budamunk Posted December 3, 2008 ID:37711 Share Posted December 3, 2008 Hi i am new to all this so could sum1 help me out plz ive downloaded the intervalhehehe malware and cant seem to remove it.I have followed the pre post instructions here are the scan resultsmbam logMalwarebytes' Anti-Malware 1.30Database version: 1454Windows 6.0.6001 Service Pack 103/12/2008 17:01:08mbam-log-2008-12-03 (17-01-08).txtScan type: Quick ScanObjects scanned: 48008Time elapsed: 2 minute(s), 14 second(s)Memory Processes Infected: 0Memory Modules Infected: 0Registry Keys Infected: 0Registry Values Infected: 0Registry Data Items Infected: 0Folders Infected: 0Files Infected: 7Memory Processes Infected:(No malicious items detected)Memory Modules Infected:(No malicious items detected)Registry Keys Infected:(No malicious items detected)Registry Values Infected:(No malicious items detected)Registry Data Items Infected:(No malicious items detected)Folders Infected:(No malicious items detected)Files Infected:C:\Users\Default\My Documents\My Music\New Song.lagu (Backdoor.Bot) -> Delete on reboot.C:\Users\Default\My Documents\My Music\Video.vidz (Backdoor.Bot) -> Delete on reboot.C:\Users\Default\My Documents\My Pictures\aweks.pikz (Backdoor.Bot) -> Delete on reboot.C:\Users\Default\My Documents\My Pictures\seram.pikz (Backdoor.Bot) -> Delete on reboot.C:\Users\Default\My Documents\My Music\My Music.url (Trojan.Zlob) -> Delete on reboot.C:\Users\Default\My Documents\My Pictures\My Pictures.url (Trojan.Zlob) -> Delete on reboot.C:\Users\Default\My Documents\My Videos\My Video.url (Trojan.Zlob) -> Delete on reboot.Here is the panda scan results;***********************************************************************************************************************************************************************************ANALYSIS: 2008-12-03 18:13:33PROTECTIONS: 3MALWARE: 1SUSPECTS: 10;***********************************************************************************************************************************************************************************PROTECTIONSDescription Version Active Updated;===================================================================================================================================================================================Windows Defender 1.1.3007.0 No YesMcAfee Internet Security Suite 2007 8.1 No NoMcAfee VirusScan Plus 12.1 No No;===================================================================================================================================================================================MALWAREId Description Type Active Severity Disinfectable Disinfected Location;===================================================================================================================================================================================00020994 W32/Bagle.pwdzip Virus No 0 Yes No C:\ProgramData\Spybot - Search & Destroy\Recovery\CoolWWWSearchSmartSearch1.zip00020994 W32/Bagle.pwdzip Virus No 0 Yes No C:\ProgramData\Spybot - Search & Destroy\Recovery\CoolWWWSearchSmartSearch2.zip00020994 W32/Bagle.pwdzip Virus No 0 Yes No C:\ProgramData\Spybot - Search & Destroy\Recovery\CoolWWWSearchSmartSearch.zip;===================================================================================================================================================================================SUSPECTSSent Location `C5;===================================================================================================================================================================================No C:\Acer\Preload\Autorun\APP\ArcadDlx\SDMA\data1.cab[FiltHookInstaller.exe] `C5No C:\Avenger\explore.exe `C5No C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\FiltHookInstaller.exe `C5No C:\Program Files\Acer GameZone\Azada\Azada.exe `C5No C:\Program Files\Acer GameZone\Big Kahuna Reef\Big Kahuna Reef.exe `C5No C:\Program Files\Acer GameZone\Bricks of Egypt\Bricks of Egypt.exe `C5No C:\Program Files\Acer GameZone\Cake Mania\CakeMania.exe `C5No C:\Program Files\Acer GameZone\Turbo Pizza\TurboPizza.exe `C5No C:\Users\Budamunk\AppData\Local\Temp\IXP000.TMP\explore.exe `C5No C:\Users\Budamunk\Downloads\WinRAR.exe[C:\Users\Budamunk\Downloads\WinRAR.exe][explore.exe] `C5;===================================================================================================================================================================================VULNERABILITIESId Severity Description `C5;===================================================================================================================================================================================;===================================================================================================================================================================================and here is my hijack this reportLogfile of Trend Micro HijackThis v2.0.2Scan saved at 15:11:20, on 03/12/2008Platform: Windows Vista SP1 (WinNT 6.00.1905)MSIE: Internet Explorer v7.00 (7.00.6001.18000)Boot mode: NormalRunning processes:c:\PROGRA~1\mcafee.com\agent\mcagent.exeC:\Windows\system32\Dwm.exeC:\Windows\system32\taskeng.exeC:\Windows\Explorer.EXEC:\Program Files\Synaptics\SynTP\SynTPEnh.exeC:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exeC:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exeC:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exeC:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exeC:\Windows\System32\igfxtray.exeC:\Windows\System32\hkcmd.exeC:\Windows\System32\igfxpers.exeC:\Windows\RtHDVCpl.exeC:\Windows\PLFSetI.exeC:\Windows\system32\igfxsrvc.exeC:\Program Files\Launch Manager\LManager.exeC:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exeC:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\Steam\steam.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\Program Files\DAEMON Tools Lite\daemon.exeC:\Windows\system32\wbem\unsecapp.exeC:\Windows\system32\igfxext.exeC:\Windows\system32\igfxsrvc.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Users\Budamunk\AppData\Local\Temp\RtkBtMnt.exeC:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeC:\Program Files\Synaptics\SynTP\SynTPHelper.exeC:\Windows\system32\SearchFilterHost.exeC:\Windows\system32\taskeng.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a...p;m=aspire_5735R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&a...p;m=aspire_5735R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&a...p;m=aspire_5735R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O1 - Hosts: 61.157.217.210 www.yahoo.comO1 - Hosts: 61.157.217.210 www.google.comO1 - Hosts: 61.157.217.210 www.google.co.ukO1 - Hosts: 61.157.217.210 www.myspace.comO1 - Hosts: 61.157.217.210 www.youtube.comO1 - Hosts: 61.157.217.210 www.facebook.comO1 - Hosts: 61.157.217.210 www.antispy.comO1 - Hosts: 61.157.217.210 www.yahoo.comO1 - Hosts: 61.157.217.210 www.yahoo.co.ukO1 - Hosts: 61.157.217.210 www.antispyware.comO1 - Hosts: 61.157.217.210 antispyware.comO1 - Hosts: 61.157.217.210 antispy.comO1 - Hosts: 61.157.217.210 www.msn.comO1 - Hosts: 123.251.143.110 www.asdfasdfd.comO1 - Hosts: 123.251.143.110 www.gg.comO1 - Hosts: 123.251.143.110 www.ghfhj.comO1 - Hosts: 123.251.143.110 www.cvnbcvnb.comO1 - Hosts: 123.251.143.110 www.1.comO1 - Hosts: 123.251.143.110 www.3.comO1 - Hosts: 123.251.143.110 www.asdf4asdfd.comO1 - Hosts: 123.251.143.110 www.asdfawsdfd.comO1 - Hosts: 123.251.143.110 www.asdfatsdfd.comO1 - Hosts: 123.251.143.110 www.asdfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfadsdfd.comO1 - Hosts: 123.251.143.110 www.asdfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfafsdfd.comO1 - Hosts: 123.251.143.110 www.asdfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfagsdfd.comO1 - Hosts: 123.251.143.110 www.asdfasgdfd.comO1 - Hosts: 123.251.143.110 www.asdfasdhfd.comO1 - Hosts: 123.251.143.110 www.asdfasdfjd.comO1 - Hosts: 123.251.143.110 www.asdfasdfkd.comO1 - Hosts: 123.251.143.110 www.asdfasdfld.comO1 - Hosts: 123.251.143.110 www.asdfasdf,d.comO1 - Hosts: 123.251.143.110 www.asxdfasdfd.comO1 - Hosts: 123.251.143.110 www.asdzfasdfd.comO1 - Hosts: 123.251.143.110 www.asdcfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfvasdfd.comO1 - Hosts: 123.251.143.110 www.asdfabsdfd.comO1 - Hosts: 123.251.143.110 www.asdfasndfd.comO1 - Hosts: 123.251.143.110 www.asdfasdmfd.comO1 - Hosts: 123.251.143.110 www.asdfasdfd.comO1 - Hosts: 123.251.143.110 www.11asdfasdfd.comO1 - Hosts: 123.251.143.110 www.as222dfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfa33sdfd.comO1 - Hosts: 123.251.143.110 www.asdfasd44fd.comO1 - Hosts: 123.251.143.110 www.asdfasdfd5.comO1 - Hosts: 123.251.143.110 www.as66dfasdfd.comO1 - Hosts: 123.251.143.110 www.asdf77asdfd.comO1 - Hosts: 123.251.143.110 www.asdf8asdfd.comO1 - Hosts: 123.251.143.110 www.asdf9asdfd.comO1 - Hosts: 123.251.143.110 www.asdf0asdfd.comO1 - Hosts: 123.251.143.110 www.asdf-asdfd.comO1 - Hosts: 123.251.143.110 www.aqqsdfasdfd.comO1 - Hosts: 123.251.143.110 www.aswwdfasdfd.comO1 - Hosts: 123.16.197.121 www.asdhhfasdfdyy.comO1 - Hosts: 61.157.217.210 www.live.comO1 - Hosts: 123.251.143.110 www.asdwwwfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfeasdfd.comO1 - Hosts: 123.251.143.110 www.asdfrrasdfd.comO1 - Hosts: 123.251.143.110 www.asdfttasdfd.comO1 - Hosts: 123.251.143.110 www.asdfyyasdfd.comO1 - Hosts: 123.251.143.110 www.asdfuuuasdfd.comO1 - Hosts: 123.251.143.110 www.asdfaiisdfd.comO1 - Hosts: 123.251.143.110 www.asdfaoosdfd.comO1 - Hosts: 123.251.143.110 www.asdfappsdfd.comO1 - Hosts: 123.251.143.110 www.asdfasssdfd.comO1 - Hosts: 123.251.143.110 www.aswwdfasdfd.comO1 - Hosts: 123.251.143.110 www.asdeefasdfd.comO1 - Hosts: 123.251.143.110 www.asdfffasdfd.comO1 - Hosts: 123.251.143.110 www.asdfavvvsdfd.comO1 - Hosts: 123.251.143.110 www.asnnndfasdfd.comO1 - Hosts: 123.251.143.110 www.asdmmmfasdfd.comO1 - Hosts: 123.251.143.110 www.asdfaffsdfd.comO1 - Hosts: 123.251.143.110 www.asdhhfasdfd.comO2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dllO2 - BHO: McAntiPhishingBHO - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\PROGRA~1\mcafee\msk\mcapbho.dllO2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dllO2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan\scriptsn.dllO2 - BHO: ShowBarObj Class - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.415.1646\swg.dllO2 - BHO: McAfee SiteAdvisor BHO - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dllO3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO3 - Toolbar: McAfee SiteAdvisor Toolbar - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dllO4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hideO4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exeO4 - HKLM\..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe /runkeyO4 - HKLM\..\Run: [bkupTray] "C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe"O4 - HKLM\..\Run: [ArcadeDeluxeAgent] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"O4 - HKLM\..\Run: [CLMLServer] "C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe"O4 - HKLM\..\Run: [PlayMovie] "C:\Program Files\Acer Arcade Deluxe\PlayMovie\PMVService.exe"O4 - HKLM\..\Run: [igfxTray] C:\Windows\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exeO4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exeO4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exeO4 - HKLM\..\Run: [skytel] Skytel.exeO4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exeO4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\LManager.exeO4 - HKLM\..\Run: [eDataSecurity Loader] C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exeO4 - HKLM\..\Run: [ePower_DMC] C:\Program Files\Acer\Empowering Technology\ePower\ePower_DMC.exeO4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startupO4 - HKLM\..\Run: [ProductReg] "C:\Program Files\Acer\WR_PopUp\ProductReg.exe"O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscriptO4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenterO4 - HKCU\..\Run: [steam] "C:\Program Files\Steam\Steam.exe" -silentO4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorunO4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htmO8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htmO8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htmO9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLLO9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO13 - Gopher Prefix: O17 - HKLM\System\CCS\Services\Tcpip\..\{0A5F9815-AAD1-4AF6-8148-041607DD246D}: NameServer = 194.168.4.100,194.168.8.11O17 - HKLM\System\CS1\Services\Tcpip\..\{0A5F9815-AAD1-4AF6-8148-041607DD246D}: NameServer = 194.168.4.100,194.168.8.11O18 - Protocol: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\PROGRA~1\mcafee\SITEAD~1\mcieplg.dllO20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLLO23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\Windows\system32\agrsmsvc.exeO23 - Service: NTI Backup Now 5 Agent Service (BUNAgentSvc) - NewTech Infosystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\Client\Agentsvc.exeO23 - Service: CLHNService - Unknown owner - C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exeO23 - Service: eDataSecurity Service - Egis Incorporated - C:\Program Files\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exeO23 - Service: Empowering Technology Service (ETService) - Unknown owner - C:\Program Files\Acer\Empowering Technology\Service\ETService.exeO23 - Service: Google Desktop Manager 5.7.808.7150 (GoogleDesktopManager-080708-050100) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exeO23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exeO23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exeO23 - Service: McAfee SiteAdvisor Service - Unknown owner - C:\Program Files\McAfee\SiteAdvisor\McSACore.exeO23 - Service: McAfee Services (mcmscsvc) - McAfee, Inc. - C:\PROGRA~1\McAfee\MSC\mcmscsvc.exeO23 - Service: McAfee Network Agent (McNASvc) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exeO23 - Service: McAfee Scanner (McODS) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exeO23 - Service: McAfee Proxy Service (McProxy) - McAfee, Inc. - c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exeO23 - Service: McAfee Real-time Scanner (McShield) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exeO23 - Service: McAfee SystemGuards (McSysmon) - McAfee, Inc. - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exeO23 - Service: MobilityService - Unknown owner - C:\Acer\Mobility Center\MobilityService.exeO23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee, Inc. - C:\Program Files\McAfee\MPF\MPFSrv.exeO23 - Service: McAfee Anti-Spam Service (MSK80Service) - McAfee, Inc. - C:\Program Files\McAfee\MSK\MskSrver.exeO23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exeO23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - Unknown owner - C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exeO23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exeO23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe--End of file - 14748 bytesi would be very gratefull for your help!!!!!!!!!!! Link to post Share on other sites More sharing options...
Katana Posted December 8, 2008 ID:38933 Share Posted December 8, 2008 Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.If you think you have similar problems, please post a log in the HJT forum and wait for help.Hello and welcome to the forumsMy name is Katana and I will be helping you to remove any infection(s) that you may have.Please observe these rules while we work: Please Read All Instructions Carefully If you don't understand something, stop and ask! Don't keep going on. Please do not run any other tools or scans whilst I am helping you Please continue to respond until I give you the "All Clear" (Just because you can't see a problem doesn't mean it isn't there)If you can do those few things, everything should go smoothly Please Note, your security programs may give warnings for some of the tools I will ask you to use.Be assured, any links I give are safe----------------------------------------------------------------------------------------I apologize for the delay in responding, but as you can probably see the forums are quite busy.Unfortunately there are far more people needing help than there are helpers.If you still require help please do the followingDownload and Run RSITPlease download Random's System Information Tool by random/random from here and save it to your desktop.Double click on RSIT.exe to run RSIT.Click Continue at the disclaimer screen.Once it has finished, two logs will open:log.txt will be opened maximized.info.txt will be opened minimized.[*]Please post the contents of both log.txt and info.txt. Link to post Share on other sites More sharing options...
Recommended Posts