Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Am I Really Infected?


  • Please log in to reply
5 replies to this topic

#1 maddawg001

maddawg001

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 14 December 2006 - 06:09 PM

Mcafee indicated a trojan when I visted a web site. I didn't download anything. Mcafee indicated it was in my temp internet files.

I ran my virusscan and it didn't find it. I then deleted my temp internet files, tried to run house cleaner but didn't think that worked.

I found another thread on this site and I tried to follow it. I downloaded and scan with AVG and it found only cookies that I then deleted.

I downloaded and ran Blacklight beta and it came up with nothing.

Here is that report:

12/14/06 08:09:27 [Info]: BlackLight Engine 1.0.47 initialized
12/14/06 08:09:27 [Info]: OS: 5.1 build 2600 (Service Pack 2)
12/14/06 08:09:29 [Note]: 7019 4
12/14/06 08:09:29 [Note]: 7005 0
12/14/06 08:09:35 [Note]: 7006 0
12/14/06 08:09:36 [Note]: 7011 2692
12/14/06 08:09:36 [Note]: 7026 0
12/14/06 08:09:36 [Note]: 7026 0
12/14/06 08:10:37 [Note]: FSRAW library version 1.7.1020
12/14/06 08:23:25 [Note]: 2000 1012
12/14/06 16:43:26 [Note]: 7007 0


Was I infected or not, or should I use another program? I would appreciate any help.

BC AdBot (Login to Remove)

 


#2 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:07:39 PM

Posted 15 December 2006 - 03:50 AM

To be absolutely sure please run the online scan at EWIDO. Please post the report overhere

#3 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:39 PM

Posted 15 December 2006 - 11:20 AM

Nothing showing as hidden in your Blacklight log. What was the name of the trojan that McAfee identified? If there was anything bad in your temp Internet files, the fact that you cleaned it and are not finding anything on subsequent scans indicates its probably been removed.

Are you having any problems with your pc like strange pop up alerts, browser redirects, etc?
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#4 maddawg001

maddawg001
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:12:39 PM

Posted 15 December 2006 - 06:18 PM

fozzie here it is - just 13 cookies

__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: TrackingCookie.Adbrite
Path: C:\Documents and Settings\steve\Cookies\steve@adbrite[2].txt
Risk: Medium

Name: TrackingCookie.Pointroll
Path: C:\Documents and Settings\steve\Cookies\steve@ads.pointroll[1].txt
Risk: Medium

Name: TrackingCookie.Atdmt
Path: C:\Documents and Settings\steve\Cookies\steve@atdmt[2].txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: C:\Documents and Settings\steve\Cookies\steve@doubleclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\steve\Cookies\steve@ehg-knightridder.hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\steve\Cookies\steve@fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Hitbox
Path: C:\Documents and Settings\steve\Cookies\steve@hitbox[2].txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: C:\Documents and Settings\steve\Cookies\steve@media.fastclick[1].txt
Risk: Medium

Name: TrackingCookie.Mediaplex
Path: C:\Documents and Settings\steve\Cookies\steve@mediaplex[1].txt
Risk: Medium

Name: TrackingCookie.Questionmarket
Path: C:\Documents and Settings\steve\Cookies\steve@questionmarket[2].txt
Risk: Medium

Name: TrackingCookie.Tacoda
Path: C:\Documents and Settings\steve\Cookies\steve@tacoda[1].txt
Risk: Medium

Name: TrackingCookie.2o7
Path: C:\Documents and Settings\steve\Cookies\steve@usatoday1.112.2o7[1].txt
Risk: Medium

Name: TrackingCookie.Zedo
Path: C:\Documents and Settings\steve\Cookies\steve@zedo[2].txt
Risk: Medium



quietman7 - i don't remember the name - just that it was in the temp internet file - nothing strange has been going on with my pc - just sort of freaked me out when it set off my Mcafee then it couldn't clean it.

Thanks to both of you for helping.

#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,490 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:39 PM

Posted 15 December 2006 - 06:31 PM

Your welcome.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 fozzie

fozzie

    aut viam inveniam aut faciam


  • Members
  • 3,516 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Ossendrecht/The Netherlands
  • Local time:07:39 PM

Posted 18 December 2006 - 02:32 PM

Your welcome




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users