Results 1 to 3 of 3

Thread: Savant2's HijackThis log, bloodhound.packed.10

  1. #1
    Junior Member
    Join Date
    Feb 2007
    Posts
    1

    Default Savant2's HijackThis log, bloodhound.packed.10

    Hi Shaba,

    I have the same problem with 'Bloodhound.packed.10' too.

    Tried the VundoFix.exe as suggested in your earlier post. But apparently, it only scan .dll files. So no virus was picked up for 'Remove Vundo'.

    My Kaspersky Online scan shows the following :

    -------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER REPORT
    Tuesday, February 13, 2007 2:43:49 AM
    Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
    Kaspersky Online Scanner version: 5.0.83.0
    Kaspersky Anti-Virus database last update: 12/02/2007
    Kaspersky Anti-Virus database records: 252132
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: standard
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    C:\
    D:\
    E:\
    F:\

    Scan Statistics:
    Total number of scanned objects: 52919
    Number of viruses found: 6
    Number of infected objects: 17 / 0
    Number of suspicious objects: 0
    Duration of the scan process: 00:41:57

    Infected Object Name / Virus Name / Last Action
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Common Client\settings.dat Object is locked skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880000.VBN Infected: Exploit.JS.ADODB.Stream.ac skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880001.VBN Infected: Exploit.JS.ADODB.Stream.ac skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880002.VBN Infected: Trojan-Downloader.JS.Agent.cd skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880003.VBN Infected: Exploit.HTML.IESlice.d skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880004.VBN Infected: Exploit.JS.ADODB.Stream.ac skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880005.VBN Infected: Exploit.JS.XMLCore.a skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880006.VBN Infected: Trojan-Downloader.JS.Agent.cd skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880007.VBN Infected: Trojan-Downloader.JS.Agent.bx skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880008.VBN Infected: Exploit.HTML.IESlice.d skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880009.VBN Infected: Exploit.HTML.VML.d skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0888000A.VBN Infected: Exploit.JS.XMLCore.a skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0888000B.VBN Infected: Exploit.HTML.VML.d skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0888000C.VBN Infected: Trojan-Downloader.JS.Agent.cd skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0888000D.VBN Infected: Trojan-Downloader.JS.Agent.bx skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0888000E.VBN Infected: Exploit.HTML.IESlice.d skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0888000F.VBN Infected: Exploit.JS.XMLCore.a skipped
    C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\08880010.VBN Infected: Exploit.HTML.VML.d skipped
    C:\Documents and Settings\Kai Min\Application Data\BitTorrent\bittorrent.log Object is locked skipped
    C:\Documents and Settings\Kai Min\Application Data\BitTorrent\incomplete\5e6fb09c-5f7e Object is locked skipped
    C:\Documents and Settings\Kai Min\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\History\History.IE5\MSHist012007021320070214\index.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Temp\Perflib_Perfdata_ce0.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Temp\~DF56A3.tmp Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Temp\~DF715B.tmp Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Temp\~DFF92.tmp Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Temp\~DFFD2.tmp Object is locked skipped
    C:\Documents and Settings\Kai Min\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\Kai Min\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\Kai Min\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
    C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
    C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
    C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
    C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
    C:\Program Files\Yahoo!\Messenger\logs\billing_Kai Min.log Object is locked skipped
    C:\Program Files\Yahoo!\Messenger\logs\client_Kai Min.log Object is locked skipped
    C:\Program Files\Yahoo!\Messenger\logs\network_Kai Min.log Object is locked skipped
    C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped
    C:\System Volume Information\_restore{C80A0E31-CFB6-43C8-806D-D60328756522}\RP89\change.log Object is locked skipped
    C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
    C:\WINDOWS\SchedLgU.Txt Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\EventCache\{F3A0C511-1514-4855-A5D9-9CC8968EDA3D}.bin Object is locked skipped
    C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped
    C:\WINDOWS\Sti_Trace.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped
    C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped
    C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\default Object is locked skipped
    C:\WINDOWS\system32\config\default.LOG Object is locked skipped
    C:\WINDOWS\system32\config\Internet.evt Object is locked skipped
    C:\WINDOWS\system32\config\SAM Object is locked skipped
    C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY Object is locked skipped
    C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
    C:\WINDOWS\system32\config\software Object is locked skipped
    C:\WINDOWS\system32\config\software.LOG Object is locked skipped
    C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
    C:\WINDOWS\system32\config\system Object is locked skipped
    C:\WINDOWS\system32\config\system.LOG Object is locked skipped
    C:\WINDOWS\system32\h323log.txt Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
    C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped
    C:\WINDOWS\wiadebug.log Object is locked skipped
    C:\WINDOWS\wiaservc.log Object is locked skipped
    C:\WINDOWS\WindowsUpdate.log Object is locked skipped
    D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

    Scan process completed.
    ================================================


    I would really appreciate your advise. Thanks a million!
    Last edited by Shaba; 2007-02-12 at 19:53. Reason: created own thread, don't post to someone else's thread, please :)

  2. #2
    In Memoriam -Always in our heart pskelley's Avatar
    Join Date
    Oct 2005
    Location
    Clearwater, Florida
    Posts
    20,252

    Default

    Welcome to the forum, It appears since you posted in another members topic that you have not read this information which is Pinned to the top of the forum:
    "BEFORE you POST" -Preliminary Steps
    http://forums.spybot.info/showthread.php?t=288

    I can't say if this is Vundo or not lacking information, but if it is, these instructions are also Pinned there:
    http://forums.spybot.info/showthread.php?t=4394

    Please use Post Reply, stay in this topic.

    Thanks
    MS-MVP Consumer Security 2007-08-09
    Proud Member ASAP
    UNITE Member 2006

  3. #3
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,223

    Default

    This topic has been archived.

    If you need it re-opened please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.
    Microsoft MVP Reconnect 2018
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •