PWS-Banker.dldr
PWS-FireMing
PWS-FireMing.dll
PWS-FireMing.dr
PWS-Gamania.gen.a
PWS-Gogo
PWS-Goldun
PWS-LDPinch
PWS-Narod
PWS-Narod.dll
PWS-Narod.gen
PWS-Onlinegames
PWS-Progent
PWS-Sincom
PWS-Sincom.dll
PWS-Sincom.dr
QHosts-123
Qoolaid.a
rootkit
RootKit-NTIllusion
Rscan
Rustock
Rustock.gen.b
Spam-Mailbot.c
Spy-Agent.bf
Spy-Agent.bv
Spy-Agent.bw
Spy-Agent.bw!mem
Spy-Agent.bw.gen!mem
Spy-Agent.de
Spy-Agent.dn
Spyware-007
Srizbi
StartPage-KM
StealthMBR
StealthMBR.a
StealthMBR.b
StealthMBR.c
TDSS.a
TDSS.b
TDSS.c
Vanquish
Vanti
VBS/Autorun.bj
VBS/Autorun.worm.aau
VBS/Autorun.worm.aav
VBS/Autorun.worm.aaw
VBS/Autorun.worm.aax
VBS/Autorun.worm.au
VBS/Autorun.worm.ay
VBS/Autorun.worm.bi
VBS/Autorun.worm.bj
VBS/Autorun.worm.bs
VBS/Autorun.worm.by
VBS/Autorun.worm.ca
VBS/Autorun.worm.cy
VBS/Autorun.worm.dm
VBS/Autorun.worm.dn
VBS/Autorun.worm.dn!atr
VBS/Autorun.worm.dn!txt
VBS/Autorun.worm.dv
VBS/Autorun.worm.dz
VBS/Autorun.worm.en
VBS/Autorun.worm.ew
VBS/Autorun.worm.fu
VBS/Autorun.worm.gc
VBS/Autorun.worm.gd
VBS/Autorun.worm.ge
VBS/Autorun.worm.gf
VBS/Autorun.worm.k
VBS/Autorun.worm.k!bat
VBS/Autorun.worm.k!lnk
VBS/Autorun.worm.k!reg
VBS/Autorun.worm.ni
VBS/Autorun.worm.zd
VBS/Autorun.worm.ze
VBS/Autorun.worm.zl
VBS/Autorun.worm.zn
VBS/Autorun.worm.zo
VBS/Autorun.worm.zo!lnk
VBS/Autorun.worm.zs
VBS/Autorun.worm.zy
VBS/Autorun.worm.zz
VBS/FakeAlert-AB
VBS/FakeAlert-EY.dr
VBS/FakeAV
VBS/IE-Title
Vundo
Vundo!grb
Vundo.dd
Vundo.dldr
Vundo.dr
Vundo.gen.aa
Vundo.gen.ab
Vundo.gen.ac
Vundo.gen.ad
Vundo.gen.ae
Vundo.gen.af
Vundo.gen.ag
Vundo.gen.ah
Vundo.gen.ai
Vundo.gen.aj
Vundo.gen.ak
Vundo.gen.al
Vundo.gen.am
Vundo.gen.an
Vundo.gen.ao
Vundo.gen.ap
Vundo.gen.aq
Vundo.gen.ar
Vundo.gen.as
Vundo.gen.at
Vundo.gen.au
Vundo.gen.av
Vundo.gen.aw
Vundo.gen.ax
Vundo.gen.ay
Vundo.gen.az
Vundo.gen.ba
Vundo.gen.bb
Vundo.gen.bc
Vundo.gen.bd
Vundo.gen.be
Vundo.gen.bf
Vundo.gen.bg
Vundo.gen.bh
Vundo.gen.bi
Vundo.gen.bj
Vundo.gen.bk
Vundo.gen.bl
Vundo.gen.bm
Vundo.gen.bn
Vundo.gen.bo
Vundo.gen.bp
Vundo.gen.bq
Vundo.gen.br
Vundo.gen.bs
Vundo.gen.bt
Vundo.gen.bu
Vundo.gen.bv
Vundo.gen.bw
Vundo.gen.bx
Vundo.gen.by
Vundo.gen.bz
Vundo.gen.ca
Vundo.gen.cb
Vundo.gen.cc
Vundo.gen.cd
Vundo.gen.ce
Vundo.gen.cf
Vundo.gen.cg
Vundo.gen.ch
Vundo.gen.ci
Vundo.gen.cj
Vundo.gen.ck
Vundo.gen.cl
Vundo.gen.cm
Vundo.gen.cn
Vundo.gen.co
Vundo.gen.cp
Vundo.gen.cq
Vundo.gen.cr
Vundo.gen.cs
Vundo.gen.ct
Vundo.gen.cu
Vundo.gen.cv
Vundo.gen.cw
Vundo.gen.cx
Vundo.gen.cz
Vundo.gen.da
Vundo.gen.db
Vundo.gen.dc
Vundo.gen.de
Vundo.gen.df
Vundo.gen.dg
Vundo.gen.dh
Vundo.gen.di
Vundo.gen.dj
Vundo.gen.dk
Vundo.gen.dl
Vundo.gen.dm
Vundo.gen.dn
Vundo.gen.h
Vundo.gen.i
Vundo.gen.j
Vundo.gen.k
Vundo.gen.l
Vundo.gen.m
Vundo.gen.n
Vundo.gen.o
Vundo.gen.p
Vundo.gen.r
Vundo.gen.s
Vundo.gen.s.dr
Vundo.gen.t
Vundo.gen.u
Vundo.gen.v
Vundo.gen.w
Vundo.gen.x
Vundo.gen.y
Vundo.gen.z
W32/Almanahe
W32/Almanahe.a
W32/Anig.worm
W32/Anig.worm.dll
W32/Autorun
W32/Autorun.fo
W32/Autorun.worm
W32/Autorun.worm!inf
W32/Autorun.worm!ini
W32/Autorun.worm!vbd
W32/Autorun.worm.a
W32/Autorun.worm.aa
W32/Autorun.worm.aaa
W32/Autorun.worm.aaab
W32/Autorun.worm.aaac
W32/Autorun.worm.aaad
W32/Autorun.worm.aaae
W32/Autorun.worm.aaaf
W32/Autorun.worm.aaag
W32/Autorun.worm.aaah
W32/Autorun.worm.aaai
W32/Autorun.worm.aaai!lnk
W32/Autorun.worm.aaaj
W32/Autorun.worm.aaak
W32/Autorun.worm.aaal
W32/Autorun.worm.aaam
W32/Autorun.worm.aaan
W32/Autorun.worm.aaao
W32/Autorun.worm.aaap
W32/Autorun.worm.aaaq
W32/Autorun.worm.aaar
W32/Autorun.worm.aaas
W32/Autorun.worm.aaat
W32/Autorun.worm.aaau
W32/Autorun.worm.aab
W32/Autorun.worm.aac
W32/Autorun.worm.aad
W32/Autorun.worm.aae
W32/Autorun.worm.aaf
W32/Autorun.worm.aag
W32/Autorun.worm.aah
W32/Autorun.worm.aai
W32/Autorun.worm.aaj
W32/Autorun.worm.aaj!inf
W32/Autorun.worm.aak
W32/Autorun.worm.aal
W32/Autorun.worm.aam
W32/Autorun.worm.aan
W32/Autorun.worm.aao
W32/Autorun.worm.aap
W32/Autorun.worm.aaq
W32/Autorun.worm.aar
W32/Autorun.worm.aas
W32/Autorun.worm.aat
W32/Autorun.worm.aau
W32/Autorun.worm.aau!env
W32/Autorun.worm.aaw
W32/Autorun.worm.aax
W32/Autorun.worm.aay
W32/Autorun.worm.aaz
W32/Autorun.worm.ab
W32/Autorun.worm.aba
W32/Autorun.worm.abb
W32/Autorun.worm.ac
W32/Autorun.worm.ad
W32/Autorun.worm.ae
W32/Autorun.worm.af
W32/Autorun.worm.ag
W32/Autorun.worm.ai
W32/Autorun.worm.aj
W32/Autorun.worm.ak
W32/Autorun.worm.al
W32/Autorun.worm.am
W32/Autorun.worm.an
W32/Autorun.worm.ao
W32/Autorun.worm.ap
W32/Autorun.worm.aq
W32/Autorun.worm.ar
W32/Autorun.worm.as
W32/Autorun.worm.at
W32/Autorun.worm.av
W32/Autorun.worm.aw
W32/Autorun.worm.ax
W32/Autorun.worm.az
W32/Autorun.worm.b
W32/Autorun.worm.b.cfg
W32/Autorun.worm.ba
W32/Autorun.worm.bb
W32/Autorun.worm.bba
W32/Autorun.worm.bbb
W32/Autorun.worm.bbc
W32/Autorun.worm.bbd
W32/Autorun.worm.bbe
W32/Autorun.worm.bbf
W32/Autorun.worm.bbg
W32/Autorun.worm.bbh
W32/Autorun.worm.bbh!bat
W32/Autorun.worm.bbh!job
W32/Autorun.worm.bbi
W32/Autorun.worm.bc
W32/Autorun.worm.bd
W32/Autorun.worm.be
W32/Autorun.worm.bf
W32/Autorun.worm.bg
W32/Autorun.worm.bh
W32/Autorun.worm.bk
W32/Autorun.worm.bl
W32/Autorun.worm.bm
W32/Autorun.worm.bn
W32/Autorun.worm.bo
W32/Autorun.worm.bp
W32/Autorun.worm.bp!reg
W32/Autorun.worm.bq
W32/Autorun.worm.br
W32/Autorun.worm.bt
W32/Autorun.worm.bw
W32/Autorun.worm.bx
W32/Autorun.worm.bx!atr
W32/Autorun.worm.bx!inf
W32/Autorun.worm.bx.gen
W32/Autorun.worm.by
W32/Autorun.worm.by!env
W32/Autorun.worm.bz
W32/Autorun.worm.c
W32/Autorun.worm.cb
W32/Autorun.worm.cb.dr
W32/Autorun.worm.cc
W32/Autorun.worm.cd
W32/Autorun.worm.ce
W32/Autorun.worm.cf
W32/Autorun.worm.cg
W32/Autorun.worm.ch
W32/Autorun.worm.cj
W32/Autorun.worm.ck
W32/Autorun.worm.cm
W32/Autorun.worm.cn
W32/Autorun.worm.co
W32/Autorun.worm.cp
W32/Autorun.worm.cp!bat
W32/Autorun.worm.cq
W32/Autorun.worm.cr
W32/Autorun.worm.cs
W32/Autorun.worm.cs!ini
W32/Autorun.worm.ct
W32/Autorun.worm.cu
W32/Autorun.worm.cv
W32/Autorun.worm.cw
W32/Autorun.worm.cx
W32/Autorun.worm.cz
W32/Autorun.worm.d
W32/Autorun.worm.da
W32/Autorun.worm.db
W32/Autorun.worm.dc
W32/Autorun.worm.dd
W32/Autorun.worm.dd!inf
W32/Autorun.worm.de
W32/Autorun.worm.df
W32/Autorun.worm.dg
W32/Autorun.worm.dh
W32/Autorun.worm.di
W32/Autorun.worm.dj
W32/Autorun.worm.dk
W32/Autorun.worm.dl
W32/Autorun.worm.dn
W32/Autorun.worm.do
W32/Autorun.worm.dp
W32/Autorun.worm.dq
W32/Autorun.worm.ds
W32/Autorun.worm.dt
W32/Autorun.worm.du
W32/Autorun.worm.dw
W32/Autorun.worm.dx
W32/Autorun.worm.dy
W32/Autorun.worm.e
W32/Autorun.worm.ea
W32/Autorun.worm.eb
W32/Autorun.worm.ec
W32/Autorun.worm.ed
W32/Autorun.worm.ef
W32/Autorun.worm.eg
W32/Autorun.worm.ei
W32/Autorun.worm.ej
W32/Autorun.worm.ek
W32/Autorun.worm.el
W32/Autorun.worm.em
W32/Autorun.worm.eo
W32/Autorun.worm.ep
W32/Autorun.worm.eq
W32/Autorun.worm.er
W32/Autorun.worm.es
W32/Autorun.worm.et
W32/Autorun.worm.eu
W32/Autorun.worm.eu!bat
W32/Autorun.worm.eu!lnk
W32/Autorun.worm.ev
W32/Autorun.worm.ex
W32/Autorun.worm.ey
W32/Autorun.worm.ez
W32/Autorun.worm.f
W32/Autorun.worm.fa
W32/Autorun.worm.fb
W32/Autorun.worm.fc
W32/Autorun.worm.fc!bat
W32/Autorun.worm.fd
W32/Autorun.worm.fe
W32/Autorun.worm.ff
W32/Autorun.worm.fg
W32/Autorun.worm.fh
W32/Autorun.worm.fi
W32/Autorun.worm.fj
W32/Autorun.worm.fk
W32/Autorun.worm.fl
W32/Autorun.worm.fm
W32/Autorun.worm.fn
W32/Autorun.worm.fp
W32/Autorun.worm.fq
W32/Autorun.worm.fr
W32/Autorun.worm.fs
W32/Autorun.worm.ft
W32/Autorun.worm.fu
W32/Autorun.worm.fv
W32/Autorun.worm.fw
W32/Autorun.worm.fx
W32/Autorun.worm.fy
W32/Autorun.worm.fz
W32/Autorun.worm.g
W32/Autorun.worm.ga
W32/Autorun.worm.gb
W32/Autorun.worm.gc
W32/Autorun.worm.gd
W32/Autorun.worm.ge
W32/Autorun.worm.gen!job
W32/Autorun.worm.gen.cl
W32/Autorun.worm.gen.za
W32/Autorun.worm.gen.zb
W32/Autorun.worm.gf
W32/Autorun.worm.gg
W32/Autorun.worm.gi
W32/Autorun.worm.gj
W32/Autorun.worm.gk
W32/Autorun.worm.gl
W32/Autorun.worm.gm
W32/Autorun.worm.gn
W32/Autorun.worm.go
W32/Autorun.worm.gp
W32/Autorun.worm.gq
W32/Autorun.worm.gr
W32/Autorun.worm.gs
W32/Autorun.worm.h
W32/Autorun.worm.h!env
W32/Autorun.worm.h!lnk
W32/Autorun.worm.i
W32/Autorun.worm.j
W32/Autorun.worm.k
W32/Autorun.worm.l
W32/Autorun.worm.m
W32/Autorun.worm.n
W32/Autorun.worm.o
W32/Autorun.worm.p
W32/Autorun.worm.q
W32/Autorun.worm.r
W32/Autorun.worm.remmants
W32/Autorun.worm.s
W32/Autorun.worm.t
W32/Autorun.worm.u
W32/Autorun.worm.v
W32/Autorun.worm.v!bat
W32/Autorun.worm.w
W32/Autorun.worm.x
W32/Autorun.worm.y
W32/Autorun.worm.z
W32/Autorun.worm.zc
W32/Autorun.worm.zf
W32/Autorun.worm.zf.gen
W32/Autorun.worm.zg
W32/Autorun.worm.zh
W32/Autorun.worm.zi
W32/Autorun.worm.zj
W32/Autorun.worm.zk
W32/Autorun.worm.zm
W32/Autorun.worm.zp
W32/Autorun.worm.zq
W32/Autorun.worm.zs
W32/Autorun.worm.zt
W32/Autorun.worm.zu
W32/Autorun.worm.zu.dr
W32/Autorun.worm.zv
W32/Autorun.worm.zw
W32/Autorun.worm.zw!inf
W32/Autorun.worm.zx
W32/Autorun.worm.zz
W32/Autorun.worm.zza
W32/Autorun.worm.zzb
W32/Autorun.worm.zzc
W32/Autorun.worm.zzd
W32/Autorun.worm.zze
W32/Autorun.worm.zze!bat
W32/Autorun.worm.zze.dr
W32/Autorun.worm.zzf
W32/Autorun.worm.zzg
W32/Autorun.worm.zzh
W32/Autorun.worm.zzi
W32/Autorun.worm.zzj
W32/Autorun.worm.zzk
W32/Autorun.worm.zzl
W32/Autorun.worm.zzm
W32/Autorun.worm.zzn
W32/Autorun.worm.zzo
W32/Autorun.worm.zzp
W32/Autorun.worm.zzq
W32/Autorun.worm.zzr
W32/Autorun.worm.zzs
W32/Autorun.worm.zzt
W32/Autorun.worm.zzu
W32/Autorun.worm.zzv
W32/Autorun.worm.zzw
W32/Autorun.worm.zzx
W32/Autorun.worm.zzz
W32/Bagle
W32/Bagle!eml.gen
W32/Bagle!pwdzip
W32/Bagle.ad!src
W32/Bagle.dldr
W32/Bagle.dll.dr
W32/Bagle.eml
W32/Bagle.fb!pwdzip
W32/Bagle.fc!pwdzip
W32/Bagle.fd!pwdzip
W32/Bagle.fe!pwdzip
W32/Bagle.fm.dldr
W32/Bagle.gen
W32/Bagle.gen@MM
W32/Bagle@MM!cpl
W32/Blaster.worm
W32/Blaster.worm.k
W32/Bropia.worm
W32/Bugbear
W32/Bugbear.a.dam
W32/Bugbear.b!data
W32/Bugbear.b.dam
W32/Bugbear.gen@MM
W32/Bugbear.h@MM
W32/Bugbear@MM
W32/Conficker
W32/Conficker.c
W32/Conficker.sys
W32/Conficker.worm
W32/Conficker.worm!inf
W32/Conficker.worm!job
W32/Conficker.worm.dr
W32/Conficker.worm.gen.a
W32/Conficker.worm.gen.b
W32/Conficker.worm.gen.c
W32/Conficker.worm.gen.d
W32/Cutwail.a
W32/Deborm.worm.ah
W32/Deborm.worm.gen
W32/Doomjuice.worm
W32/Dumaru
W32/Dumaru.ad@MM
W32/Dumaru.al.dll
W32/Dumaru.dll
W32/Dumaru.eml
W32/Dumaru.gen
W32/Dumaru.gen@MM
W32/Dumaru.w.gen
W32/Elkern.cav
W32/Elkern.cav.c
W32/Elkern.cav.c.dam
W32/FakeAlert.gen
W32/Feebs
W32/Fizzer
W32/Fizzer.dll
W32/Fujacks!htm
W32/FunLove
W32/FunLove.apd
W32/FunLove.dam
W32/Gaobot.worm
W32/Harwig.worm
W32/Hupigon.worm!mem
W32/IRCbot
W32/IRCbot.gen.a!mem
W32/IRCbot.gen.aa
W32/IRCbot.gen.ab
W32/IRCbot.gen.ac
W32/IRCbot.gen.ad
W32/IRCbot.gen.ae
W32/IRCbot.gen.ai
W32/IRCbot.gen.aj
W32/IRCbot.worm
W32/IRCbot.worm.dll
W32/IRCBot.worm.gen.ai
W32/Klez
W32/Klez.dam
W32/Klez.eml
W32/Klez.gen.b@MM
W32/Klez.rar
W32/Koobface.worm
W32/Koobface.worm!env
W32/Koobface.worm!env.b
W32/Koobface.worm!env.c
W32/Koobface.worm!env.d
W32/Koobface.worm!env.e
W32/Koobface.worm.as
W32/Koobface.worm.dl
W32/Koobface.worm.gen
W32/Koobface.worm.gen.aa
W32/Koobface.worm.gen.ab
W32/Koobface.worm.gen.ac
W32/Koobface.worm.gen.ad
W32/Koobface.worm.gen.ae
W32/Koobface.worm.gen.af
W32/Koobface.worm.gen.ag
W32/Koobface.worm.gen.ah
W32/Koobface.worm.gen.ai
W32/Koobface.worm.gen.aj
W32/Koobface.worm.gen.ak
W32/Koobface.worm.gen.al
W32/Koobface.worm.gen.am
W32/Koobface.worm.gen.an
W32/Koobface.worm.gen.ao
W32/Koobface.worm.gen.ap
W32/Koobface.worm.gen.aq
W32/Koobface.worm.gen.at
W32/Koobface.worm.gen.au
W32/Koobface.worm.gen.av
W32/Koobface.worm.gen.aw
W32/Koobface.worm.gen.aw!dll
W32/Koobface.worm.gen.aw!sys
W32/Koobface.worm.gen.ax!dll
W32/Koobface.worm.gen.ax!sys
W32/Koobface.worm.gen.ay!sys
W32/Koobface.worm.gen.az!dll
W32/Koobface.worm.gen.az!sys
W32/Koobface.worm.gen.b
W32/Koobface.worm.gen.ba
W32/Koobface.worm.gen.c
W32/Koobface.worm.gen.d
W32/Koobface.worm.gen.e
W32/Koobface.worm.gen.f
W32/Koobface.worm.gen.g
W32/Koobface.worm.gen.h
W32/Koobface.worm.gen.i
W32/Koobface.worm.gen.j
W32/Koobface.worm.gen.k
W32/Koobface.worm.gen.l
W32/Koobface.worm.gen.m
W32/Koobface.worm.gen.n
W32/Koobface.worm.gen.o
W32/Koobface.worm.gen.p
W32/Koobface.worm.gen.q
W32/Koobface.worm.gen.r
W32/Koobface.worm.gen.s
W32/Koobface.worm.gen.t
W32/Koobface.worm.gen.u
W32/Koobface.worm.gen.v
W32/Koobface.worm.gen.w
W32/Koobface.worm.gen.x
W32/Koobface.worm.gen.y
W32/Koobface.worm.gen.z
W32/Koobface.worm.gen.z2
W32/Korgo.worm
W32/Korgo.worm.ak
W32/Lirva
W32/Lirva.c.htm
W32/Lirva.eml
W32/Lirva.gen@MM
W32/Lirva.htm
W32/Lirva.txt
W32/Lovgate
W32/Lovgate.dam
W32/Lurker
W32/Mariofev!mem
W32/Maslan
W32/Mimail
W32/Mimail.c@MM
W32/Mimail.i!data
W32/Mimail.q@MM
W32/MoFei.worm
W32/MoFei.worm.dr
W32/Mumu.b.worm
W32/Mydoom
W32/Mydoom!bat
W32/Mydoom!ftp
W32/Mydoom.b!hosts
W32/Mydoom.dam
W32/Mydoom.t.dll
W32/Mytob
W32/Mytob.gen@MM
W32/Mytob.worm
W32/MyWife
W32/MyWife.dll
W32/MyWife@MM
W32/Nachi!tftpd
W32/Nachi.worm
W32/Netsky
W32/Netsky.af@MM
W32/Nimda
W32/Nimda.dam
W32/Nimda.eml
W32/Nimda.gen@MM
W32/Nimda.htm
W32/Nuwar
W32/Nuwar.dam
W32/Nuwar.sys
W32/Nuwar@MM
W32/Nuwar@MM!rar
W32/Pate
W32/Pate!dam
W32/Pate.dam
W32/Pate.dr
W32/Pinkslipbot
W32/Polip
W32/Polip!mem
W32/Polybot
W32/Polybot.bat
W32/Rimecud
W32/Rimecud!env.a
W32/Rimecud!env.b
W32/Rimecud!inf
W32/Rimecud!mem
W32/Rimecud.gen.c
W32/Rimecud.gen.d
W32/Rimecud.gen.e
W32/Routrobot.worm
W32/Sality
W32/Sality!mem
W32/Sasser.worm
W32/Sasser.worm!ftp
W32/Sdbot
W32/Sdbot!irc
W32/Sdbot.bat
W32/Sdbot.cli
W32/Sdbot.dll
W32/Sdbot.dr
W32/Sdbot.worm
W32/Sdbot.worm!ftp
W32/Sdbot.worm.bat.b
W32/Sdbot.worm.dr
W32/Sdbot.worm.gen
W32/Sdbot.worm.gen.a
W32/Sdbot.worm.gen.b
W32/Sdbot.worm.gen.c
W32/Sdbot.worm.gen.d
W32/Sdbot.worm.gen.e
W32/Sdbot.worm.gen.q
W32/Sober
W32/Sober!data
W32/Sober.dam
W32/Sober.eml
W32/Sober.f.dam
W32/Sober.g.dam
W32/Sober.q!spam
W32/Sober.r.dr
W32/Sober.r@MM
W32/Sobig
W32/Sobig.dam
W32/Sobig.eml
W32/Sobig.f.dam
W32/Sobig.gen@MM
W32/Spybot.worm
W32/Spybot.worm.gen.t
W32/SQLSlammer.worm
W32/Swen
W32/Swen@MM
W32/TryMem
W32/Virut
W32/Virut!htm
W32/Virut!mem
W32/Virut!rtf
W32/Virut.gen
W32/Virut.n
W32/Virut.n!inf
W32/Virut.n!mem
W32/Virut.o
W32/Vulcanbot
W32/Winemmem
W32/Witty.worm
W32/Yaha.eml
W32/Yaha.gen@MM
W32/Yaha.y@MM
W32/Yaha@MM
W32/Zafi
W32/Zafi.b.dam
W32/Zindos.worm
W32/Zotob.worm
W32/Zotob.worm!hosts
XCP

This post has been edited by Orange Blossom: 14 October 2010 - 05:51 PM
Reason for edit: Moved to AII for initial assistance. ~ OB

#2 User is offline   Budapest 

  • Bleepin' Cynic
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 22,235
  • Joined: 11-November 06
  • Gender:Male

Posted 18 October 2010 - 05:21 PM

Please download Malwarebytes Anti-Malware and save it to your desktop.MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
    For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware

  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#3 User is offline   Christineakaasia 

  • New Member
  • Pip
  • Find Topics
  • Group: Members
  • Posts: 10
  • Joined: 11-October 10
  • Gender:Female

Posted 20 October 2010 - 06:25 PM

View PostBudapest, on 18 October 2010 - 05:21 PM, said:

Please download Malwarebytes Anti-Malware and save it to your desktop.MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.
  • Make sure you are connected to the Internet.
  • Double-click on mbam-setup.exe to install the application.
    For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.
  • When the installation begins, follow the prompts and do not make any changes to default settings.
  • When installation has finished, make sure you leave both of these checked:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware

  • Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
  • If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.
  • If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.
On the Scanner tab:
  • Make sure the "Perform Quick Scan" option is selected.
  • Then click on the Scan button.
  • If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
  • The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.
  • When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".
  • Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
  • Click on the Show Results button to see a list of any malware that was found.
  • Make sure that everything is checked, and click Remove Selected.
  • When removal is completed, a log report will open in Notepad.
  • The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
  • Copy and paste the contents of that report in your next reply. Be sure to post the complete log to include the top portion which shows MBAM's database version and your operating system.
  • Exit MBAM when done.
Note: If MBAM encounters a file that is difficult to remove, you will be asked to reboot your computer so MBAM can proceed with the disinfection process. If asked to restart the computer, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4896

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

10/20/2010 4:23:46 PM
mbam-log-2010-10-20 (16-23-46).txt

Scan type: Quick scan
Objects scanned: 188174
Time elapsed: 32 minute(s), 53 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 29
Registry Values Infected: 1
Registry Data Items Infected: 4
Folders Infected: 8
Files Infected: 6

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{cf54be1c-9359-4395-8533-1657cf209cfe} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{2b96d5cc-c5b5-49a5-a69d-cc0a30f9028c} (Adware.Minibug) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{d518921a-4a03-425e-9873-b9a71756821e} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18ea1-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59c7fc09-1c83-4648-b3e6-003d2bbc7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68af847f-6e91-45dd-9b68-d6a12c30e5d7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170b96c-28d4-4626-8358-27e6caeef907} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{d1a71fa0-ff48-48dd-9b6d-7a13a3e42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ddb1968e-ead6-40fd-8dae-ff14757f60c7} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f138d901-86f0-4383-99b6-9cdd406036da} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\RunDll32Policy\f3ScrCtr.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\(default) (Adware.Hotbar) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.SearchPage) -> Bad: (http://www.mirarsearch.com/?useie5=1&q=) Good: (http://www.google.com) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\Search Bar (Hijack.SearchPage) -> Bad: (http://www.mirarsearch.com/?useie5=1&q=) Good: (http://www.google.com) -> Quarantined and deleted successfully.

Folders Infected:
C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
C:\Program Files\MyWebSearch\bar\History\search3 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\setting2.htm.bak (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\settings.dat.bak (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> Quarantined and deleted successfully.

#4 User is offline   Budapest 

  • Bleepin' Cynic
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 22,235
  • Joined: 11-November 06
  • Gender:Male

Posted 20 October 2010 - 06:37 PM

Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If it will not start, go to Start > All Prgrams > SUPERAntiSpyware and click on Alternate Start.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen and exit the program.
  • Do not run a scan just yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with SUPERAntiSpyware as follows:
  • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.

If you have a problem downloading, installing or getting SAS to run, try downloading and using the SUPERAntiSpyware Portable Scanner instead. Save the randomly named file (i.e. SAS_1710895.COM) to a usb drive or CD and transfer to the infected computer. Then double-click on it to launch and scan. The file is randomly named to help keep malware from blocking the scanner.
The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

#5 User is offline   Budapest 

  • Bleepin' Cynic
  • PipPipPipPipPipPip
  • Find Topics
  • Group: Moderator
  • Posts: 22,235
  • Joined: 11-November 06
  • Gender:Male

Posted 23 October 2010 - 01:52 AM

I'd like us to scan your machine with ESET OnlineScan
  • Hold down Control and click on the following link to open ESET OnlineScan in a new window.
    ESET OnlineScan
  • Click the Posted Image button.
  • For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    • Click on Posted Image to download the ESET Smart Installer. Save it to your desktop.
    • Double click on the Posted Image icon on your desktop.

  • Check Posted Image
  • Click the Posted Image button.
  • Accept any security warnings from your browser.
  • Check Posted Image
  • Push the Start button.
  • ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time.
  • When the scan completes, push Posted Image
  • Push Posted Image, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
  • Push the Posted Image button.
  • Push Posted Image

The power of accurate observation is commonly called cynicism by those who haven't got it.

—George Bernard Shaw

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users