[crazyeagle]

ok BIG problem now ........



ok i reboot and the note pad thing came up .....

i saved it ..
got a error box saying RobotaskBarlcon.exe unable to locate componet


went to sign in to aol to send report to this comp to post here........

AOL will not connect now says cant find TCP/IP


help can post no more logs if i cant connect

[Advertisements]

I need you to run a small command script. Please copy the entire contents of the codebox below into Notepad:

• Open Notepad
• Copy the contents of the codebox below using CTRL C

@echo off
if exist C:\output.txt del C:\output.txt
echo LISTING FILES, PLEASE BE PATIENT.
dir /s C:\_OTScanIt > C:\output.txt
start NOTEPAD C:\output.txt

• Now return to Notepad and use CTRL V to paste the script
• Verify that you have pasted the complete script
• Save the Notepad file to your Desktop as Script.cmd using Save as Type: All files
• Locate Script.cmd on your desktop
• Double click to run.

After it has run, it will open a notepad file. Please post the contents of that file back here.

[RatHat]

I need you to run a small command script. Please copy the entire contents of the codebox below into Notepad:

• Open Notepad
• Copy the contents of the codebox below using CTRL C

@echo off
if exist C:\output.txt del C:\output.txt
echo LISTING FILES, PLEASE BE PATIENT.
dir /s C:\_OTScanIt > C:\output.txt
start NOTEPAD C:\output.txt

• Now return to Notepad and use CTRL V to paste the script
• Verify that you have pasted the complete script
• Save the Notepad file to your Desktop as Script.cmd using Save as Type: All files
• Locate Script.cmd on your desktop
• Double click to run.

After it has run, it will open a notepad file. Please post the contents of that file back here.

[crazyeagle]

ok sorry for the wait ...
as i said in post i did b4 i can not connect to inter net anymore on thatcomputer so have to do it all by hand now

i did as you asked so i will type in the results as cant get the file to come over her to paste

i hope i do this right and dont miss anything

*** praying i do this right ***



Volume in drive C is HP_PAVILION
Volume Serial number is B4FE-4312
Directory of C:\Documents and settings\HP_OWNER\Desktop\fix
09/27/2008 02:18am <DIR> OTScanit
0 File(s) 0bytes
total files listed
0 files 0 bytes
1 Dir(s) 160,754,692,096,bytes free





ok this is what came back did i do it right ??

[RatHat]

That didn't come through as I expected. Could you have a look in your C: drive and find the folder _OTScanIt

Open that folder and let me know what is in it.

Also, do you have a thumb drive that you could use to transfer files?

Regards,
RatHat

[crazyeagle]

all that is isn it is 1 folder titled moved files in there are 69 files and 65 folders

no thumb drive ( what ever that is ) lol

but i uninstalled then reinstalled aol all ok now ( not all ok only got AIM back but back to whhere i was b4

Edited by crazyeagle, 27 September 2008 - 10:28 PM.

[RatHat]

OK That is good to hear.

A thumb drive or USB drive is one way of transferring files from one computer to another.

What about CD's can you burn a CD with files from your good computer and copy them onto the bad computer?

[crazyeagle]

yes BUT only in save mode cd will only red in safe mode
is that ok ?

[RatHat]

Yes! Good.

OK, download the following to your good computer:

• DrWeb-CureIt
• Firefox 3

Burn the two files to the CD, then transfer them to the bad computer while it is in Safe Mode.

While you are still in Safe Mode, Scan with DrWeb-CureIt as follows:

• Double-click on drweb-cureit.exe to start the program. An "Express Scan of your PC" notice will appear.
• Under "Start the Express Scan Now", Click "OK" to start. This is a short scan that will scan the files currently running in memory and when something is found, click the Yes button when it asks you if you want to cure it.
• Once the short scan has finished, Click Options > Change settings
• Choose the "Scan tab" and UNcheck "Heuristic analysis"
• Back at the main window, click "Select drives" (a red dot will show which drives have been chosen)
• Then click the "Start/Stop Scanning" button (green arrow on the right) and the scan will start.
• When done, a message will be displayed at the bottom advising if any viruses were found.
• Click "Yes to all" if it asks if you want to cure/move the file.
• When the scan has finished, look if you can see the icon next to the files found. If so, click it, then click the next icon right below and select "Move incurable".
  (This will move it to the C:\Documents and Settings\userprofile\DoctorWeb\Quarantine folder if it can't be cured)
• Next, in the Dr.Web CureIt menu on top, click file and choose save report list.
• Save the DrWeb.csv report to your desktop.
• Exit Dr.Web Cureit when done.
• Important! Reboot your computer because it could be possible that files in use will be moved/deleted during reboot.
• After reboot, post the contents of the log from Dr.Web in your next reply. (You can use Notepad to open the DrWeb.cvs report)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


When you are back in Normal Mode, install Firefox 3 and see if it will connect to the internet and allow you to post the results from Dr.Web.

[crazyeagle]

just to let u know im here did all but scan still going been 2 hrs now found 25 so far will post when done :-)

[RatHat]

Looks like we could be getting somewhere!

Though I would still say that you should start thinking about getting new Windows installation disks for the future.

[crazyeagle]

i have HP home on now just found out my father in law has a factory win xp pro disk would it be wise to install it on bad comp ?

[crazyeagle]

still scaning i pronise i will post when it done ( if it ever done ) lol

[crazyeagle]

ok did all ( kinda )

ok ran the drweb thing saved and all did a restart
i have NO OPTION to log into administrator
only as hp_owner

went to desktop
none of the files i saved are there ....
i did a scan .. found them on desk top
of HP_Administrator restarted
in feild it says HP_Owner i typed in HP_Administrator
it will not let me log in now only as HP owner

[crazyeagle]

ok now after all this time im getting ready to give up .....

now im back to it not connecting at all

wont even connect to AIM
i installed firefox wont connect
but now it cant find the tcp/ip thing


what else could go wrong

[crazyeagle]

ok hope it works



aolconnfix.exe;C:\;Trojan.PWS.Gamania.origin;Incurable.Moved.;
setup.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\CCU_SUITE_1.0.48.1;Probably BACKDOOR.Trojan;;
aolcinst.exe\core.cab\GTDOWNAO_106.ocx;C:\Documents and Settings\All Users\Application Data\AOL Downloads\lpkw_setupSTUS\comps\coach\aolcinst.exe;Adware.Gdown;;
aolcinst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\lpkw_setupSTUS\comps\coach;Archive contains infected objects;Moved.;
tssetup.exe\data002;C:\Documents and Settings\All Users\Application Data\AOL Downloads\lpkw_setupSTUS\comps\tpspd\tssetup.exe;Probably DLOADER.Trojan;;
tssetup.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\lpkw_setupSTUS\comps\tpspd;Archive contains infected objects;Moved.;
config.000;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1;Probably BACKDOOR.Trojan;;
avinst.exe\data004;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps\avinst.exe;Probably BACKDOOR.Trojan;;
avinst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps;Archive contains infected objects;Moved.;
data004\data007;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps\fwinst.exe\data004;Probably BACKDOOR.Trojan;;
data004;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps\fwinst.exe;Archive contains infected objects;;
fwinst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps;Archive contains infected objects;Moved.;
pwinst.exe\data005;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps\pwinst.exe;Probably BACKDOOR.Trojan;;
data008\data006;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps\pwinst.exe\data008;Probably BACKDOOR.Trojan;;
data008;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps\pwinst.exe;Archive contains infected objects;;
pwinst.exe;C:\Documents and Settings\All Users\Application Data\AOL Downloads\ssc_suite_installer_1.10.7.1\comps;Archive contains infected objects;Moved.;
ComboFix.exe\32788R22FWJFW\C.bat;C:\Documents and Settings\HP_Owner\Desktop\fix\ComboFix.exe;Probably BATCH.Virus;;
ComboFix.exe\32788R22FWJFW\List-C.bat;C:\Documents and Settings\HP_Owner\Desktop\fix\ComboFix.exe;Probably BATCH.Virus;;
ComboFix.exe\32788R22FWJFW\psexec.cfexe;C:\Documents and Settings\HP_Owner\Desktop\fix\ComboFix.exe;Program.PsExec.171;;
ComboFix.exe;C:\Documents and Settings\HP_Owner\Desktop\fix;Archive contains infected objects;Moved.;
MyFunCardsSetup2.0.3.20.exe;C:\Documents and Settings\HP_Owner\My Documents;Trojan.MulDrop.1326;Deleted.;
BallistikSetup-dm[1].exe;C:\Downloads;Adware.TryMedia;;
PizzaFrenzySetup-dm[1].exe;C:\Downloads;Adware.TryMedia;;
SplashSetup-dm[1].exe;C:\Downloads;Adware.TryMedia;;
KillWind.exe;C:\hp\bin;Tool.ProcessKill;;
SpyInst.exe\ssengine.dll;C:\hp\tmp\src\SpyInst.exe;Probably MULDROP.Trojan;;
SpyInst.exe;C:\hp\tmp\src;Archive contains infected objects;Moved.;
config.000;C:\Program Files\AOL\Installers\AOL Safety & Security Center 1.0;Probably BACKDOOR.Trojan;;
avinst.exe\data004;C:\Program Files\AOL\Installers\AOL Safety & Security Center 1.0\comps\avinst.exe;Probably BACKDOOR.Trojan;;
avinst.exe;C:\Program Files\AOL\Installers\AOL Safety & Security Center 1.0\comps;Archive contains infected objects;Moved.;
data004\data007;C:\Program Files\AOL\Installers\AOL Safety & Security Center 1.0\comps\fwinst.exe\data004;Probably BACKDOOR.Trojan;;
data004;C:\Program Files\AOL\Installers\AOL Safety & Security Center 1.0\comps\fwinst.exe;Archive contains infected objects;;
fwinst.exe;C:\Program Files\AOL\Installers\AOL Safety & Security Center 1.0\comps;Archive contains infected objects;Moved.;
data017\data001;C:\Program Files\AWS\WeatherBug\Install\WxBugSetup60b6.04.0.9m.EXE\data017;Adware.MyWay;;
data017;C:\Program Files\AWS\WeatherBug\Install\WxBugSetup60b6.04.0.9m.EXE;Archive contains infected objects;;
WxBugSetup60b6.04.0.9m.EXE;C:\Program Files\AWS\WeatherBug\Install;Archive contains infected objects;Moved.;
TSSetup.exe\data002;C:\Program Files\Common Files\aolback\Comps\tpspd\TSSetup.exe;Probably DLOADER.Trojan;;
TSSetup.exe;C:\Program Files\Common Files\aolback\Comps\tpspd;Archive contains infected objects;Moved.;
GTDownAO_106.ocx;C:\Program Files\Common Files\AolCoach\en_en;Adware.Gdown;;
mcinst.exe;C:\Program Files\Common Files\McAfee\Installer;Probably BACKDOOR.Trojan;;
mpfpinst.exe\data007;C:\Program Files\McAfee.com\mpfpinst\mpfpinst.exe;Probably BACKDOOR.Trojan;;
mpfpinst.exe;C:\Program Files\McAfee.com\mpfpinst;Archive contains infected objects;Moved.;
44F7184D-9F2E-4C52-B6EF-416BF3;C:\Program Files\Microsoft AntiSpyware\Quarantine\1F5751DB-81CA-4C58-950B-FDA069;Probably DLOADER.Trojan;;
74D2C786-E162-4949-B478-CC6117;C:\Program Files\Microsoft AntiSpyware\Quarantine\C0CC8C5E-911E-4648-9242-DDF925;Adware.NewDotNet;;
DB4C6595-3E1D-4E16-A10B-777A1B;C:\Program Files\Microsoft AntiSpyware\Quarantine\FA2E9F07-8C03-48A3-9087-D30E5B;Adware.NewDotNet;;
data015\data386;C:\Program Files\Online Services\AOL90US\comp01.000\data015;Probably DLOADER.Trojan;;
data015;C:\Program Files\Online Services\AOL90US\comp01.000;Archive contains infected objects;;
comp01.000;C:\Program Files\Online Services\AOL90US;Archive contains infected objects;Moved.;
stream001\uninstll.exe;C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe\\Windows\access\EarthLink Setup.msi\stream001;Probably STPAGE.Trojan;;
stream001;C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe\\Windows\access\EarthLink Setup.msi;Archive contains infected objects;;
\Windows\access\EarthLink Setup.msi;C:\Program Files\Online Services\EarthLink\EarthLink Setup.exe\\Windows\access;Archive contains infected objects;;
EarthLink Setup.exe;C:\Program Files\Online Services\EarthLink;Archive contains infected objects;Moved.;
stream001\uninstll.exe;C:\Program Files\Riverdeep\Offers\ELPPC\EarthlinkInstaller.exe\\Windows\access\EarthLink Setup.msi\stream001;Probably STPAGE.Trojan;;
stream001;C:\Program Files\Riverdeep\Offers\ELPPC\EarthlinkInstaller.exe\\Windows\access\EarthLink Setup.msi;Archive contains infected objects;;
\Windows\access\EarthLink Setup.msi;C:\Program Files\Riverdeep\Offers\ELPPC\EarthlinkInstaller.exe\\Windows\access;Archive contains infected objects;;
EarthlinkInstaller.exe;C:\Program Files\Riverdeep\Offers\ELPPC;Archive contains infected objects;Moved.;
sdcmon.dll;C:\Program Files\support.com\bin;Probably DLOADER.Trojan;;
tgupdate.exe;C:\Program Files\support.com\bin;Probably DLOADER.Trojan;;
data025\_tv91D3.tmp;C:\Program Files\support.com\temp\fullagent.exe\data025;Probably DLOADER.Trojan;;
data025;C:\Program Files\support.com\temp\fullagent.exe;Archive contains infected objects;;
data047\_tv8B13.tmp;C:\Program Files\support.com\temp\fullagent.exe\data047;Probably DLOADER.Trojan;;
data047;C:\Program Files\support.com\temp\fullagent.exe;Archive contains infected objects;;
fullagent.exe;C:\Program Files\support.com\temp;Archive contains infected objects;Moved.;
NNSUNA3_88.exe;C:\Program Files\The Great Mahjong;Adware.NewDotNet;;
backup-20080926-001956-387.dll;C:\Program Files\Trend Micro\HijackThis\backups;Adware.MyWay;;
backup-20080926-001956-409.dll;C:\Program Files\Trend Micro\HijackThis\backups;Adware.Coupons;;
YSB_toolBar.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\(full version) hack zone.com;Trojan.Isbar.390;Incurable.Moved.;
YSB_toolBar.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\(full version) zone spades hack;Trojan.Isbar.390;Incurable.Moved.;
install.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\(livestream) xxx dwarf 43;Adware.Advert;;
YSB_toolBar.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\hack zone.com;Trojan.Isbar.390;Incurable.Moved.;
YSB_toolBar.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\hack zone.com (1);Trojan.Isbar.390;Incurable.Moved.;
YSB_toolBar.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\zone spades hack;Trojan.Isbar.390;Incurable.Moved.;
YSB_toolBar.exe.vir;C:\QooBox\Quarantine\C\DOCUME~1\HP_Owner\My Documents\Unzipped\~~ zone spades hack;Trojan.Isbar.390;Incurable.Moved.;
a.zip.vir\Movie.exe;C:\QooBox\Quarantine\C\Program Files\MsUpdate\a.zip.vir;Trojan.MulDrop.2716;;
a.zip.vir;C:\QooBox\Quarantine\C\Program Files\MsUpdate;Archive contains infected objects;Moved.;
class.exe;C:\sweeney\bass4;Trojan.MulDrop.4163;Deleted.;
A0422915.dll;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP607;Adware.Starware;;
A0422918.DLL;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP607;Adware.MyWay;;
A0422919.DLL;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP607;Adware.MySearch;;
A0422920.DLL;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP607;Adware.Msearch;;
A0422926.old;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP607;Adware.MegaSearch.origin;;
A0452506.DLL;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP614;Adware.MyWay;;
A0452510.ocx;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP614;Adware.Coupons;;
A0452589.dll;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP614;Adware.Comet;;
A0452594.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP614;Adware.Xbarre;;
A0452639.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP615;Probably BATCH.Virus;;
A0452648.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP615;Probably BATCH.Virus;;
A0452681.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP616;Probably BATCH.Virus;;
A0452690.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP616;Probably BATCH.Virus;;
A0452704.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP616;Probably BATCH.Virus;;
A0452711.EXE;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP617;Program.PsExec.170;;
A0452715.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP617;Probably BATCH.Virus;;
A0453206.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP617;Probably BATCH.Virus;;
A0453211.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP617;Probably BATCH.Virus;;
A0453543.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Probably BATCH.Virus;;
A0453575.EXE;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Program.PsExec.170;;
A0453578.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Probably BATCH.Virus;;
A0457632.exe\data041;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0457632.exe;Adware.Aws;;
A0457632.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0457651.exe\core.cab\GTDOWNAO_106.ocx;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0457651.exe;Adware.Gdown;;
A0457651.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460771.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Trojan.PWS.Gamania.origin;Incurable.Moved.;
A0460772.exe\core.cab\GTDOWNAO_106.ocx;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460772.exe;Adware.Gdown;;
A0460772.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460773.exe\data002;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460773.exe;Probably DLOADER.Trojan;;
A0460773.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460774.exe\data004;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460774.exe;Probably BACKDOOR.Trojan;;
A0460774.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
data004\data007;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460775.exe\data004;Probably BACKDOOR.Trojan;;
data004;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460775.exe;Archive contains infected objects;;
A0460775.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460776.exe\data005;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460776.exe;Probably BACKDOOR.Trojan;;
data008\data006;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460776.exe\data008;Probably BACKDOOR.Trojan;;
data008;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460776.exe;Archive contains infected objects;;
A0460776.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460777.exe\32788R22FWJFW\C.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460777.exe;Probably BATCH.Virus;;
A0460777.exe\32788R22FWJFW\List-C.bat;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460777.exe;Probably BATCH.Virus;;
A0460777.exe\32788R22FWJFW\psexec.cfexe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460777.exe;Program.PsExec.171;;
A0460777.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460778.exe\ssengine.dll;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460778.exe;Probably MULDROP.Trojan;;
A0460778.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460779.exe\data004;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460779.exe;Probably BACKDOOR.Trojan;;
A0460779.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
data004\data007;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460780.exe\data004;Probably BACKDOOR.Trojan;;
data004;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460780.exe;Archive contains infected objects;;
A0460780.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
data017\data001;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460781.EXE\data017;Adware.MyWay;;
data017;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460781.EXE;Archive contains infected objects;;
A0460781.EXE;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460782.exe\data002;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460782.exe;Probably DLOADER.Trojan;;
A0460782.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460783.exe\data007;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460783.exe;Probably BACKDOOR.Trojan;;
A0460783.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
stream001\uninstll.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460784.exe\\Windows\access\EarthLink Setup.;Probably STPAGE.Trojan;;
stream001;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460784.exe\\Windows\access\EarthLink Setup.;Archive contains infected objects;;
\Windows\access\EarthLink Setup.msi;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460784.exe\\Windows\access;Archive contains infected objects;;
A0460784.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
stream001\uninstll.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460785.exe\\Windows\access\EarthLink Setup.;Probably STPAGE.Trojan;;
stream001;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460785.exe\\Windows\access\EarthLink Setup.;Archive contains infected objects;;
\Windows\access\EarthLink Setup.msi;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460785.exe\\Windows\access;Archive contains infected objects;;
A0460785.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
data025\_tv91D3.tmp;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460786.exe\data025;Probably DLOADER.Trojan;;
data025;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460786.exe;Archive contains infected objects;;
data047\_tv8B13.tmp;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460786.exe\data047;Probably DLOADER.Trojan;;
data047;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618\A0460786.exe;Archive contains infected objects;;
A0460786.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Archive contains infected objects;Moved.;
A0460787.exe;C:\System Volume Information\_restore{E7B21304-9105-4D9D-AFAC-E7088FDCC6A0}\RP618;Trojan.MulDrop.4163;Deleted.;
aab.exe;C:\WINDOWS;Trojan.MulDrop.4313;Deleted.;
deskband.exe;C:\WINDOWS;Trojan.MulDrop.4313;Deleted.;
stream001\myBarSp.exe;C:\WINDOWS\Downloaded Installations\{F39F6BE2-B639-4ACE-B930-24A7B43DB7BA}\Halloween Haunts.msi\stream001;Adware.MyWay;;
stream001;C:\WINDOWS\Downloaded Installations\{F39F6BE2-B639-4ACE-B930-24A7B43DB7BA}\Halloween Haunts.msi;Archive contains infected objects;;
Halloween Haunts.msi;C:\WINDOWS\Downloaded Installations\{F39F6BE2-B639-4ACE-B930-24A7B43DB7BA};Archive contains infected objects;Moved.;
stream001\uninstll.exe;C:\WINDOWS\Installer\16e272fc.msi\stream011\\Windows\access\EarthLink Setup.msi\stream001;Probably STPAGE.Trojan;;
stream001;C:\WINDOWS\Installer\16e272fc.msi\stream011\\Windows\access\EarthLink Setup.msi;Archive contains infected objects;;
\Windows\access\EarthLink Setup.msi;C:\WINDOWS\Installer\16e272fc.msi\stream011\\Windows\access;Archive contains infected objects;;
stream011;C:\WINDOWS\Installer\16e272fc.msi;Archive contains infected objects;;
16e272fc.msi;C:\WINDOWS\Installer;Archive contains infected objects;Moved.;
sunny_37.exe\data008;C:\WINDOWS\system32\sunny_37.exe;Trojan.Tsup;;
sunny_37.exe;C:\WINDOWS\system32;Archive contains infected objects;Moved.;