Search:

virustotal results:

====> svchost.exe

Antivirus Version Last Update Result
a-squared 4.0.0.101 2009.03.06 -
AhnLab-V3 5.0.0.2 2009.02.27 -
AntiVir 7.9.0.105 2009.03.06 W32/Virut.Gen...

Thank you, Shaba

GMER 1.0.14.14536 - http://www.gmer.net
Rootkit scan 2009-03-06 08:43:53
Windows 5.1.2600 Service Pack 3


---- User code sections - GMER 1.0.14 ----

.text ...

Thank you Shaba. Here are both logs:

ComboFix 09-03-04.01 - Owner 2009-03-05 16:39:13.1 - NTFSx86
Running from: c:\documents and settings\Owner\Desktop\ComboFix.exe
AV: AVG Anti-Virus Free...

WinPatrol Scotty keeps asking me if I want to allow Notepad.exe to be replaced with Nxtepad.exe. My browser has a warning bar on top (between browser window and menu functions) telling me I have 18...

When I search using Firefox 2.0.0.1, I get this weird tan bar across the top of the search results. It doesn't happen all the time and I don't know how to replicate the problem. Here's the screen...

Wow, that's a GREAT link! Thanks!!!

I don't think I asked my question correctly: let's say you download a free FTP program called FTP123 (fictitious) to give it a shot. Later that day you run...

I remember finding a website a long time ago that is like a database. They list shareware/freeware programs that have some type of spyware/adware inside. If I remember correctly, visitors can also...

Thanks Phil.

c:\windows\system32\desktop.html came back with a virus detection (can't remember what it was now).

c:\windows\system32\mscnf.dll came back "no virus found."

I went ahead and...

At one time, you helped my remove Zlob.Downloader. As for spysheriff, I don't remember finding that on my system. Again, thanks so much for all your help!

Logfile of HijackThis v1.99.1
Scan saved at 7:02:19 PM, on 2/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:...

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 6:41:37 PM 2/5/2007

+ Scan...

Thanks for your help pskelly!

Here's my rapport.txt output:

SmitFraudFix v2.139

Scan done at 16:33:27.54, Mon 02/05/2007
Run from C:\Documents and Settings\Owner\My Documents\My...

Here is my Panda scan log:

Incident Status Location ...

The Win32.Small.ddx trojan keeps showing up every time I run a S&D scan.

Here is my HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 5:08:06 PM, on 2/4/2007
Platform: Windows XP SP2...

Hi Phil,
Thanks so much for all your help. I followed your instructions, except a few of those files at the top of the HJT log were safe and didn't need to be removed.

Here's my new HJT log:
...

Hi Phil,
Oops! I didn't realize those were ignored. I let AVG set the default actions and I just "applied" the defaults. Should I go back (in safe mode) and re-run AVG A/S?

HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 10:27:12 AM, on 12/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:...

AVG report:

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 10:07:55 AM...

rapport.txt outcome:

SmitFraudFix v2.128

Scan done at 9:02:39.07, Sun 12/10/2006
Run from C:\Documents and Settings\Owner\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] -...

Hi pskelly,
Thank you for helping me! I'm in the process of doing the steps in the link you provided but I have a question. I'm currently running Eset NOD32 anti virus, would I still need to d/l...

This is the results from the Panda online scan:


Incident Status Location ...

I ran Spybot twice today and Zlob.Downloader trojan came up. I tried fixing it but it shows up in S&D again. I followed the instructions in *"BEFORE you POST" -Preliminary Steps and scanning with...