Browser and Desktop hijacked [RESOLVED]

Need a geek? Geeks to Go offers free, quality tech support -- in terms anyone can understand. Volunteers are waiting to help, friendly, technology experts who have knowledge to share, and enjoy helping others. Feel free to browse the site as a guest. However, you must log in to reply to existing topics, or to start a new topic of your own. Other benefits of joining include richer forum features, and removal of all advertising. Learn more in our Welcome Guide Infected? Malware and Spyware Cleaning Guide. What are you waiting for? Click here to join for free today!

> Geeks to Go! » Security » Virus, Spyware and Trojan Removal

Browser and Desktop hijacked [RESOLVED], browser/desktop

Options

Rawe View Member Profile	Jun 30 2005, 04:53 PM Post #2
Visiting Staff Posts: 4,746 From: Finland OS: XP Home - SP2	Hello and welcome! AAW has no power for this infection you have, because you have an virus/trojan there, as Ad-aware isn't anti-virus software. #:27 [stchost.exe] FilePath : C:\WINDOWS\ ProcessID : 1560 ThreadCreationTime : 6-30-2005 9:35:10 PM BasePriority : Normal (well, in addition to spyware you also have..) Wait for an mod to come and move this topic to Malware removal forum. You have to download HiJackThis v 1.99.1 and install it. (Please do note, that unzip it to an permanent folder such as C:\HJT. Then you will have access to back ups.) When installed, launch it and hit "Do a full system scan and save the logfile". Once the scan has finished, a notepad file will open with a log. Please copy & paste all of it's content to your next reply to this thread. When you have posted it, someone from our HJT staff will come and help you with your problems.. Mean while you're waiting, run couple of these free online A/V scans here; - RAV - Kaspersky - BitDefender - Jotti Virusscan And one of the following free anti-trojan scans; - A2 <- Free Trojan scanner - Trojan Hunter <-- 30 days free trial. - Rawe

panzer503 View Member Profile	Jun 30 2005, 07:10 PM Post #3
Member Posts: 19 OS: XP	Wow, thanks for the quick reply! Here's a copy of my HJT log. Im also running the online virus scans. Logfile of HijackThis v1.99.1 Scan saved at 6:07:49 PM, on 6/30/2005 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe C:\Program Files\Logitech\iTouch\iTouch.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Winamp\winampa.exe C:\WINDOWS\System32\RUNDLL32.EXE C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\System32\ctfmon.exe C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe C:\WINDOWS\System32\svchost.exe C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE C:\WINDOWS\stchost.exe C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE C:\WINDOWS\System32\nvsvc32.exe C:\Program Files\Kerio\Personal Firewall\persfw.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Opera7\opera.exe C:\Documents and Settings\psyklops\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: (no name) - {B75F75B8-93F3-429D-FF34-660B206D897A} - C:\WINDOWS\System32\zolker001.dll O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O2 - BHO: ZToolbar Activator Class - {FFF5092F-7172-4018-827B-FA5868FB0478} - C:\WINDOWS\System32\ztoolb001.dll O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: &Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\COMPAN~1\Installs\cpn\ycomp5_5_7_0.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [Printer Spooler] C:\WINDOWS\System32\winspooler.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [LDM] \Program\BackWeb-8876480.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: PowerReg Scheduler V3.exe O4 - Startup: PowerReg Scheduler.exe O4 - Startup: PowerReg SchedulerV2.exe O4 - Startup: Registration Brothers In Arms.LNK = D:\Support\Register\RegistrationReminder.exe O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Microsoft Works Calendar Reminders.lnk = ? O4 - Global Startup: Norton System Doctor.LNK = C:\Program Files\Norton SystemWorks\Norton Utilities\SYSDOC32.EXE O4 - Global Startup: Ulead Photo Express 4.0 SE Calendar Checker .lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 4.0 SE\CalCheck.exe O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Translate into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O15 - Trusted Zone: .skoobidoo.com O15 - Trusted Zone: .slotchbar.com O15 - Trusted Zone: .windupdates.com O15 - Trusted Zone: .skoobidoo.com (HKLM) O15 - Trusted Zone: .slotchbar.com (HKLM) O15 - Trusted Zone: .windupdates.com (HKLM) O15 - Trusted IP range: 67.19.178.84 O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akamai.net/7/1540/52/200404...meInstaller.exe O21 - SSODL: LiveReg - {EAF0F8E0-E338-C706-2883-49086EC3F47A} - c:\program files\common files\symantec shared\livereg\xnzww32.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE O23 - Service: stchost.exe (moto) - Unknown owner - C:\WINDOWS\stchost.exe O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Kat View Member Profile	Jul 4 2005, 02:13 PM Post #4
The Kitty Posts: 19,109 OS: XP Pro	Hello and welcome to GeeksToGo! My name is Kat, and I will be helping you. I apologize for the delay in getting to you. Please download ewido security suite it is a trial version of the program. Install ewido security suite When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu". Launch ewido, there should be an icon on your desktop double-click it. The program will prompt you to update click the OK button The program will now go to the main screen You will need to update ewido to the latest definition files. On the left hand side of the main screen click update Click on Start The update will start and a progress bar will show the updates being installed. Once the updates are installed do the following: Click on scanner Make sure the following boxes are checked before scanning: Binder Crypter Archives Click on Start Scan Let the program scan the machine While the scan is in progress you will be prompted to clean files, click OK Once the scan has completed, there will be a button located on the bottom of the screen named Save report Click Save report Save the report to your desktop Reboot your machine and post back a new HJT log and the ewido .txt log file you saved by using Add Reply

Kat View Member Profile	Jul 4 2005, 02:14 PM Post #5
The Kitty Posts: 19,109 OS: XP Pro	I forgot to mention that like most everyone...I will be leaving soon to go see fireworks. I will check back in later tonight to see if you've replied! I have subscribed to this thread, so I will know when you make a reply!

panzer503 View Member Profile	Jul 4 2005, 07:18 PM Post #6
Member Posts: 19 OS: XP	Hope you had fun with the firewoks! : ) I believe that my comp was used as a server for warez... Everything was hidden in C:\documents\psyklops\Complete folder. The problem was taht the folder was hidden. Is it possible to reveal such a file on my computer again in the future? scratches head --------------------------------------------------------- ewido security suite - Scan report --------------------------------------------------------- + Created on: 6:13:04 PM, 7/4/2005 + Report-Checksum: 75676CDB + Scan result: C:\Documents and Settings\psyklops\Complete\1st Security Agent v6.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\1st Security Agent with 1st Screen Lock.v6.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\1st Security Agent with IE Internet Security.v6.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\3D Formula 1 Screensaver v1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\3d Studio Max 7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\3d Ultra Pinball Thrillride.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\3DMark 2005 Pro.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ABBYY FineReader Professional Edition 7.0.0.1007.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Ability Office v4.9.000.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ACD Systems Canvas X Build 899.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Acronis True ImageTrue Image Server 8.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ActiveState Expect.v1.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Adobe GoLive CS2 8.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Adobe Illustrator CS.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Adobe PageMaker 7.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Advanced Security Administrator v10.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\AdvancedPicHunter 20.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Adware Spyware Removal 5.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\AdwareX Eliminator 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\AirStrike 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Alias Maya Unlimited v6.5 for Windows.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\AlienAbduction 1200.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\All Swish Products.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ALO Audio CD Ripper 1.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ALO Audio CD Ripper v1.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Anti-[bleep] .v7.0.6.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\AnyDVD 4.5.7.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\AnyDVD 5.1.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ApBackUp 2.5.1591.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Apollo DVD Copy 4.20.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Apollo DVD Copy 4.3.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Apollo DVD Copy v4.3.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Apycom Java Menus and Buttons v5.00.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Ashampoo Photo Commander v3.50.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Ashampoo WinOptimizer Platinum Suite 2 1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Ashampoo WinOptimizer Platinum Suite 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ASPMaker v4.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Avast Professional 4.5.546.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Avast Professional 4.5.561.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Baby Album, Basic.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Batch Script Processor 3.08 for AutoCAD.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Battlefield 2 Reloaded iSO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Battlefield 2 Reloaded.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Battlefield 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Black Pirate Fs 1.0 2005 Sneaky Pro.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Blaze DVD Copy 3.5.9.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Blaze DVD Copy v3.5.9.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Blaze Media Pro 5.18.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Blindwrite 5.2.10.142.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Borland C++ Builder Enterpris.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Broken Cross Disk Manager v3.62 Pro + Re.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\BurnerSoft Easy DVD Shrink 3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\CA eTrust EZ Antivirus 2005 7.0.7.9.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Catalyst SocketTools Visual Edition v4.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Celemony Melodyne Uno 1.1.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Cheetah Commandline Burner 1.21.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Cinderella Man (Good Quality).zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Circuitmaker 2000.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Clean Disk Security v7.45.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\CleanCenter 1.34.60.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ClockShop Lite v1.1.0.363.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Commandos 3 Destination Berlin.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Corel Designer Technical Suite v12.0 ful.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Corel Designer Technical Suite.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\CorelDRAWТ Graphics Suite 12.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DefencePlus 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Dekart Logon v2.20.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Digital Light & Color Picture Window Pro.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DivX 6.0 Pro.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Downtime Manager v4.8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DSL Speed 2.08.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DVD Encoder 2.11.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DVD Region-CSS Free 5.58.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DvdComposer v1.0.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DVDComposer v1.03.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DVDFab Platinum 2.52.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\DVDIdle Pro 5.58.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Easy DVD CD Burner 3.0.51.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Easy DVD CD Burner v3.0.51.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\eMule 0.46a.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\EShopper Deluxe v2.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Eudora Automation Tool v2.0.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\EVEREST Professional 1.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\EVEREST Ultimate Edition 2005 2.01.347.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Farstone VirtualDrive v9.0 Incl Serial.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Final Fantasy 8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Firegraphic 8.0.803.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Flash Renamer 4.8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\FolderShine v1.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Foxit PDF Reader 1.3.2 Build 0701 Beta.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\FTP Voyager 12.1.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\FTPEditor Pro 3.2.2.435.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Game XP 1.5.6.29.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\GameBoost 1.6.20.2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Gangsters 2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Genie Backup Manager Professi.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\GMail Drive 1.0.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Golden Keywords v4.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\GrabFile 3.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Grand Theft Auto San Andreas PC iSO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Grand Theft Auto San Andreas [PC].zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\GroundControl 3.32.176.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Hacker 2005 The Broken Link.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Halflife 2 iSO EMPORIO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Hidden Cameras 2.11.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Hitman 3 Contracts.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\HomeRoom v1.11.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\HWDirect 1.66.0.25.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\IE Password v1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Indecent Proposal softEROTICA.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Installshield 10.5 Premier.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Internet Download Manager 4.05.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\IP-Tools 2.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\iPodSoft iPod Agent v1.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\IPodSoft MarkAble v1.1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Ipswitch WS_FTP Professional 2006.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Jay-Z - The Red Album.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Jumeogi Unda DVD Rip Xvid.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Jumeogi Unda.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Kaspersky Antivirus Personal.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Kicking And Screaming SVCD.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Kingdia Dvd Ripper Professional 2.4.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Kingdia DVD Ripper Professional 2.4.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Kingdom of Heaven Xvid.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Kingdom of Heaven.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Klonsoft MP3 to WAV Converter v2.50.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Learn to play Guitar - GCHGA unit2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Limewire Pro 4.8.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\LinkStash 1.6.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Longhorn Transformation Pack 10.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Longhorn Transformation Pack 10.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Magic ISO Maker 4.5.116.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\MagicTweak 2.80.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\MaxPayne I.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Medal Of Honor European Assault PS2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Medal Of Honor European Assault.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\MediaMonkey v2.4.1.872.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Microsoft AntiSpyware 1.0.613 Beta 1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Microsoft Windows Longhorn 50.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Midnight Club 3 DUB Edition W-ALL.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\MindHunters Xvid.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\MindHunters.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Mr. & Mrs. Smith Xvid.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Mr. & Mrs. Smith.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Nero Media Player 1.4.0.25.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Newsleecher - V2.3 Final.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\No 1 Video Converter 3.8.8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Nvidia nTune 2005 Retail.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\nVidia nTune 2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\OkPress 2.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\OpenOffice.org 2.1 Beta for Windows (Snapshot Build 1.9.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PartitionMagic 8.05.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PC Auto Shutdown v1.6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PC OMR v6.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PC Repair - V2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PC Repair 2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PCBoost v3.6.20.2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PDF Filler Pilot 1.18.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PDF Filler Pilot 1.22.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PDF Maker Pilot v1.22 Cracked.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PECompact 2.60.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pendulum - Hold Your Colour (2005).zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Personal Internet Phone Equipment 2.72.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PerspecX version 1.0 i.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Photobuilder Platinum Version 5.01.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PhotoWatermark Pro 6.0.5.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PhotoWatermark Professional v6.0.5.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pink Floyd - Full Discography.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pinnacle Studio Plus 9.4.3.56.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pinnacle TitleDeko Pro 2.0.1634.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Plato DVD Ripper 1.2 & Plato DVD Ripper.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Polybytes PolyView 4.251.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pop up Blocker Pro v7.0.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pop-Up Stopper Professional v1.8.1000.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Post Impact DVD Rip Xvid French.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Post Impact.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PowerPoint2DVD v2.24.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Privacy Shield 3.0.4.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Profab_Elite_with_Laser v7.3.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pure CD Ripper 3.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Pure Motion Edit Studio Pro v5.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\PureBeautyMag.Daily.Issue.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Quake III - Urban Terror 3.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Raxco PerfectDisk 7.0 Build 42.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Registry Repair 1.42.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Remote Installer v1.3.74.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\River Past Audio Converter Pro 6.2.0.50.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\RiverPast Screen Recorder Pro - V6.2.0.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Robbie Williams - Life Thru a Lens.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Roxio Easy Media Creator 7.5.2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Roxio Easy Media Creator 7.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\RSS Captor Pro 2.5 Pro.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\S.C.A.R. - Squadra Corse Alfa Romeo iSO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Sadie Sen PhotoSHOOT.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\SapphicEROTICA.Daily.Issue.05.06.08.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Serv-U FTP Server 6.1.0.1.2 Corporate Edition.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Serv-U FTP Server v6.1.0.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Shakira - Tour Of The Mongoose, Intervie.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Shuric Scan v1.15.242.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Shuric Scan.v1.67 Cracked.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\SILVERRUN ModelSphere 2.3 Keygen.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Sims 2 University.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Sin City Xvid.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Sin City.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Sinner GigAlarm v1.270 Keygen.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Skype 1.3.0.59 for Windows + vSkype 1.0.0.35 Beta.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Small Business Publisher v2.0.05.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Smart USB 1.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Smart Wallpaper Lite v3.0.0.873 Cracked.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\SmartFTP v1.5.988.29.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Sony Sound Forge 8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Still Life [PC].zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Super Collapse II Platnuim 1.0.0.12.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Super Collapse II Platnuim v1.0.0.12 Cracked.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Super Video Converter v1.8.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Super Video Joiner 1.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Super Video Joiner v1.9.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Super Video Splitter v1.7.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\SureClean Professional v2.0.1000.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\SWF Image Creator v1.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Symantec Norton Ghost V9.0 ISO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Taxi 3 Extreme Rush (Pc) iSO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Texas Instruments Derive 6.10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\The Hitchhikers Guide To The Galaxy Div.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\The Longest Yard (2005).zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\The Longest Yard SVCD.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\The Settlers IV.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Throttle v6.6.20.2005.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Tork Prehistoric Punk USA XBOX DVD.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Torrent Search Expert 1.02.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Track Mania.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Ulead.MPEG-4.Plug-in.for.VideoStudio.9.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Uplink Hacker Elite.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Uru Ages Beyond Myst ISO.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Veign Seeker 2.0.0.20.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Veign Seeker v2.0.0.20.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Version Notes Manager 1.0.1.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Version Notes Manager.v1.01 Cracked.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\VideoCharge Professional v3.12 Cracked.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Vika.and.Mario NUDE.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Virtualfem.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Warez P2P 2.8 .zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Web Download Pro 1.2.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Webroot Spysweeper V4.0.0 (build 286) Be.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Windows ME GE.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Windows Server 2003.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\WinRAR 3.50 Beta 6.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\WM Recorder 10.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Wumpscut - Embryodead.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\X Video Joiner 1.9.5.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\XnView 1.80.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\Zend Studio 3.5.1Client.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Complete\ZoneLabs ZoneAlarm Pro 5.5.062.004.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Cookies\psyklops@adopt.specificclick[2].txt -> Spyware.Cookie.Specificclick : Cleaned with backup C:\Documents and Settings\psyklops\Incomplete\T-872159-Adobe PhotoShop 9.0 CS2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Local Settings\Temporary Internet Files\Content.IE5\3BXL191Y\stat[1].htm -> TrojanDownloader.Agent.e : Cleaned with backup C:\Documents and Settings\psyklops\Shared\Adobe PhotoShop 9.0 CS2 Final.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Shared\Adobe Photoshop CS2 9.0.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Documents and Settings\psyklops\Shared\Adobe Photoshop CS2.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Program Files\winupdates\a.zip/Setup.exe -> Worm.VB.an : Cleaned with backup C:\Program Files\winupdates\winupdates.exe -> Worm.VB.an : Cleaned with backup C:\RECYCLER\S-1-5-21-854245398-412668190-1417001333-500\Dc23.exe -> Spyware.Hijacker.Generic : Cleaned with backup C:\RECYCLER\S-1-5-21-854245398-412668190-1417001333-500\Dc28.exe -> TrojanDownloader.Small.awa : Cleaned with backup C:\RECYCLER\S-1-5-21-854245398-412668190-1417001333-500\Dc29.exe -> TrojanDownloader.Small.aux : Cleaned with backup C:\RECYCLER\S-1-5-21-854245398-412668190-1417001333-500\Dc30.exe -> TrojanDownloader.Small.atl : Cleaned with backup C:\RECYCLER\S-1-5-21-854245398-412668190-1417001333-500\Dc33.exe -> Trojan.Crypt.c : Cleaned with backup C:\WINDOWS\avrack.ini:abyzb -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\avrack.ini:mndpo -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\control.ini:qoqjo -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\control.ini:xrdln -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\desktop.ini:vicyzr -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\desktop.ini:wohsk -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\iTouch.ini:dsuiz -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\msdfmap.ini:ggzdt -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\ODBC.INI:otxav -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\ODBCINST.INI:jivtj -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\SchedLgU.Txt:wyrocq -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\system.ini:tdsrv -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\system32\maxd1.exe -> Dialer.Generic : Cleaned with backup C:\WINDOWS\system32\zolker001.dll -> TrojanDownloader.Agent.pi : Cleaned with backup C:\WINDOWS\vb(2).ini:ayiim -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\vb(2).ini:ceabt -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\vb.ini:ayiim -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\vbaddin.ini:fquqt -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\vbaddin.ini:hwdmf -> Spyware.Ipyn : Cleaned with backup C:\WINDOWS\Winamp(2).ini:egivy -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\Winamp(2).ini:egivyq -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\Winamp.ini:egivy -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\Winamp.ini:egivyq -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\winampa.ini:lqoob -> TrojanDownloader.Agent.ne : Cleaned with backup C:\WINDOWS\winampa.ini:zcfbai -> Trojan.Agent.bi : Cleaned with backup C:\WINDOWS\_default.pif:obqbx -> TrojanDownloader.Agent.ne : Cleaned with backup ::Report End This post has been edited by panzer503: Jul 4 2005, 07:26 PM

Kat View Member Profile	Jul 4 2005, 07:30 PM Post #7
The Kitty Posts: 19,109 OS: XP Pro	wow. Ok, let's see a fresh HJT log, and we'll get you fixed up from there! If you have any P2P type program on that machine, please let me know which one, and I"ll let you know if it's a "safe" one or not. If it's not, we'll uninstall it, and when we get you cleaned up...I'll give you a link to an article that has a list of CLEAN file-sharing programs! And no...I didn't go to fireworks. My girls chose to go with friends, instead. Getting too big, I suppose.

panzer503 View Member Profile	Jul 4 2005, 11:25 PM Post #8
Member Posts: 19 OS: XP	Hi thanks for the reply! I fired up my ei browser and it seems to be working properly. Rescaned using ewido and everything seems to be all clean. Im using both lime wire and winmx. Needlesstosay Im going to be a lil more conservative when I download something like photoshopCS off of limewire again. When I opened up my norton protected files all of the warez were there. When I chose one and checked out its properties, it was only about 850kb. Now I know an average program like that would have been at least 70 to 100MB. How in the heck do they hide all of those programs in something like photoshopCS...? No need to go into detail though. Im sure your busy defeating malware! : ) Sorry for the laggy reply as I was watching fireworks myself in los angeles. That'd be great if you could point me in the general direction of a quality P2P. Thanks!

Kat View Member Profile	Jul 5 2005, 04:22 PM Post #9
The Kitty Posts: 19,109 OS: XP Pro	I'm glad everything is running well again. I honestly don't know the how's as far as how they hide the Malware. You can read this article HERE to find out Clean P2P programs. Congratulations! Your log is now clean! Here are some items that you will want to add to your to-do list: These are some tips to reduce the potential for Spyware/Adware/Virus infection in the future: I would strongly recommend reviewing and installing the following applications if you dont currently have them running on your system: Use Anti-Virus Software It is very important that your computer has Anti-Virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See this link for a listing of some online and stand-alone Anti-Virus programs: Virus, Spyware, and Malware Protection and Removal Resources Update your AntiVirus Software It is imperitive that you update your Anti-Virus software at least once a week (Even more if you wish). If you do not update your Anti-Virus software then it will not be able to catch any of the new variants that may come out. Use a Firewall I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is succeptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly. For a tutorial on Firewalls and a listing of some available ones see the link below: Understanding and Using Firewalls Spyware/Adware Detection and Removal Programs: Understanding Spyware, Browser Hijackers, and Dialers Ad-Aware SE If you suspect that you have spyware installed on your computer, here are instructions on how to setup and use Ad-Aware SE How to use Ad-Aware SE to remove Spyware Spybot S&D If you suspect that you have spyware installed on your computer, here are instructions on how to setup and use Spybot S&D How to use Spybot to remove Spyware I strongly recommend using both of these programs to catch most spyware/adware Prevention Programs: SpywareBlaster -- SpywareBlaster will prevent spyware from being installed. SpywareGuard -- SpywareGuard offers realtime protection from spyware installation attempts. IE/Spyad -- IE/Spyad places over 4000 websites and domains in the IE Restricted list which will severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites. MVPS Hosts File -- The MVPS Hosts File replaces your current HOSTS file with one containing well know ad sites etc. Basically, this prevents your coputer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer. Google Toolbar -- Get the free Google Toolbar to help stop pop up windows. Other Necessary Programs: A More Secure Browser Internet Explorer is not the most secure and best browser. There are safer and better alternatives available. I recommend using Firefox Be sure to also keep up with Windows and IE updates. Windows Security and Critical Updates http://v4.windowsupdate.microsoft.com/en/default.asp Internet Explorer Security and Critical Updates http://www.microsoft.com/windows/ie/default.asp And also see TonyKlein's good advice So how did I get infected in the first place? Update all these Programs Regularly: Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released. Follow this list and your potential for being infected again will reduce dramatically.

Kat View Member Profile	Jul 7 2005, 10:03 AM Post #10
The Kitty Posts: 19,109 OS: XP Pro	Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

« Next Oldest · Virus, Spyware and Trojan Removal · Next Newest »

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Topic Title	Replies / Views	Topic Information
Lavasoft Support (Ad-aware) Browser and Desktop hijacked	0 / 0	30th June 2005 - 07:10 PM panzer503 started - last by panzer503
Virus, Spyware and Trojan Removal Hijacked web browser and desktop [RESOLVED]	12 / 2,147	23rd December 2005 - 09:56 PM bab started - last by therock247uk
Virus, Spyware and Trojan Removal Lost At Sea and been Hijacked [RESOLVED]	6 / 763	22nd February 2008 - 06:55 PM irrover started - last by Rorschach112
Virus, Spyware and Trojan Removal Desktop and Screensaver HiJacked [RESOLVED] 12	16 / 1,681	13th June 2008 - 12:09 PM indngvr started - last by fenzodahl512