Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Am I still infected with 1stBar?


  • Please log in to reply

#1
adydye

adydye

    Member

  • Member
  • PipPip
  • 49 posts
Please have a look....

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 17:41:48 25/10/2006

+ Scan result:



C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0025211.DLL -> Adware.IWon : No action taken.
C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0025212.DLL -> Adware.IWon : No action taken.
C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0025210.dll -> Adware.Minibug : No action taken.
C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0025213.EXE -> Adware.MyWebSearch : No action taken.
C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0025208.DLL -> Downloader.IstBar : No action taken.
C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0025209.DLL -> Downloader.IstBar : No action taken.
:mozilla.10:C:\Recycled\NPROTECT\00000028.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.10:C:\Recycled\NPROTECT\00000029.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.10:C:\Recycled\NPROTECT\00000031.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.11:C:\Recycled\NPROTECT\00000028.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.11:C:\Recycled\NPROTECT\00000029.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.11:C:\Recycled\NPROTECT\00000031.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.11:C:\Recycled\NPROTECT\00000032.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.11:C:\Recycled\NPROTECT\00000033.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.11:C:\Recycled\NPROTECT\00000036.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.12:C:\Recycled\NPROTECT\00000029.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.12:C:\Recycled\NPROTECT\00000031.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.12:C:\Recycled\NPROTECT\00000032.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.12:C:\Recycled\NPROTECT\00000033.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.12:C:\Recycled\NPROTECT\00000036.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.13:C:\Recycled\NPROTECT\00000029.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.13:C:\Recycled\NPROTECT\00000031.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.13:C:\Recycled\NPROTECT\00000032.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.13:C:\Recycled\NPROTECT\00000033.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.13:C:\Recycled\NPROTECT\00000036.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000031.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000032.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000033.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000036.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000037.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000038.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.14:C:\Recycled\NPROTECT\00000053.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000032.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000033.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000036.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000037.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000038.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000053.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000062.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000063.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000064.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000065.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.15:C:\Recycled\NPROTECT\00000066.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000037.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000038.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000053.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000062.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000063.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000064.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000065.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.16:C:\Recycled\NPROTECT\00000066.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000037.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000038.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000053.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000062.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000063.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000064.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000065.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000066.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.17:C:\Recycled\NPROTECT\00000068.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000037.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000038.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000053.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000062.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000063.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000064.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000065.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000066.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.18:C:\Recycled\NPROTECT\00000068.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.19:C:\Recycled\NPROTECT\00000062.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.19:C:\Recycled\NPROTECT\00000063.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.19:C:\Recycled\NPROTECT\00000064.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.19:C:\Recycled\NPROTECT\00000065.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.19:C:\Recycled\NPROTECT\00000066.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.19:C:\Recycled\NPROTECT\00000068.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.20:C:\Recycled\NPROTECT\00000068.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.20:C:\Recycled\NPROTECT\00000069.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.21:C:\Recycled\NPROTECT\00000068.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.21:C:\Recycled\NPROTECT\00000069.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.22:C:\Recycled\NPROTECT\00000069.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.23:C:\Recycled\NPROTECT\00000069.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.23:C:\Recycled\NPROTECT\00000070.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.23:C:\Recycled\NPROTECT\00000071.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.24:C:\Recycled\NPROTECT\00000069.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.24:C:\Recycled\NPROTECT\00000070.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.24:C:\Recycled\NPROTECT\00000071.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.24:C:\Recycled\NPROTECT\00000072.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.25:C:\Recycled\NPROTECT\00000070.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.25:C:\Recycled\NPROTECT\00000071.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.25:C:\Recycled\NPROTECT\00000072.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.25:C:\Recycled\NPROTECT\00000073.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.26:C:\Recycled\NPROTECT\00000070.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.26:C:\Recycled\NPROTECT\00000071.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.26:C:\Recycled\NPROTECT\00000072.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.26:C:\Recycled\NPROTECT\00000073.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.26:C:\Recycled\NPROTECT\00000074.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.27:C:\Recycled\NPROTECT\00000070.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.27:C:\Recycled\NPROTECT\00000071.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.27:C:\Recycled\NPROTECT\00000072.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.27:C:\Recycled\NPROTECT\00000073.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.27:C:\Recycled\NPROTECT\00000074.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.28:C:\Recycled\NPROTECT\00000072.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.28:C:\Recycled\NPROTECT\00000073.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.28:C:\Recycled\NPROTECT\00000074.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.29:C:\Recycled\NPROTECT\00000073.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.29:C:\Recycled\NPROTECT\00000074.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.30:C:\Recycled\NPROTECT\00000074.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.32:C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0024926.OLD -> TrackingCookie.Serving-sys : No action taken.
:mozilla.33:C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0024926.OLD -> TrackingCookie.Serving-sys : No action taken.
:mozilla.34:C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0024926.OLD -> TrackingCookie.Serving-sys : No action taken.
:mozilla.35:C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0024926.OLD -> TrackingCookie.Serving-sys : No action taken.
:mozilla.36:C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0024926.OLD -> TrackingCookie.Serving-sys : No action taken.
:mozilla.6:C:\Recycled\NPROTECT\00000028.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.7:C:\Recycled\NPROTECT\00000028.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.8:C:\Recycled\NPROTECT\00000028.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.9:C:\Recycled\NPROTECT\00000029.MOZ -> TrackingCookie.Serving-sys : No action taken.
:mozilla.30:C:\System Volume Information\_restore{50A0F729-8A07-4332-9EA2-B3D94C713BBB}\RP45\A0024926.OLD -> TrackingCookie.Sitestat : No action taken.


::Report end

Panda Activescan Report:


Incident Status Location

Potentially unwanted tool:application/mywebsearch Not disinfected HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA}
Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\s5x09t2a.default\cookies.txt[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Recycled\NPROTECT\00000093.MOZ[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Recycled\NPROTECT\00000094.MOZ[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Recycled\NPROTECT\00000095.MOZ[.serving-sys.com/]
Spyware:Cookie/Serving-sys Not disinfected C:\Recycled\NPROTECT\00000097.MOZ[.serving-sys.com/]

Logfile of HijackThis v1.99.1
Scan saved at 19:13:04, on 25/10/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\ZONELABS\vsmon.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\atievxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\UStorSrv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\WINNT\FixCamera.exe
C:\WINNT\tsnp2std.exe
C:\WINNT\vsnp2std.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\WLAN\802.11 Wireless LAN\WlanMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINNT\System32\svchost.exe
C:\Documents and Settings\Administrator\My Documents\Setup Files\Spy\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com/
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [FixCamera] C:\WINNT\FixCamera.exe
O4 - HKLM\..\Run: [tsnp2std] C:\WINNT\tsnp2std.exe
O4 - HKLM\..\Run: [snp2std] C:\WINNT\vsnp2std.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Startup: Configuration & Monitor Utility.lnk = C:\Program Files\WLAN\802.11 Wireless LAN\WlanMonitor.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1159286523934
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O20 - Winlogon Notify: ActiveSync - C:\WINNT\SYSTEM32\WcesWlgn.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINNT\system32\HPZipm12.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: UStorage Server Service - OTi - C:\WINNT\system32\UStorSrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINNT\system32\ZONELABS\vsmon.exe

Thanks
Ady
  • 0

Advertisements







Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP