Boontham
February 5th, 2009, 09:58 PM
I had annoyed with this worm. This is my log file
{QUOTE-> 7/2/2552 8:43:18 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Extras\Extras.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\System32\svchost.exe.
7/2/2552 8:43:17 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Settings\Settings.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\Explorer.EXE.
6/2/2552 9:45:33 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Extras\Extras.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\Avant Browser\avant.exe.
5/2/2552 9:05:24 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Extras\Extras.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\System32\wuauclt.exe.
16/1/2552 14:05:12 Real-time file system protection file C:\Program Files\Microsoft AntiSpyware\Quarantine\9694E24D-5AA9-40DA-B0C0-21E65C\8D9A5302-D179-453D-9662-A71464 Win32/Adware.Gator application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\system32\ntbackup.exe. <-QUOTE}How pemanently deleted this worm?
{QUOTE-> 7/2/2552 8:43:18 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Extras\Extras.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\System32\svchost.exe.
7/2/2552 8:43:17 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Settings\Settings.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\Explorer.EXE.
6/2/2552 9:45:33 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Extras\Extras.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\Avant Browser\avant.exe.
5/2/2552 9:05:24 Real-time file system protection file C:\Documents and Settings\All Users\Documents\Adobe PDF\Extras\Extras.exe Win32/Autoit.EP.Gen worm cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\System32\wuauclt.exe.
16/1/2552 14:05:12 Real-time file system protection file C:\Program Files\Microsoft AntiSpyware\Quarantine\9694E24D-5AA9-40DA-B0C0-21E65C\8D9A5302-D179-453D-9662-A71464 Win32/Adware.Gator application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\WINDOWS\system32\ntbackup.exe. <-QUOTE}How pemanently deleted this worm?