Page 2 of 4 FirstFirst 1234 LastLast
Results 11 to 20 of 33

Thread: SpyAxe keeps coming back and I cant run SDHelper!

  1. #11
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Exclamation actions completed, log files

    Thank you very much for all your help. I have concluded all the tests you requested.
    HERE ARE ALL THE REQUESTED LOG FILES.
    I MAY HAVE MESSED UP IN THE REGEDIT FUNTION OF SPYBOT BY REMOVING PERMISSION FOR ALL USERS IN THE software\classes\TBPS.* areas. However, after doing this, SpyBot no longer found the Hunter virus.
    Problems persist:
    IE default as browser continually comes up no, not able to use mailto: function.
    I have not done anything with Spybot yet regarding SD or TeaTimer. Please advise what you would have me do.

    HIJACK log

    Logfile of HijackThis v1.99.1
    Scan saved at 2:09:41 PM, on 12/27/2005
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\LEXBCES.EXE
    C:\WINDOWS\system32\LEXPPS.EXE
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\norton\defwatch.exe
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\norton\rtvscan.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\norton\vptray.exe
    C:\Program Files\RFA\rfagent.exe
    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\MsgSys.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\SpywareGuard\sgmain.exe
    C:\WINDOWS\system32\wscntfy.exe
    C:\Program Files\SpywareGuard\sgbhp.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.msn.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bresnan.net
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://my.msn.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/cust.../www.yahoo.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\WINDOWS\PCHealth\HelpCtr\System\PANELS\BLANK.HTM
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell.com/
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
    O4 - HKLM\..\Run: [vptray] C:\Program Files\norton\vptray.exe
    O4 - HKLM\..\Run: [rfagent] "C:\Program Files\RFA\rfagent.exe"
    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
    O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2\bin\npjpi142.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O14 - IERESET.INF: START_PAGE_URL=http://www.bresnan.net
    O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) -
    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/downloads/k...an_unicode.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} (Citrix ICA Client) - https://remoteus.riotinto.com/Citrix...a32/wficat.cab
    O16 - DPF: {24D1BDCE-D835-11D6-BF84-0050047EA0E7} (BlueStream_Flash Class) -
    O16 - DPF: {31E68DE2-5548-4B23-88F0-C51E6A0F695E} (Microsoft PID Sniffer) - https://support.microsoft.com/OAS/ActiveX/odc.cab
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1125685427281
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/Ms...Downloader.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
    O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: NavLogon - C:\WINDOWS\System32\NavLogon.dll
    O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\norton\defwatch.exe
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
    O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
    O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\norton\rtvscan.exe
    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\SYSTEM32\ZoneLabs\vsmon.exe

  2. #12
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Default additional log files - Ewido

    EWIDO file:
    I may have messed up here. I told the program to delete the first 8 files.

    ---------------------------------------------------------
    ewido anti-malware - Scan report
    ---------------------------------------------------------

    + Created on: 1:05:33 PM, 12/27/2005
    + Report-Checksum: 3CC7095

    + Scan result:

    C:\Documents and Settings\Mark\Cookies\mark@com[2].txt -> Spyware.Cookie.Com : Ignored
    C:\Program Files\hijackthis\backups\backup-20051226-170610-614.dll -> Not-A-Virus.PornWare.PopCap.b : Ignored
    C:\Program Files\MyEmoticons\VVSNI_S3_MYEM_Inst.exe -> Adware.SaveNow : Ignored
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP560\A0206123.dll -> Spyware.WildTangent : Ignored
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP560\A0206135.dll -> Spyware.WildTangent : Ignored
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP560\A0206145.dll -> Spyware.WildTangent : Ignored
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP560\A0206159.dll -> Spyware.WildTangent : Ignored
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP578\A0209740.exe -> Downloader.Zlob.dd : Ignored
    HKLM\SOFTWARE\Classes\Common.Buttons -> Spyware.WebSearch : Error during cleaning
    HKLM\SOFTWARE\Classes\PROTOCOLS\Name-Space Handler\res -> Spyware.WebSearch : Cleaned with backup
    HKLM\SOFTWARE\Classes\TBPS.PluginConfig -> Spyware.WebSearch : Error during cleaning
    HKLM\SOFTWARE\Classes\TBPS.PluginEvents -> Spyware.WebSearch : Error during cleaning
    HKLM\SOFTWARE\Classes\TBPS.PluginServer -> Spyware.WebSearch : Error during cleaning
    HKLM\SOFTWARE\Classes\TBPS.ToolbarScript -> Spyware.WebSearch : Error during cleaning
    HKLM\SOFTWARE\Classes\WToolsB.ResProtocol -> Spyware.WebSearch : Error during cleaning
    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\AUI -> Spyware.WebSearch : Cleaned with backup


    ::Report End

  3. #13
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Default kaspersky file

    1/2 kaspersky file attached
    Kaspersky file:
    -------------------------------------------------------------------------------
    KASPERSKY ON-LINE SCANNER REPORT
    Tuesday, December 27, 2005 14:07:52
    Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
    Kaspersky On-line Scanner version: 5.0.67.0
    Kaspersky Anti-Virus database last update: 27/12/2005
    Kaspersky Anti-Virus database records: 167858
    -------------------------------------------------------------------------------

    Scan Settings:
    Scan using the following antivirus database: extended
    Scan Archives: true
    Scan Mail Bases: true

    Scan Target - My Computer:
    A:\
    C:\
    D:\

    Scan Statistics:
    Total number of scanned objects: 48011
    Number of viruses found: 35
    Number of infected objects: 291
    Number of suspicious objects: 0
    Duration of the scan process: 2895 sec

    Infected Object Name - Virus Name
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200000.VBN Infected: Exploit.HTML.Mht
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200002.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200002.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200002.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200002.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01200002.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240000.VBN/RunString.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240000.VBN/Parser.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240000.VBN/Colors.class Infected: Trojan-Downloader.Java.OpenStream.b
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240000.VBN Infected: Trojan-Downloader.Java.OpenStream.b
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240002.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240002.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240002.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240002.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240002.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240004.VBN/Beyond.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240004.VBN/BlackBox.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240004.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240004.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240006.VBN/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.l
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240006.VBN/counter.class Infected: Trojan.Java.ClassLoader.b
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240006.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240006.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240006.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240008.VBN/Counter.class Infected: Trojan.Java.ClassLoader.h
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240008.VBN/Parser.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240008.VBN/Matrix.class Infected: Trojan.Java.StartPage.n
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01240008.VBN Infected: Trojan.Java.StartPage.n
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000A.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.e
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000A.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000A.VBN/WebCounter.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000A.VBN/a.class Infected: Trojan.Java.Shiwow
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000A.VBN Infected: Trojan.Java.Shiwow
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000C.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.e
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000C.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000C.VBN/WebCounter.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000C.VBN/a.class Infected: Trojan.Java.Shiwow
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0124000C.VBN Infected: Trojan.Java.Shiwow
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01280000.VBN Infected: Exploit.HTML.Mht
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01380000.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0000.VBN Infected: Exploit.VBS.Phel.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0002.VBN Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\013C0003.VBN Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01440000.VBN Infected: Exploit.HTML.Mht
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01A80000.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01A80001.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01A80002.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01A80003.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01A80004.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01A80005.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01B80000.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01B80001.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01BC0000.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01BC0001.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C00000.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C00001.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C00002.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C00003.VBN Infected: Trojan.Win32.Small.ga

  4. #14
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Default 2 1/3 Kaspersky File

    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C00004.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C00005.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C40000.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C40001.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C40002.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C40003.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C80000.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\01C80001.VBN Infected: Trojan.Win32.Small.ga
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400000.VBN/Counter.class Infected: Trojan.Java.ClassLoader.i
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400000.VBN/VerifierBug.class Infected: Trojan.Java.ClassLoader.k
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400000.VBN/Beyond.class Infected: Trojan.Java.ClassLoader.k
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400000.VBN Infected: Trojan.Java.ClassLoader.k
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400001.VBN/Counter.class Infected: Trojan.Java.ClassLoader.i
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400001.VBN/VerifierBug.class Infected: Trojan.Java.ClassLoader.k
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400001.VBN/Beyond.class Infected: Trojan.Java.ClassLoader.k
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02400001.VBN Infected: Trojan.Java.ClassLoader.k
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80000.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80000.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80000.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80002.VBN Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02D80003.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280000.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280000.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280000.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03280001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03980000.VBN Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04740000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\047C0000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04880000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04980000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04A00000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04B40000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.e
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN/WebCounter.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN/a.class Infected: Trojan.Java.Shiwow
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05E40000.VBN Infected: Trojan.Java.Shiwow
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07040000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08200000.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240000.VBN Infected: Exploit.VBS.Phel.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240002.VBN Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08240003.VBN Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08B80000.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0000.VBN Infected: Exploit.VBS.Phel.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0002.VBN Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08BC0003.VBN Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\092C0000.VBN Infected: Exploit.HTML.Mht
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\092C0001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\092C0001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\092C0001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\092C0001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\092C0001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300000.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300000.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300000.VBN/Installer.class
    Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09340000.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09340000.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09340000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09340000.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09340000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09980000.VBN Infected: not-virus:Hoax.Win32.Renos.ag
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0000.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0001.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0002.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0003.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0004.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0005.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0006.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0007.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0008.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0009.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC000A.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC000B.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC000C.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC000D.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC000E.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC000F.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0010.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0011.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0012.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0013.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0014.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0015.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0016.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0017.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0018.VBN Infected: Trojan.JS.Scob.a

  5. #15
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Default Final 1/3 Kaspersky

    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0019.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC001A.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC001B.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC001C.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC001D.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC001E.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC001F.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0020.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0021.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0022.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0023.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0024.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0025.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0026.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0027.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0028.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0029.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC002A.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC002B.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC002C.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC002D.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC002E.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC002F.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0030.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0031.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0032.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0033.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0034.VBN Infected: Trojan.JS.Scob.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0035.VBN/counter.class Infected: Trojan.Java.ClassLoader.b
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0035.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0035.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0035.VBN/Beyond.class Infected: Trojan.Java.StartPage.j
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0035.VBN Infected: Trojan.Java.StartPage.j
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0036.VBN/counter.class Infected: Trojan.Java.ClassLoader.b
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0036.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0036.VBN/VerifierBug.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0036.VBN/Beyond.class Infected: Trojan.Java.StartPage.j
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0036.VBN Infected: Trojan.Java.StartPage.j
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0037.VBN/Counter.class Infected: Trojan.Java.ClassLoader.h
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0037.VBN/Matrix.class Infected: Trojan-Downloader.Java.OpenStream.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0037.VBN/Parser.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0037.VBN Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0038.VBN/Counter.class Infected: Trojan.Java.ClassLoader.h
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0038.VBN/Matrix.class Infected: Trojan-Downloader.Java.OpenStream.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0038.VBN/Parser.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0038.VBN Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0039.VBN Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00000.VBN Infected: Exploit.VBS.Phel.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00002.VBN Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09D00003.VBN Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A780000.VBN/Counter.class Infected: Trojan.Java.Femad
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A780000.VBN/VerifierBug.class Infected: Trojan.Java.Femad
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A780000.VBN/web.exe Infected: Trojan.Win32.LowZones.cp
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A780000.VBN/Worker.class Infected: Trojan.Java.Femad
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A780000.VBN/Xeyond.class Infected: Trojan.Java.Femad
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A780000.VBN Infected: Trojan.Java.Femad
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80000.VBN/BlackBox.class Infected: Trojan.Java.ClassLoader.ak
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80000.VBN/VB.class Infected: Trojan.Java.ClassLoader.ak
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80000.VBN/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.ah
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80000.VBN Infected: Trojan-Downloader.Java.OpenConnection.ah
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80001.VBN/BlackBox.class Infected: Trojan.Java.ClassLoader.ak
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80001.VBN/VB.class Infected: Trojan.Java.ClassLoader.ak
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80001.VBN/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.ah
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0CE80001.VBN Infected: Trojan-Downloader.Java.OpenConnection.ah
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040000.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040000.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040000.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040000.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040001.VBN/GetAccess.class Infected: Trojan.Java.ClassLoader.c
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040001.VBN/InsecureClassLoader.class Infected: Exploit.Java.Bytverify
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040001.VBN/Dummy.class Infected: Trojan.Java.ClassLoader.Dummy.a
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040001.VBN/Installer.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040001.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040002.VBN/Counter.class Infected: Trojan.Java.ClassLoader.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040002.VBN/Parser.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040002.VBN/Matrix.class Infected: Trojan-Downloader.Java.OpenConnection.s
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040002.VBN Infected: Trojan-Downloader.Java.OpenConnection.s
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040003.VBN/Counter.class Infected: Trojan.Java.ClassLoader.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040003.VBN/Parser.class Infected: Trojan.Java.ClassLoader.d
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040003.VBN/Matrix.class Infected: Trojan-Downloader.Java.OpenConnection.s
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040003.VBN Infected: Trojan-Downloader.Java.OpenConnection.s
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040004.VBN/Dummy.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040004.VBN/go_in.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040004.VBN/ok.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040004.VBN/stat.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040004.VBN Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040005.VBN/Dummy.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040005.VBN/go_in.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040005.VBN/ok.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040005.VBN/stat.class Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D040005.VBN Infected: Trojan.Java.Nocheat
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D100000.VBN/BlackBox.class Infected: Trojan.Java.ClassLoader.z
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D100000.VBN/VB.class Infected: Trojan.Java.ClassLoader.ak
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D100000.VBN/Beyond.class Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D100000.VBN Infected: Trojan-Downloader.Java.OpenConnection.v
    C:\Program Files\hijackthis\backups\backup-20051226-170610-614.dll Infected: not-a-virus:Downloader.Win32.PopCap.b
    C:\Program Files\hijackthis\backups\backup-20051226-170931-369.dll Infected: Trojan-Downloader.Win32.Zlob.dk
    C:\Program Files\MyEmoticons\VVSNI_S3_MYEM_Inst.exe Infected: not-a-virus:AdWare.Win32.SaveNow.bo
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP577\A0209596.tlb Infected: Trojan-Downloader.Win32.Zlob.dk
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP577\A0209668.exe Infected: Trojan-Downloader.Win32.Zlob.dk
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP577\A0209670.tlb Infected: Trojan-Downloader.Win32.Zlob.dk
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP578\A0209739.tlb Infected: Trojan-Downloader.Win32.Zlob.dk
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP578\A0209740.exe Infected: Trojan-Downloader.Win32.Zlob.dd
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP578\A0209742.exe Infected: Trojan-Downloader.Win32.Zlob.dk
    C:\System Volume Information\_restore{B37680B2-BA0A-4E5D-BF30-83E44C588624}\RP578\A0209743.exe Infected: Trojan-Downloader.Win32.Zlob.bv

    Scan process completed.


    SMITFILES.TXT

    smitRem © log file
    version 2.8

    by noahdfear


    Microsoft Windows XP [Version 5.1.2600]
    The current date is: Tue 12/27/2005
    The current time is: 11:45:36.01

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    checking for ShudderLTD key

    ShudderLTD key not present!

    checking for PSGuard.com key


    PSGuard.com key not present!

    spyaxe uninstaller NOT present
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    Existing Pre-run Files


    ~~~ Program Files ~~~

    Security Toolbar


    ~~~ Shortcuts ~~~

    Online Security Guide.url
    Online Security Guide.url
    Security Troubleshooting.url
    Security Troubleshooting.url


    ~~~ Favorites ~~~

    Antivirus Test Online.url
    shopping


    ~~~ system32 folder ~~~

    1024 dir
    msvol.tlb
    ld****.tmp
    mssearchnet.exe
    ncompat.tlb
    nvctrl.exe
    mscornet.exe
    hp***.tmp


    ~~~ Icons in System32 ~~~

    ts.ico
    ot.ico
    ~~~ Windows directory ~~~
    ~~~ Drive root ~~~

    ~~~ Miscellaneous Files/folders ~~~
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Command Line Process Viewer/Killer/Suspender for Windows NT/2000/XP V2.03
    Copyright(C) 2002-2003 Craig.Peacock@beyondlogic.org
    Killing PID 1300 'explorer.exe'

    Starting registry repairs

    Deleting files

    Remaining Post-run Files

    ~~~ Program Files ~~~

    ~~~ Shortcuts ~~~

    Online Security Guide.url
    Online Security Guide.url

    ~~~ Favorites ~~~

    ~~~ system32 folder ~~~

    ~~~ Icons in System32 ~~~

    ~~~ Windows directory ~~~

    ~~~ Drive root ~~~

    ~~~ Miscellaneous Files/folders ~~~


    ~~~ Wininet.dll ~~~

    CLEAN!

  6. #16
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    C:\Program Files\MyEmoticons < all files there are most likely infected with something
    It would be best to uninstall whatever put it there
    I assume you have used the set ie as default button in internet options ?
    in internet options > programs is outlook express set as default ?
    place a check in the [x] ie should check to see if it the default browsers
    click the reset web settings button and apply buttons then ok, dont use that x button otherwise changes arent made sometimes.
    Do you use other browsers to ? if so then they may be taking over as default when used.

  7. #17
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Default answers and more questions

    C:\Program Files\MyEmoticons < all files there are most likely infected with something
    It would be best to uninstall whatever put it there
    I changed the directory to non read only and deleted the whole thing. Uninstall did not work and it was not in the add/remove section of Control Panel.

    I assume you have used the set ie as default button in internet options ? Definitely
    in internet options > programs is outlook express set as default ? No, MS Outlook is. I use Outlook and not Outlook Express.

    place a check in the [x] ie should check to see if it the default browsers
    click the reset web settings button and apply buttons then ok, dont use that button otherwise changes arent made sometimes.
    I've done that in the past before and it did not help. I just did it again.

    Do you use other browsers to ? if so then they may be taking over as default when used. No, that is the strange part, I have never used another browser, not even had one installed.

    What about the registry changes I made via regedit? Do I need to reset them to a user authorization? Now they are none.

    How do I get SDHelper to work now? I can't check the boxes in the program to allow it to work.
    Also, I just did another SD scan, and the virus that disables windows security was back. Any idea why?
    Last edited by MarkRx; 2005-12-28 at 03:43.

  8. #18
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    Hi

    The windows security center detections are nothing to worry about. usualy those are your custom setting's , have SSD fix it or ignore the item.

    Yes turn on Tea timer and SDhelper now in SpyBots tools, any problems ?

    can you manualy delete these keys ? (be carefull please)
    HKLM\SOFTWARE\Classes\TBPS.PluginConfig
    HKLM\SOFTWARE\Classes\TBPS.PluginEvents
    HKLM\SOFTWARE\Classes\TBPS.PluginServer
    HKLM\SOFTWARE\Classes\TBPS.ToolbarScript
    HKLM\SOFTWARE\Classes\WToolsB.ResProtocol

  9. #19
    Junior Member
    Join Date
    Dec 2005
    Posts
    4

    Default how to delete and problems still

    The windows security center detections are nothing to worry about. usualy those are your custom setting's , have SSD fix it or ignore the item.
    Thanks, I'll do that,

    Yes turn on Tea timer and SDhelper now in SpyBots tools, any problems ?
    Yes, tea timer will check, but the SDHelper box will not let me check to activate.

    can you manualy delete these keys ? (be carefull please)
    Please tell me how to do this.

    HKLM\SOFTWARE\Classes\TBPS.PluginConfig
    HKLM\SOFTWARE\Classes\TBPS.PluginEvents
    HKLM\SOFTWARE\Classes\TBPS.PluginServer
    HKLM\SOFTWARE\Classes\TBPS.ToolbarScript
    HKLM\SOFTWARE\Classes\WToolsB.ResProtocol

  10. #20
    Security Expert-Emeritus
    Join Date
    Oct 2005
    Posts
    5,025

    Default

    Hi

    "Please tell me how to do this." if you dont already know how i suggest we leave them, they are just leftovers than cannot couse any problems i think.

    Uninstall SpyBot restart the PC and delete SpyBots folder in programs files then re-download and install SSD 1.4
    http://www.safer-networking.org/en/download/index.html

    Keep us informed

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •