Trying to remove Downloader.agent.uj

K

ktwolf

New member
Logfile of HijackThis v1.99.1
Scan saved at 2:56:37 PM, on 9/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe

O1 - Hosts: localhost 127.0.0.1
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [E6TaskPanel] "C:\Program Files\EarthLink TotalAccess\TaskPanl.exe" -winstart
O4 - Startup: SpySubtract.lnk = C:\Program Files\interMute\SpySubtract\SpySub.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O17 - HKLM\System\CCS\Services\Tcpip\..\{AF8DE7D2-AA80-4CD3-BE8D-0378CDDCF3BD}: NameServer = 85.255.113.93,85.255.112.23
O17 - HKLM\System\CCS\Services\Tcpip\..\{E7E27D44-D1E7-4D36-BE90-E80F98F2C0FC}: NameServer = 85.255.113.93,85.255.112.23
O17 - HKLM\System\CCS\Services\Tcpip\..\{E9946F1A-18FA-4EC7-8E8F-A236774E87EB}: NameServer = 85.255.113.93,85.255.112.23
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.113.93 85.255.112.23
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.113.93 85.255.112.23
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

SmitFraudFix v2.96

Scan done at 14:57:17.50, Thu 09/21/2006
Run from C:\Documents and Settings\HP_Administrator\Desktop\SmitfraudFix\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
Fix ran in safe mode
 
second batch

ewido anti-spyware - Scan Report
---------------------------------------------------------

+ Created at: 6:27:46 AM 9/21/2006

+ Scan result:



C:\Program Files\AWS\WeatherBug\MiniBugTransporter.dll -> Adware.Aws : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0004403.dll -> Adware.SBSoft : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP6\A0001735.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP6\A0001742.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0001967.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0001974.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0002577.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003576.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003593.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003605.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003610.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003977.exe -> Downloader.Agent.uj : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0004409.exe -> Downloader.Agent.uj : No action taken.
[1148] VM_009D0000 -> Downloader.Agent.uj : No action taken.
[224] VM_00D60000 -> Downloader.Agent.uj : No action taken.
[248] VM_00BF0000 -> Downloader.Agent.uj : No action taken.
C:\WINDOWS\system32\aoeewppf.nyy -> Hijacker.Small.js : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003591.dll -> Proxy.Lager.aq : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@247realmedia[2].txt -> TrackingCookie.247realmedia : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@ford.112.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@livenation.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@razorgator.122.2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@2o7[1].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\travisleigh@earthlink.net\Cookies\hp_administrator@2o7[2].txt -> TrackingCookie.2o7 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@ads.addynamix[2].txt -> TrackingCookie.Addynamix : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@adrevolver[3].txt -> TrackingCookie.Adrevolver : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@adrevolver[1].txt -> TrackingCookie.Adrevolver : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@advertising[2].txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@advertising[2].txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@advertising[1].txt -> TrackingCookie.Advertising : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@atdmt[2].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@atdmt[1].txt -> TrackingCookie.Atdmt : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@bfast[1].txt -> TrackingCookie.Bfast : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@bfast[1].txt -> TrackingCookie.Bfast : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@bluestreak[2].txt -> TrackingCookie.Bluestreak : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@citi.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@casalemedia[1].txt -> TrackingCookie.Casalemedia : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@casalemedia[2].txt -> TrackingCookie.Casalemedia : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@data.coremetrics[1].txt -> TrackingCookie.Coremetrics : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@www.directnetadvertising[2].txt -> TrackingCookie.Directnetadvertising : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@www.directnetadvertising[2].txt -> TrackingCookie.Directnetadvertising : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@doubleclick[1].txt -> TrackingCookie.Doubleclick : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@as-us.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@sel.as-us.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@as-us.falkag[1].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@sel.as-us.falkag[2].txt -> TrackingCookie.Falkag : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@fastclick[1].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@media.fastclick[2].txt -> TrackingCookie.Fastclick : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@ehg-netquote.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@ehg-directv.hitbox[1].txt -> TrackingCookie.Hitbox : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@ehg-stampsdotcom.hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@hitbox[2].txt -> TrackingCookie.Hitbox : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@linksynergy[2].txt -> TrackingCookie.Linksynergy : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@sales.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@server.iad.liveperson[2].txt -> TrackingCookie.Liveperson : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@mediaplex[2].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@mediaplex[1].txt -> TrackingCookie.Mediaplex : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@need2find[2].txt -> TrackingCookie.Need2find : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@data2.perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@perf.overture[1].txt -> TrackingCookie.Overture : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@ads.pointroll[1].txt -> TrackingCookie.Pointroll : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@qksrv[1].txt -> TrackingCookie.Qksrv : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@qksrv[1].txt -> TrackingCookie.Qksrv : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@questionmarket[2].txt -> TrackingCookie.Questionmarket : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@edge.ru4[1].txt -> TrackingCookie.Ru4 : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@trafficmp[2].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@trafficmp[1].txt -> TrackingCookie.Trafficmp : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@statse.webtrendslive[2].txt -> TrackingCookie.Webtrendslive : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\projekt_ascension@earthlink.net\Cookies\hp_administrator@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\howlingwolfmusic@earthlink.net\Cookies\hp_administrator@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : No action taken.
C:\Documents and Settings\HP_Administrator\Application Data\Earthlink\6.0\ktwolf@earthlink.net\Cookies\hp_administrator@zedo[1].txt -> TrackingCookie.Zedo : No action taken.
C:\WINDOWS\system32\annlo.exe -> Trojan.DNSChanger.ef : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP6\A0001737.exe -> Trojan.Small.fb : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP6\A0001744.exe -> Trojan.Small.fb : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0001970.exe -> Trojan.Small.fb : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0001977.exe -> Trojan.Small.fb : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0002584.exe -> Trojan.Small.fb : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003586.exe -> Trojan.Small.fb : No action taken.
C:\System Volume Information\_restore{7E6001F9-0A8D-45EC-B593-E452C096CF95}\RP8\A0003615.exe -> Trojan.Small.fb : No action taken.


::Report end
 
Welcome ktwolf

Have you posted for help elswhere ? If not continue here >
Your running Hijackthis from a temp and/Or it still hasnt been unzipped, neither is a good idea.
Create a new folder, for instance C:\AntiSpyware
Download the exe from here to that new folder.
http://www.merijn.org/files/HijackThis.exe
This is necessary to ensure you have backups should anything go wrong
Make and post a new log
 
This topic has been closed to prevent others with similar issues posting in it.
If you need it re-opened please send me or your helper a private message (pm) and provide a link to the thread.

Applies only to the original topic starter.
 
You must log in or register to reply here.
Back
Top