Jump to content

Wesley

Members
 View Profile  See their activity

  • Posts

    3

  • Joined

  • Last visited

 Content Type 

Posts posted by Wesley

    Habing some trouble with Trojans

    in Resolved Malware Removal Logs

    Posted

    sorry about that

    any way heres the Hijack This log

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 9:42:30 AM, on 12/5/2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\csrss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    C:\WINDOWS\system32\brsvc01a.exe

    C:\WINDOWS\system32\brss01a.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\WINDOWS\Explorer.EXE

    c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe

    C:\WINDOWS\RTHDCPL.EXE

    C:\WINDOWS\system32\RUNDLL32.EXE

    C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

    C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe

    C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe

    C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe

    C:\Program Files\Common Files\Real\Update_OB\realsched.exe

    C:\PROGRA~1\AVG\AVG8\avgtray.exe

    C:\Program Files\ResChanger 2005\ResChanger2005.exe

    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    C:\Program Files\DAEMON Tools Lite\daemon.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe

    C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

    C:\Program Files\LogMeIn\x86\RaMaint.exe

    C:\Program Files\LogMeIn\x86\LogMeIn.exe

    C:\PROGRA~1\AVG\AVG8\avgrsx.exe

    C:\Program Files\LogMeIn\x86\LMIGuardian.exe

    C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

    C:\WINDOWS\system32\nvsvc32.exe

    C:\WINDOWS\system32\PnkBstrA.exe

    C:\WINDOWS\System32\svchost.exe

    C:\Program Files\Viewpoint\Common\ViewpointService.exe

    C:\PROGRA~1\AVG\AVG8\avgemc.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

    C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

    C:\WINDOWS\System32\alg.exe

    C:\Program Files\Mozilla Firefox\firefox.exe

    C:\WINDOWS\System32\wbem\wmiprvse.exe

    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    C:\WINDOWS\System32\wbem\wmiprvse.exe

    O2 - BHO: (no name) - {0E5B3A68-8916-4653-AEE6-AFBA62D9E9A5} - C:\WINDOWS\system32\awtrPfgH.dll (file missing)

    O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll

    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

    O2 - BHO: BitComet Toolbar Helper - {6A373B7E-496E-424f-A9BE-486A5E9AB018} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll

    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll

    O2 - BHO: (no name) - {aa917226-7fc0-4e54-9df2-89c59299043c} - C:\WINDOWS\system32\nomifeyi.dll (file missing)

    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll

    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll

    O3 - Toolbar: BitComet Toolbar - {2E608F70-C430-4bc5-96F6-608E02EBA5B2} - C:\Program Files\BitComet Toolbar\v2.0.0.4\BitComet_Toolbar.dll

    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll

    O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

    O4 - HKLM\..\Run: [skyTel] SkyTel.EXE

    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE

    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

    O4 - HKLM\..\Run: [NVIDIA nTune] "C:\Program Files\NVIDIA Corporation\nTune\nTuneCmd.exe" clear

    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup

    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

    O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"

    O4 - HKLM\..\Run: [iSUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" -startup

    O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start

    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"

    O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot

    O4 - HKLM\..\Run: [ctfmona] C:\WINDOWS\system32\ctfmona.exe

    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"

    O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe

    O4 - HKLM\..\Run: [layilumuti] Rundll32.exe "C:\WINDOWS\system32\petatusa.dll",s

    O4 - HKCU\..\Run: [ResChanger 2005] C:\Program Files\ResChanger 2005\ResChanger2005.exe

    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe

    O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun

    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [Twain] C:\Documents and Settings\Wes\Application Data\Twain\Twain.exe

    O4 - HKUS\S-1-5-19\..\Run: [layilumuti] Rundll32.exe "C:\WINDOWS\system32\petatusa.dll",s (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [layilumuti] Rundll32.exe "C:\WINDOWS\system32\petatusa.dll",s (User 'NETWORK SERVICE')

    O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Adobe Acrobat 6.0\Distillr\acrotray.exe

    O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe

    O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm

    O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm

    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll

    O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll

    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

    O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe

    O9 - Extra 'Tools' menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O16 - DPF: {556EEC63-31E2-47C3-BF29-DFF799D2FE04} (Remote Access ActiveX Client) - https://secure.logmein.com/activex/RACtrl.cab

    O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://javadl.sun.com/webapps/download/AutoDL?BundleId=23100

    O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll

    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL

    O20 - AppInit_DLLs: WIKI.DLL avgrsstx.dll zuexgh.dll C:\WINDOWS\system32\zimusure.dll c:\windows\system32\nevigapi.dll

    O20 - Winlogon Notify: hgGwWPHx - hgGwWPHx.dll (file missing)

    O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe

    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

    O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe

    O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe

    O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe

    O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\system32\brsvc01a.exe

    O23 - Service: ForceWare Intelligent Application Manager (IAM) - Unknown owner - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe

    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

    O23 - Service: LogMeIn Maintenance Service (LMIMaint) - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\RaMaint.exe

    O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Program Files\LogMeIn\x86\LogMeIn.exe

    O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe

    O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe

    O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe

    O23 - Service: nTune Service (nTuneService) - NVIDIA - C:\Program Files\NVIDIA Corporation\nTune\nTuneService.exe

    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

    O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe

    O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C:\Program Files\Viewpoint\Common\ViewpointService.exe

    --

    End of file - 10184 bytes

    and Panda Scan

    ;*******************************************************************************

    ********************************************************************************

    *

    *******************

    ANALYSIS: 2008-12-05 09:41:11

    PROTECTIONS: 1

    MALWARE: 30

    SUSPECTS: 4

    ;*******************************************************************************

    ********************************************************************************

    *

    *******************

    PROTECTIONS

    Description Version Active Updated

    ;===============================================================================

    ================================================================================

    =

    ===================

    AVG Anti-Virus Free 8.0 Yes Yes

    ;===============================================================================

    ================================================================================

    =

    ===================

    MALWARE

    Id Description Type Active Severity Disinfectable Disinfected Location

    ;===============================================================================

    ================================================================================

    =

    ===================

    00139059 Cookie/Traffic Marketplace TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@trafficmp[2].txt

    00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@casalemedia[2].txt

    00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.doubleclick.net/]

    00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@doubleclick[1].txt

    00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@doubleclick[1].txt

    00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@atdmt[2].txt

    00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@atdmt[1].txt

    00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.atdmt.com/]

    00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.fastclick.net/]

    00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.fastclick.net/]

    00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.fastclick.net/]

    00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@fastclick[1].txt

    00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@tribalfusion[1].txt

    00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@mediaplex[2].txt

    00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@mediaplex[3].txt

    00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Cookies\sui@com[1].txt

    00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@com[1].txt

    00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@com[1].txt

    00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.com.com/]

    00167642 Cookie/Com.com TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Application Data\Mozilla\Firefox\Profiles\wdbbd81v.default\cookies.txt[.com.com/]

    00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@xiti[1].txt

    00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Cookies\sui@xiti[1].txt

    00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.toplist.cz/]

    00167753 Cookie/Statcounter TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@statcounter[1].txt

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@ad.yieldmanager[1].txt

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@ad.yieldmanager[1].txt

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[ad.yieldmanager.com/]

    00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.apmebf.com/]

    00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.apmebf.com/]

    00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@apmebf[1].txt

    00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Application Data\Mozilla\Firefox\Profiles\wdbbd81v.default\cookies.txt[.apmebf.com/]

    00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@apmebf[2].txt

    00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Cookies\cory@apmebf[1].txt

    00168076 Cookie/BurstNet TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@burstnet[1].txt

    00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@serving-sys[2].txt

    00168097 Cookie/BurstBeacon TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@www.burstbeacon[2].txt

    00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@advertising[1].txt

    00169287 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Cookies\sui@adrevolver[3].txt

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@ads.pointroll[1].txt

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00170495 Cookie/PointRoll TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.ads.pointroll.com/]

    00171982 Cookie/QuestionMarket TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@questionmarket[2].txt

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@zedo[2].txt

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@zedo[2].txt

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.zedo.com/]

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.zedo.com/]

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.zedo.com/]

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.zedo.com/]

    00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Application Data\Mozilla\Firefox\Profiles\e916moe9.default\cookies.txt[.zedo.com/]

    00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.adultfriendfinder.com/]

    00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.adultfriendfinder.com/]

    00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.adultfriendfinder.com/]

    00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Application Data\Mozilla\Firefox\Profiles\k87ksohb.default\cookies.txt[.adultfriendfinder.com/]

    00207338 Cookie/Target TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@target[1].txt

    00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Application Data\Mozilla\Firefox\Profiles\wdbbd81v.default\cookies.txt[.atwola.com/]

    00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@atwola[1].txt

    00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Cookies\sui@atwola[1].txt

    00262020 Cookie/Atwola TrackingCookie No 0 Yes No C:\Documents and Settings\Cory\Cookies\cory@atwola[2].txt

    00325830 Cookie/Bridgetrack TrackingCookie No 0 Yes No C:\Documents and Settings\Sui\Cookies\sui@citi.bridgetrack[1].txt

    00325830 Cookie/Bridgetrack TrackingCookie No 0 Yes No C:\Documents and Settings\pete\Cookies\pete@citi.bridgetrack[1].txt

    00447513 Adware/AdRotator Adware No 0 Yes No C:\System Volume Information\_restore{354F7108-5A4D-486F-AFC8-3881474A1B03}\RP130\A0037652.exe

    01606636 Cookie/Adserver TrackingCookie No 0 Yes No C:\Documents and Settings\Wes\Cookies\wes@adserver.easyad[1].txt

    03165134 Trj/BHO.CB Virus/Trojan No 0 No No C:\System Volume Information\_restore{354F7108-5A4D-486F-AFC8-3881474A1B03}\RP130\A0037654.exe[■%%\

    Habing some trouble with Trojans

    in Resolved Malware Removal Logs

    Posted

    Hello this is my first time here. Any way ive recently been having some problems with trojans

    specifically when i run malwarebyte's anti malware

    The problem is that when ever i do a scan i always pick up these 3 trojans and when i

    remove them i do another quick scan just incase but they keep popin back up.

    here is the log any help would be appreciated.

    Malwarebytes' Anti-Malware 1.31

    Database version: 1459

    Windows 5.1.2600 Service Pack 2

    12/4/2008 8:43:56 AM

    mbam-log-2008-12-04 (08-43-56).txt

    Scan type: Quick Scan

    Objects scanned: 76770

    Time elapsed: 11 minute(s), 43 second(s)

    Memory Processes Infected: 0

    Memory Modules Infected: 0

    Registry Keys Infected: 2

    Registry Values Infected: 1

    Registry Data Items Infected: 0

    Folders Infected: 0

    Files Infected: 0

    Memory Processes Infected:

    (No malicious items detected)

    Memory Modules Infected:

    (No malicious items detected)

    Registry Keys Infected:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{aa917226-7fc0-4e54-9df2-89c59299043c} (Trojan.Vundo.H) -> Quarantined and deleted successfully.

    HKEY_CLASSES_ROOT\CLSID\{aa917226-7fc0-4e54-9df2-89c59299043c} (Trojan.Vundo.H) -> Quarantined and deleted successfully.

    Registry Values Infected:

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\layilumuti (Trojan.Vundo.H) -> Quarantined and deleted successfully.

    Registry Data Items Infected:

    (No malicious items detected)

    Folders Infected:

    (No malicious items detected)

    Files Infected:

    (No malicious items detected)

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.