Page 2 of 2 FirstFirst 12
Results 11 to 13 of 13

Thread: Need help with several viruses.

  1. #11
    Junior Member
    Join Date
    Jan 2008
    Posts
    26

    Default

    My computer seems to be working better. It's still showing some viruses when I ran the KASPERSKY report. But it's less viruses then I had before so it's getting better. I'll post the report for you to look over. Let me know what to do next. And sorry about the delay, had almost finished this report and the computer got shut off. Not a problem with it, just a overactive two year old and I had to run it all over again. Took awhile. Anyway, thanks again for your help!


    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Saturday, January 05, 2008 2:22:21 PM
    Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.98.0
    Kaspersky Anti-Virus database last update: 5/01/2008
    Kaspersky Anti-Virus database records: 503020
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\

    Scan Statistics:
    Total number of scanned objects: 123199
    Number of viruses found: 6
    Number of infected objects: 14
    Number of suspicious objects: 0
    Duration of the scan process: 02:11:15

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\ph Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\variable Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\aolusers.fus Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\DebbieKay9396\mydb.idx Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\DebbieKay9396\style.lst Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\DebbieKay9396\toolbar.lst Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\SNMaster.idx Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\CACHE\debbiekay9301 Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\debbie kay 9396.abi Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\debbie kay 9396.aby Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\debbiekay9396 Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\aolstderr.txt Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\aolstdout.txt Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\cache.db Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\ncoc Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\AOL\TopSpeed\3.0\server.lock Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\F-Secure\logs\FSMA\fsma.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Intel\Wireless\WLANProfiles\Profiles.enc Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Nero\Nero8\Nero BackItUp\Cache\NeroBackItUpScheduler3.log Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\QSLLPSVCShare Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\$_hpcst$.hpc Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\AOL\C_AOL 9.1\IDB\Apps.Lst Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\AOL\C_AOL 9.1\IDB\art.idx Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\AOL\C_AOL 9.1\IDB\sap.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\AOL\C_AOL 9.1\IDB\spool.lst Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\AOL\C_AOL 9.1\IDB\sysnews.lst Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Application Data\Intel\Wireless\WLANProfiles\Profiles.enc Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\Ahead\Nero Home\bl.db Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\Ahead\Nero Home\is2.db Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Documents.dfd Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Documents.did Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Documents.dsd Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Keywords.kdb Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Keywords.kdl Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Keywords.kib Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Keywords.kpf Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\DTS\Index\MainChunk\Keywords.ksb Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\ApplicationHistory\cli.exe.c88dbd71.ini.inuse Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\BVRP Software\NetWaiting\MoHlog.txt Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\History\History.IE5\MSHist012008010520080106\index.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Temp\A.tmp Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Temp\clclean.0001.dir.0000\~efe2.tmp Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Temp\Perflib_Perfdata_94c.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Temp\Perflib_Perfdata_df8.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Temp\WCESLog.log Object is locked skipped
    C:\Documents and Settings\Keith Williamson\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Keith Williamson\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\Keith Williamson\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\dbupdate.log Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\deleteme_msg.log Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\fsqh.exe.Qrt.log Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\perf.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Anti-Virus\power.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Common\policy.bpf Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Common\policy.ipf Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSAUA\program\fsaua.dbg Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSAUA\program\fsaua.log Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSAUA\program\fsbwupst.log Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\csdk\Stlst\StatListDb.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\csdk\Stlst\StatListDb.idx Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\csdk\urlcache\domainNames.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\csdk\urlcache\domainNames.idx Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\csdk\urlcache\urlCacheDb.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\csdk\urlcache\urlCacheDb.idx Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\logs\fspcwld.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\FSPC\logs\fspcwli.dat Object is locked skipped
    C:\Program Files\Charter High-Speed Security Suite\Spam Control\log\fs_sa_log.txt Object is locked skipped
    C:\Program Files\Ilium Software\ListPro\ListProAlarms.adb Object is locked skipped
    C:\Program Files\Nero\Nero8\Nero BackItUp\BIU2.txt Object is locked skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP210\A0159303.dll Infected: Backdoor.Win32.Agent.dlj skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP210\A0159662.dll Infected: Backdoor.Win32.Agent.dlj skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP210\A0159663.dll Infected: Backdoor.Win32.Agent.dlj skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP211\A0159989.dll Infected: Trojan.Win32.BHO.abs skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP211\A0159990.dll Infected: Backdoor.Win32.Agent.dlj skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP211\A0159991.dll Infected: not-a-virus:AdWare.Win32.SuperJuan.ak skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP211\A0162999.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.din skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP211\A0163999.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.din skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP212\A0166999.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.din skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP212\A0168123.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.bkr skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP212\A0168167.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.din skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP212\A0169234.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.din skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP212\A0169235.dll Infected: Trojan.Win32.Pakes.bwd skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP212\A0169237.dll Infected: not-a-virus:AdWare.Win32.Virtumonde.din skipped
    C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F}\RP218\change.log Object is locked skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
    C:\WINDOWS\Sti_Trace.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
    C:\WINDOWS\system32\config\ACEEvent.evt Object is locked skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\DEFAULT Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SOFTWARE Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SYSTEM Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\h323log.txt Object is locked skipped
    C:\WINDOWS\system32\LogFiles\HTTPERR\httperr1.log Object is locked skipped
    C:\WINDOWS\system32\LogFiles\WUDF\WUDFTrace.etl Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
    C:\WINDOWS\Temp\Perflib_Perfdata_a14.dat Object is locked skipped
    C:\WINDOWS\wiadebug.log Object is locked skipped
    C:\WINDOWS\wiaservc.log Object is locked skipped
    C:\WINDOWS\WindowsUpdate.log Object is locked skipped

    Scan process completed.

  2. #12
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,247

    Default

    Thanks for that feedback and I expected a few, let's have a look at them.

    KASPERSKY ONLINE SCANNER REPORT Saturday, January 05, 2008 2:22:21 PM

    Everyone is an infected System Restore files, follow these directions:
    MANUAL INSTRUCTIONS FOR SYSTEM RESTORE
    Turn off System Restore.
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    Check Turn off System Restore.
    Click Apply, and then click OK.

    Reboot

    Turn ON System Restore,
    On the Desktop, right-click My Computer.
    Click Properties.
    Click the System Restore tab.
    UN-Check *Turn off System Restore*.
    Click Apply, and then click OK.
    If you followed the directions, no need to post a clean scan.

    Happy New Year

    For your information:
    http://www.microsoft.com/windowsxp/u...s/mcgill1.mspx

    Some good information for you:
    http://users.telenet.be/bluepatchy/m...wcomputer.html

    Here is some great information from experts in this field that will help you stay clean and safe online.
    http://users.telenet.be/bluepatchy/m...revention.html
    http://forums.spybot.info/showthread.php?t=279
    http://russelltexas.com/malware/allclear.htm
    http://forum.malwareremoval.com/viewtopic.php?t=14
    http://www.bleepingcomputer.com/forums/topict2520.html
    http://cybercoyote.org/security/not-admin.shtml

    Thanks...pskelley
    Safer Networking Forums
    http://www.spybot.info/en/donate/index.html
    If you are reading this information...thank a teacher,
    If you are reading it in English...thank a soldier.
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

  3. #13
    Junior Member
    Join Date
    Jan 2008
    Posts
    26

    Default

    Ok, just finished the new scan and everything came back clean! No more viruses are showing. Thank you so much for your help. Thank you for all the information, I'll check all those out. I don't want to be back here anytime soon. Thanks again!!

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •