Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Issues with Trojans/Worms/Spyware


  • This topic is locked This topic is locked

#16
jkeiths4

jkeiths4

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Error message - Silent Runners cannot access file services critical to proper script operation. Said to be sure that Cryptographic Servies is running - I did, it was and I restarted it to be sure. Tried again - same result.

Help....

Thanks!

Lynn
  • 0

Advertisements


#17
jkeiths4

jkeiths4

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
The 16 Bit error message comes up any time you log in to an account. If I click Ignore I can go on and so far have not seen any problems as a result. I am attaching the error messages from Silent Runners and 16 Bit.

Attached Files


  • 0

#18
Trevuren

Trevuren

    Old Dog

  • Retired Staff
  • 18,699 posts
I need you to download MWav to a convenient location.

This scan might take around 3+ hours to finish when set to scan everything.
I need you to run MWav by double-clicking on mwav.exe.
Put a check next to the below items before scanning:
  • Memory
  • Startup Folders
  • Drive - All Local Drives
  • Folder - then click "browse" to change the directory to C: (default is C:\Windows)
  • Registry
  • System Folders
  • Services
  • Include Sub-Directory
  • Scan All Files
Please make sure ALL of these are checked, then press the Scan button. This typically will take hours to complete.

**NOTE*** Sometimes MWav will pause and it appears to be finished, but it isn't done. Just let it run until it says it's complete.

On the bottom portion of the window, you will see the lower panel where MWav is listing "infected items", please highlight everything in that lower panel and copy them by holding CTRL + C then paste it here. The whole log will be extremely BIG so there is no way to post the log. I just need the infected items list.

Regards,

Trevuren

  • 0

#19
jkeiths4

jkeiths4

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Here are the results from the MicroWorld scan.

Tue Jun 21 17:16:45 2005 => ***** Scanning Registry and File system for Adware/Spyware *****
Tue Jun 21 21:17:17 2005 => System found infected with DyFuCA Spyware/Adware ({AA4939C3-DECA-4A48-A454-97CD587C0EF5})! Action taken: No Action Taken.
Tue Jun 21 21:17:17 2005 => Object "DyFuCA Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:17 2005 => System found infected with DyFuCA Spyware/Adware ({EEE4A2E5-9F56-432F-A6ED-F6F625B551E0})! Action taken: No Action Taken.
Tue Jun 21 21:17:17 2005 => Object "DyFuCA Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:18 2005 => Offending value found in HKLM\Software\dsi !!!
Tue Jun 21 21:17:18 2005 => Object "DealHelper Spyware/Adware" found in File System! Action Taken: No Action Taken.




Tue Jun 21 21:17:19 2005 => Offending value found in HKCU\Software\powerscan !!!
Tue Jun 21 21:17:19 2005 => Object "powerscan Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending value found in HKCU\appevents\schemes\apps\quicken !!!
Tue Jun 21 21:17:19 2005 => Offending Folder C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\quicken present...
Tue Jun 21 21:17:19 2005 => Object "Quicken Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending Folder C:\PROGRA~1\ezula present...
Tue Jun 21 21:17:19 2005 => Object "eZula Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending Folder C:\PROGRA~1\myway present...
Tue Jun 21 21:17:19 2005 => Object "myway Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending value found in HKCU\Software\updater !!!
Tue Jun 21 21:17:20 2005 => Object "updater Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending value found in HKLM\Software\PERFECTNAV !!!
Tue Jun 21 21:17:20 2005 => Object "PerfectNav Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending value found in HKLM\Software\btiein !!!
Tue Jun 21 21:17:20 2005 => Object "btiein.Toolbar Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending Folder C:\PROGRA~1\save present...
Tue Jun 21 21:17:20 2005 => Object "WhenU Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => System found infected with altnet Spyware/Adware (smdat32a.sys)! Action taken: No Action Taken.
Tue Jun 21 21:17:20 2005 => Object "altnet Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:39 2005 => System found infected with CWS.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken.
Tue Jun 21 21:17:39 2005 => Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => System found infected with iSearch Spyware/Adware (patch.exe)! Action taken: No Action Taken.
Tue Jun 21 21:17:40 2005 => Object "iSearch Spyware/Adware" found in File System! Action Taken: No Action Taken.


Tue Jun 21 21:17:40 2005 => ***** Scanning Registry for errors created because of Adware/Spyware *****
Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\ISTactivex.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\MediaAccX.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\popcaploader.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\QDow.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\SbCIe028.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\StartFirstControl.ocx". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\EGCOMSERVICE2.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\EGCOMSERVICE_1042.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\nethv32.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\version.txt". Action Taken: No Action Taken.

Tue Jun 21 21:17:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe". Action Taken: No Action Taken.

Tue Jun 21 21:17:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\ctdrvins.exe". Action Taken: No Action Taken.

Tue Jun 21 21:17:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\Downloaded Program Files\QDow.dll". Action Taken: No Action Taken.

Thanks, Trevuren!
  • 0

#20
jkeiths4

jkeiths4

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Oops, thought the scan was done but it isn't. I'll send you another copy of results when it had finished.

Sorry,
Lynn
  • 0

#21
jkeiths4

jkeiths4

    Member

  • Topic Starter
  • Member
  • PipPip
  • 13 posts
Here are the results from the scan. It took 5 hours and 49 minutes!!

Tue Jun 21 17:16:45 2005 => ***** Scanning Registry and File system for Adware/Spyware *****
Tue Jun 21 21:17:17 2005 => System found infected with DyFuCA Spyware/Adware ({AA4939C3-DECA-4A48-A454-97CD587C0EF5})! Action taken: No Action Taken.
Tue Jun 21 21:17:17 2005 => Object "DyFuCA Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:17 2005 => System found infected with DyFuCA Spyware/Adware ({EEE4A2E5-9F56-432F-A6ED-F6F625B551E0})! Action taken: No Action Taken.
Tue Jun 21 21:17:17 2005 => Object "DyFuCA Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:18 2005 => Offending value found in HKLM\Software\dsi !!!
Tue Jun 21 21:17:18 2005 => Object "DealHelper Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending value found in HKCU\Software\powerscan !!!
Tue Jun 21 21:17:19 2005 => Object "powerscan Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending value found in HKCU\appevents\schemes\apps\quicken !!!
Tue Jun 21 21:17:19 2005 => Offending Folder C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\quicken present...
Tue Jun 21 21:17:19 2005 => Object "Quicken Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending Folder C:\PROGRA~1\ezula present...
Tue Jun 21 21:17:19 2005 => Object "eZula Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:19 2005 => Offending Folder C:\PROGRA~1\myway present...
Tue Jun 21 21:17:19 2005 => Object "myway Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending value found in HKCU\Software\updater !!!
Tue Jun 21 21:17:20 2005 => Object "updater Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending value found in HKLM\Software\PERFECTNAV !!!
Tue Jun 21 21:17:20 2005 => Object "PerfectNav Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending value found in HKLM\Software\btiein !!!
Tue Jun 21 21:17:20 2005 => Object "btiein.Toolbar Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => Offending Folder C:\PROGRA~1\save present...
Tue Jun 21 21:17:20 2005 => Object "WhenU Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:20 2005 => System found infected with altnet Spyware/Adware (smdat32a.sys)! Action taken: No Action Taken.
Tue Jun 21 21:17:20 2005 => Object "altnet Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:39 2005 => System found infected with CWS.therealsearch Spyware/Adware (waol.exe)! Action taken: No Action Taken.
Tue Jun 21 21:17:39 2005 => Object "CWS.therealsearch Spyware/Adware" found in File System! Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => System found infected with iSearch Spyware/Adware (patch.exe)! Action taken: No Action Taken.
Tue Jun 21 21:17:40 2005 => Object "iSearch Spyware/Adware" found in File System! Action Taken: No Action Taken.


Tue Jun 21 21:17:40 2005 => ***** Scanning Registry for errors created because of Adware/Spyware *****
Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\ISTactivex.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\MediaAccX.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\popcaploader.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\QDow.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\SbCIe028.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\Downloaded Program Files\StartFirstControl.ocx". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\EGCOMSERVICE2.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\EGCOMSERVICE_1042.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\nethv32.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:40 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\ModuleUsage" refers to invalid object "C:\WINNT\System32\version.txt". Action Taken: No Action Taken.

Tue Jun 21 21:17:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe". Action Taken: No Action Taken.

Tue Jun 21 21:17:41 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\system32\ctdrvins.exe". Action Taken: No Action Taken.

Tue Jun 21 21:17:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\Downloaded Program Files\QDow.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:45 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\Downloaded Program Files\ISTactivex.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\Downloaded Program Files\StartFirstControl.ocx". Action Taken: No Action Taken.

Tue Jun 21 21:17:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\Downloaded Program Files\SbCIe028.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\ia.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:46 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\version.txt". Action Taken: No Action Taken.

Tue Jun 21 21:17:47 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\nethv32.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:47 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\EGCOMSERVICE_1042.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:47 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\System32\EGCOMSERVICE2.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:47 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\WINNT\Downloaded Program Files\popcaploader.dll". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GB-EUC-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GB-EUC-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBK-EUC-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBK-EUC-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBpc-EUC-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBpc-EUC-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBT-EUC-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBT-EUC-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\UniGB-UCS2-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\UniGB-UCS2-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\B5pc-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\B5pc-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\UniCNS-UCS2-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\UniCNS-UCS2-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\ETen-B5-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\ETen-B5-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-CNS1-1". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-CNS1-2". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-CNS1-3". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-GB1-3". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-GB1-4". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-Japan1-3". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-Japan1-4". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\Adobe-Korea1-2". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\ETHK-B5-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\ETHK-B5-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBKp-EUC-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\GBKp-EUC-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKdla-B5-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKdla-B5-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKdlb-B5-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKdlb-B5-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKgccs-B5-H". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKgccs-B5-V". Action Taken: No Action Taken.

Tue Jun 21 21:17:49 2005 => Entry "HKLM\Software\Microsoft\Windows\CurrentVersion\SharedDlls" refers to invalid object "C:\Program Files\Common Files\Adobe\fonts\TempCMap\Reqrd\CMaps\HKm314-B5-H". Action Taken: No Action Taken.



Thanks!!!

Lynn
  • 0

#22
Trevuren

Trevuren

    Old Dog

  • Retired Staff
  • 18,699 posts
The results of the scan confirm my suspicions that your system is still clogged with bad stuff. A massive cleanout is required. I NEED you to do all of the following:

Please print out or copy this page to Notepad. Make sure to work through the fixes in the exact order in which they are mentioned below. If there's anything that you don't understand, ask your question(s) before proceeding with the fixes.

1) Please download CWShredder. Download the stand alone version which is free

.Check for Update
.Click Fix.
.Exit CWShredder.
.REBOOT your system


2) I want you to run at least one, and preferably both, of the following FREE online antivirus scanners, making sure that you choose to do a "complete scan" and letting the program fix everything it finds. It is also necessary to REBOOT your system after running each program.

TrendMicro Free Virus Scanner and Panda Software Online Virus Scanner.

3) I would also like you to download and run a free trial version of an anti-trojan program called Trojan Hunter: Trojan Hunter . Let it scan your whole system and remove anything it finds.

REBOOT
your system.

4) I want you to download the most current versionof Ad-Aware and Spybot Search and Destroy, install, configure, update and run them according to the instructions provided below (In my signature panel)

Remember, it is important that you REBOOT your system after having run each one

5) Finally, run HijackThis, click SCAN, produce a LOG and POST it in this thread for review.

Regards,

Trevuren

  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP