Uh, hmm...I have a question or two or....

Discussion in 'other security issues & news' started by ljc1174, Dec 5, 2004.

Thread Status:
Not open for further replies.
  1. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    HI GF,

    I am at a decision point, I'm not sure what to do.

    Without installing a bunch of programs...is there any other way to "simply" remove; manually delete the bugs? I have the file location thanks to pcpitstop free online virus scan.

    And no, I will not be changing AV because Norton is the only cd I have. His pc had NO protection what so ever before yesterday.

    I did an online virus scan with Trend Housecall and it found nothing. Not sure what to make of that. Norton is completely up to date as well as the other programs I previously mentioned.

    As far as wiping out the hard drive/reinstalling windows. I have a burned version of WinXP that a friend gave me after I made a phone call. As far as restoration cds to write zero's to the hard drive I only have Win ME cd's.

    So now I am contemplating which route will be easier.

    I've never used a burned version of an Operating System. If it doesn't work...argh...then I'll have to go purchase one and probably get ripped off from an over priced retailer!!!

    ARGH!!!

    OK, GF...what would you do? reinstall windows or Blackspears method?
     
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Try what I suggested first, costs you nothing other than a little bit of time and should get you all sorted.

    If you happen to find Windows missing a few files after doing what I suggested, place your Windows CD in the drive, click start > run, type in CMD, when the black window opens type in "sfc /scannow"

    SFC (System File Checker, a part of Windows File Protection) will replace any changed/damaged system files with a clean copy. SFC may not solve every problem, but it's a good start that anyone can do.

    Let us know how you go…

    Cheers :D
     
    Last edited: Dec 6, 2004
  3. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    ok...

    i'm gonna go make a cup of coffee....have a smoke....and make a decision....i'll get back with you and let you know which road i'm taking.

    thanks for the help blackspear!

    ~lori
     
  4. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    Hi Lori,

    I'm not experienced enough to say about that burned op cd, but from reading various articles I'm not real confident. :doubt:

    The Trendmicro scan....was that with system restore disabled?

    How many bugs and do you have and some names for me to look into?
    Also, did you manage to use CWShredder to "fix" in safe mode?

    There are some good tools to delete on boot, but if you could supply some answers first....
    use a screenshot if it's convienient.

    edit - Yeah Lori, make that joe, smoke it up and have a go at Mr. Spears list.... :D :cool:
    I know he's more experienced, he runs two repair shops! :eek:
    GF
     
    Last edited: Dec 6, 2004
  5. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    I haven't done anything YET~
    I just put my daughter to bed.

    Restore was disabled during all scans, Trend & Pitstop. I was quite surprised Trend didn't find anything.

    pitstop says this...
    trj/multidropper.kh
    c:/documents & settings/unknown/local settings/temp/all_files.exe
    and c:/documents & settings/unknown/temp/t$app7.$tm

    norton says this...
    c:/windows/system32/btest4.scr
    and 536A6868.tmp.trojan.horse

    the 21 that it initially found I'm pretty sure I uploaded that screen shot.
    The majority were download.trojan, one was trojan.horse and the other simply said trojan.

    ok...going for that coffee now!!!
     
  6. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    While I get my wits about :eek: ....have you made a decision?

    I feel based on lack of experience and good judgement, I would recommend Blackspears route first.
    It may sound like a lot but it goes quick, any remaining issues I'm sure we'll be able to iron out. If you had the cd's,
    nods method would be my personal choice. I say this only that I don't have anything overly important that could not
    quickly be replaced.

    GF ;)
     
  7. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    Yeah GF, I'm going with Blackspears way first...if all else fails... i'll venture into reinstall.

    Blackspear, how important is Step 17? The VX2 Cleaner? I ask because the link is bad.

    page comes up as Error 400:bad request

    ~lori
     
  8. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Just go past 17 then, I'll check out the link in the mean time...

    Cheers :D
     
  9. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    okie dokie!! :rolleyes:
     
  10. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    vx2finder.exe direct download from pchell.com here.

    GF
     
  11. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    got it... sorry it's taking me so long... i'm a mommy first :D

    plus i have to write down the instructions because there is no printer hooked up to this pc!

    ~lori
     
  12. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    NO PRINTER! :eek: :D Don't sweat it Lori....we cool. :cool:

    Take your time, we're ready when you are.......relax, we'll get this sorted. ;)
    And Lori, when you run the VX2, Click the Make Log button, save it somewhere convienient....my documents or something.

    GF
     
    Last edited: Dec 6, 2004
  13. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    Ok... :doubt:

    I ran the cleaning 3 times...but I didn't run CWShredder, HIJackThis or VX2 Cleaner nor did I have to run the WinsockFix. Because I still have two to remove and they aren't showing up on any scanner but pitstop...I've used NAV, Housecall, TH & Stinger.

    I'm attaching screenshots. NAV found Trojans in Safemode, so did TH & Stinger. Everyone else came up clean.
    Did I post something about Adaware not finding some items but NAV was finding them and I was curious as to why!!! It turns out, the items looked like ADware in NAV...meaning in my eyes, spybot & adaware should have found them, but TH found them as trojans! See how freakin' tricky they are!!! :'(

    PCpitstop was scanned after I did these scans.
    *See Attachment

    So what's going on? I'm not sure!!! Are these two that Pitstop found that well hid that NAV and the other can't find it?

    I'm going to install TDS. I've used it before and did fine with it...it's a bit fancy for me but, I've got the jist of it.

    I never did get to look to see what CWShredder does...what is it for? And what is the VX2 Cleaner for? Should I run HiJackThis to delete these two? Could pitstop be giving me a false scan to get me to buy their product o_O
    I don't know...many thoughts have gone through my head as to what the case may be. If all else fails and by tomorrow afternoon when I get home from the dentist and these problems aren't fixed...I'm gonna end it, I will wipe out this "freakin" hard drive and put a stop to this madness!!!

    But I will be installing everything back as far as protection goes as well as the Host File. I think another part of his problem was "remote assistance" was enabled. As soon as I brought this thing home, I turned that off. But I'm thinking that is probably how most of the problems started. Gotta luv M$!
    Stinger 3 scans:

    Scan initiated on Tue Dec 07 10:29:03 2004
    Number of clean files: 27662
    Scan initiated on Tue Dec 07 10:48:51 2004
    Number of clean files: 27625
    Scan initiated on Tue Dec 07 11:17:29 2004
    Number of clean files: 27625

    TROJANHUNTER First Scan

    Registry scan
    No suspicious entries found
    Inifile scan
    No suspicious entries found
    Port scan
    No suspicious open ports found
    Memory scan
    No trojans found in memory
    File scan
    Error: Directory not found: A:\
    Found trojan file: C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq19.tmp\WebRebates0.exe (Adware.EbatesMoeMoneyMaker.102)
    Found trojan file: C:\Documents and Settings\All Users\Application Data\Authentium\Curtains150\Quarantine\Quarantine\ppq19.tmp\WebRebates1.exe (Adware.WebRebates.110)
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom10.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom11.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom12.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom13.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom14.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom15.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom16.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom17.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom18.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom19.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom20.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom21.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom22.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom23.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom24.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom25.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom5.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom6.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom7.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom8.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\Advertisingcom9.zip
    Not scanning password-protected file related.htm in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AlexaRelated.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AlexaRelated.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AvenueAInc.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AvenueAInc1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\AvenueAInc2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick10.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick11.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick12.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick5.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick6.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick7.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick8.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DoubleClick9.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\DSOExploit4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText10.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText11.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText12.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText13.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText14.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText15.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText16.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText17.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText18.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText19.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText20.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText21.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText22.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText23.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText24.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText25.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText26.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText27.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText28.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText29.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText30.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText31.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText32.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText33.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText34.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText35.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText36.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText37.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText38.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText39.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText40.zip
    Not scanning password-protected file eZinstall.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText41.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText41.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText42.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText43.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText44.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText45.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText46.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText47.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText48.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText49.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText5.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText50.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText51.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText52.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText53.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText54.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText55.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText56.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText57.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText58.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText59.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText6.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText60.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText61.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText62.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText63.zip
    Not scanning password-protected file CHCON.dll in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText64.zip
    Not scanning password-protected file eabh.dll in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText64.zip
    Not scanning password-protected file mmod.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText64.zip
    Not scanning password-protected file seng.dll in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText64.zip
    Not scanning password-protected file UNWISE.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText64.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText64.zip
    Not scanning password-protected file mmod.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText65.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText65.zip
    Not scanning password-protected file ezstub.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText66.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText66.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText67.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText68.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText69.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText7.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText70.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText71.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText72.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText73.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText74.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText75.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText8.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\eZulaHotText9.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\FastClick.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\HitBox.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\HitBox1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\HitBox2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\HitBox3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\LinkSynergy.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\LinkSynergy1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch10.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch11.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch12.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch13.zip
    Not scanning password-protected file NPMYSRCH.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch14.zip
    Not scanning password-protected file S42NS.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch14.zip
    Not scanning password-protected file S4BAR.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch14.zip
    Not scanning password-protected file files.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch14.zip
    Not scanning password-protected file prevcfg.htm in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch14.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch14.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch15.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch16.zip
    Not scanning password-protected file S4BAR.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch17.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch17.zip
    Not scanning password-protected file S4BAR.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch18.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch18.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch19.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch20.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch21.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch22.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch23.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch24.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch25.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch26.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch27.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch28.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch29.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch30.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch31.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch32.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch33.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch34.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch35.zip
    Not scanning password-protected file NPMYSRCH.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch36.zip
    Not scanning password-protected file S42NS.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch36.zip
    Not scanning password-protected file S4BAR.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch36.zip
    Not scanning password-protected file files.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch36.zip
    Not scanning password-protected file prevcfg.htm in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch36.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch36.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch37.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch38.zip
    Not scanning password-protected file S4BAR.DLL in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch39.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch39.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch5.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch6.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch7.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch8.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\MySearch9.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\TargetNet.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer1.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer10.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer10.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer11.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer12.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer13.zip
    Not scanning password-protected file AdDestroyerInner.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file BundleOuter.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file Setup.INI in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file UNWISE.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file VBouncerInner.EXE in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer14.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer15.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer16.zip
    Not scanning password-protected file InstallT.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer17.zip
    Not scanning password-protected file Setup.INI in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer17.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer17.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer2.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer3.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer4.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer5.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer5.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer6.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer6.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer7.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer8.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer8.zip
    Not scanning password-protected file VirtualBouncer.exe in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer9.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VirtualBouncer9.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf2.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf3.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf4.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf5.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\VXf6.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaPlayer.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaPlayer1.zip
    Not scanning password-protected file sbRecovery.ini in C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaPlayer2.zip
    Found trojan file: C:\Documents and Settings\unknown\Local Settings\Temp\adlinstallwin32.exe/Snokn2Lj.exe (Adware.SecondThought.115)
    C:\pagefile.sys Not scanned (in use by another application)
    Warning: Unable to unpack UPX-packed file C:\Program Files\TrojanHunter 4.0\Gen.dll (Add to ignore list)
    Warning: Unable to unpack UPX-packed file C:\Program Files\TrojanHunter 4.0\UnUpx.dll (Add to ignore list)
    C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\colbact.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\comuid.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\es.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\migregdb.exe Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\ole32.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB828741$\txflog.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB833987$\sxs.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\callcont.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\cmdevtgprov.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\evtgprov.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\msgina.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\mst120.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll Not scanned (in use by another application)
    C:\WINDOWS\$NtUninstallKB835732$\schannel.dll Not scanned (in use by another application)
    Found trojan file: C:\WINDOWS\bundles\HelperInstaller.exe/wf4nbC.exe (Adware.DealHelper.101)
    Found trojan file: C:\WINDOWS\bundles\saie1101.exe/B0FUV0P.exe (TrojanDropper.Mrx.100)
    Found trojan file: C:\WINDOWS\bundles\TVM_B5_Bundle_8.EXE (Adware.TVM.100)
    Found trojan file: C:\WINDOWS\bundles\WebRebates_Auto_InstallSilent.exe (Adware.WebRebates.111)
    Found trojan file: C:\WINDOWS\cb8029_NNSTP3.exe (Adware.BargainBuddy.104)
    Found trojan file: C:\WINDOWS\package8029_NNSTP3.exe (Adware.BargainBuddy.104)
    Found trojan file: C:\WINDOWS\system32\adlinstallwin32.exe/rCwrq.exe (Adware.SecondThought.115)
    Error: Directory not found: D:\
    10 trojan files found
    6712 files scanned in 1262 seconds

    Second Scan

    Registry scan
    Registry key exists: HKEY_CURRENT_USER\Software\Bundles (matches Adware.WebRebates.106)

    Warning: Unable to unpack UPX-packed file C:\Program Files\TrojanHunter 4.0\Gen.dll (Add to ignore list)
    Warning: Unable to unpack UPX-packed file C:\Program Files\TrojanHunter 4.0\UnUpx.dll (Add to ignore list)
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\mscorrc.chs.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\mscorrc.cht.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\mscorrc.ger.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\mscorrc.kor.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\system.web.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\system.xml.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\vbc7ui.chs.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\vbc7ui.cht.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\vbc7ui.ger.dll
    Warning: Executable file with double extensions found: C:\WINDOWS\SoftwareDistribution\Download\6ca7b3a8efd5a9b6f87fff395a2eb989\vbc7ui.kor.dll
    No trojan files found
    8636 files scanned in 4529 seconds
     

    Attached Files:

  14. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Due to the nature of your infection please please download and run “Hijack This” found here and post your log at one of the forums found here


    Keep in mind the following quote:


    Cheers :D
     
  15. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    I haven't fixed anything, or checked anything...it's all open still.

    [HJT log removed; please note current postings for HJT logs available here. See that link for recommended posting sites - BlueZannetti]
     
    Last edited by a moderator: Dec 7, 2004
  16. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    ok, since that just happened... and I closed the notebook that had the entire thing on it... i can't repost it...i dunno...so what now? am i supposed to go to another forum and start this whole process all over again? *bangs head on desk*
    so no one on this forum does anything with hijackthis? so i just pick any forum and post? doesn't seem right... and wilders forum is STILL on their list!!!

    not to sound too "cranky" but, it would have been nice if i could have been given a message first that the whole thing was going to be deleted!

    Thnx

    :doubt:
     
  17. BlueZannetti

    BlueZannetti Registered Member

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    ljc1174,

    See your PM. You'll find a copy there.

    Blue
     
  18. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    Thank you again blue! sorry for being a brat...i'm an only child. :blink:
     
  19. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    Hi again Lori,

    You and I both know your father-in-law's going to need a little education....
    and he'll need some more help from you! :D You probably know this,
    so show him how to use some of the items found on this excellent site....

    http://www.spywarewarrior.com/uiuc/main.htm

    Maybe you could enroll him here at Wilder's for answers and a few laughs,
    maybe even whats OK to download..... :eek: :cool:

    GF
     
  20. ljc1174

    ljc1174 Registered Member

    Joined:
    Aug 15, 2002
    Posts:
    276
    Location:
    Cleveland, Ohio USA
    Hey GF,
    Yes, I plan on putting him on here after I get things all fixed up.
    If it weren't for this forum, I wouldn't know how to do anything!
    And he's going to get a long hard lesson on securing himself!
    I think I'm going to have to slap my brotherinlaw a few times as well.
    He's good with computers, but...seriously, I don't think he has a clue how to protect himself. If he did, then he should have installed the programs that I did a year ago when all this started!

    Anywho,

    Off to take a nap!

    ~Lori
     
  21. GlobalForce

    GlobalForce Regular Poster

    Joined:
    Jun 30, 2004
    Posts:
    3,581
    Location:
    Garden State, USA
    shhhhhhh....sounds like.......slap, slap...HEY!....slap, smack.....DOH!..slap.....KNOCK IT ~ slap.... ~ laughing ~ :D :D

    Hey I hear ya, but it's your father-in-law who's got to be willing....doesn't take too much effort, just adjustment ;)
    Definitely show him how to work with IE-SPYADS onboard, especially using IE. SpywareBlaster's another solid choice
    (he'd even have a support forum right here :eek: ). You probably haven't been away long enough to forget this page. :cool:

    Hope that reload works out OK. If you need anything beyond that massive :eek: infection, or have any additional questions....don't worry, you WILL be answered! ;) :cool:

    [​IMG] Best Lori,
    GF
     
    Last edited: Dec 8, 2004
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.