CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
spacer spacer

[READY]help virus!!!!

 
Post new topic   Reply to topic       All -> FavForums -> Trend Micro HijackThis Logs [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
nightcrawler123

Cadet
Cadet


Joined: Jun 26, 2008
Posts: 6
Location: Pakistan

PostPosted: Thu Jun 26, 2008 12:12 pm    Post subject: help virus!!!!
Reply with quote

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:11:19 PM, on 6/26/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\winsys2.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Stardock\CursorFX\CursorFX.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O3 - Toolbar: &RoboForm - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
O4 - HKCU\..\Run: [CursorFX] "C:\Program Files\Stardock\CursorFX\CursorFX.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: Customize Menu - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Fill Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: RoboForm Toolbar - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Save Forms - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Fill Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Save - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Save Forms - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RoboForm Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 6973 bytes





kaspersky online scanner


KASPERSKY ONLINE SCANNER REPORT
Thursday, June 26, 2008 1:22:06 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner version: 5.0.98.0
Kaspersky Anti-Virus database last update: 26/06/2008
Kaspersky Anti-Virus database records: 884717
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
A:\
C:\
D:\
E:\
F:\
G:\
H:\

Scan Statistics:
Total number of scanned objects: 24468
Number of viruses found: 14
Number of infected objects: 197
Number of suspicious objects: 1
Duration of the scan process: 00:59:11

Infected Object Name / Virus Name / Last Action
C:\Deckard\System Scanner\backup\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~vbswg.tmp Infected: Email-Worm.VBS.Lee-based skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\cert8.db Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\formhistory.dat Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\history.dat Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\key3.db Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\parent.lock Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\search.sqlite Object is locked skipped
C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\urlclassifier2.sqlite Object is locked skipped
C:\Documents and Settings\Administrator\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\Cache\_CACHE_001_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\Cache\_CACHE_002_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\Cache\_CACHE_003_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Application Data\Mozilla\Firefox\Profiles\5v0sxb34.default\Cache\_CACHE_MAP_ Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\Administrator\My Documents\Aero_Ultimate_BETA_5_by_fediaFedia.zip/LSpatch/LSPatch 1.1.exe/WISE0004.BIN Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped
C:\Documents and Settings\Administrator\My Documents\Aero_Ultimate_BETA_5_by_fediaFedia.zip/LSpatch/LSPatch 1.1.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped
C:\Documents and Settings\Administrator\My Documents\Aero_Ultimate_BETA_5_by_fediaFedia.zip ZIP: infected - 2 skipped
C:\Documents and Settings\Administrator\My Documents\jpsvm3.zip/jps.exe Infected: Backdoor.Win32.Delf.avq skipped
C:\Documents and Settings\Administrator\My Documents\jpsvm3.zip/EXPLORER.EXE Infected: Backdoor.Win32.Delf.avq skipped
C:\Documents and Settings\Administrator\My Documents\jpsvm3.zip ZIP: infected - 2 skipped
C:\Documents and Settings\Administrator\My Documents\Royale_Vista_Neo_by_CptCrckpot.zip/Royale Vista Neo WB/Patch/LSPatch.exe/WISE0004.BIN Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped
C:\Documents and Settings\Administrator\My Documents\Royale_Vista_Neo_by_CptCrckpot.zip/Royale Vista Neo WB/Patch/LSPatch.exe Infected: not-a-virus:RiskTool.Win32.CloseApp.a skipped
C:\Documents and Settings\Administrator\My Documents\Royale_Vista_Neo_by_CptCrckpot.zip ZIP: infected - 2 skipped
C:\Documents and Settings\Administrator\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\Administrator\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\credits.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\customer_support.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\legal.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\license.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\msr.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\readme.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\Help\_top.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\help.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\audio_problems.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\autoplay.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\cd_dvd_problems.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\compressed_drive.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\crashes.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\directx.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\patches.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\sound_conflicts.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\tech_help.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\_main.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\_main2.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Activision\Call of Duty 4 - Modern Warfare\Docs\html\_toc.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Angry IP Scanner\Angry IP Scanner 2.21.exe Infected: not-a-virus:NetTool.Win32.Portscan.c skipped
C:\Program Files\Microsoft Office\Office12\1033\PVREADME.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\AccessWeb\CLNTWRAP.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\AccessWeb\SERVWRAP.ASP Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsBlankPage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsBrowserUpgrade.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsDoNotTrust.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsHomePage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsPreviewTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsPrintTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsVersion1Warning.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms\FormsViewFrame.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsBlankPage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsBrowserUpgrade.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsColorChart.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsFormTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsHomePage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsImageTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsMacroTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsPreviewTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsPrintTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsVersion1Warning.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsViewFrame.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms3\FormsViewTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsBlankPage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsBrowserUpgrade.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsColorChart.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsFormTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsHomePage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsImageTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsMacroTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsPreviewTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsPrintTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsVersion1Warning.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsViewFrame.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms4\FormsViewTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsBlankPage.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsBrowserUpgrade.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsColorChart.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsImageTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsMacroTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsPreviewTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\Groove\ToolData\groove.net\GrooveForms5\FormsPrintTemplate.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Office12\INTLBAND.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\CURRENCY.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\DADSHIRT.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\JUDGESCH.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\JUNGLE.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\NOTEBOOK.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\OFFISUPP.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\PAWPRINT.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\PINELUMB.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\SEAMARBL.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Stationery\1033\TECHTOOL.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Microsoft Office\Templates\12\MseNewFileItems\HTMLPAGE.HTM Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Mozilla Firefox\defaults\profile\bookmarks.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Mozilla Firefox\res\hiddenWindow.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\admodules\blank.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\admodules\bottomchrome_blank.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\Devices\deviceshome.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\Devices\nodevice.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\404.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\CTW.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\custsupport.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\home.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\lfr.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\main.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\myacct.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\GetMedia\upsell.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\Login\cancel.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\Login\index.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\Login\welcome.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\DataCache\webresources\dnserror.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\playrlic.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Real\RealPlayer\RealNetworks License.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComClearFields.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditIdent.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditNote.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComEditPass.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComLogoff.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComOptions.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComPasswordGenerator.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComResetFields.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSetFields.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Siber Systems\AI RoboForm\RoboFormComTaskBarIcon.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Stardock\Object Desktop\IconPackager\benefits.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Stardock\Object Desktop\IconPackager\previews.htm Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Blackjack.Gadget\en-US\blackjack.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Blockade.Gadget\blockade.HTML Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Bricks.Gadget\en-US\bricks.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\en-US\calendar.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\clock.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Command Launcher.Gadget\en-US\CommandLauncher.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Contacts.Gadget\en-US\contacts.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\en-US\cpu.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\en-US\currency.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\DigitalClock.Gadget\digitalclock.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\DriveInfo.Gadget\en-US\DriveInfo.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\DriveInfo.Gadget\en-US\Settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Internet Search.Gadget\en-US\Search.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Internet Search.Gadget\en-US\Settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Notes.Gadget\en-US\notes.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Notes.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\picturePuzzle.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\RecycleBin.Gadget\en-US\flyout.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\RecycleBin.Gadget\en-US\RecycleBin.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\flyout.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\RunProgram.Gadget\runprogram.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\SidebarPong.Gadget\sidebar_pong.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\en-US\slideShow.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Stocks.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Stocks.Gadget\en-US\stocks.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Sysinfo.Gadget\sysInfo.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\VistaCalculator201.Gadget\calculator.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\VistaCalculator201.Gadget\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\settings.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\en-US\weather.html Infected: Worm.Win32.Fujack.n skipped
C:\Program Files\WinRAR\Order.htm Infected: Worm.Win32.Fujack.n skipped
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
C:\System Volume Information\_restore{56E6105A-FBF0-4AD9-A9FA-12218891ED46}\RP23\A0003689.exe Infected: Worm.Win32.Fujack.n skipped
C:\System Volume Information\_restore{56E6105A-FBF0-4AD9-A9FA-12218891ED46}\RP25\change.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Desktop\SMS-Bomber.exe Infected: SMS-Flooder.Win32.Bomber.c skipped
C:\WINDOWS\Desktop\Virus Protection.exe Infected: Trojan.Win32.VirusWizard.d skipped
C:\WINDOWS\Desktop\Virus Status.exe Infected: Trojan.Win32.VirusWizard.e skipped
C:\WINDOWS\Desktop\Virus Wizard.exe Infected: Trojan.Win32.VirusWizard.c skipped
C:\WINDOWS\Desktop\Virus.org Infected: Trojan.Win32.VirusWizard.a skipped
C:\WINDOWS\Desktop\VirusPro.org Infected: Trojan.Win32.VirusWizard.b skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\SoftwareDistribution\EventCache\{E6EBFBE4-A68A-47CD-810E-553F614EFA09}.bin Object is locked skipped
C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\DEFAULT.LOG Object is locked skipped
C:\WINDOWS\system32\config\ODiag.evt Object is locked skipped
C:\WINDOWS\system32\config\OSession.evt Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\SOFTWARE.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\SYSTEM.LOG Object is locked skipped
C:\WINDOWS\system32\drivers\spoclsv.exe Infected: Worm.Win32.Fujack.n skipped
C:\WINDOWS\system32\drivers\sptd.sys Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
C:\WINDOWS\WindowsUpdate.log Object is locked skipped
C:\ZWMVC_Temp\keygen2.cls Suspicious: IRC-Worm.IRC.generic skipped
C:\ZWMVC_Temp\keygen3.cls Infected: Email-Worm.MSWord.ZWMVC skipped
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0037765.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0037766.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0037767.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0037768.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0037789.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039766.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039767.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039768.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039769.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039779.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039780.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039781.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039782.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039783.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039784.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039785.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039786.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{44B4A8F1-D2D0-4605-A8E5-A67A89E83B02}\RP44\A0039787.scr Infected: Backdoor.Win32.VB.cfw skipped
D:\System Volume Information\_restore{56E6105A-FBF0-4AD9-A9FA-12218891ED46}\RP23\A0003691.exe Infected: Worm.Win32.Fujack.n skipped
D:\System Volume Information\_restore{56E6105A-FBF0-4AD9-A9FA-12218891ED46}\RP25\change.log Object is locked skipped
E:\doc\bh\Balance of payments.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Economic Systems.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Features of Economic Growth.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\INflation.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Location of Industry.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Market Failure.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Multinational.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Taxes.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\The Benefits of Trade.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Trends in Unemployment.doc.scr Infected: Backdoor.Win32.VB.cfw skipped
E:\doc\bh\Unemployment.doc.scr Infected: Backdoor.Win32.VB.cfw skipped

Scan was interrupted by user!

Back to top
View users profile Send private message
Prince_Serendip

Site Moderator


Joined: Sep 07, 2002
Posts: 17542

1st Responders MIRT Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Rootkit Responders

PostPosted: Thu Jun 26, 2008 12:49 pm    Post subject:
Reply with quote

Please do not post any other log except a HijackThis log. If your helper wants other types of logs, they'll ask for them.

IMPORTANT: Please tell us, in your own words, what problems you are having on your computer. This will assist our development of a solution to them. (Just sticking up a log is not enough.) Thanks.


_________________
image
Microsoft MVP Consumer Security 2006, 2007 & 2008
Back to top
View users profile Send private message
nightcrawler123

Cadet
Cadet


Joined: Jun 26, 2008
Posts: 6
Location: Pakistan

PostPosted: Thu Jun 26, 2008 2:12 pm    Post subject:
Reply with quote

There is a hidden file setup.exe in E:/ hardrive.It cannot be removed.There are other viruses which i found in kaspersky online scan.plzzz help.

Back to top
View users profile Send private message
Prince_Serendip

Site Moderator


Joined: Sep 07, 2002
Posts: 17542

1st Responders MIRT Moderators MVP Premium RootKit Detection Hosts Rootkit Experts Rootkit Responders

PostPosted: Fri Jun 27, 2008 11:49 am    Post subject:
Reply with quote

You're Ready for cleaning. Thumbs Up

At CastleCops we screen all HijackThis logs for errors, out-of-date versions, unupdated operating systems, omissions and P2P applications; getting you [READY] for cleaning by our 1st Responders and Security Experts. Now you wait for one of them to come help you.


_________________
image
Microsoft MVP Consumer Security 2006, 2007 & 2008
Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Trend Micro HijackThis Logs All times are GMT
Page 1 of 1

 
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer