(5/16/05 5:36:07 PM) SPSeHjFix started v1.1.2
(5/16/05 5:36:07 PM) OS: Win98SE A (4.10.2222)
(5/16/05 5:36:07 PM) Language: english
(5/16/05 5:36:07 PM) Win-Path: C:\WINDOWS
(5/16/05 5:36:07 PM) System-Path: C:\WINDOWS\SYSTEM
(5/16/05 5:36:07 PM) Temp-Path: C:\WINDOWS\TEMP\
(5/16/05 5:36:13 PM) Disinfection started
(5/16/05 5:36:13 PM) Bad-Dll(IEP): c:\windows\temp\se.dll
(5/16/05 5:36:13 PM) Searchassistant Uninstaller found: regsvr32 /s /u C:\WINDOWS\SYSTEM\ECCG.DLL
(5/16/05 5:36:13 PM) Searchassistant Uninstaller - Keys Deleted
(5/16/05 5:36:13 PM) UBF: 6 - UBB: 6 - UBR: 23
(5/16/05 5:36:13 PM) FilterKey: HKCR\text/html (deleted)
(5/16/05 5:36:13 PM) FilterKey: HKCR\CLSID\{B8794980-C4C8-11D9-825C-A0F2DDDACC04} (deleted)
(5/16/05 5:36:13 PM) FilterKey: HKLM\SOFTWARE\Classes\text/html (error while deleting)
(5/16/05 5:36:13 PM) FilterKey: HKCR\text/plain (deleted)
(5/16/05 5:36:13 PM) FilterKey: HKCR\CLSID\{B8794980-C4C8-11D9-825C-A0F2DDDACC04} (error while deleting)
(5/16/05 5:36:13 PM) FilterKey: HKLM\SOFTWARE\Classes\text/plain (error while deleting)
(5/16/05 5:36:13 PM) BHO-Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8794981-C4C8-11D9-825C-A0F2B296699F} (deleted)
(5/16/05 5:36:13 PM) BHO-Key: HKCR\CLSID\{B8794981-C4C8-11D9-825C-A0F2B296699F} (deleted)
(5/16/05 5:36:13 PM) Run-Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\sp=rundll32 C:\WINDOWS\TEMP\SE.DLL,DllInstall (deleted)
(5/16/05 5:36:13 PM) UBF: 4 - UBB: 5 - UBR: 22
(5/16/05 5:36:13 PM) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\temp\se.dll/spage.html
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, HomeOldSP: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Search, SearchAssistant: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\temp\se.dll/spage.html
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, HomeOldSP: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant: about:blank
(5/16/05 5:36:13 PM) Stealth-String found: C:\WINDOWS\RSAGEDT.GID
(5/16/05 5:36:13 PM) File added to delete: c:\windows\system\eccg.dll
(5/16/05 5:36:13 PM) File added to delete: c:\windows\temp\se.dll
(5/16/05 5:36:13 PM) File added to delete: c:\windows\rsagedt.gid
(5/16/05 5:36:13 PM) Reboot
(5/16/05 5:49:23 PM) SPSeHjFix 2nd Step
(5/16/05 5:49:23 PM) Stealth-String not present. Disinfection succesfully
(5/16/05 5:49:38 PM) Cleaned
(5/16/05 5:36:07 PM) SPSeHjFix started v1.1.2
(5/16/05 5:36:07 PM) OS: Win98SE A (4.10.2222)
(5/16/05 5:36:07 PM) Language: english
(5/16/05 5:36:07 PM) Win-Path: C:\WINDOWS
(5/16/05 5:36:07 PM) System-Path: C:\WINDOWS\SYSTEM
(5/16/05 5:36:07 PM) Temp-Path: C:\WINDOWS\TEMP\
(5/16/05 5:36:13 PM) Disinfection started
(5/16/05 5:36:13 PM) Bad-Dll(IEP): c:\windows\temp\se.dll
(5/16/05 5:36:13 PM) Searchassistant Uninstaller found: regsvr32 /s /u C:\WINDOWS\SYSTEM\ECCG.DLL
(5/16/05 5:36:13 PM) Searchassistant Uninstaller - Keys Deleted
(5/16/05 5:36:13 PM) UBF: 6 - UBB: 6 - UBR: 23
(5/16/05 5:36:13 PM) FilterKey: HKCR\text/html (deleted)
(5/16/05 5:36:13 PM) FilterKey: HKCR\CLSID\{B8794980-C4C8-11D9-825C-A0F2DDDACC04} (deleted)
(5/16/05 5:36:13 PM) FilterKey: HKLM\SOFTWARE\Classes\text/html (error while deleting)
(5/16/05 5:36:13 PM) FilterKey: HKCR\text/plain (deleted)
(5/16/05 5:36:13 PM) FilterKey: HKCR\CLSID\{B8794980-C4C8-11D9-825C-A0F2DDDACC04} (error while deleting)
(5/16/05 5:36:13 PM) FilterKey: HKLM\SOFTWARE\Classes\text/plain (error while deleting)
(5/16/05 5:36:13 PM) BHO-Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B8794981-C4C8-11D9-825C-A0F2B296699F} (deleted)
(5/16/05 5:36:13 PM) BHO-Key: HKCR\CLSID\{B8794981-C4C8-11D9-825C-A0F2B296699F} (deleted)
(5/16/05 5:36:13 PM) Run-Key: HKLM\Software\Microsoft\Windows\CurrentVersion\Run\sp=rundll32 C:\WINDOWS\TEMP\SE.DLL,DllInstall (deleted)
(5/16/05 5:36:13 PM) UBF: 4 - UBB: 5 - UBR: 22
(5/16/05 5:36:13 PM) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\temp\se.dll/spage.html
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, HomeOldSP: about:blank
deleted: HKCU\Software\Microsoft\Internet Explorer\Search, SearchAssistant: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\temp\se.dll/spage.html
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, HomeOldSP: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Search, SearchAssistant: about:blank
(5/16/05 5:36:13 PM) Stealth-String found: C:\WINDOWS\RSAGEDT.GID
(5/16/05 5:36:13 PM) File added to delete: c:\windows\system\eccg.dll
(5/16/05 5:36:13 PM) File added to delete: c:\windows\temp\se.dll
(5/16/05 5:36:13 PM) File added to delete: c:\windows\rsagedt.gid
(5/16/05 5:36:13 PM) Reboot
(5/16/05 5:49:23 PM) SPSeHjFix 2nd Step
(5/16/05 5:49:23 PM) Stealth-String not present. Disinfection succesfully
(5/16/05 5:49:38 PM) Cleaned
but still my destop background is showing me error as a fatal error in IE
has occured at 0028:C0011E36 in VXD VMM(01) + 00010E36 Error was caused by Trojan-spy.HTML.smithfraud.c
please let me know what are the next steps to be followed