Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Slow computer


  • Please log in to reply
13 replies to this topic

#1 doghinp

doghinp

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 11 December 2009 - 10:36 AM

Hello,
my computer recently started going slowly. I'm not sure what exactly caused it, and I've tried to do what is recommended in the forums for fixing a slow computer but it doesn't seem to help. I'm sorry this is pretty vague, but I don't have any idea what caused it. I have scanned the computer with Malwarebytes which brought up nothing, and Spybot which brought up one virtumonde. I would greatly appreciate any help.

Thanks

BC AdBot (Login to Remove)

 


#2 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:48 PM

Posted 11 December 2009 - 12:26 PM

:inlove:
Please Update mbam and run a FULL scan
Please post the results

====================

:flowers:
Please download TFC by Old Timer and save it to your desktop.
alternate download link

Save any unsaved work. TFC will close ALL open programs including your browser!
Double-click on TFC.exe to run it. If you are using Vista, right-click on the file and choose Run As Administrator.
Click the Start button to begin the cleaning process and let it run uninterrupted to completion.
Important! If TFC prompts you to reboot, please do so immediately. If not prompted, manually reboot the machine anyway to ensure a complete clean.[/list]
========================

:thumbsup:
SAS, may take a long time to scan
Please download and scan with SUPERAntiSpyware Free
  • Double-click SUPERAntiSypware.exe and use the default settings for installation.
  • An icon will be created on your desktop. Double-click that icon to launch the program.
  • If asked to update the program definitions, click "Yes". If not, update the definitions before scanning by selecting "Check for Updates". (If you encounter any problems while downloading the updates, manually download them from here. Double-click on the hyperlink for Download Installer and save SASDEFINITIONS.EXE to your desktop. Then double-click on SASDEFINITIONS.EXE to install the definitions.)
  • In the Main Menu, click the Preferences... button.
  • Click the "General and Startup" tab, and under Start-up Options, make sure "Start SUPERAntiSpyware when Windows starts" box is unchecked.
  • Click the "Scanning Control" tab, and under Scanner Options, make sure the following are checked (leave all others unchecked):
    • Close browsers before scanning.
    • Scan for tracking cookies.
    • Terminate memory threats before quarantining.
  • Click the "Close" button to leave the control center screen and exit the program.
  • Do not run a scan just yet.
    First
Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with SUPERAntiSpyware as follows:
  • Launch the program and back on the main screen, under "Scan for Harmful Software" click Scan your computer.
  • On the left, make sure you check C:\Fixed Drive.
  • On the right, under "Complete Scan", choose Perform Complete Scan and click "Next".
  • After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click "OK".
  • Make sure everything has a checkmark next to it and click "Next".
  • A notification will appear that "Quarantine and Removal is Complete". Click "OK" and then click the "Finish" button to return to the main menu.
  • If asked if you want to reboot, click "Yes" and reboot normally.
  • To retrieve the removal information after reboot, launch SUPERAntispyware again.
    • Click Preferences, then click the Statistics/Logs tab.
    • Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    • If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    • Please copy and paste the Scan Log results in your next reply.
  • Click Close to exit the program.
Note.. SAS doesn't open the registry hives for other user accounts on the system, so scans should be done from each user account.

=======================

:trumpet:

Please download Dr.Web CureIt, the free version & save it to your desktop. DO NOT perform a scan yet.

Reboot your computer in "Safe Mode" using the F8 method. To do this, restart your computer and after hearing your computer beep once during startup (but before the Windows icon appears) press the F8 key repeatedly. A menu will appear with several options. Use the arrow keys to navigate and select the option to run Windows in "Safe Mode".

Scan with Dr.Web CureIt as follows:
  • Double-click on launch.exe to open the program and click Start. (There is no need to update if you just downloaded the most current version
  • Read the Virus check by DrWeb scanner prompt and click Ok where asked to Start scan now? Allow the setup.exe to load if asked by any of your security programs.
  • The Express scan will automatically begin.
    (This is a short scan of files currently running in memory, boot sectors, and targeted folders).
  • If prompted to dowload the Full version Free Trial, ignore and click the X to close the window.
  • If an infected object is found, you will be prompted to move anything that cannot be cured. Click Yes to All.
  • When complete, click Select All, then choose Cure > Move incurable.
    (This will move any detected files to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if they can't be cured)
  • Now put a check next to Complete scan to scan all local disks and removable media.
  • In the top menu, click Settings > Change settings, and UNcheck "Heuristic analysis" under the "Scanning" tab, then click Ok.
  • Back at the main window, click the green arrow "Start Scanning" button on the right under the Dr.Web logo.
  • When the scan is complete, a message will be displayed at the bottom indicating if any viruses were found.
  • Click "Yes to all" if asked to cure or move the file(s) and select "Move incurable".
  • In the top menu, click file and choose save report list.
  • Save the DrWeb.csv report to your desktop.
  • Exit Dr.Web Cureit when done.
  • Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
  • After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

Edited by garmanma, 11 December 2009 - 12:27 PM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#3 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 11 December 2009 - 04:46 PM

Here is #1

Malwarebytes' Anti-Malware 1.42
Database version: 3346
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

12/11/2009 4:45:06 PM
mbam-log-2009-12-11 (16-45-06).txt

Scan type: Full Scan (C:\|)
Objects scanned: 225202
Time elapsed: 4 hour(s), 13 minute(s), 0 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#4 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:48 PM

Posted 11 December 2009 - 08:02 PM

That one's fine
Just waiting for the rest
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#5 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 13 December 2009 - 04:29 PM

Hello,

first, when i tried to turn my computer off and then on it said : "read failure on internal hard drive, no bootable devices", but it let me load after I turned it off and on again.
I did the second scan - here it is

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 12/13/2009 at 03:14 PM

Application Version : 4.31.1000

Core Rules Database Version : 4362
Trace Rules Database Version: 2206

Scan type : Complete Scan
Total Scan Time : 04:53:56

Memory items scanned : 284
Memory threats detected : 0
Registry items scanned : 5286
Registry threats detected : 3
File items scanned : 91448
File threats detected : 33

Adware.Tracking Cookie
C:\Documents and Settings\Clayton Brostowin\Cookies\clayton brostowin@msnportal.112.2o7[1].txt
C:\Documents and Settings\Clayton Brostowin\Cookies\clayton brostowin@bs.serving-sys[1].txt
C:\Documents and Settings\Clayton Brostowin\Cookies\clayton brostowin@serving-sys[1].txt
.2o7.net [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.2o7.net [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.advertising.com [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.atdmt.com [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
.atwola.com [ C:\Documents and Settings\peter\Application Data\Mozilla\Firefox\Profiles\qfmm46uh.default\cookies.txt ]
C:\Documents and Settings\peter\Cookies\peter@ad.yieldmanager[2].txt
C:\Documents and Settings\peter\Cookies\peter@adopt.euroclick[2].txt
C:\Documents and Settings\peter\Cookies\peter@adrevolver[2].txt
C:\Documents and Settings\peter\Cookies\peter@adrevolver[3].txt
C:\Documents and Settings\peter\Cookies\peter@adserver[1].txt
C:\Documents and Settings\peter\Cookies\peter@advertising[1].txt
C:\Documents and Settings\peter\Cookies\peter@as.casalemedia[1].txt
C:\Documents and Settings\peter\Cookies\peter@atdmt[2].txt
C:\Documents and Settings\peter\Cookies\peter@atwola[1].txt
C:\Documents and Settings\peter\Cookies\peter@casalemedia[1].txt
C:\Documents and Settings\peter\Cookies\peter@doubleclick[2].txt
C:\Documents and Settings\peter\Cookies\peter@fastclick[1].txt
C:\Documents and Settings\peter\Cookies\peter@insightexpressai[2].txt
C:\Documents and Settings\peter\Cookies\peter@linksynergy[1].txt
C:\Documents and Settings\peter\Cookies\peter@maxserving[1].txt
C:\Documents and Settings\peter\Cookies\peter@mediaplex[2].txt
C:\Documents and Settings\peter\Cookies\peter@overture[1].txt
C:\Documents and Settings\peter\Cookies\peter@realmedia[1].txt
C:\Documents and Settings\peter\Cookies\peter@revsci[2].txt
C:\Documents and Settings\peter\Cookies\peter@sportsad.adbureau[1].txt
C:\Documents and Settings\peter\Cookies\peter@trafficmp[1].txt
C:\Documents and Settings\peter\Cookies\peter@tribalfusion[2].txt

Rogue.Component/Trace
HKLM\Software\Microsoft\50B6C70A
HKLM\Software\Microsoft\50B6C70A#50b6c70a
HKLM\Software\Microsoft\50B6C70A#Version

#6 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:48 PM

Posted 13 December 2009 - 07:51 PM

read failure on internal hard drive


Sounds like you might have found your problem, but I'll wait for Dr Web Cureit
You said you followed the steps for a slow computer so I assume you did a disk defrag and disk cleanup?
In My Computer, right-click on your hard drive and select Properties
How much free space do you have left?

You can also go to the support site for the manufacturer of your hard drive and download their diagnostic tool.
You can then scan your drive for problems
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#7 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 15 December 2009 - 08:28 AM

I did a defrag and disk cleanup and I still have 19 gb out of 50 gb. I completed the last scan, and I saved the report, but I might have messed up because it only has this:

A0217604.reg;C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP661;Trojan.StartPage.1505;Deleted.;
CWSDOC.COM;C:\vgastrat;Siggen.746;Incurable.Moved.;

My computer is still running slow. The problem seems to be that programs on the windows task manager keep the computer at 100%, even when only firefox is running. Mcshield, continues to run and take up 50% most of the time.

#8 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:48 PM

Posted 15 December 2009 - 07:52 PM

Please download and run Process Explorer

http://technet.microsoft.com/en-us/sysinte...s/bb896653.aspx

Under file and save as, create a log and post here

copy and paste into a reply
Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#9 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 15 December 2009 - 09:34 PM

First - thanks a lot for all your help so far.
2nd - today McAfee altered me twice:

Generic Downloading.g (trojan)

in
C:/ Program files/Digital Line Detect/OLG.exe
and
C:/ WINDOWS/system32/dla/

I didn't know what to do.

Also - when I try to open Firefox - which is what I normally use it says: this application has failed to start because smime3.dll was not found.

Here is the file from Process Explorer:

Process PID CPU Description Company Name
System Idle Process 0
Interrupts n/a 15.49 Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 916 Windows NT Session Manager Microsoft Corporation
csrss.exe 1020 1.41 Client Server Runtime Process Microsoft Corporation
winlogon.exe 1044 Windows NT Logon Application Microsoft Corporation
services.exe 1088 2.82 Services and Controller app Microsoft Corporation
ati2evxx.exe 1264 ATI External Event Utility EXE Module ATI Technologies Inc.
svchost.exe 1276 Generic Host Process for Win32 Services Microsoft Corporation
mcagent.exe 3640 McAfee Integrated Security Platform McAfee, Inc.
wmiprvse.exe 2340 WMI Microsoft Corporation
svchost.exe 1380 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1448 Generic Host Process for Win32 Services Microsoft Corporation
wuauclt.exe 1956 Windows Update Microsoft Corporation
EvtEng.exe 1488 EvtEng Module Intel Corporation
S24EvMon.exe 1588 Event Monitor - Supports driver extensions to NIC Driver for wireless adapters. Intel Corporation
WLKEEPER.exe 1632 WLKEEPER Intel® Corporation
svchost.exe 1676 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1796 Generic Host Process for Win32 Services Microsoft Corporation
spoolsv.exe 2008 Spooler SubSystem App Microsoft Corporation
svchost.exe 196 Generic Host Process for Win32 Services Microsoft Corporation
AppleMobileDeviceService.exe 180 Apple Mobile Device Service Apple Inc.
mDNSResponder.exe 232 Bonjour Service Apple Inc.
jqs.exe 268 Java™ Quick Starter Service Sun Microsystems, Inc.
Runservice.exe 336
mcmscsvc.exe 352 McAfee Services McAfee, Inc.
McNASvc.exe 380 McAfee Network Agent McAfee, Inc.
McProxy.exe 460 McAfee Proxy Service Module McAfee, Inc.
NicConfigSvc.exe 656 Internal Network Card Power Management Service Dell Inc.
RegSrvc.exe 952 RegSrvc Module Intel Corporation
sprtsvc.exe 1652 SupportSoft Agent Service SupportSoft, Inc.
svchost.exe 1904 Generic Host Process for Win32 Services Microsoft Corporation
wdfmgr.exe 2580 Windows User Mode Driver Manager Microsoft Corporation
ViewpointService.exe 2672 ViewMgr Viewpoint Corporation
mcsysmon.exe 2748 McAfee SystemGuards Service McAfee, Inc.
alg.exe 3508 Application Layer Gateway Service Microsoft Corporation
Mcshield.exe 3120 On-Access Scanner service McAfee, Inc.
MpfSrv.exe 1196 McAfee Personal Firewall Service McAfee, Inc.
lsass.exe 1100 LSA Shell (Export Version) Microsoft Corporation
ZCfgSvc.exe 1792 ZeroCfgSvc MFC Application Intel Corporation
ati2evxx.exe 1884 ATI External Event Utility EXE Module ATI Technologies Inc.
taskmgr.exe 3284 Windows TaskManager Microsoft Corporation
explorer.exe 744 69.01 Windows Explorer Microsoft Corporation
Apoint.exe 3744 Alps Pointing-device Driver Alps Electric Co., Ltd.
iFrmewrk.exe 3916 Intel Framework MFC Application Intel Corporation
atiptaxx.exe 3944 ATI Desktop Control Panel ATI Technologies, Inc.
PCMService.exe 4020 PowerCinema Resident Program for Dell CyberLink Corp.
DVDLauncher.exe 4052 CyberLink PowerCinema Resident Program CyberLink Corp.
issch.exe 1732 InstallShield Update Service Scheduler InstallShield Software Corporation
dlbubmgr.exe 2324 Dell Dell 942 Button Manager
dlbubmon.exe 2468 Dell Dell 942 Button Monitor
apdproxy.exe 2332 Adobe Photoshop Album Starter Edition 3.0 component Adobe Systems Incorporated
jusched.exe 2472 Java™ Platform SE binary Sun Microsystems, Inc.
DSAgnt.exe 2744 1.41 Dell Support Gteko Ltd.
sprtcmd.exe 2496 Dell Support Center Updates SupportSoft, Inc.
TeaTimer.exe 2076 System settings protector Safer-Networking Ltd.
iexplore.exe 2160 Internet Explorer Microsoft Corporation
iexplore.exe 2336 Internet Explorer Microsoft Corporation
procexp.exe 2504 9.86 Sysinternals Process Explorer Sysinternals - www.sysinternals.com
ApntEx.exe 2372 Alps Pointing-device Driver for Windows NT/2000/XP Alps Electric Co., Ltd.

#10 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 16 December 2009 - 08:21 AM

Hello,
wanted to add that when I turned on my computer today to see if there were any updates it said some like:

there are dirty files - windows is going to do a 3 part scan
then it scaned for files and deleted somem
then it deleted some index entries
then it verified security descriptors

Thanks

#11 garmanma

garmanma

    Computer Masochist


  • Staff Emeritus
  • 27,809 posts
  • OFFLINE
  •  
  • Location:Cleveland, Ohio
  • Local time:08:48 PM

Posted 16 December 2009 - 07:23 PM

TeaTimer.exe 2076 System settings protector Safer-Networking Ltd.


Please disable any Firefox add-ons that you have

We need to disable Spybot S&D's "TeaTimer"
TeaTimer works by preventing ANY changes to the system. It will attempt to undo any fixes we run, because it blocks these fixes from running.

In order to safeguard your system from problems that can be brought on by a half finished fix, we need to disable TeaTimer. We can reenable it when we're done if you like.
  • Open SpyBot Search and Destroy by going to Start -> All Programs -> Spybot Search and Destroy -> Spybot Search and Destroy.
  • If prompted with a legal dialog, accept the warning.
  • Click Posted Image and then on "Advanced Mode"
    Posted Image
  • You may be presented with a warning dialog. If so, press Posted Image
  • Click on Posted Image
  • Click on Posted Image
  • Uncheck this checkbox:
    Posted Image
  • Close/Exit Spybot Search and Destroy
==========================

Update and do one more full scan with mbam and another Dr. Web Cureit scan

Edited by garmanma, 16 December 2009 - 07:24 PM.

Mark
Posted Image
why won't my laptop work?

Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time around
Do not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefits
Become a BleepingComputer fan: Facebook and Twitter

#12 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 18 December 2009 - 03:48 PM

Here is mbam

Malwarebytes' Anti-Malware 1.42
Database version: 3383
Windows 5.1.2600 Service Pack 3
Internet Explorer 6.0.2900.5512

12/18/2009 3:45:48 PM
mbam-log-2009-12-18 (15-45-48).txt

Scan type: Full Scan (C:\|)
Objects scanned: 209522
Time elapsed: 3 hour(s), 10 minute(s), 26 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

#13 MATTSPCHELP

MATTSPCHELP

  • Members
  • 196 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Leicester, United kingdom
  • Local time:01:48 AM

Posted 18 December 2009 - 04:02 PM

Hello,
wanted to add that when I turned on my computer today to see if there were any updates it said some like:

there are dirty files - windows is going to do a 3 part scan
then it scaned for files and deleted somem
then it deleted some index entries
then it verified security descriptors

Thanks


Thats known as a Check disk that cleans up bad sectors which could have caused your non booting pc ,
Microsoft Certified Desktop Support Technician

#14 doghinp

doghinp
  • Topic Starter

  • Members
  • 16 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Boxford, MA
  • Local time:07:48 PM

Posted 21 December 2009 - 08:18 PM

Sorry this took so long,

inst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_suite_install_6.0.28.3;Probably BACKDOOR.Trojan;;
ocpinst.exe\data529;C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_suite_install_6.0.28.3\ocpinst.exe;Probably BACKDOOR.Trojan;;
ocpinst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\triton_suite_install_6.0.28.3;Archive contains infected objects;Moved.;
RegUBP2b-Clayton Brostowin.reg;C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2;Trojan.StartPage.1505;Deleted.;
A0220828.COM;C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP662;Siggen.746;Incurable.Moved.;
A0223788.exe\data529;C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP664\A0223788.exe;Probably BACKDOOR.Trojan;;
A0223788.exe;C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP664;Archive contains infected objects;Moved.;
A0223789.reg;C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP664;Trojan.StartPage.1505;Deleted.;


Also,
I then tried to quit and it reminded me to cure which I did but I forgot to save again.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users