Popeye

Is this a False Positive from Verizon FIOS?

THE MIRACLE OF TOILET PAPER Fresh from my shower, I stand in front of the mirror complaining to my husband that my breasts are too small. Instead of characteristically telling me it's not so, he uncharacteristically comes up with a suggestion. 'If you want your breasts to grow, then every day take a piece of toilet paper and rub it between them for a few seconds.' Willing to try anything, I fetch a piece of toilet paper and stand in front of the mirror, rubbing it between my breasts. 'How long will this take?' I asked. 'They will grow larger over a period of years,' my husband replies. I stopped. 'Do you really think rubbing a piece of toilet paper between my breasts every day will make my breasts larger over the years?' Without missing a beat he says, 'Worked for your ass, didn't it?' He's still alive, and with a great deal of therapy, he may even walk again, although he will probably continue to take his meals through a straw. Stupid, stupid man.

Thank you for the Fix, nosirrah. Ran a Full Sweep this morning, Results: CLEAN.

Malwarebytes' Anti-Malware 1.41 Database version: 3025 Windows 5.1.2600 Service Pack 3 10/24/2009 1:55:15 PM mbam-log-2009-10-24 (13-55-02).txt Scan type: Full Scan (C:\|) Objects scanned: 193128 Time elapsed: 47 minute(s), 42 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 26 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Program Files\Verizon\FiOS\afterInstallation.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\CheckForLogsRemainingOnCustomersPC.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\custWizard.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\CW_Email.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\CW_Motive.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\CW_update.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\HandleMotivePopup.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\installer_log.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\installer_registerInstaller.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\MotiveLoopcheck.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\runFixWANIPForUploadFile.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\EmailCheckReceiveControlToClick.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\afterInstallation.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\CheckForLogsRemainingOnCustomersPC.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\custWizard.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\CW_Email.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\CW_Motive.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\CW_uninstallMSI.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\CW_update.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\EmailCheckControlToClick.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\EmailCheckWindowToFillDetails.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\HandleMotivePopup.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\installer_log.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\installer_registerInstaller.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\MotiveLoopcheck.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018] C:\Program Files\Verizon\FiOS\ihs\ConnWizard\AutoIT\runFixWANIPForUploadFile.exe (Trojan.Downloader) -> No action taken. [5253514247405230538380756679153780887977806669708313011922191818231301223922392 23919382324232423242537233523352335371923262326232639222325232523253922232023202 3 20372022252225222525392222222222222018]

This didn't look like a FP to me so I put it in Quarantine. (Made copy before Quarantine) Posting to make sure. Malwarebytes' Anti-Malware 1.37 Database version: 2261 Windows 5.1.2600 Service Pack 3 6/11/2009 9:48:03 AM mbam-log-2009-06-11 (09-47-34).txt Scan type: Full Scan (C:\|) Objects scanned: 165683 Time elapsed: 16 minute(s), 13 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 1 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken. [4054423730921869216967246919142370682614212466201467692524141870211823252170172 4676794] Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)

Malwarebytes' Anti-Malware 1.37 Database version: 2252 Windows 5.1.2600 Service Pack 3 6/9/2009 12:12:01 PM mbam-log-2009-06-09 (12-11-43).txt Scan type: Full Scan (C:\|) Objects scanned: 207101 Time elapsed: 1 hour(s), 13 minute(s), 21 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 2 Registry Values Infected: 0 Registry Data Items Infected: 2 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\Interface\{04a38f6b-006f-4247-ba4c-02a139d5531c} (Adware.Minibug) -> No action taken. [4054423730922068196919661870141720187114212026241426231821142524682620196625212 5701794] HKEY_CLASSES_ROOT\Typelib\{3c2d2a1e-031f-4397-9614-87c932a848e0} (Adware.Minibug) -> No action taken. [4054423730922068196919661870141720187114212026241426231821142524682620196625212 5701794] Registry Values Infected: (No malicious items detected) Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. [5138494534363830414438586445483634456446343641424738615248395356345138614674688 38084807185615270688683748590013670798570839334798574557483868437748466677770478 0 857471903018130117] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken. [5138494534363830414438586445483634456446343641424738615248395356345138614674688 38084807185615270688683748590013670798570839339748370886677773774846667777047808 5 7471903018130117] Folders Infected: (No malicious items detected) Files Infected: C:\WINDOWS\didduid.ini (Fake.Dropped.Malware) -> No action taken. [38575351343036276156424737485652616974696986746915747974]

Updated, did full scan. Results: CLEAN. Thank you miekiemoes.

Thank you for the quick response.

Malwarebytes' Anti-Malware 1.37 Database version: 2247 Windows 5.1.2600 Service Pack 3 6/8/2009 12:12:43 PM mbam-log-2009-06-08 (12-12-36).txt Scan type: Full Scan (C:\|) Objects scanned: 146062 Time elapsed: 1 hour(s), 6 minute(s), 32 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\WINDOWS\$ntservicepackuninstall$\taskmgr.exe (Trojan.Downloader) -> No action taken. [41345241307168182317666870191868251825202423261967202026691920176969216770]

Did 2 Full scans. Results: CLEAN. Thank you nosirrah for the fix.

Malwarebytes' Anti-Malware 1.36 Database version: 2159 Windows 5.1.2600 Service Pack 3 5/20/2009 6:25:49 PM mbam-log-2009-05-20 (18-24-48).txt Scan type: Full Scan (C:\|) Objects scanned: 151647 Time elapsed: 1 hour(s), 12 minute(s), 54 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 1 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: C:\Program Files\Microsoft Games\Bicycle Card Games 2.0\dw15.exe (Worm.Luder) -> No action taken. [5253514247403023212318232123212322242322362339232323232326232023222018201722362 01920242017201819382019223624202322242124222417223623212424232224252421232224192 3 38231823362236242323182338232623362336231822362420232523262417223623212424201820 2 21938241723212319]