Ahh when i downloaded spyware doctor, it said it had antivirus on it but i guess it wasn't good enough of a replacement. I accidently put it all on quarantine but i deleted everything in the quarantine folder. I'm not getting the pop-up anymore however there were some things that weren't deleted. Here is my Avira report:
AntiVir PersonalEdition Classic
Report file date: Wednesday, March 19, 2008 01:42
Scanning for 1157825 virus strains and unwanted programs.
Licensed to: Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform: Windows XP
Windows version: (Service Pack 2) [5.1.2600]
Username: SYSTEM
Computer name: TJ
Version information:
BUILD.DAT : 270 15603 Bytes 9/19/2007 13:32:00
AVSCAN.EXE : 7.0.6.1 290856 Bytes 8/23/2007 18:16:29
AVSCAN.DLL : 7.0.6.0 49192 Bytes 8/16/2007 17:23:51
LUKE.DLL : 7.0.5.3 147496 Bytes 8/14/2007 20:32:47
LUKERES.DLL : 7.0.6.1 10280 Bytes 8/21/2007 17:35:20
ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 7/18/2007 19:27:15
ANTIVIR1.VDF : 7.0.3.2 5447168 Bytes 3/7/2008 21:08:03
ANTIVIR2.VDF : 7.0.3.3 2048 Bytes 3/7/2008 21:08:04
ANTIVIR3.VDF : 7.0.3.49 297472 Bytes 3/18/2008 21:08:04
AVEWIN32.DLL : 7.6.0.75 3334656 Bytes 3/18/2008 21:08:05
AVWINLL.DLL : 1.0.0.7 14376 Bytes 2/26/2007 15:36:26
AVPREF.DLL : 7.0.2.2 25640 Bytes 7/18/2007 12:39:17
AVREP.DLL : 7.0.0.1 155688 Bytes 4/16/2007 18:16:24
AVPACK32.DLL : 7.6.0.3 360488 Bytes 3/18/2008 21:08:05
AVREG.DLL : 7.0.1.6 30760 Bytes 7/18/2007 12:17:06
AVARKT.DLL : 1.0.0.20 278568 Bytes 8/28/2007 17:26:33
AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 7/18/2007 12:10:18
NETNT.DLL : 7.0.0.0 7720 Bytes 3/8/2007 16:09:42
RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 8/7/2007 17:38:13
RCTEXT.DLL : 7.0.62.0 86056 Bytes 8/21/2007 17:50:37
SQLITE3.DLL : 3.3.17.1 339968 Bytes 7/23/2007 14:37:21
Configuration settings for the scan:
Jobname..........................: Complete system scan
Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: D:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium
Start of the scan: Wednesday, March 19, 2008 01:42
The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
Scan process 'MediaServer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'RtlWake.exe' - '1' Module(s) have been scanned
Scan process 'Compaq Connections.exe' - '1' Module(s) have been scanned
Scan process 'cm3_tray.exe' - '1' Module(s) have been scanned
Scan process 'lxbkbmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'lxbkbmgr.exe' - '1' Module(s) have been scanned
Scan process 'pctsTray.exe' - '1' Module(s) have been scanned
Scan process 'RTHDCPL.EXE' - '1' Module(s) have been scanned
Scan process 'pctsSvc.exe' - '1' Module(s) have been scanned
Scan process 'pctsAuxs.exe' - '1' Module(s) have been scanned
Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned
Scan process 'Bwsvc.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'LEXPPS.EXE' - '1' Module(s) have been scanned
Scan process 'LEXBCES.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
36 processes with 36 modules were scanned
Start scanning boot sectors:
Boot sector 'C:\'
[NOTE] No virus was found!
Boot sector 'D:\'
[NOTE] No virus was found!
Starting to scan the registry.
C:\WINDOWS\system32\drvkat.dll
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
[INFO] The file was moved to '4856a84f.qua'!
C:\WINDOWS\system32\drvkat.dll
[DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
The registry was scanned ( '34' files ).
Starting the file scan:
Begin scan in 'C:\' <PRESARIO>
C:\hiberfil.sys
[WARNING] The file could not be opened!
C:\pagefile.sys
[WARNING] The file could not be opened!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\0B312472.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813aa8b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\11A55B1B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821aa80.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15313459.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813aa87.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\153B324E.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813aa89.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\153E5C4B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813aa8c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15453043.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814aac7.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\159D1DE2.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4819aad2.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15A047DF.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821aad6.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15AA45D4.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821aad8.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15AD6FD0.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821ab25.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15B443C9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4822ab27.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\15B76DC6.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4822ab2b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\16C16071.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4823ab2d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\17810750.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab2e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\21DF6138.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab29.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\45694673.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab2d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\506E4A7C.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab28.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\50F90272.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab29.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C170339.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4811ab3c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C4666FC.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab3d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C530EED.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4815ab3d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C6A34D4.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab3e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C7047A8.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab3e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C7371A4.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab3f.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C7432C9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49af14a0.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C761BA1.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab40.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C7A459D.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49af14a1.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C801996.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab40.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5C8B58B0.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab41.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5CDC7256.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab41.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5CE91A48.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab42.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5DBC2087.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4822ab44.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5DCB6B50.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4823ab48.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5E7B468E.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab4c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5E854483.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab51.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5EF02E0D.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab52.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5EF45809.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab53.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5EFA2C02.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab56.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F017FFB.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4810ab57.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F0E27EC.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4810ab58.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F1151E9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4811ab59.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F1B4FDE.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4811ab5a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F2877D0.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4812ab5b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F351FC1.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813ab5c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F4F6FA4.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab5f.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F636B8F.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab5f.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F7D3B72.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab60.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F8D0D60.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab62.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5F9E5F4E.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4819ab63.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5FA75D43.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821ab64.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5FB40535.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4822ab64.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5FBB592E.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4822ab65.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5FC55723.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4823ab65.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5FD27F15.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab66.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\5FDF2706.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '499c1487.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60101CD0.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4811ab55.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\603E689E.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813ab56.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6041129B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab56.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60443C97.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab57.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60476693.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab59.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\604B1090.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab5a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60516489.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4815ab5a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60583881.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4815ab5b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\605E0C7A.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49ad14bc.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60613677.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab5c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60680A6F.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49ae14bd.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60720865.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab5d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60753261.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49af14be.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\607C065A.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab5e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\608F0244.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab5f.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60C74C07.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4823ab62.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60D473F9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab63.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60DA47F2.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab65.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60E11BEA.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab65.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60EE43DC.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab67.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\60FB6BCE.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab67.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\610B3DBC.exe
[DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.BF Backdoor server programs
[INFO] The file was moved to '4810ab69.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61153BB1.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4811ab6a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\611C0FAA.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49a9148b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\612263A3.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4812ab6b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6129379B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49aa148c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61365F8D.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813ab6c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\613C3386.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813ab6d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61405D82.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab6d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6146317B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49ac148e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\614D0574.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4814ab6e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61560369.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4815ab6f.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\615D5762.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49ad1490.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61675557.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab70.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6181253A.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab71.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\61E310CF.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab71.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\62000AAE.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4810ab75.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\62105C9C.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4811ab75.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\63DD33C4.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab77.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\63E407BD.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab77.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\63E731B9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab78.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\65CE21A2.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4823ab7a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\65D14B9E.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4824ab7a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AB3651B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4822ab87.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6ABD6311.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '499a1468.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AE3020B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab88.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AEA5604.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4825ab89.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AED0000.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '499d146a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AF029FD.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab89.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AF353F9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab8a.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6AF77DF6.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4826ab8b.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6B007BEB.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4810ab8c.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6E731CFB.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab90.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\6E7F6C12.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4817ab91.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\713F3F0B.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4813ab7d.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\718874BB.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4818ab7e.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\726120A8.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab7f.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\729B3B8D.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4819ab80.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\72A26860.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821ab80.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\72A93C59.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821ab81.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\72AC6655.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '49991462.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\73CF7F16.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4823ab82.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\75612B5C.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4816ab85.qua'!
C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus\Quarantine\77A752B9.exe
[DETECTION] Contains detection pattern of the Windows virus W32/Parite
[INFO] The file was moved to '4821ab88.qua'!
C:\Documents and Settings\Compaq_Owner\Desktop\SmitfraudFix.exe
[DETECTION] Contains detection pattern of the dropper DR/Tool.Reboot.F.44
[INFO] The file was moved to '4849ad5b.qua'!
C:\Program Files\HP Games\Cake Mania\CakeMania-WT.exe
[DETECTION] Contains suspicious code HEUR/Malware
[INFO] The file was moved to '484bbb16.qua'!
C:\Program Files\HP Games\Diner Dash\Diner Dash.exe
[DETECTION] Contains suspicious code HEUR/Crypted
[INFO] The file was moved to '484ebb28.qua'!
C:\Program Files\Online Services\PeoplePC\ISP5900\Branding\ppal3ppc.exe
[DETECTION] Contains detection pattern of the dropper DR/Agent.aeh
[INFO] The file was moved to '4841bdcd.qua'!
C:\WINDOWS\system32\drivers\sptd.sys
[WARNING] The file could not be opened!
Begin scan in 'D:\' <PRESARIO_RP>
End of the scan: Wednesday, March 19, 2008 04:00
Used time: 2:18:15 min
The scan has been done completely.
14047 Scanning directories
610027 Files were scanned
122 viruses and/or unwanted programs were found
2 Files were classified as suspicious:
0 files were deleted
0 files were repaired
124 files were moved to quarantine
0 files were renamed
3 Files cannot be scanned
609905 Files not concerned
22563 Archives were scanned
3 Warnings
127 Notes
And this my second Hijackthis file:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:59:25 PM, on 3/19/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\BUFFALO\Client Manager3\bwsvc\bwsvc.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TVersity\Media Server\MediaServer.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe
C:\Program Files\Lexmark X1100 Series\lxbkbmon.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avcenter.exe
C:\PROGRA~1\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {42B18F05-59FA-495F-BB30-D6B82070B108} - (no file)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: hpWebHelper Class - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - C:\WINDOWS\pchealth\helpctr\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\plugin\WebHelper.dll
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [MSDrive] rundll32.exe C:\WINDOWS\system32\drvjuf.dll,startup
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: ClientManager3.lnk = C:\Program Files\BUFFALO\Client Manager3\cm3_tray.exe
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\5577497\Program\Compaq Connections.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: awtrsst - awtrsst.dll (file missing)
O20 - Winlogon Notify: yvojmbvy - yvojmbvy.dll (file missing)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Bwsvc - BUFFALO INC. - C:\Program Files\BUFFALO\Client Manager3\bwsvc\bwsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: TVersityMediaServer - Unknown owner - C:\Program Files\TVersity\Media Server\MediaServer.exe
--
End of file - 5849 bytes
This is all of my information so far but i'm not sure what to do from here.
This topic is locked
Sign In
Create Account
