Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

Hijack this log - please help me! :s[RESOLVED]

Started by lauraharley , May 06 2005 06:02 AM

This topic is locked

#16
lauraharley

Posted 07 May 2005 - 10:28 AM

Member

Topic Starter
Member
42 posts

Hiya - took 3 hours but heres the whole scan!

File C:\WINDOWS\system32\idrtrmgr.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\idrtrmgr.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File System Found infected by "SideFind Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "Alexa Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "sais Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "180Solutions Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "kazaa Spyware/Adware" Virus. Action Taken: No Action Taken.
File System Found infected by "ISearchTech.ISTdownloader Spyware/Adware" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\akupd.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\ATPartners.dll infected by "not-a-virus:AdWare.F1Organizer.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\axuninstall.exe infected by "not-a-virus:AdWare.BlazeFind.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\BO2802040113.dll infected by "not-a-virus:AdWare.VirtualBouncer.d" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\dsldbaccess.exe infected by "Trojan.Win32.StartPage.sx" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\j26m0cj1efo.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\KVIF_11.dll infected by "not-a-virus:AdWare.EZula.t" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\KVIF_11.exe infected by "not-a-virus:AdWare.EZula.t" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\lv6u09j9e.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\msdlupd.dll infected by "Trojan-Downloader.Win32.Dyfuca.cu" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken.
File C:\WINDOWS\System32\rpaenh.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\System32\wsaupdater.exe infected by "not-a-virus:AdWare.BlazeFind.a" Virus. Action Taken: No Action Taken.
File C:\DOCUME~1\LAURAH~1\LOCALS~1\Temp\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\DOCUME~1\LAURAH~1\LOCALS~1\Temp\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\DOCUME~1\LAURAH~1\LOCALS~1\Temp\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\DOCUME~1\LAURAH~1\LOCALS~1\Temp\bw2.com infected by "Trojan-Dropper.Win32.Small.of" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\Desktop\hijackthis\backups\backup-20050506-140244-849.dll infected by "not-a-virus:[bleep]-Dialer.Win32.Creazione.l" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\Desktop\hijackthis\l2mfix\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken.
File C:\Documents and Settings\Laura Harley\Desktop\hijackthis\l2mfix.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken.
File C:\Documents and Settings\Laura Harley\Desktop\uninstallers\NLNUninstall.zip infected by "not-a-virus:AdWare.IGetNet.c" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\Local Settings\Temp\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\Local Settings\Temp\aklsp.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\Local Settings\Temp\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\Local Settings\Temp\bw2.com infected by "Trojan-Dropper.Win32.Small.of" Virus. Action Taken: No Action Taken.
File C:\Documents and Settings\Laura Harley\My Documents\uni\Uni Year 1\vlad files\Flash_Video_Exporter.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.
File C:\j2sdk1.4.2_06\demo\applets\BarChart\BarChart.class tagged as not-a-virus:JavaClass.Chart. No Action Taken.
File C:\j2sdk1.4.2_06\demo\plugin\applets\BarChart\BarChart.class tagged as not-a-virus:JavaClass.Chart. No Action Taken.
File C:\Program Files\Common Files\Java\Update\Base Images\j2sdk1.4.2-b28\demos.zip tagged as not-a-virus:JavaClass.Chart. No Action Taken.
File C:\RECYCLER\NPROTECT\00001100. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001101. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001102. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001103. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001104. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001105. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001106. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001107. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001108. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001109. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001110. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001111. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001112. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001113. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001114. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001115. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001116. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001216. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001217. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001219. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001220. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001221. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001222. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001223. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001225. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001226. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001227. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001228. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001229. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001230. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001231. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001232. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001234. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001235. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00001236. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00005164. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00005165. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00126100. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00137835. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00137838. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00137839. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00137844. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00137897. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00137901. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183095. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183102. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183153. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183161. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183174. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183178. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183183. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183210. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183211. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183219. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183220. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183227. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183228. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183259. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183263. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183279. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183370. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00183375. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184273. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184390. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184403. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184465. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184466. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184485. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184500. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184559. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184564. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184565. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184652. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184686. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184705. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184709. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184797. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184846. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184876. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184882. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184913. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184919. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184925. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184949. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00184955. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185051. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185057. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185063. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185069. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185075. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185081. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185092. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185131. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185136. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185142. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185164. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185181. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185191. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185193. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185212. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185213. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185220. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185222. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185235. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185243. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185249. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185250. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185264. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00185305. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186442. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186583. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186584. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186585. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186586. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186587. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186588. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186589. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186590. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186591. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186592. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186593. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186594. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186617. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00186619. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201638. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201767. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201768. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201769. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201770. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201782. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201785. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201789. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201851. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201891. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201900. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201930. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201931. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201932. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201933. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201934. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201935. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201936. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00201964. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202018. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202036. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202039. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202053. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202054. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202055. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202056. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202057. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202058. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202059. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202060. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202061. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202062. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202063. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202064. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202104. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202138. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202180. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202203. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202211. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202213. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202216. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202217. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202324. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202325. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202328. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202329. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202330. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202331. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202332. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202333. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202334. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202335. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202336. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202337. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202338. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202339. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202340. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202341. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202342. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202343. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202344. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202345. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202356. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202369. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202381. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202387. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202408. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202428. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202431. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202433. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202463. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202493. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202499. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202518. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202525. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202541. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202542. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202643. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202644. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202652. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202653. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202702. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202703. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202705. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202706. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202707. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202708. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202709. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202711. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202712. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202713. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202714. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202715. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202716. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202717. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202718. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202720. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202721. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202722. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202754. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202796. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202799. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202838. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202840. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202843. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202882. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00202900. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203118. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203121. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203122. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203127. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203175. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203199. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203203. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203232. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203245. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203263. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203272. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203273. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203288. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203331. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203347. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203348. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203355. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203358. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203362. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203363. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203364. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203365. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203405. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203414. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203449. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203452. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203453. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203519. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203528. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203542. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203544. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203810. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203815. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203836. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203879. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00203987. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204010. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204011. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204012. infected by "BkCln.Unknown" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204052.DLL infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204053.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204079.DLL infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204082.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204168.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204235.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204363.DLL infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204365.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00204390.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\NPROTECT\00205384.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\RECYCLER\S-1-5-21-1858760889-3626113340-3352383230-1005\Dc7.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000009.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000018.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000026.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000041.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000052.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000081.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\System Volume Information\_restore{1B16EE2E-9342-4425-8B41-1D61C85150F7}\RP1\A0000089.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\temp\SAHAgent.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken.
File C:\temp\SAHPackage.exe infected by "not-a-virus:AdWare.Sahat.k" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\CONFLICT.1\HDPlugin1015.dll infected by "not-a-virus:AdWare.Gator.1015" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\DS3.dll infected by "Trojan-Downloader.Win32.Agent.jt" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\gvx143uts9m_wall.exe infected by "Trojan.Win32.Dialer.ba" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx infected by "not-a-virus:AdWare.MediaTickets.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system\UpdInst.exe infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\akupd.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\ATPartners.dll infected by "not-a-virus:AdWare.F1Organizer.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\axuninstall.exe infected by "not-a-virus:AdWare.BlazeFind.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\BO2802040113.dll infected by "not-a-virus:AdWare.VirtualBouncer.d" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\dsldbaccess.exe infected by "Trojan.Win32.StartPage.sx" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\j26m0cj1efo.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\KVIF_11.dll infected by "not-a-virus:AdWare.EZula.t" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\KVIF_11.exe infected by "not-a-virus:AdWare.EZula.t" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\lv6u09j9e.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\msdlupd.dll infected by "Trojan-Downloader.Win32.Dyfuca.cu" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken.
File C:\WINDOWS\system32\rpaenh.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\wsaupdater.exe infected by "not-a-virus:AdWare.BlazeFind.a" Virus. Action Taken: No Action Taken.

I await your response lol!

thanks,

Laura :tazz:

#17
greyknight17

Posted 07 May 2005 - 02:48 PM

Malware Expert

Visiting Consultant
16,560 posts

Hi Laura, that's a lot LOL.

Download KazaaBegone http://www.greyknigh...KazaaBegone.zip. This uninstaller will remove all elements from all Kazaa versions, as well as all of the bundled software that comes with it. Warning: This version has a bug that can cause your Internet connection to be broken when removing New.Net, WebHancer or CommonName. Before using KazaaBegone, download WinsockFix http://www.greyknigh.../WinsockFix.zip just in case you need it (if it breaks your internet connection).

Then go to Add/Remove panel and uninstall these if listed:

180solutions
Kazaa
ISearch
ISTsvc
SideFind

Download FxIstbar but don't run it yet.

The Temp folders should be cleaned out periodically as installation programs and hijack programs leave a lot of junk there. Download CleanUp! http://cleanup.stevengould.org/ (Alternate Link if main link don't work - http://www.greyknigh...spy/Cleanup.exe ) and install it. Don't run it yet.

Boot into Safe Mode and delete the following files (I didn't separate them, but you should be able to tell what files to delete):

C:\WINDOWS\Downloaded Program Files\CONFLICT.1\ - delete whole folder
File C:\WINDOWS\Downloaded Program Files\DS3.dll infected by "Trojan-Downloader.Win32.Agent.jt" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\gvx143uts9m_wall.exe infected by "Trojan.Win32.Dialer.ba" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\Downloaded Program Files\MediaTicketsInstaller.ocx infected by "not-a-virus:AdWare.MediaTickets.a" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system\UpdInst.exe infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\akcore.dll infected by "not-a-virus:AdWare.Coreak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\akrules.dll infected by "Trojan-Downloader.Win32.Agent.bt" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\akupd.dll infected by "Trojan-Downloader.Win32.Agent.br" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\ATPartners.dll infected by "not-a-virus:AdWare.F1Organizer.c" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\axuninstall.exe infected by "not-a-virus:AdWare.BlazeFind.b" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\BO2802040113.dll infected by "not-a-virus:AdWare.VirtualBouncer.d" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\dsldbaccess.exe infected by "Trojan.Win32.StartPage.sx" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\j26m0cj1efo.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\KVIF_11.dll infected by "not-a-virus:AdWare.EZula.t" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\KVIF_11.exe infected by "not-a-virus:AdWare.EZula.t" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\lv6u09j9e.dll infected by "not-a-virus:AdWare.Look2Me.ab" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\msdlupd.dll infected by "Trojan-Downloader.Win32.Dyfuca.cu" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\system32\Process.exe tagged as not-a-virus:RiskWare.Tool.Processor.20. No Action Taken.
File C:\WINDOWS\system32\rpaenh.dll
C:\WINDOWS\system32\idrtrmgr.dll

Empty out your Norton Protect folders NOW. I see a lot of files in there.

Run FxIstbar.exe now.

Run CleanUp! and click on CleanUp! button. When it asks you if you want to logoff, click on Yes.

Restart your computer and go back to normal mode.

Turn off system restore by right clicking on My Computer and go to Properties->System Restore and check the box for Turn off System Restore. Click Apply and then OK. Restart your computer and uncheck the same box to enable System Restore.

Now, see if you can give me all those logs (2 PV logs, VX2Finder, notify.txt, HijackThis).

#18
lauraharley

Posted 07 May 2005 - 04:34 PM

Member

Topic Starter
Member
42 posts

Hey

okay ive done all that and removed and used all cleanup programs, however when i came to do the 2 pv scans the same thing happened with the opening for a split second job and closing before i could imput any commands, also the same thing happened with the notify one aswell.

anyhoo heres the hijack this log aswell as the vx2 one:

Logfile of HijackThis v1.99.1
Scan saved at 23:26:27, on 07/05/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\MsPMSPSv.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
C:\Program Files\EzButton\CPLDBL10.EXE
C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Microsoft Works\MSWorks.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Laura Harley\Desktop\hijackthis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton SystemWorks\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [CeEPOWER] C:\Program Files\TOSHIBA\Power Management\CePMTray.exe
O4 - HKLM\..\Run: [CPLDBL10] C:\Program Files\EzButton\CPLDBL10.EXE
O4 - HKLM\..\Run: [CeEKEY] C:\Program Files\TOSHIBA\E-KEY\CeEKey.exe
O4 - HKLM\..\Run: [TPNF] C:\Program Files\TOSHIBA\TouchPad\TPTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [ccRegVfy] "C:\Program Files\Common Files\Symantec Shared\ccRegVfy.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe
O4 - HKLM\..\Run: [Lexmark 5200 series] "C:\Program Files\Lexmark 5200 series\lxbtbmgr.exe"
O4 - HKLM\..\Run: [LXBTCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXBTtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-bet...all/xscan60.cab
O16 - DPF: {11260943-421B-11D0-8EAC-0000C07D88CF} (iPIX ActiveX Control) - http://www.ipix.com/download/ipixx.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zon...nt.cab30149.cab
O16 - DPF: {288C5F13-7E52-4ADA-A32E-F5BF9D125F98} (CR64Loader Object) - http://www.miniclip....pGameLoader.dll
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.syma...bin/AvSniff.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.co...wnload/cult.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg...l_v1-0-3-24.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.co...ad/MsnPUpld.cab
O16 - DPF: {62475759-9E84-458E-A1AB-5D2C442ADFDE} - http://a1540.g.akama...meInstaller.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupd...b?1093784767852
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.syma...n/bin/cabsa.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zon...ro.cab30149.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.app.../ITDetector.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zon...ss.cab30149.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg...ol_v1-0-3-0.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcaf...484/mcfscan.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by22fd.bay22....ex/HMAtchmt.ocx
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O20 - Winlogon Notify: App Management - C:\WINDOWS\system32\m2ju0c19ef.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: CeEPwrSvc - COMPAL ELECTRONIC INC. - C:\Program Files\TOSHIBA\Power Management\CeEPwrSvc.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\PROGRA~1\NORTON~1\NORTON~2\GHOSTS~2.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: lxbt_device - Lexmark International, Inc. - C:\WINDOWS\System32\lxbtcoms.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~1\SPEEDD~1\nopdb.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

Log for VX2.BetterInternet File Finder (ALL)

Files Found---

Additional Files---

Keys Under Notify---
App Management
crypt32chain
cryptnet
cscdll
igfxcui
ScCertProp
Schedule
sclgntfy
SensLogn
termsrv
wlballoon

Guardian Key--- is called:

Guardian Key--- :

User Agent String---
{895BDFD3-AFE7-0A8C-1CD5-1262116DDA0F}

I have noticed im still experiencing internet explorer manipulation with some stupid search window coming up in addition to my existing one whenever i open a new IE window.

Just wondered if this was a help in the diagnosis? :s

Thanks so much for the help so far!

Laura :tazz:

xxx

#19
greyknight17

Posted 07 May 2005 - 04:46 PM

Malware Expert

Visiting Consultant
16,560 posts

This is getting on my nerves.

I will ask another analyst to help me with this one. He might know why this is happening.

So hold on or check back later/tomorrow.

#20
lauraharley

Posted 07 May 2005 - 05:08 PM

Member

Topic Starter
Member
42 posts

okay thanks so much - sorry to be such a pain! i'll check back soon!

Laura :tazz:

#21
Metallica

Posted 08 May 2005 - 02:29 AM

Spyware Veteran

GeekU Moderator
33,101 posts

Laura,

Can you try something for me?

Move the l2mfix.exe to this folder:
C:\Documents and Settings\Laura Harley

Then click Start > Run > type cmd > OK

The commandprompt should open.
Behind the prompt type l2mfix.exe and click enter.

Let us know if the program will run this way.

Regards,

#22
lauraharley

Posted 08 May 2005 - 04:24 AM

Member

Topic Starter
Member
42 posts

hi, no sorry just says that the file is not an exe or bat file and cannot be opened :s - perhaps i should download it again ? thanks :tazz:

#23
lauraharley

Posted 08 May 2005 - 05:33 AM

Member

Topic Starter
Member
42 posts

grr ive still got a problem with this rundll.exe that keeps crashing the pc - its more annoying than the popups even since i have to restart. is there anyway we could get rid of this please? its driving me mad! thanks :tazz:

#24
Metallica

Posted 08 May 2005 - 05:38 AM

Spyware Veteran

GeekU Moderator
33,101 posts

Can you download and run this file please?

edited out link to exefix - Metallica

Let me know if that helps.
Also reply when you have it, so I can remove the link.
It's on my own site and my bandwith is limited as it is.

Regards,

#25
lauraharley

Posted 08 May 2005 - 05:40 AM

Member

Topic Starter
Member
42 posts

ive downloaded it thanks :tazz:

just double click and run it?

#26
lauraharley

Posted 08 May 2005 - 05:42 AM

Member

Topic Starter
Member
42 posts

ive got a box come up that says:

C:\WINDOWS\TEMP\EXEFIX08.PIF
C:\WINDOWS\System32\autoexec.nt. The systemt file is not suitable for running MS-DOS and Microsoft windows applocations. Choose close to terminate.

Or i can ignore.

What should i do?

thanks, :tazz: