Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with I think virus/malaware/spyware...please help


  • This topic is locked This topic is locked
3 replies to this topic

#1 neilaug28

neilaug28

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:34 PM

Posted 02 November 2009 - 06:26 AM

Hello, I can't access many antivirus websites or download any antivirus software. I wasn't able to start windows from any boot mode so then I repaired windows installation again to be able to get into windows. However, I cannot restart the computer again since the only way to get back in will be to reinstall windows. Also, i think i have many things like windows system defender and other popups for rouge antispyware software. I have some files such as sv1.exe and svchust.exe that the computer won't let me delete and says access denied because files are in use. I was barely able to get hijacklog since the computer was saying it was busy and turn off other application or it said something similar to that. Also, my malaware bytes antimalware was deleted and it said mbam.exe could not be found. It won't let me install avira antivirus software either. Is there anything you would be able to see from this log that could lead to this computer being salvaged without a full reformat? Thanks in advance. edit: I also included a rootrepeal if that is helpful.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:05:49 AM, on 11/2/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\LogMeIn\x86\RaMaint.exe
C:\Program Files\LogMeIn\x86\LogMeIn.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\LogMeIn\x86\LMIGuardian.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\TEMP\qjxzy9.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\svchost.exe
C:\WINDOWS\TEMP\lsass.exe
C:\WINDOWS\TEMP\user.exe
C:\WINDOWS\TEMP\services.exe
C:\WINDOWS\TEMP\mdm.exe
C:\WINDOWS\TEMP\cmd.exe
C:\WINDOWS\TEMP\install.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\FastNetSrv.exe
C:\DOCUME~1\other\LOCALS~1\Temp\csrss.exe
C:\DOCUME~1\other\LOCALS~1\Temp\smss.exe
C:\DOCUME~1\other\LOCALS~1\Temp\winamp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\RegCure\regcure.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\msagent\AgentSvr.exe
C:\Documents and Settings\other\Desktop\avira_antivir_personal_en.exe
C:\Documents and Settings\other\Desktop\avira_antivir_personal_en.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.starbarsearch.com/?useie5=1&q=
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.africatoursguide.com/aboutus.html
F3 - REG:win.ini: load=C:\WINDOWS\fonts\services.exe
F3 - REG:win.ini: run=C:\WINDOWS\fonts\services.exe
O2 - BHO: C:\WINDOWS\system32\z8fmc90dqp.dll - {A2234B15-23F2-42AD-F4E4-00AAC39C0004} - C:\WINDOWS\system32\z8fmc90dqp.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IRW] C:\WINDOWS\system32\IRW.exe
O4 - HKLM\..\Run: [Apple_KbdMgr] C:\Program Files\Boot Camp\KbdMgr.exe
O4 - HKLM\..\Run: [DeadAIM] rundll32.exe "C:\Program Files\AIM\\DeadAIM.ocm",ExportedCheckODLs
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Program Files\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [calc] rundll32.exe C:\WINDOWS\system32\calc.dll,_IWMPEvents@0
O4 - HKLM\..\Run: [nagolutaso] Rundll32.exe "yuvomuka.dll",s
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [tinefufos] Rundll32.exe "c:\windows\system32\hakoyevi.dll",a
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [Yjafosi8kdf98winmdkmnkmfnwe] C:\DOCUME~1\other\LOCALS~1\Temp\winamp.exe
O4 - HKUS\S-1-5-21-790525478-1614895754-725345543-1003\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl (User '?')
O4 - HKUS\S-1-5-21-790525478-1614895754-725345543-1003\..\Run: [Yjafosi8kdf98winmdkmnkmfnwe] C:\DOCUME~1\other\LOCALS~1\Temp\winamp.exe (User '?')
O4 - HKUS\S-1-5-18\..\Run: [Login Software 2009] C:\WINDOWS\TEMP\qjxzy9.exe (User '?')
O4 - HKUS\.DEFAULT\..\Run: [Login Software 2009] C:\WINDOWS\TEMP\qjxzy9.exe (User 'Default user')
O4 - S-1-5-21-790525478-1614895754-725345543-1003 Startup: scandisk.dll (User '?')
O4 - S-1-5-21-790525478-1614895754-725345543-1003 Startup: scandisk.lnk = ? (User '?')
O4 - Startup: scandisk.dll
O4 - Startup: scandisk.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_04\bin\ssv.dll
O9 - Extra button: Bonjour - {7F9DB11C-E358-4ca6-A83D-ACC663939424} - C:\Program Files\Bonjour\ExplorerPlugin.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: vugukibo.dll c:\windows\system32\hakoyevi.dll
O21 - SSODL: luwivuhel - {d9477915-5adb-4513-bf12-09b9c70e023b} - c:\windows\system32\hakoyevi.dll
O22 - SharedTaskScheduler: gsajkfh873whdngo8wuidgs4rgfr4 - {A2234B15-23F2-42AD-F4E4-00AAC39C0004} - C:\WINDOWS\system32\z8fmc90dqp.dll
O22 - SharedTaskScheduler: kupuhivus - {d9477915-5adb-4513-bf12-09b9c70e023b} - c:\windows\system32\hakoyevi.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Apple OS Switch Manager (AppleOSSMgr) - Unknown owner - C:\WINDOWS\system32\AppleOSSMgr.exe
O23 - Service: Apple Time Service (AppleTimeSrv) - Apple Inc. - C:\WINDOWS\system32\AppleTimeSrv.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: fastnetsrv Service (fastnetsrv) - Netopsystems A - C:\WINDOWS\system32\FastNetSrv.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe
O23 - Service: Net Login (NetLogin) - Unknown owner - C:\WINDOWS\svchost.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe

--
End of file - 7376 bytes




ROOTREPEAL © AD, 2007-2009
==================================================
Scan Start Time: 2009/11/02 06:28
Program Version: Version 1.3.5.0
Windows Version: Windows XP SP2
==================================================

Drivers
-------------------
Name: dump_atapi.sys
Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
Address: 0xA8F49000 Size: 98304 File Visible: No Signed: -
Status: -

Name: dump_WMILIB.SYS
Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
Address: 0xBA5D8000 Size: 8192 File Visible: No Signed: -
Status: -

Name: rootrepeal.sys
Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
Address: 0xA5B99000 Size: 49152 File Visible: No Signed: -
Status: -

Hidden/Locked Files
-------------------
Path: C:\WINDOWS\addins\addins
Status: Locked to the Windows API!

Path: C:\WINDOWS\PIF\PIF
Status: Locked to the Windows API!

Path: c:\windows\system32\iexpress.exe
Status: Allocation size mismatch (API: 135168, Raw: 114688)

Path: c:\windows\system32\conime.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\windows\system32\convert.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\osuninst.exe
Status: Allocation size mismatch (API: 61440, Raw: 40960)

Path: c:\windows\system32\packager.exe
Status: Allocation size mismatch (API: 81920, Raw: 61440)

Path: c:\windows\system32\fsutil.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\windows\system32\ftp.exe
Status: Allocation size mismatch (API: 65536, Raw: 45056)

Path: c:\windows\system32\getmac.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\windows\system32\makecab.exe
Status: Allocation size mismatch (API: 106496, Raw: 86016)

Path: c:\windows\system32\mqbkup.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\nbtstat.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\nddeapir.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\windows\system32\nslookup.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\windows\system32\nwscript.exe
Status: Allocation size mismatch (API: 147456, Raw: 126976)

Path: c:\windows\system32\ping.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\ping6.exe
Status: Allocation size mismatch (API: 53248, Raw: 36864)

Path: c:\windows\system32\proxycfg.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\replace.exe
Status: Allocation size mismatch (API: 32768, Raw: 16384)

Path: c:\windows\system32\rexec.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\route.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\routemon.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\windows\system32\rsh.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\rsm.exe
Status: Allocation size mismatch (API: 69632, Raw: 49152)

Path: c:\windows\system32\rsopprov.exe
Status: Allocation size mismatch (API: 86016, Raw: 65536)

Path: c:\windows\system32\runas.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\savedump.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\shrpubw.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\windows\system32\shutdown.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\sigverif.exe
Status: Allocation size mismatch (API: 90112, Raw: 73728)

Path: c:\windows\system32\stimon.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\subst.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\syncapp.exe
Status: Allocation size mismatch (API: 73728, Raw: 53248)

Path: c:\windows\system32\taskkill.exe
Status: Allocation size mismatch (API: 94208, Raw: 73728)

Path: c:\windows\system32\tcmsetup.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\tcpsvcs.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\telnet.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\windows\system32\vssadmin.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\windows\system32\w32tm.exe
Status: Allocation size mismatch (API: 69632, Raw: 53248)

Path: c:\windows\system32\wextract.exe
Status: Allocation size mismatch (API: 86016, Raw: 65536)

Path: c:\windows\system32\verifier.exe
Status: Allocation size mismatch (API: 118784, Raw: 98304)

Path: c:\windows\system32\winver.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\msswchx.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\msiregmv.exe
Status: Allocation size mismatch (API: 61440, Raw: 40960)

Path: c:\windows\system32\proquota.exe
Status: Allocation size mismatch (API: 73728, Raw: 53248)

Path: c:\windows\system32\sc.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\cscript.exe
Status: Allocation size mismatch (API: 118784, Raw: 98304)

Path: c:\windows\system32\ctfmon.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\gpupdate.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\windows\system32\help.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\hostname.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\mountvol.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\mqsvc.exe
Status: Allocation size mismatch (API: 24576, Raw: 8192)

Path: c:\windows\system32\mqtgsvc.exe
Status: Allocation size mismatch (API: 139264, Raw: 118784)

Path: c:\windows\system32\mrinfo.exe
Status: Allocation size mismatch (API: 32768, Raw: 16384)

Path: c:\windows\system32\netsetup.exe
Status: Allocation size mismatch (API: 352256, Raw: 331776)

Path: c:\windows\system32\netsh.exe
Status: Allocation size mismatch (API: 106496, Raw: 86016)

Path: c:\windows\system32\netstat.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\windows\system32\ntsd.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\ntvdm.exe
Status: Allocation size mismatch (API: 442368, Raw: 421888)

Path: c:\windows\system32\pathping.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\windows\system32\pentnt.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\perfmon.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\rasautou.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\rasdial.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\rasphone.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\windows\system32\rcp.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\windows\system32\secedit.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\sethc.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\setup.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\windows\system32\sfc.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\skeys.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\windows\system32\smbinst.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\sort.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\windows\system32\spiisupd.exe
Status: Allocation size mismatch (API: 32768, Raw: 16384)

Path: c:\windows\system32\spnpinst.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\ss3dfo.scr
Status: Allocation size mismatch (API: 724992, Raw: 704512)

Path: c:\windows\system32\ssbezier.scr
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\ssflwbox.scr
Status: Allocation size mismatch (API: 413696, Raw: 393216)

Path: c:\windows\system32\ssmarque.scr
Status: Allocation size mismatch (API: 40960, Raw: 24576)

Path: c:\windows\system32\ssmypics.scr
Status: Allocation size mismatch (API: 69632, Raw: 49152)

Path: c:\windows\system32\ssmyst.scr
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\windows\system32\sspipes.scr
Status: Allocation size mismatch (API: 630784, Raw: 610304)

Path: c:\windows\system32\ssstars.scr
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\windows\system32\sstext3d.scr
Status: Allocation size mismatch (API: 700416, Raw: 679936)

Path: c:\windows\system32\tlntadmn.exe
Status: Allocation size mismatch (API: 81920, Raw: 61440)

Path: c:\windows\system32\tlntsess.exe
Status: Allocation size mismatch (API: 98304, Raw: 81920)

Path: c:\windows\system32\tracerpt.exe
Status: Allocation size mismatch (API: 282624, Raw: 262144)

Path: c:\windows\system32\tracert.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\tracert6.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\winhlp32.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\winmsd.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\wpnpinst.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\recover.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\regedt32.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\windows\system32\regwiz.exe
Status: Allocation size mismatch (API: 24576, Raw: 8192)

Path: c:\windows\system32\relog.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\actmovie.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\windows\system32\ahui.exe
Status: Allocation size mismatch (API: 118784, Raw: 98304)

Path: c:\windows\system32\syskey.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\windows\system32\sysocmgr.exe
Status: Allocation size mismatch (API: 126976, Raw: 106496)

Path: c:\windows\system32\systray.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\windows\system32\tftp.exe
Status: Allocation size mismatch (API: 36864, Raw: 20480)

Path: c:\windows\system32\typeperf.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\windows\system32\scrnsave.scr
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\sdbinst.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\windows\system32\find.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\findstr.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\windows\system32\finger.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\fontview.exe
Status: Allocation size mismatch (API: 40960, Raw: 24576)

Path: c:\windows\system32\forcedos.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\powercfg.exe
Status: Allocation size mismatch (API: 69632, Raw: 49152)

Path: c:\windows\system32\print.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\windows\system32\progman.exe
Status: Allocation size mismatch (API: 131072, Raw: 110592)

Path: c:\windows\system32\wpabaln.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\xcopy.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\windows\system32\lpq.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\system32\lpr.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\windows\mui\muisetup.exe
Status: Allocation size mismatch (API: 110592, Raw: 94208)

Path: C:\WINDOWS\Config\Config
Status: Locked to the Windows API!

Path: C:\WINDOWS\Connection Wizard\Connection Wizard
Status: Locked to the Windows API!

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001361.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001362.exe
Status: Allocation size mismatch (API: 135168, Raw: 114688)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001363.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001364.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001365.exe
Status: Allocation size mismatch (API: 61440, Raw: 40960)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001366.exe
Status: Allocation size mismatch (API: 81920, Raw: 61440)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001367.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001368.exe
Status: Allocation size mismatch (API: 65536, Raw: 45056)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001369.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001370.exe
Status: Allocation size mismatch (API: 106496, Raw: 86016)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001371.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001372.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001373.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001374.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001375.exe
Status: Allocation size mismatch (API: 147456, Raw: 126976)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001376.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001394.exe
Status: Allocation size mismatch (API: 94208, Raw: 73728)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001412.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001430.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001448.exe
Status: Allocation size mismatch (API: 282624, Raw: 262144)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001466.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001377.exe
Status: Allocation size mismatch (API: 53248, Raw: 36864)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001378.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001379.exe
Status: Allocation size mismatch (API: 32768, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001380.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001381.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001382.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001383.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001384.exe
Status: Allocation size mismatch (API: 69632, Raw: 49152)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001385.exe
Status: Allocation size mismatch (API: 86016, Raw: 65536)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001386.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001387.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001388.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001389.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001390.exe
Status: Allocation size mismatch (API: 90112, Raw: 73728)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001391.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001392.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001393.exe
Status: Allocation size mismatch (API: 73728, Raw: 53248)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001395.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001396.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001397.exe
Status: Allocation size mismatch (API: 98304, Raw: 77824)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001398.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001399.exe
Status: Allocation size mismatch (API: 69632, Raw: 53248)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001400.exe
Status: Allocation size mismatch (API: 86016, Raw: 65536)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001401.exe
Status: Allocation size mismatch (API: 118784, Raw: 98304)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001402.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001403.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001404.exe
Status: Allocation size mismatch (API: 61440, Raw: 40960)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001405.exe
Status: Allocation size mismatch (API: 73728, Raw: 53248)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001406.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001407.exe
Status: Allocation size mismatch (API: 118784, Raw: 98304)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001408.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001409.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001410.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001411.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001413.exe
Status: Allocation size mismatch (API: 24576, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001414.exe
Status: Allocation size mismatch (API: 139264, Raw: 118784)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001415.exe
Status: Allocation size mismatch (API: 32768, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001416.exe
Status: Allocation size mismatch (API: 352256, Raw: 331776)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001417.exe
Status: Allocation size mismatch (API: 106496, Raw: 86016)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001418.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001419.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001420.exe
Status: Allocation size mismatch (API: 442368, Raw: 421888)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001421.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001422.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001423.exe
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001424.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001425.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001426.exe
Status: Allocation size mismatch (API: 77824, Raw: 57344)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001427.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001428.exe
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001429.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001431.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001432.exe
Status: Allocation size mismatch (API: 49152, Raw: 28672)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001433.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001434.exe
Status: Allocation size mismatch (API: 45056, Raw: 24576)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001435.exe
Status: Allocation size mismatch (API: 32768, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001436.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001437.scr
Status: Allocation size mismatch (API: 724992, Raw: 704512)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001438.scr
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001439.scr
Status: Allocation size mismatch (API: 413696, Raw: 393216)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001440.scr
Status: Allocation size mismatch (API: 40960, Raw: 24576)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001441.scr
Status: Allocation size mismatch (API: 69632, Raw: 49152)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001442.scr
Status: Allocation size mismatch (API: 40960, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001443.scr
Status: Allocation size mismatch (API: 630784, Raw: 610304)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001444.scr
Status: Allocation size mismatch (API: 36864, Raw: 16384)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001445.scr
Status: Allocation size mismatch (API: 700416, Raw: 679936)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001446.exe
Status: Allocation size mismatch (API: 81920, Raw: 61440)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001447.exe
Status: Allocation size mismatch (API: 98304, Raw: 81920)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001449.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001450.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001451.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001452.exe
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001453.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001454.exe
Status: Allocation size mismatch (API: 28672, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001455.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001456.exe
Status: Allocation size mismatch (API: 24576, Raw: 8192)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001457.exe
Status: Allocation size mismatch (API: 53248, Raw: 32768)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001458.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001459.exe
Status: Allocation size mismatch (API: 118784, Raw: 98304)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001460.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001461.exe
Status: Allocation size mismatch (API: 126976, Raw: 106496)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001462.exe
Status: Allocation size mismatch (API: 24576, Raw: 4096)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001463.exe
Status: Allocation size mismatch (API: 36864, Raw: 20480)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001464.exe
Status: Allocation size mismatch (API: 57344, Raw: 36864)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001465.scr
Status: Allocation size mismatch (API: 32768, Raw: 12288)

Path: c:\system volume information\_restore{dbf19f0c-202a-4b58-8107-dc24ec7f2236}\rp4\a0001467.exe
Stealth Objects
-------------------
Object: Hidden Handle [Index: 344, Type: Thread]
Process: csrss.exe (PID: 704) Address: 0x88094a30 Size: -

Object: Hidden Handle [Index: 584, Type: Thread]
Process: svchost.exe (PID: 2188) Address: 0x880863a0 Size: -

==EOF==

Edited by neilaug28, 02 November 2009 - 07:04 AM.


BC AdBot (Login to Remove)

 


#2 neilaug28

neilaug28
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:34 PM

Posted 02 November 2009 - 06:18 PM

someone please help me? thanks!

Hello neilaug28,

We ask that once you have posted your log and are waiting, please DO NOT "bump" your thread or make further replies until it has been responded to by a member of the HJT Team. The reason we ask this or do not respond to your requests is because that would remove you from the active queue that Techs and Staff have access to. The malware staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not been helped. If you post another response, there will be 1 reply. A team member, looking for a new log to work may assume another HJT Team member is already assisting you and not open the thread to respond.

That is why I have made an edit to your last post, instead of a reply. Please do not multiple post here, as that only pushes you further down the queue and causes confusion to the staff.

Please be patient. It may take a while to get a response but your log will be reviewed and answered as soon as possible.

Thank you for understanding.

Regards,

The weatherman
(Moderator)

Edited by The weatherman, 02 November 2009 - 06:25 PM.


#3 neilaug28

neilaug28
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:08:34 PM

Posted 06 November 2009 - 04:52 PM

I reformatted this laptop, so please close this topic. However, after i backed up my files on an external hd and plugged it into my desktop, now that computer will not load into anything except safe mode so that computer has been infected with some virus also. I will post the log for that computer in another topic. Thanks anyway.

#4 m0le

m0le

    Can U Dig It?


  • Malware Response Team
  • 34,527 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:London, UK
  • Local time:01:34 AM

Posted 06 November 2009 - 08:43 PM

Thanks for letting us know :(

Since this issue appears to be resolved ... this topic has been closed. Glad we could help. :(

If you're the topic starter, and need this topic reopened, please contact me via pm with the address of the thread.

Everyone else please begin a New Topic.
Posted Image
m0le is a proud member of UNITE




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users