Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Jay.exe , Jaymyka.wen9.com Autorun..


  • Please log in to reply
2 replies to this topic

#1 mixyodaster

mixyodaster

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:39 AM

Posted 19 October 2007 - 10:38 AM

Someone Pls Help me fix my problem, Thanks! I have already scanned my pc using Kazpersky but wasn't able to fix the problem


ComboFix 07-10-19.1 - Chino 2007-10-19 23:27:09.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.569 [GMT 8:00]
Running from: C:\Documents and Settings\Chino\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Autorun.inf
C:\Documents and Settings\Chino\Desktop\internet.lnk
D:\Autorun.inf
E:\Autorun.inf
H:\Autorun.inf

.
((((((((((((((((((((((((( Files Created from 2007-09-19 to 2007-10-19 )))))))))))))))))))))))))))))))
.

2007-10-19 23:26 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-10-19 17:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2007-10-19 17:27 6,875,936 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2007-10-19 17:27 82,061 --a------ C:\WINDOWS\system32\drivers\klick.dat
2007-10-19 17:27 81,549 --a------ C:\WINDOWS\system32\drivers\klin.dat
2007-10-19 17:27 12,576 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2007-10-19 16:54 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-10-19 14:53 202,474 -rahs---- C:\jay.exe
2007-10-18 09:56 176,128 -r------- C:\WINDOWS\amcap.exe
2007-10-18 09:56 172,032 --a------ C:\WINDOWS\JAPI2.DLL
2007-10-18 09:56 109,840 --a------ C:\WINDOWS\VidCap32.exe
2007-10-18 09:56 106,496 --a------ C:\WINDOWS\JAPI.DLL
2007-10-18 09:56 102,400 --a------ C:\WINDOWS\MMVEM.EXE
2007-10-17 21:04 155,648 --a------ C:\WINDOWS\system32\libssl32.dll
2007-10-15 08:42 <DIR> d-------- C:\Program Files\Visual CertExam Suite
2007-10-12 09:07 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\Snapfish
2007-10-10 17:55 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2007-10-09 08:28 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\Simple Star
2007-10-09 08:28 421,888 --a------ C:\WINDOWS\Nero PhotoShow.scr
2007-10-09 08:27 <DIR> d-------- C:\Program Files\Nero
2007-10-09 08:27 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\Ahead
2007-10-09 08:26 2,670,592 --------- C:\WINDOWS\UNNMP.exe
2007-10-09 08:25 <DIR> d-------- C:\Program Files\Common Files\Nero
2007-10-09 08:25 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe
2007-10-09 08:24 <DIR> d-------- C:\Program Files\Common Files\Ahead
2007-10-09 08:24 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Ahead
2007-10-09 08:24 2,916,352 --------- C:\WINDOWS\UNNeroVision.exe
2007-10-09 08:24 1,568,768 --a------ C:\WINDOWS\system32\ImagX7.dll
2007-10-09 08:24 476,320 --a------ C:\WINDOWS\system32\ImagXpr7.dll
2007-10-09 08:24 471,040 --a------ C:\WINDOWS\system32\ImagXRA7.dll
2007-10-09 08:24 364,544 --a------ C:\WINDOWS\system32\TwnLib4.dll
2007-10-09 08:24 262,144 --a------ C:\WINDOWS\system32\ImagXR7.dll
2007-10-09 08:24 106,496 --a------ C:\WINDOWS\system32\TwnLib20.dll
2007-10-09 08:24 38,912 --a------ C:\WINDOWS\system32\picn20.dll
2007-10-09 08:24 24,064 --------- C:\WINDOWS\system32\msxml3a.dll
2007-10-05 01:29 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\DivX
2007-10-05 01:10 <DIR> d-------- C:\Program Files\Google
2007-10-05 00:10 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\EPSON
2007-10-04 23:25 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\TypingMaster7
2007-10-03 08:03 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\Apple Computer
2007-10-03 08:00 <DIR> d-------- C:\Program Files\Apple Software Update
2007-10-03 08:00 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2007-10-03 08:00 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2007-10-03 03:00 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2007-10-03 03:00 <DIR> d-------- C:\WINDOWS\system32\drivers\UMDF
2007-10-03 03:00 <DIR> d-------- C:\Program Files\Windows Media Connect 2
2007-10-03 02:47 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\vlc
2007-10-03 02:41 <DIR> d-------- C:\Program Files\VideoLAN
2007-10-03 02:29 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2007-10-03 02:25 <DIR> d-------- C:\Documents and Settings\Chino\Incomplete
2007-10-03 02:24 <DIR> d-------- C:\Program Files\Java
2007-10-03 02:24 <DIR> d-------- C:\Documents and Settings\Chino\.limewire
2007-10-03 02:23 <DIR> d-------- C:\Program Files\Common Files\Java
2007-10-03 02:18 <DIR> d-------- C:\Program Files\Opera
2007-10-03 02:11 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2007-10-03 01:49 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\BitTorrent
2007-10-03 01:24 <DIR> d-------- C:\Program Files\Common Files\Python
2007-10-03 01:24 708,696 --a------ C:\WINDOWS\system32\python21.dll
2007-10-03 01:24 290,919 --a------ C:\WINDOWS\system32\pythoncom21.dll
2007-10-03 01:24 131,072 --a------ C:\WINDOWS\system32\Epcmlib.dll
2007-10-03 01:24 57,344 --a------ C:\WINDOWS\system32\PyWinTypes21.dll
2007-10-03 01:23 96,768 --a------ C:\WINDOWS\SlantAdj.dll
2007-10-03 01:23 73,216 --a------ C:\WINDOWS\ADE.DLL
2007-10-03 01:23 3,136 --a------ C:\WINDOWS\Ade001.bin
2007-10-03 01:21 <DIR> d-------- C:\Program Files\EPSON
2007-10-03 01:21 75,324 --a------ C:\WINDOWS\system32\EBPMON2.DLL
2007-10-03 01:21 64,000 --a------ C:\WINDOWS\system32\ECBTEG.DLL
2007-10-03 01:21 34,304 --a------ C:\WINDOWS\system32\EBPCHP.DLL
2007-10-03 01:21 31,616 --a------ C:\WINDOWS\system32\drivers\usbccgp.sys
2007-10-03 01:21 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2007-10-03 01:21 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2007-10-03 01:21 182 --a------ C:\WINDOWS\system32\EBPPORT.DAT
2007-10-03 01:20 <DIR> d-------- C:\EPSON
2007-10-02 21:43 <DIR> d-------- C:\Documents and Settings\Chino\Application Data\AdobeUM
2007-10-02 21:41 <DIR> d-------- C:\Program Files\Common Files\Adobe Systems Shared
2007-10-02 21:41 <DIR> d-------- C:\Program Files\Common Files\Adobe
2007-10-02 21:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Adobe Systems
2007-10-02 20:57 420,240 --a------ C:\WINDOWS\system32\mpg4c32.dll
2007-10-02 20:56 <DIR> d-------- C:\WINDOWS\system32\WinFast
2007-10-02 20:56 <DIR> d-------- C:\Program Files\WinFast
2007-10-02 20:56 49,152 --------- C:\WINDOWS\system32\TempDel.EXE
2007-10-02 20:50 2,450,944 -----c--- C:\WINDOWS\system32\dllcache\wmvcore.dll
2007-10-02 20:33 <DIR> d-------- C:\WINDOWS\system32\Lang
2007-10-02 20:30 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2007-10-02 20:29 <DIR> d-------- C:\WINDOWS\system32\RTCOM
2007-10-02 20:29 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2007-10-02 20:29 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2007-10-02 20:29 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2007-10-02 20:29 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2007-10-02 20:29 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2007-10-02 20:29 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2007-10-02 20:29 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2007-10-02 20:28 16,380,416 --a------ C:\WINDOWS\RTHDCPL.EXE
2007-10-02 20:28 9,715,200 --a------ C:\WINDOWS\RTLCPL.EXE
2007-10-02 20:28 4,547,584 --a------ C:\WINDOWS\system32\drivers\RtkHDAud.sys
2007-10-02 20:28 2,808,832 --a------ C:\WINDOWS\ALCWZRD.EXE
2007-10-02 20:28 2,165,760 --a------ C:\WINDOWS\MicCal.exe
2007-10-02 20:28 1,826,816 --a------ C:\WINDOWS\SkyTel.exe
2007-10-02 20:28 1,191,936 --a------ C:\WINDOWS\RtlUpd.exe
2007-10-02 20:28 86,016 --a------ C:\WINDOWS\SOUNDMAN.EXE

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2007-10-19 09:37 3,620 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2007-10-19 09:37 12,308 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2007-10-18 01:57 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-10-02 12:56 --------- d-----w C:\Program Files\Common Files\InstallShield
2007-10-02 10:01 --------- d-----w C:\Program Files\Common Files\Ulead Systems
2007-10-02 10:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\Ulead Systems
2007-10-02 09:44 --------- d-----w C:\Program Files\Kaspersky Lab
2007-10-02 09:43 --------- d-----w C:\Program Files\AMD
2007-10-02 09:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files
2007-10-02 09:40 --------- d-----w C:\Program Files\Microsoft.NET
2007-10-02 09:40 --------- d-----w C:\Program Files\Microsoft ActiveSync
2007-09-28 16:07 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-09-28 16:07 129,784 ------w C:\WINDOWS\system32\pxafs.dll
2007-09-28 16:07 120,056 ------w C:\WINDOWS\system32\pxcpyi64.exe
2007-09-28 16:07 118,520 ------w C:\WINDOWS\system32\pxinsi64.exe
2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx0c.dll
2007-09-28 16:05 823,296 ----a-w C:\WINDOWS\system32\divx_xx07.dll
2007-09-28 16:05 81,920 ----a-w C:\WINDOWS\system32\dpl100.dll
2007-09-28 16:05 802,816 ----a-w C:\WINDOWS\system32\divx_xx11.dll
2007-09-28 16:05 739,840 ----a-w C:\WINDOWS\system32\DivX.dll
2007-09-28 16:05 593,920 ----a-w C:\WINDOWS\system32\dpuGUI11.dll
2007-09-28 16:05 57,344 ----a-w C:\WINDOWS\system32\dpv11.dll
2007-09-28 16:05 53,248 ----a-w C:\WINDOWS\system32\dpuGUI10.dll
2007-09-28 16:05 344,064 ----a-w C:\WINDOWS\system32\dpus11.dll
2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu11.dll
2007-09-28 16:05 294,912 ----a-w C:\WINDOWS\system32\dpu10.dll
2007-09-28 16:05 196,608 ----a-w C:\WINDOWS\system32\dtu100.dll
2007-09-28 16:05 12,288 ----a-w C:\WINDOWS\system32\DivXWMPExtType.dll
2007-09-17 00:07 81,920 ----a-w C:\WINDOWS\system32\nvwddi.dll
2007-09-17 00:07 81,920 ----a-w C:\WINDOWS\system32\nvmctray.dll
2007-09-17 00:07 8,491,008 ----a-w C:\WINDOWS\system32\nvcpl.dll
2007-09-17 00:07 753,664 ----a-w C:\WINDOWS\system32\nvcplui.exe
2007-09-17 00:07 6,853,088 ----a-w C:\WINDOWS\system32\drivers\nv4_mini.sys
2007-09-17 00:07 6,746,112 ----a-w C:\WINDOWS\system32\nvoglnt.dll
2007-09-17 00:07 6,344,704 ----a-w C:\WINDOWS\system32\nvdisps.dll
2007-09-17 00:07 5,783,040 ----a-w C:\WINDOWS\system32\nv4_disp.dll
2007-09-17 00:07 466,944 ----a-w C:\WINDOWS\system32\nvshell.dll
2007-09-17 00:07 45,056 ----a-w C:\WINDOWS\system32\nvmccsrs.dll
2007-09-17 00:07 442,368 ----a-w C:\WINDOWS\system32\nvappbar.exe
2007-09-17 00:07 425,984 ----a-w C:\WINDOWS\system32\keystone.exe
2007-09-17 00:07 364,544 ----a-w C:\WINDOWS\system32\nvapi.dll
2007-09-17 00:07 36,864 ----a-w C:\WINDOWS\system32\nvcodins.dll
2007-09-17 00:07 36,864 ----a-w C:\WINDOWS\system32\nvcod.dll
2007-09-17 00:07 356,352 ----a-w C:\WINDOWS\system32\nvudisp.exe
2007-09-17 00:07 307,200 ----a-w C:\WINDOWS\system32\nvexpbar.dll
2007-09-17 00:07 3,551,232 ----a-w C:\WINDOWS\system32\nvvitvs.dll
2007-09-17 00:07 3,334,144 ----a-w C:\WINDOWS\system32\nvgames.dll
2007-09-17 00:07 286,720 ----a-w C:\WINDOWS\system32\nvnt4cpl.dll
2007-09-17 00:07 229,376 ----a-w C:\WINDOWS\system32\nvmccs.dll
2007-09-17 00:07 2,371,584 ----a-w C:\WINDOWS\system32\nvwss.dll
2007-09-17 00:07 188,416 ----a-w C:\WINDOWS\system32\nvmccss.dll
2007-09-17 00:07 155,716 ----a-w C:\WINDOWS\system32\nvsvc32.exe
2007-09-17 00:07 147,456 ----a-w C:\WINDOWS\system32\nvcolor.exe
2007-09-17 00:07 1,703,936 ----a-w C:\WINDOWS\system32\nvwdmcpl.dll
2007-09-17 00:07 1,626,112 ----a-w C:\WINDOWS\system32\nwiz.exe
2007-09-17 00:07 1,478,656 ----a-w C:\WINDOWS\system32\nview.dll
2007-09-17 00:07 1,339,392 ----a-w C:\WINDOWS\system32\nvdspsch.exe
2007-09-17 00:07 1,150,976 ----a-w C:\WINDOWS\system32\nvmobls.dll
2007-09-17 00:07 1,019,904 ----a-w C:\WINDOWS\system32\nvwimg.dll
2007-08-21 06:15 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-07-30 18:19 92,504 ----a-w C:\WINDOWS\system32\cdm.dll
2007-07-30 18:19 549,720 ----a-w C:\WINDOWS\system32\wuapi.dll
2007-07-30 18:19 53,080 ----a-w C:\WINDOWS\system32\wuauclt.exe
2007-07-30 18:19 43,352 ----a-w C:\WINDOWS\system32\wups2.dll
2007-07-30 18:19 325,976 ----a-w C:\WINDOWS\system32\wucltui.dll
2007-07-30 18:19 203,096 ----a-w C:\WINDOWS\system32\wuweb.dll
2007-07-30 18:19 1,712,984 ----a-w C:\WINDOWS\system32\wuaueng.dll
2007-07-30 18:18 33,624 ----a-w C:\WINDOWS\system32\wups.dll
2004-08-03 22:56:50 202,474 --sha-r C:\WINDOWS\system32\mveo.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2007-09-17 08:07]
"nwiz"="nwiz.exe" [2007-09-17 08:07 C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2007-09-17 08:07]
"RTHDCPL"="RTHDCPL.EXE" [2007-07-05 16:08 C:\WINDOWS\RTHDCPL.EXE]
"WinFast Schedule"="C:\Program Files\WinFast\WFTVFM\WFWIZ.exe" [2004-11-22 09:16]
"Acrobat Assistant 7.0"="C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" [2006-01-12 20:52]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11]
"QuickTime Task"="H:\QuickTime\QTTask.exe" [2007-06-29 06:24]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50]
"VMSnap3"="C:\WINDOWS\VMSnap3.EXE" [2006-08-30 10:58]
"Domino"="C:\WINDOWS\Domino.EXE" [2006-06-28 17:54]
"BigDog303"="C:\WINDOWS\VM303_STI.exe" []
"ampli"="WINDOWS\system32\mveo.exe" []
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" [2007-06-28 12:51]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BitTorrent DNA"="C:\Program Files\BitTorrent_DNA\dna.exe" [2007-10-02 19:16]
"Yahoo! Pager"="C:\PROGRA~1\Yahoo!\MESSEN~1\YAHOOM~1.exe" [2007-08-30 17:43]
"BitTorrent"="H:\BitTorrent\bittorrent.exe" [2007-09-19 07:37]
"PhotoShow Deluxe Media Manager"="C:\PROGRA~1\Nero\data\Xtras\mssysmgr.exe" [2005-02-26 08:28]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableStatusMessages"=1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"=1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"=1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"=1 (0x1)

R2 CX23880;WinFast CX2388x WDM Video Capture.;C:\WINDOWS\system32\drivers\cx88vid.sys
R2 CXAVXBAR;WinFast CX2388x WDM Crossbar.;C:\WINDOWS\system32\drivers\cxavxbar.sys
R2 CXTUNE;WinFast CX2388x WDM TVTuner.;C:\WINDOWS\system32\drivers\CX88TUNE.sys
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys
R3 WFIOCTL;WFIOCTL;\??\C:\Program Files\WinFast\WFTVFM\WFIOCTL.SYS
S3 vmfilter303;vmfilter303;C:\WINDOWS\system32\drivers\vmfilter303.sys
S3 ZSMC303;A4 TECH PC Camera H;C:\WINDOWS\system32\Drivers\usbVM303.sys

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalService LmHosts SSDPSRV

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{67365cb3-7d8a-11dc-8f8d-000000000000}]
AutoRun\command - I:\jay.exe
explore\Command - I:\jay.exe
open\Command - I:\jay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{8aea77a2-70f4-11dc-8f77-000fea4f5e46}]
Auto\command - RavMonE.exe e
AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL RavMonE.exe e

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad1ad327-70ce-11dc-9bcf-806d6172696f}]
AutoRun\command - D:\jay.exe
explore\Command - D:\jay.exe
open\Command - D:\jay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad1ad328-70ce-11dc-9bcf-806d6172696f}]
AutoRun\command - E:\jay.exe
explore\Command - E:\jay.exe
open\Command - E:\jay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad1ad32b-70ce-11dc-9bcf-806d6172696f}]
AutoRun\command - C:\jay.exe
explore\Command - C:\jay.exe
open\Command - C:\jay.exe

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ad1ad32c-70ce-11dc-9bcf-806d6172696f}]
AutoRun\command - H:\jay.exe
explore\Command - H:\jay.exe
open\Command - H:\jay.exe

*Newly Created Service* - CATCHME
.
Contents of the 'Scheduled Tasks' folder
"2007-10-03 00:00:23 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job"
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe
.
**************************************************************************

catchme 0.3.1169 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-10-19 23:30:28
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

HKLM\Software\Microsoft\Windows\CurrentVersion\Run
BigDog303 = C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@??????????????

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2007-10-19 23:31:39
.
--- E O F ---

BC AdBot (Login to Remove)

 


#2 mixyodaster

mixyodaster
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:01:39 AM

Posted 20 October 2007 - 08:35 PM

up, anyone?

#3 Falu

Falu

  • Security Colleague
  • 3,001 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:01:39 AM

Posted 05 November 2007 - 06:22 AM

Hi mixyodaster, :thumbsup:

If you still need help please post a fresh HijackThis log and I'll be happy to look at it for you.

Download and install HJT by following the instructions in Step 9 of the Preparation Guide For Use Before Posting A Hijackthis Log.

Thanks for your patience! :blink:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users