Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Help needed with Moneypak virue

Started by Xox , Dec 07 2012 03:50 PM

  • Please log in to reply

#1
Xox
Posted 07 December 2012 - 03:50 PM

Xox

    Member

  • Member
  • PipPip
  • 36 posts
I got the lock-out screen yesterday, with the FBI logo and a ransom demand. On rebooting, same screen came up in my user session. As a reflex, I signed on as a different user and did a system restore (not in safe mode) to 2 days back, and then ran both Avast! (up to date) and then MBAM (week old definitions) scans with network unplugged. Both came back clean.

However, researching on internet it seems that system restore isn't generally enough to get rid of it, and it could be buried deep. I did look at a site (http://botcrawl.com/...alware-removal/) and didn't find any of the files or registry items it suggested looking for. I would appreciate help determining whether it's gone or not.

Thanks.
  • 0

Advertisements

#2
Xox
Posted 07 December 2012 - 06:16 PM

Xox

    Member

  • Topic Starter
  • Member
  • PipPip
  • 36 posts
Taking some advice from another similar thread, I ran ESET and BitDefender online scans. The results are below:

ESET

C:\Users\Dad\AppData\Local\Temp\jar_cache5458571023812026526.tmp Java/Exploit.CVE-2012-4681.W trojan cleaned by deleting - quarantined
C:\Users\Dad\AppData\LocalLow\Sun\Java\Deployment\cache\6.0\59\6beee0bb-7942fbb4 Win32/LockScreen.AOY trojan cleaned by deleting - quarantined


BITDEFENDER


QuickScan 64-bit v0.9.9.118
---------------------------
Scan date: Fri Dec 07 18:42:57 2012
Machine ID: BA1DC52C



No infection found.
-------------------



Processes
---------
(unsigned) IconUtility 4200 C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(unsigned) OpenOffice.org 3.3 4848 C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(unsigned) OpenOffice.org 3.3 4624 C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe

(verified) avast! Antivirus 4528 C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(verified) DataSafeOnline 4288 C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(verified) Dell Dock 4184 C:\Program Files\Dell\DellDock\DellDock.exe
(verified) ezprint.exe 1204 C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
(verified) iTunes 4608 C:\Program Files (x86)\iTunes\iTunesHelper.exe
(verified) Microsoft IntelliPoint 1856 C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(verified) Microsoft Office 2010 4140 C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(verified) Microsoft OneNote 4192 C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(verified) Microsoft Outlook 3388 C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(verified) Microsoft® Windows® Operating System 2144 C:\Windows\explorer.exe
(verified) Microsoft® Windows® Operating System 2056 C:\Windows\System32\dwm.exe
(verified) Microsoft® Windows® Operating System 2424 C:\Windows\System32\rundll32.exe
(verified) Microsoft® Windows® Operating System 4040 C:\Windows\System32\rundll32.exe
(verified) Microsoft® Windows® Operating System 1496 C:\Windows\System32\taskhost.exe
(verified) Printer Device Monitor 3548 C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
(verified) Realtek HD Audio Manager 3336 C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(verified) SUPERAntiSpyware 3812 C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(verified) Windows® Internet Explorer 1180 C:\Program Files\Internet Explorer\iexplore.exe
(verified) Windows® Internet Explorer 1236 C:\Program Files\Internet Explorer\iexplore.exe
(verified) Windows® Internet Explorer 5600 C:\Program Files\Internet Explorer\iexplore.exe
(verified) Windows® Search 8016 C:\Windows\System32\SearchProtocolHost.exe


Autoruns and critical files
---------------------------
(unsigned) ATI Customer Care C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe
(unsigned) Creative Updreg C:\Windows\UpdReg.EXE
(unsigned) EptMon64.dll C:\Windows\System32\EptMon64.dll
(unsigned) IconUtility C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
(unsigned) quickstart.exe C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
(unsigned) QuickTime C:\Program Files (x86)\QuickTime\QTTask.exe
(unsigned) THXAudio C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe
(unsigned) THXCfg64.dll C:\Windows\System32\THXCfg64.dll
(unsigned) Wondershare Studio C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

(verified) Adobe Acrobat C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe
(verified) Adobe Reader and Acrobat Manager C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(verified) Apple Push C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(verified) avast! Antivirus C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(verified) Catalyst® Control Center C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
(verified) DataSafeOnline C:\Program Files (x86)\Dell DataSafe Online\DataSafeOnline.exe
(verified) Dell Dock C:\Program Files\Dell\DellDock\DellDock.exe
(verified) ezprint.exe C:\Program Files (x86)\Lexmark S300-S400 Series\ezprint.exe
(verified) iTunes C:\Program Files (x86)\iTunes\iTunesHelper.exe
(verified) Java™ Platform SE Auto Updater 2 0 C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(verified) Microsoft IntelliPoint C:\Program Files\Microsoft IntelliPoint\ipoint.exe
(verified) Microsoft Office 2010 C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe
(verified) Microsoft Office 2010 c:\program files (x86)\microsoft office\office14\grooveex.dll
(verified) Microsoft Office 2010 C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE
(verified) Microsoft Office 2010 c:\program files\microsoft office\office14\grooveex.dll
(verified) Microsoft OneNote C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(verified) Microsoft® Windows® Operating System c:\windows\system32\userinit.exe
(verified) MobileMe C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
(verified) Printer Device Monitor C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamon.exe
(verified) Realtek HD Audio Manager C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(verified) Softthinks Launcher C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\Launcher.exe
(verified) Steam C:\Program Files (x86)\Steam\steam.exe
(verified) SUPERAntiSpyware C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(verified) Windows® Internet Explorer c:\windows\system32\webcheck.dll
(verified) Windows® Internet Explorer c:\windows\syswow64\webcheck.dll


Browser plugins
---------------
(unsigned) Java™ Platform SE 6 U29 C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin2.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin3.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin4.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin5.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin6.dll
(unsigned) QuickTime Plug-in 7.7 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin7.dll

(verified) Adobe Acrobat C:\Program Files (x86)\Internet Explorer\plugins\nppdf32.dll
(verified) avast! Antivirus c:\program files\alwil software\avast5\aswwebrepie64.dll
(verified) Bitdefender QuickScan C:\Windows\Downloaded Program Files\qsax64.dll
(verified) Bonjour C:\Program Files (x86)\Bonjour\mdnsNSP.dll
(verified) Bonjour C:\Program Files\Bonjour\mdnsNSP.dll
(verified) InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.dll
(verified) InstallShield Update Service C:\Windows\Downloaded Program Files\dwusplay.exe
(verified) Java™ Platform SE 6 U29 C:\Program Files\Java\jre6\bin\jp2ssv.dll
(verified) Microsoft Office 2010 c:\program files\microsoft office\office14\grooveex.dll
(verified) Microsoft Office 2010 C:\Program Files\Microsoft Office\Office14\NPAUTHZ.DLL
(verified) Microsoft Office 2010 c:\program files\microsoft office\office14\urlredir.dll
(verified) Microsoft® CoReXT C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL
(verified) Microsoft® CoReXT C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
(verified) Microsoft® CoReXT C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL
(verified) Microsoft® Windows® Operating System C:\Windows\System32\mswsock.dll
(verified) Microsoft® Windows® Operating System C:\Windows\System32\NapiNSP.dll
(verified) Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll
(verified) Microsoft® Windows® Operating System C:\Windows\System32\pnrpnsp.dll
(verified) Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
(verified) NPSWF64_11_4_402_287.dll C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_287.dll
(verified) Software Manager C:\Windows\Downloaded Program Files\isusweb.dll
(verified) Windows® Internet Explorer C:\Windows\System32\ieframe.dll


Missing files
-------------
File not found: C:\Program Files (x86)\Citrix\GoToAssist\514\G2AWinLogon_x64.dll
--> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\GoToAssist\"DllName"


Scan
----
MD5: b01289cc07a2e21c4efca722d1efb243 C:\Program Files (x86)\AMD\RAIDXpert\bin\RAIDXpertService.exe
MD5: 7253689f0f2f323aa0ea1afb9f8afc5e C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiamenu.dll
MD5: 9b5e7eff0485f39a9663314667d97049 C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe
MD5: b1868f9e2b5224e57ce55570af4fbc99 C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
MD5: 2a5e8dbc310c2fb7511b9ab8e7cfb297 C:\Program Files (x86)\Creative\THX TruStudio PC\THXAudioCP\THXAudio.exe
MD5: 35a5c7ad281231c1dea6751a63268de5 C:\Program Files (x86)\Dell DataSafe Online\BuEng.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin2.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin3.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin4.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin5.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin6.dll
MD5: 534fb04d167ce2b8de6e180a23646074 C:\Program Files (x86)\Internet Explorer\plugins\npqtplugin7.dll
MD5: 4b23cf47416b870bad0c24367cf15a5f C:\Program Files (x86)\Lexmark S300-S400 Series\customui.dll
MD5: 026c4bda4bea5ee666afd2270ff7368b C:\Program Files (x86)\Lexmark S300-S400 Series\epfunct.dll
MD5: 3df290691d8593212ce22d05d157f273 C:\Program Files (x86)\Lexmark S300-S400 Series\epoemdll.dll
MD5: be9580a0f3f4377bf45990ca595b398b C:\Program Files (x86)\Lexmark S300-S400 Series\epstring.dll
MD5: e96343a324492a99a38ec391befe1d59 C:\Program Files (x86)\Lexmark S300-S400 Series\eputil.dll
MD5: 68f546b58cfbbc1213b051c1b8ea1126 C:\Program Files (x86)\Lexmark S300-S400 Series\epwizard.dll
MD5: 1aec974324027429423378ada9e35af6 C:\Program Files (x86)\Lexmark S300-S400 Series\epwizres.dll
MD5: 59c3b7ac7a2c19043f7bd393bc66fafe C:\Program Files (x86)\Lexmark S300-S400 Series\imagutil.dll
MD5: 80505248ebd079cb692fc2ff0bf5d754 C:\Program Files (x86)\Lexmark S300-S400 Series\ltdis15u.dll
MD5: 8edace1d540666e2909dbbda5e07b40e C:\Program Files (x86)\Lexmark S300-S400 Series\ltefx15u.dll
MD5: 44491323891ee2cdedd31e96449b9e78 C:\Program Files (x86)\Lexmark S300-S400 Series\ltfil15u.dll
MD5: 3271a2285738336d273cb0e850c4f9cc C:\Program Files (x86)\Lexmark S300-S400 Series\ltimgclr15u.dll
MD5: 5bf0bfda62dd7a3a512f09a9ee31e8bb C:\Program Files (x86)\Lexmark S300-S400 Series\ltimgcor15u.dll
MD5: cd9704754c0160eeb636bf3e340cab9a C:\Program Files (x86)\Lexmark S300-S400 Series\ltimgefx15u.dll
MD5: 695c32d334146ad25a2e6305dd3175a2 C:\Program Files (x86)\Lexmark S300-S400 Series\ltimgsfx15u.dll
MD5: d1514e24d2ce523f3d4deafdec50de9f C:\Program Files (x86)\Lexmark S300-S400 Series\ltimgutl15u.dll
MD5: 75de43a4302967c786a0da65c649f1a0 C:\Program Files (x86)\Lexmark S300-S400 Series\ltkrn15u.dll
MD5: fecc6977944fc212772173c86aa9b0c0 C:\Program Files (x86)\Lexmark S300-S400 Series\ltwvc215u.dll
MD5: c5a841f80521481a0f06bf3b385930bc C:\Program Files (x86)\Lexmark S300-S400 Series\lxeadrs.dll
MD5: 046e4103ed25becc0f010bd27a24f407 C:\Program Files (x86)\Lexmark S300-S400 Series\lxeamonr.dll
MD5: 572c6429a5508e8c2639bdbe5c282991 C:\Program Files (x86)\Lexmark S300-S400 Series\lxeaptp.dll
MD5: f40ff25ffce5bd187ea33bd9395bcc05 C:\Program Files (x86)\Lexmark S300-S400 Series\lxeascw.dll
MD5: c10d6a7784e12bf0be4799f675f614c2 C:\Program Files (x86)\Lexmark S300-S400 Series\pdflib.dll
MD5: 49916f80b1cce8b80477999921ed14e4 C:\Program Files (x86)\Multimedia Card Reader(9106)\ShwiconXP9106.exe
MD5: c879de366d8129fcf4f7bf416aa3c1d5 C:\Program Files (x86)\OpenOffice.org 3\program\basegfxmi.dll
MD5: 057d73c04d493aac5f4f672d3b21af9b C:\Program Files (x86)\OpenOffice.org 3\program\comphelp4MSC.dll
MD5: 86cf2a24230f038f0e0ea0a184f28d9b C:\Program Files (x86)\OpenOffice.org 3\program\configmgr.uno.dll
MD5: 4ae5b27348741ec9dec6b1877885d3d9 C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmiscmi.dll
MD5: fb03119416c0db5a8fa1939ea8b5d8eb C:\Program Files (x86)\OpenOffice.org 3\program\emsermi.dll
MD5: e7672ba488e1e328bd335ccbc7b7b60e C:\Program Files (x86)\OpenOffice.org 3\program\fwemi.dll
MD5: 04f6054e50cb15c5a4b5dcaef94eec8c C:\Program Files (x86)\OpenOffice.org 3\program\fwimi.dll
MD5: 9a37883fd6bf405d53596293e6a9b7fb C:\Program Files (x86)\OpenOffice.org 3\program\fwkmi.dll
MD5: 041b038d7b21bab87de4d61ab94b1d82 C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll
MD5: 8dab289ebfb76ed4a7222a89b276db25 C:\Program Files (x86)\OpenOffice.org 3\program\i18npapermi.dll
MD5: 22fc7fe7b111f08dd287c8721bbfc927 C:\Program Files (x86)\OpenOffice.org 3\program\i18npool.uno.dll
MD5: 0785b8101364195475d8e3793ec738b6 C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll
MD5: b56722229816ba4fdd2e9e436b0ddff1 C:\Program Files (x86)\OpenOffice.org 3\program\icudt40.dll
MD5: 8b66a20a4afb948fe13e3b985c91c21f C:\Program Files (x86)\OpenOffice.org 3\program\icuin40.dll
MD5: 699fdb6748f42f7949087d2ab353b382 C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll
MD5: cbc7e6267ac1e15bfae0565cef9cb8ab C:\Program Files (x86)\OpenOffice.org 3\program\libdb47.dll
MD5: fe4eddba5e0e11ddb1bce9a2410350ad C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
MD5: b2de56ac3476d0a3bc2970cf33bfbee9 C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll
MD5: 65b3f0ff91df52144d29754e7a5d5287 C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll
MD5: 16312ca5460441633c7f90d595862340 C:\Program Files (x86)\OpenOffice.org 3\program\oooimprovementmi.dll
MD5: f7dce54077ee9d8a351c4b1ffa866ee7 C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe
MD5: 7c27f5ad651035a99aa84ccf0f6e9b43 C:\Program Files (x86)\OpenOffice.org 3\program\saxmi.dll
MD5: 42a153371168bc9b862745e4b12ed032 C:\Program Files (x86)\OpenOffice.org 3\program\sbmi.dll
MD5: ef5fde40f4b3e72f2ba217e20115e1f1 C:\Program Files (x86)\OpenOffice.org 3\program\sfxmi.dll
MD5: 2337ec951c4af6e1af65d10bd9615beb C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
MD5: 11e8d8272fdbe213ade3dad91427ce35 C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
MD5: 1c36c5c730f7979f69c8a321a97e6ee1 C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll
MD5: 8f291799e3562c3793e488b1a1552816 C:\Program Files (x86)\OpenOffice.org 3\program\sotmi.dll
MD5: c2b4d9c7a33091a587ae8ad8efb3cfcb C:\Program Files (x86)\OpenOffice.org 3\program\svlmi.dll
MD5: 298d7a0cfbca32ad82faccabe3cfa217 C:\Program Files (x86)\OpenOffice.org 3\program\svtmi.dll
MD5: 0d5a674c48be3238aec7c33cb274f049 C:\Program Files (x86)\OpenOffice.org 3\program\tkmi.dll
MD5: 65005208d464745a283649582cbf8aaa C:\Program Files (x86)\OpenOffice.org 3\program\tlmi.dll
MD5: f165daf99be69a9abe3d71b41666f6cb C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll
MD5: d72904fcf42ae05703eeeee7317c9917 C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll
MD5: 4c2d1e9eae3131ffbc452c3d872ccf26 C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll
MD5: 5eab1a7a716b89148d93b40d53249e51 C:\Program Files (x86)\OpenOffice.org 3\program\utlmi.dll
MD5: 57989a43b4603c9963a5d35ea415f7bf C:\Program Files (x86)\OpenOffice.org 3\program\vclmi.dll
MD5: 5c288b6aa77041e2ee5f7002317c2790 C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll
MD5: 9ac499c7903471b8959c5746e40e64f2 C:\Program Files (x86)\OpenOffice.org 3\program\xcrmi.dll
MD5: 5ff2fd2a059f68611fc90a9ee2e4d1c5 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll
MD5: 6b268075870a9a670eb529cd758f959d C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll
MD5: 5efdce3567426312a15e1df3b16a5cb6 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll
MD5: 2ba556cd3a4cae2c82d4871f9fb4e980 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll
MD5: 5366b1f6b339f58a7678aa4306a1fd13 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll
MD5: c1f3393c30f7fd6558ae8c3ef1057ee0 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll
MD5: 594bba9c70cb20c9d3b7d257bd386ebc C:\Program Files (x86)\OpenOffice.org 3\URE\bin\sal3.dll
MD5: 2936eefca637340d761e67b6f80b8e40 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll
MD5: 6b8da59e4a6f9f08f1b2055993c72e54 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll
MD5: eff28a2c50c89614d073bc3e3715d594 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll
MD5: 586e6cd6f82e96765a1de0d89f797264 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll
MD5: c47d58cf432e6af40cfc38e68798f697 C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll
MD5: 73430e79d6df4de9055e2a7742b881d3 C:\Program Files (x86)\QuickTime\QTTask.exe
MD5: 51486ecb7bf1f4bfe0f7c67bd35f43bd C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
MD5: 0840abbbdf438691ee65a20040635cbe C:\Program Files\Dell\DellDock\DockLogin.exe
MD5: 961049ed849e27c8afdbb959f40fa24c C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll
MD5: 094f78946544970de97e3b2cab015930 C:\Program Files\WinRAR\RarExt.dll
MD5: 31d59387099070963ead4ce14c5b5f04 C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\187d7c66735c533de851c76384f86912\mscorlib.ni.dll
MD5: 7221e380fb8bfcf0160b9d4e704e7e77 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c64ca3678261c8ffcd9e7efd1af6ed54\System.Configuration.ni.dll
MD5: 2a72853494912bb034af7ac1c86ec04e C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\4e80768a2d88c7a333e43cbb7a6c0705\System.Drawing.ni.dll
MD5: 40b28fbd1e4def0910e2ac3eae4d43cf C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\66694f9192bd0dddc2eaf90fbcbcd555\System.Management.ni.dll
MD5: 2509e59dde649146366399b42dfdc586 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web.Services\cf840dca36a7b949696ce331d0532d3e\System.Web.Services.ni.dll
MD5: ac6a3801f3cde7eb41b3f52e9b0a1c2b C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\d040079bc7148afeca03c5abb6fc3c61\System.Windows.Forms.ni.dll
MD5: 43104328e99680fcf282e71cc45cb5d2 C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\25e672ea505e50ab058258ac72a54f02\System.Xml.ni.dll
MD5: 6d6596e046ca6a61de250ad3a281a1af C:\Windows\assembly\NativeImages_v2.0.50727_32\System\9dd758ac0bf7358ac6e4720610fcc63c\System.ni.dll
MD5: 3381678371ebef98c104c19762e7b13f C:\Windows\assembly\NativeImages_v2.0.50727_64\Accessibility\bee015173ba31ca15216efd65c5e48f0\Accessibility.ni.dll
MD5: f3a847975f3ebc5def82cb0565a3c7f1 C:\Windows\assembly\NativeImages_v2.0.50727_64\DellDock\3aff25e2cc258060264695f524eb8312\DellDock.ni.exe
MD5: 6b84595a8c799b4c1361df4aac92a0ad C:\Windows\assembly\NativeImages_v2.0.50727_64\MenuSkinning\115fbd68e86f1601e35c151450d0644d\MenuSkinning.ni.dll
MD5: 01aea2f16fe0c522ddfd7faffc959c6a C:\Windows\assembly\NativeImages_v2.0.50727_64\mscorlib\74a5f0c2bc0d0e6e3c4ec4886b9be891\mscorlib.ni.dll
MD5: 4007c160649d060923e04368792b5e08 C:\Windows\assembly\NativeImages_v2.0.50727_64\MyDock.Util\27040b8a9825d33eea978bdc449baf2b\MyDock.Util.ni.dll
MD5: 5d0e28a22860e487148b2820309c0063 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Configuration\ac14913a11af4bfae0b8eb913a46a161\System.Configuration.ni.dll
MD5: d79d19ec66106119dcd45d042c6b5170 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Drawing\88f8a6436dc95497fce0dae347646e53\System.Drawing.ni.dll
MD5: 625d390d5cba512166571019e5efecfb C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Management\98059f32b988a3e2d869e9b3bf56db17\System.Management.ni.dll
MD5: eadfc95980bc24df3c7ee5b2cd38f043 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Windows.Forms\d6af7216038720b1adeca71e81c14bd6\System.Windows.Forms.ni.dll
MD5: a4b3a9ffa483f8cb36e56c19448dde36 C:\Windows\assembly\NativeImages_v2.0.50727_64\System.Xml\52e2da35b160dbd254683f72a0f1b937\System.Xml.ni.dll
MD5: 8be887f1743fbb39ed2c9ca2937742d6 C:\Windows\assembly\NativeImages_v2.0.50727_64\System\f3888a2c7b096d416ca0cfc5405219b4\System.ni.dll
MD5: 872de4fb9c39a9b9837e80b4f1f47d84 C:\Windows\assembly\NativeImages_v2.0.50727_64\VistaBridgeLibrary\3ee7b9f31e021b320a26cf5cca616245\VistaBridgeLibrary.ni.dll
MD5: 044eec41bb39c3f8fc6175daeaaddb35 C:\Windows\System32\EptMon64.dll
MD5: 76b59c460c95503032e35f00be125f7d C:\Windows\System32\THXCfg64.dll
MD5: c419df63e0121d72411285780c2fc6cc C:\Windows\UpdReg.EXE

The following file(s) must be uploaded for server-side scanning:
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\msci_uno.dll
C:\Program Files (x86)\OpenOffice.org 3\program\configmgr.uno.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppu3.dll
C:\Program Files (x86)\OpenOffice.org 3\program\sotmi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\localebe1.uno.dll
C:\Program Files (x86)\OpenOffice.org 3\program\i18nisolang1MSC.dll
C:\Program Files (x86)\OpenOffice.org 3\program\vos3MSC.dll
C:\Program Files (x86)\OpenOffice.org 3\program\deploymentmiscmi.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\bootstrap.uno.dll
C:\Program Files (x86)\OpenOffice.org 3\program\i18nutilMSC.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\reg3.dll
C:\Program Files (x86)\OpenOffice.org 3\program\ucb1.dll
C:\Program Files (x86)\OpenOffice.org 3\program\ucpfile1.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stocservices.uno.dll
C:\Program Files (x86)\OpenOffice.org 3\program\icuuc40.dll
C:\Program Files (x86)\OpenOffice.org 3\program\libdb47.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\cppuhelper3MSC.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\stlport_vc7145.dll
C:\Program Files (x86)\OpenOffice.org 3\program\ucbhelper4MSC.dll
C:\Program Files (x86)\OpenOffice.org 3\program\svlmi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\emsermi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\i18npapermi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\comphelp4MSC.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\jvmfwk3.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\salhelper3MSC.dll
C:\Program Files (x86)\OpenOffice.org 3\program\fwimi.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\uwinapi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll
C:\Program Files (x86)\OpenOffice.org 3\program\utlmi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\oleautobridge.uno.dll
C:\Program Files (x86)\OpenOffice.org 3\program\basegfxmi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\xcrmi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\tlmi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\sofficeapp.dll
C:\Program Files (x86)\OpenOffice.org 3\URE\bin\store3.dll
C:\Program Files (x86)\OpenOffice.org 3\program\fwemi.dll
C:\Program Files (x86)\OpenOffice.org 3\program\oooimprovementmi.dll

Upload started - 34 file(s)
salhelper3MSC.dll (13312)
localebe1.uno.dll (24064)
i18nisolang1MSC.dll (26112)
i18npapermi.dll (29184)
msci_uno.dll (51712)
store3.dll (53248)
i18nutilMSC.dll (66560)
oooimprovementmi.dll (83968)
uwinapi.dll (86016)
jvmfwk3.dll (92160)
reg3.dll (92672)
stocservices.uno.dll (92672)
vos3MSC.dll (94208)
deploymentmiscmi.dll (135680)
cppu3.dll (142848)
emsermi.dll (148480)
ucb1.dll (212992)
sotmi.dll (256000)
ucpfile1.dll (257024)
oleautobridge.uno.dll (287232)
fwimi.dll (311296)
ucbhelper4MSC.dll (358912)
sofficeapp.dll (379904)
configmgr.uno.dll (396800)
cppuhelper3MSC.dll (432128)
bootstrap.uno.dll (452608)
tlmi.dll (529408)
xcrmi.dll (531456)
stlport_vc7145.dll (597504)
basegfxmi.dll (700928)
svlmi.dll (777216)
libdb47.dll (832000)
fwemi.dll (869888)
icuuc40.dll (951296)
Upload speed - 83 KB/s
Upload finished - 34 uploaded, 0 failed

The uploaded file(s) were found clean.

Scan finished - communication took 123 sec
Total traffic - 9.99 MB sent, 3.45 KB recvd
Scanned 1868 files and modules - 1130 seconds

==============================================================================
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP