dear Armodeluxe
I'm sorry it took me a long time to reply. I've been really busy with school so I really had a hard time er... waking up very early in the morning to do the downloads
but before anything else I got to finally move out the "dead file" i was talking about in Problem no.2. I was able to run the "wormkiller" program and it said i was clean. But now I've got another problem. While surfing the net, I'd often find my mouse cursor wandering off randomly and start clicking and blinking. It would take almost one minute before the "possession " would stop. Also, i think i still have prob. 5. I was thinking maybe there is a hardware problem w/ my modem but what do you think?
anyhoo...
i ran the new program but as it was loading up the "worm pattern" thingy...it failed
but it still continued on scanning.
here's the log:
/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
|
http://www.trendmicro.com |
\--------------------------------------------------------------/
2005-08-04, 06:58:59, Auto-clean mode specified.
2005-08-04, 06:58:59, Running scanner "C:\Documents and Settings\Administrator\Desktop\Sysclean\TSC.BIN"...
2005-08-04, 06:59:17, Scanner "C:\Documents and Settings\Administrator\Desktop\Sysclean\TSC.BIN" has finished running.
2005-08-04, 06:59:17, TSC Log:
2005-08-04, 06:59:19, An error occurred while scanning file "C:\Documents and Settings\Administrator\ntuser.dat": Access is denied.
2005-08-04, 06:59:19, An error occurred while scanning file "C:\Documents and Settings\Administrator\ntuser.dat.LOG": Access is denied.
2005-08-04, 06:59:41, An error occurred while scanning file "C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-08-04, 06:59:41, An error occurred while scanning file "C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-08-04, 07:05:14, An error occurred while scanning file "C:\Documents and Settings\LocalService\NTUSER.DAT": Access is denied.
2005-08-04, 07:05:14, An error occurred while scanning file "C:\Documents and Settings\LocalService\ntuser.dat.LOG": Access is denied.
2005-08-04, 07:05:14, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-08-04, 07:05:14, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-08-04, 07:05:15, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2005-08-04, 07:05:15, An error occurred while scanning file "C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Access is denied.
2005-08-04, 07:05:15, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-08-04, 07:05:15, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-08-04, 07:17:37, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2005-08-04, 07:17:38, Could not set file for reading on "C:\WINDOWS\MEMORY.DMP": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\AD-AWARE.EXE-2ED3360E.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\ALOGSERV.EXE-00FDB330.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\CALC.EXE-02CD573A.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\CLEANUP.EXE-1B0F5664.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\CONTROL.EXE-013DBFB5.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\DEFRAG.EXE-273F131E.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\DEP.EXE-0665AE3D.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\DFRGNTFS.EXE-269967DF.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\ENCARTA.EXE-34B4AB23.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\EVILLYRICS.EXE-19359D02.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\FIREFOX.EXE-28641590.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\FLASHGOT.EXE-0911268A.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPCTR.EXE-3862B6F5.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\HELPSVC.EXE-2878DDA2.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\HH.EXE-2D1A70B3.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\HIJACKTHIS.EXE-2AF68D7A.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\IEXPLORE.EXE-27122324.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\IPLAYER.EXE-175B4628.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\JUSCHED.EXE-03DB2BA9.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\LOGONUI.EXE-0AF22957.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\MSMSGS.EXE-2B6052DE.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\NBA2005.EXE-16929B61.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\NEROCHECK.EXE-092C6DFA.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\NOTEPAD.EXE-336351A9.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\OSA.EXE-2CD63980.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\RASAUTOU.EXE-18B88A68.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-15E942E0.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-26DA8C9B.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-2A94BB85.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-44787B80.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\RUNDLL32.EXE-4A5A9D78.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\SSSTARS.SCR-2D6FC20D.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.COM-0471CE2B.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\SYSCLEAN.EXE-172E02F5.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\TASKMGR.EXE-20256C55.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\THGUARD.EXE-1F492078.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\TROJANHUNTER.EXE-2953146E.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\TSC.BIN-240E814B.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\VSMAIN.EXE-03F6B22C.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\VSSTAT.EXE-270F4533.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\WINAMP.EXE-0D0189CA.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\WINAMPA.EXE-0536E33F.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\WINHLP32.EXE-2C18E975.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\WINWORD.EXE-29F5CB89.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\WINZIP32.EXE-335422C1.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\YMSGR_TRAY.EXE-256366BA.pf": Access is denied.
2005-08-04, 07:19:04, Could not set file for reading on "C:\WINDOWS\Prefetch\YPAGER.EXE-31587640.pf": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2005-08-04, 07:20:12, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2005-08-04, 07:20:13, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2005-08-04, 07:21:05, Running scanner "C:\Documents and Settings\Administrator\Desktop\Sysclean\VSCANTM.BIN"...
2005-08-04, 07:47:25, Files Detected:
Copyright © 1990 - 2004 Trend Micro Inc.
Report Date : 8/4/2005 07:21:07
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 757 (105699 Patterns) (2005/08/02) (275700)
Command Line: C:\Documents and Settings\Administrator\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\Administrator\Desktop\Sysclean
C:\Documents and Settings\Administrator\My Documents\My Webs\stolenfromjen.htm [VBS_SORACI.A]
C:\Documents and Settings\Basuraman\Desktop\Leo\HTML\jenranches.tripod[2] [VBS_SORACI.A]
114944 files have been read.
114944 files have been checked.
56622 files have been scanned.
93010 files have been scanned. (including files in archived)
6 files containing viruses.
Found 13 viruses totally.
Maybe 0 viruses totally.
Stop At : 8/4/2005 07:47:25
---------*---------*---------*---------*---------*---------*---------*---------*
2005-08-04, 07:47:25, Files Clean:
Copyright © 1990 - 2004 Trend Micro Inc.
Report Date : 8/4/2005 07:21:07
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 757 (105699 Patterns) (2005/08/02) (275700)
Command Line: C:\Documents and Settings\Administrator\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\Administrator\Desktop\Sysclean
Success Clean [ JAVA_BYTEVER.A]( 1) from C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\285.jar-1f53e5b7-26a1c3ab.zip,(Dummy.class)
Success Clean [ JAVA_BYTEVER.G]( 1) from C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\archive.jar-32b0cf43-3533ccb0.zip,(Beyond.class)
Success Clean [ JAVA_BYTEVER.A]( 1) from C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\classload.jar-78f63e81-4b002ae4.zip,(Installer.class)
Success Clean [ JAVA_BYTEVER.R]( 1) from C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-3c936701-50e6db37.zip,(javainstaller\InstallerApplet.class)
Success Clean [ VBS_SORACI.A]( 1) from C:\Documents and Settings\Administrator\My Documents\My Webs\stolenfromjen.htm
Success Clean [ VBS_SORACI.A]( 1) from C:\Documents and Settings\Basuraman\Desktop\Leo\HTML\jenranches.tripod[2]
114944 files have been read.
114944 files have been checked.
56622 files have been scanned.
93010 files have been scanned. (including files in archived)
6 files containing viruses.
Found 13 viruses totally.
Maybe 0 viruses totally.
Stop At : 8/4/2005 07:47:25 26 minutes 17 seconds (1576.77 seconds) has elapsed.
---------*---------*---------*---------*---------*---------*---------*---------*
2005-08-04, 07:47:25, Clean Fail:
Copyright © 1990 - 2004 Trend Micro Inc.
Report Date : 8/4/2005 07:21:07
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 757 (105699 Patterns) (2005/08/02) (275700)
Command Line: C:\Documents and Settings\Administrator\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\Administrator\Desktop\Sysclean
114944 files have been read.
114944 files have been checked.
56622 files have been scanned.
93010 files have been scanned. (including files in archived)
6 files containing viruses.
Found 13 viruses totally.
Maybe 0 viruses totally.
Stop At : 8/4/2005 07:47:25 26 minutes 17 seconds (1576.77 seconds) has elapsed.
---------*---------*---------*---------*---------*---------*---------*---------*
2005-08-04, 07:47:25, Scanner "C:\Documents and Settings\Administrator\Desktop\Sysclean\VSCANTM.BIN" has finished running.
thanks