shadowcross13

everything seems to b alright thank you so much for your help i really appreciate it

ok here's the log. it found 2 infected objects so i uninstalled my celebrity toolbar so it should be ok right? Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4154 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 5/29/2010 11:30:37 AM mbam-log-2010-05-29 (11-30-37).txt Scan type: Full scan (C:\|D:\|E:\|) Objects scanned: 319169 Time elapsed: 2 hour(s), 7 minute(s), 19 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 2 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Program Files\Celebrity Toolbar\Celebrity_Toolbar.dll (Adware.EcoBar) -> Quarantined and deleted successfully. C:\Program Files\Celebrity Toolbar\Family_Toolbar.dll (Adware.EcoBar) -> Quarantined and deleted successfully.

ok deleted them. should i run malwarebytes to see if anything shows up?

ComboFix 10-05-27.01 - Meghan 05/28/2010 13:56:58.3.2 - x86 Microsoft

sorry, it was acting really weird when i tried posting it by copy paste. so here's the attachment. virustotal_2.txt virustotal_1.txt

ok i uploaded it to the site u said and i didn't know if i was supposed to save it on notepad but i did anyway. do you want me to post it?

ComboFix 10-05-27.01 - Meghan 05/28/2010 11:05:03.2.2 - x86 Microsoft

im sorry but the javaRa log did something weird so i cant open it. it saved itself as JavaRa.def but here's the combo fix log: ComboFix 10-05-27.01 - Meghan 05/27/2010 16:04:16.1.2 - x86 Microsoft

im sorry but i cant find adobe acrobat 8 or 8.1.3 when i followed the instructions in the windows vista link. i did find acrobat.com and i did uninstall limewire and adobe reader 9. however i did not continue to the uninstalling java yet because i wasnt sure if i should or not. do i uninstall acrobat.com or leave it alone?

Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4143 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 5/25/2010 3:58:46 PM mbam-log-2010-05-25 (15-58-46).txt Scan type: Quick scan Objects scanned: 127734 Time elapsed: 11 minute(s), 40 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) DDS (Ver_10-03-17.01) - NTFSx86 Run by Meghan at 16:00:18.53 on Tue 05/25/2010 Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_18 Microsoft Attach_2.zip

uh so yea more weird stuff happened. i posted this in the general thread but was told to post it here so yea. i scanned my comp this morning and yea virus still there but then later today this weird thing popped up, so i rescanned it after and then there's nothing. the virus' that usually showed up in the beginning were gone. so here's the log for the first scan: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4052 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 5/24/2010 10:11:31 AM mbam-log-2010-05-24 (10-11-31).txt Scan type: Full scan (C:\|D:\|E:\|) Objects scanned: 313129 Time elapsed: 2 hour(s), 5 minute(s), 58 second(s) Memory Processes Infected: 0 Memory Modules Infected: 4 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 1 Files Infected: 9 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4\krnln.fnr (Trojan.Agent) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\dp1.fne (Worm.Autorun) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\eAPI.fne (Worm.Autorun) -> No action taken. Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4 (Worm.Autorun) -> No action taken. Files Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4\krnln.fnr (Trojan.Agent) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> No action taken. C:\!KillBox\E_N4\internet.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\internet.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\VirtualStore\Windows\System32\185D35\HtmlView.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\VirtualStore\Windows\System32\185D35\internet.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\VirtualStore\Windows\System32\185D35\krnln.fnr (Trojan.Agent) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\dp1.fne (Worm.Autorun) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\eAPI.fne (Worm.Autorun) -> No action taken. and here's the log for the 2nd scan after the pop up: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4052 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 5/24/2010 4:45:27 PM mbam-log-2010-05-24 (16-45-27).txt Scan type: Full scan (C:\|D:\|E:\|) Objects scanned: 313923 Time elapsed: 1 hour(s), 57 minute(s), 7 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 1 Files Infected: 4 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4 (Worm.Autorun) -> Quarantined and deleted successfully. Files Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4\dp1.fne (Worm.Autorun) -> Quarantined and deleted successfully. C:\Users\Meghan\AppData\Local\Temp\E_N4\eAPI.fne (Worm.Autorun) -> Quarantined and deleted successfully. C:\Users\Meghan\AppData\Local\Temp\E_N4\HtmlView.fne (Worm.Autorun) -> Quarantined and deleted successfully. C:\Users\Meghan\AppData\Local\Temp\E_N4\krnln.fnr (Worm.Autorun) -> Quarantined and deleted successfully.

ok so i posted a topic about a virus issue here but the thing is i scanned for it this morning and it was still there like i figured it would but then later on today this weird thing popped up so i scanned again and then all of a sudden there's nothing. the virus's that usually show up in the very beginning were gone so here's the log for the first scan Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4052 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 5/24/2010 10:11:31 AM mbam-log-2010-05-24 (10-11-31).txt Scan type: Full scan (C:\|D:\|E:\|) Objects scanned: 313129 Time elapsed: 2 hour(s), 5 minute(s), 58 second(s) Memory Processes Infected: 0 Memory Modules Infected: 4 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 1 Files Infected: 9 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4\krnln.fnr (Trojan.Agent) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\dp1.fne (Worm.Autorun) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\eAPI.fne (Worm.Autorun) -> No action taken. Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4 (Worm.Autorun) -> No action taken. Files Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4\krnln.fnr (Trojan.Agent) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\HtmlView.fne (HackTool.Patcher) -> No action taken. C:\!KillBox\E_N4\internet.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\internet.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\VirtualStore\Windows\System32\185D35\HtmlView.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\VirtualStore\Windows\System32\185D35\internet.fne (HackTool.Patcher) -> No action taken. C:\Users\Meghan\AppData\Local\VirtualStore\Windows\System32\185D35\krnln.fnr (Trojan.Agent) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\dp1.fne (Worm.Autorun) -> No action taken. C:\Users\Meghan\AppData\Local\Temp\E_N4\eAPI.fne (Worm.Autorun) -> No action taken. and here's the log for the 2nd scan after the weird pop up Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4052 Windows 6.0.6002 Service Pack 2 Internet Explorer 7.0.6002.18005 5/24/2010 4:45:27 PM mbam-log-2010-05-24 (16-45-27).txt Scan type: Full scan (C:\|D:\|E:\|) Objects scanned: 313923 Time elapsed: 1 hour(s), 57 minute(s), 7 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 1 Files Infected: 4 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4 (Worm.Autorun) -> Quarantined and deleted successfully. Files Infected: C:\Users\Meghan\AppData\Local\Temp\E_N4\dp1.fne (Worm.Autorun) -> Quarantined and deleted successfully. C:\Users\Meghan\AppData\Local\Temp\E_N4\eAPI.fne (Worm.Autorun) -> Quarantined and deleted successfully. C:\Users\Meghan\AppData\Local\Temp\E_N4\HtmlView.fne (Worm.Autorun) -> Quarantined and deleted successfully. C:\Users\Meghan\AppData\Local\Temp\E_N4\krnln.fnr (Worm.Autorun) -> Quarantined and deleted successfully.

just thought i should bump this also i'd like to add that i located the file that contains most of the virus's but i cant delete it was something like C:\Users\user\AppData\Local\Temp\E_N4

just so you know i have no idea what im really doing so please be understanding of my ignorance. DDS (Ver_10-03-17.01) - NTFSx86 Run by Meghan at 20:23:48.68 on Sun 05/23/2010 Internet Explorer: 7.0.6002.18005 BrowserJavaVersion: 1.6.0_18 Microsoft attach.zip