Something is definitely wrong [Solved]

Welcome to your place for tech questions! ( Log In or Join today ) Get answers from experts today. (it's 100% free) Virus removal forum

What the Tech > Spyware / Malware / Virus Removal > Virus, Spyware & Malware Removal

3 Pages

1 2 3 >

Something is definitely wrong [Solved], Slow PC, freezing internet, missing startup programs

Options

bocrunch View Member Profile	Jan 12 2012, 09:24 PM Post #1
Authentic Member Group: Authentic Member Posts: 22 Joined: 13-January 10 From: California Member No.: 89,878 Operating System: Windows XP Home	Things keep happening to my pc. It started with the system acting real slow, then I couldn't access certain web sites and my browsers would freeze. Next, programs that usually start up with the system, didn't start up and more and more programs will crash wile in use or just won't start up at all. Please help! Here are scan results from Hijackthis: Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 7:11:42 PM, on 1/12/2012 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\ALCXMNTR.EXE C:\Program Files\Microsoft IntelliPoint\ipoint.exe C:\HP\KBD\KBD.EXE C:\Program Files\Trend Micro\RUBotted\RUBottedGUI.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Java\jre6\bin\jqs.exe C:\Program Files\Google\Update\GoogleUpdate.exe C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\HPZipm12.exe C:\Program Files\Trend Micro\RUBotted\RUBotSrv.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Constant Guard Protection Suite\IDVaultSvc.exe C:\Program Files\SpeedFan\speedfan.exe C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Adobe\Acrobat 9.0\Acrobat\AcroTray.exe C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe C:\Documents and Settings\Bo Crunch\Desktop\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dogpile.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Security Suite\Engine\5.1.0.29\IPS\IPSBHO.DLL O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Constant Guard Protection Suite (COM) - {B84CDBE7-1B46-494B-A188-01D4C52DEB61} - C:\Program Files\Constant Guard Protection Suite\NativeBHO.dll O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security Suite\Engine\5.1.0.29\coIEPlg.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe" O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE O4 - HKLM\..\Run: [Trend Micro RUBotted V2.0 Beta] C:\Program Files\Trend Micro\RUBotted\RUBottedGUI.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Multi Reminders] "C:\Program Files\Multi Reminders\reminder.exe" -c O4 - Startup: SpeedFan.lnk = C:\Program Files\SpeedFan\speedfan.exe O8 - Extra context menu item: Append Link Target to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: Append to Existing PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convert Link Target to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/sit...b?1321140376203 O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - http://content.systemrequirementslab.com.s...el_4.4.24.0.cab O20 - AppInit_DLLs: acaptuser32.dll O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe O23 - Service: CGPS Service (IDVaultSvc) - White Sky, Inc. - C:\Program Files\Constant Guard Protection Suite\IDVaultSvc.exe O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe O23 - Service: Norton Security Suite (N360) - Symantec Corporation - C:\Program Files\Norton Security Suite\Engine\5.1.0.29\ccSvcHst.exe O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe O23 - Service: Trend Micro RUBotted Service (RUBotSrv) - Trend Micro Inc. - C:\Program Files\Trend Micro\RUBotted\RUBotSrv.exe O23 - Service: Syntek STK1160 Service (StkASSrv) - Syntek America Inc. - C:\WINDOWS\System32\StkASv2K.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 7563 bytes This post has been edited by bocrunch: Jan 12 2012, 09:26 PM

jeffce View Member Profile	Jan 13 2012, 06:45 AM Post #2
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your malware results logs and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following: I will be working on your Malware issues, this may or may not, solve other issues you have with your machine. Please subscribe to this topic, if you haven't already. The fixes are specific to your problem and should only be used for the issues on this machine. Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear. It's often worth reading through these instructions and printing them for ease of reference. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic. IMPORTANT NOTE : Please do not delete anything unless instructed to. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your OS losing all your programs and data. Vista and Windows 7 users: These tools MUST be run from the executable (.exe) every time you run them with Admin Rights (Right click, choose "Run as Administrator") Stay with this topic until I give you the all clean post. First we need to make all files and folders VISIBLE: Go to start>control panel>folder options>view Choose to "show hidden files and folders," Uncheck the "hide protected operating system files" and the "hide extensions for know file types" boxes. Close the window with ok ---------- Please download DDS from either of these links LINK 1 LINK 2 and save it to your desktop. Disable any script blocking protection Double click dds to run the tool. When done, two DDS.txt's will open. Save both reports to your desktop. --------------------------------------------------- Please include the contents of the following in your next reply: DDS.txt Attach.txt ---------- GMER Download GMER Rootkit Scanner from here or here. Extract the contents of the zipped file to desktop. Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent . If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO. Click the image to enlarge it In the right panel, you will see several boxes that have been checked. Uncheck the following ... IAT/EAT Drives/Partition other than Systemdrive (typically C:\) Show All (don't miss this one) Then click the Scan button & wait for it to finish. Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post. Save it where you can easily find it, such as your desktop, and attach it in your reply. Caution Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries. ---------- In your next reply please post the logs created by DDS and GMER.

jeffce View Member Profile	Jan 13 2012, 06:55 PM Post #4
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi bocrunch, Please read through these instructions to familarize yourself with what to expect when this tool runs Download ComboFix from one of these locations: Link 1 Link 2 * IMPORTANT !!! Save ComboFix.exe to your Desktop Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Note: If you are having difficulty properly disabling your protective programs, or are unsure as to what programs need to be disabled, please refer to the information available through this link : How to Disable your Security Programs Double click on ComboFix.exe & follow the prompts. As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware. Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message: Click on Yes, to continue scanning for malware. When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply. Notes:** 1.Do not mouse-click Combofix's window while it is running. That may cause it to stall. 2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser. 3. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine. ----------

jeffce View Member Profile	Jan 14 2012, 11:46 AM Post #6
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi bocrunch, Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below: CODE DDS:: uStart Page = hxxp://www.dogpile.com/ TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File mRun: [AlcxMonitor] ALCXMNTR.EXE Folder:: c:\documents and settings\bo crunch\application data\IObit c:\program files\IObit RegNull:: [HKEY_LOCAL_MACHINE\software\Microsoft\DbgagD\1] Save this as CFScript.txt* and change the "Save as type" to "All Files" and place it on your desktop. Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". Referring to the screenshot above, drag CFScript.txt into ComboFix.exe. ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal. *When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.* CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall. ----------

jeffce View Member Profile	Jan 14 2012, 08:56 PM Post #8
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi bocrunch, I see that you have Malwarebytes on your system. Please open Malwarebytes, update it and then run a Quick Scan. Please save the log that is created for your next reply. ---------- ESET Online Scanner I'd like us to scan your machine with ESET Online Scan Note: It is recommended to disable on-board anti-virus program and anti-spyware programs while performing scans so there are no conflicts and it will speed up scan time. Please don't go surfing while your resident protection is disabled! Once the scan is finished remember to re-enable your anti-virus along with your anti-spyware programs. Hold down Control and click on the following link to open ESET OnlineScan in a new window. ESET OnlineScan Click the button. For alternate browsers only: (Microsoft Internet Explorer users can skip these steps) Click on to download the ESET Smart Installer. Save it to your desktop. Double click on the icon on your desktop. Check Click the Start button. Accept any security warnings from your browser. Check Make sure that the option "Remove found threats" is Unchecked Push the Start button. ESET will then download updates for itself, install itself, and begin scanning your computer. Please be patient as this can take some time. When the scan completes, push Push , and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply. Push the Back button. Push Finish http://www.eset.com/onlinescan/ ---------- In your next reply please post the logs created by Malwarebytes and ESET online scanner.

bocrunch View Member Profile	Jan 15 2012, 04:19 PM Post #9
Authentic Member Group: Authentic Member Posts: 22 Joined: 13-January 10 From: California Member No.: 89,878 Operating System: Windows XP Home	Here are the logs that you requested.... Thanks again for your help. Malwarebytes Anti-Malware 1.60.0.1800 www.malwarebytes.org Database version: v2012.01.14.05 Windows XP Service Pack 3 x86 NTFS Internet Explorer 8.0.6001.18702 Bo Crunch :: GROUNDSCORE [administrator] 1/14/2012 8:59:17 PM mbam-log-2012-01-14 (20-59-17).txt Scan type: Quick scan Scan options enabled: Memory \| Startup \| Registry \| File System \| Heuristics/Extra \| Heuristics/Shuriken \| PUP \| PUM Scan options disabled: P2P Objects scanned: 180788 Time elapsed: 4 minute(s), 7 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end) D:\Downloads\YouTubeDownloaderSetup34.exe a variant of Win32/Toolbar.Widgi application D:\Downloads\media\Setup_FreeAVCHDConverter.exe Win32/Adware.Toolbar.Dealio application D:\Downloads\Utilities\defragsetup.exe a variant of Win32/Toolbar.Widgi application D:\Downloads\Utilities\reg\registrybooster.exe Win32/RegistryBooster application D:\My Documents\Bak\midnight pool 3d.exe a variant of Win32/TrojanDropper.Agent.OTR trojan D:\Temps\cnet2_TSLSetup_exe.exe a variant of Win32/InstallCore.D application D:\Temps\FLVPlayerSetup.exe a variant of Win32/InstallCore.C application

jeffce View Member Profile	Jan 15 2012, 05:23 PM Post #10
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi bocrunch, Please open Notepad (Start -> Run -> type notepad in the Open field -> OK) and copy and paste the text present inside the code box below: CODE File:: D:\Downloads\YouTubeDownloaderSetup34.exe D:\Downloads\media\Setup_FreeAVCHDConverter.exe D:\Downloads\Utilities\defragsetup.exe D:\Downloads\Utilities\reg\registrybooster.exe D:\My Documents\Bak\midnight pool 3d.exe D:\Temps\cnet2_TSLSetup_exe.exe D:\Temps\FLVPlayerSetup.exe Save this as CFScript.txt and change the "Save as type" to "All Files" and place it on your desktop. Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results". Referring to the screenshot above, drag CFScript.txt into ComboFix.exe. ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal. *When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.* CAUTION: Do not mouse-click ComboFix's window while it is running. That may cause it to stall. ---------- In your next reply please post the ComboFix log and let me know how your system is running now?

jeffce View Member Profile	Jan 16 2012, 05:41 PM Post #12
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi bocrunch, Thanks for posting that log and letting me know how your system is running. ------------ Download OTL to your desktop. Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted. When the window appears, underneath Output at the top change it to Minimal Output. Check the boxes beside LOP Check and Purity Check. Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long. When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. Note:These logs can be located in the OTL. folder on you C:\ drive if they fail to open automatically. Please copy (Edit->Select All, Edit->Copy) the contents of these files, one at a time, and post it with your next reply. You may need two posts to fit them both in. ----------

jeffce View Member Profile	Jan 17 2012, 12:56 PM Post #14
Super Saiyan Group: Malware Team Posts: 7,193 Joined: 18-November 10 From: The Hyperbolic Time Chamber Member No.: 95,070 Operating System: Dual Boot Windows Vista and Ubuntu	Hi bocrunch, I need some information on some unidentified files. We will use Virustotal Please submit these files for analysis To submit a file to virustotal, please click VirusTotal copy and paste the following into the upload a file box (one at a time if more than one file is listed) C:\WINDOWS\ASLPC.INI C:\WINDOWS\rgsavacam.rgk scroll down a bit and click "send file", wait for the results and post them in your next reply. Please note that sometimes the scans take a few minutes. Please ensure that the scan has completed and the results are complete before submitting the next sample. Also please make sure each result is clearly identified as to which sample they belong to. ----------

bocrunch View Member Profile	Jan 17 2012, 02:20 PM Post #15
Authentic Member Group: Authentic Member Posts: 22 Joined: 13-January 10 From: California Member No.: 89,878 Operating System: Windows XP Home	Here are the results from VirusTotal that you requested. I believe the ASLPC.INI is from my American Sign Language CD. The executable on the CD is named ASLPC.exe. The rgsavacam.rgk is from a small program called AvaCam that I downloaded from Freefiles.com, but I am not familiar with the "rgk" extension. Thanks again for all your help. ASLPC.INI SHA256: 249b3399b22ae5518961009548f7f744fe76d07d429730bbab3b814496f8dffe SHA1: ae5473bd8c48adac8dfdc01af2a651b5b3303ae0 MD5: 9977d6898799ba1782d06ccecd9c322d File size: 553 bytes ( 553 bytes ) File type: Text Detection ratio: 0 / 42 Analysis date: 2012-01-17 20:04:27 UTC ( 0 minutes ago ) ssdeep file piecewise hash 12:9da99+xu5XiNcXMwj4XBfGYHtNrB+93OaWBg658Dn:bajeQXFccaJx903ea TrID file type information Generic INI configuration (100.0%) First seen by VirusTotal 2012-01-17 20:04:27 UTC ( 1 minute ago ) Last seen by VirusTotal 2012-01-17 20:04:27 UTC ( 1 minute ago ) File names (max. 25) 1.C:\WINDOWS\ASLPC.INI rgsavacam.rgk SHA256: 71d590cf4d758a47f8249295eebeffcbeb8cf7aaa6c6f7ea34d7d3c71d1538ce SHA1: adda87c144f4387b5a712f54958021c8961262a6 MD5: 6a1dbe545ae5961f4e355a6d0b3e50d4 File size: 21 bytes ( 21 bytes ) File type: Text Detection ratio: 0 / 41 Analysis date: 2012-01-17 20:10:57 UTC ( 1 minute ago ) ssdeep file piecewise hash 3:QQSVKEU4vn:QQSL TrID file type information Unknown! First seen by VirusTotal 2012-01-17 20:10:57 UTC ( 1 minute ago ) Last seen by VirusTotal 2012-01-17 20:10:57 UTC ( 1 minute ago ) File names (max. 25) 1.C:\WINDOWS\rgsavacam.rgk This post has been edited by bocrunch: Jan 17 2012, 02:35 PM

« Next Oldest · Virus, Spyware & Malware Removal · Next Newest »

3 Pages

1 2 3 >

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)

0 Members:

Topic Title	Replies	Topic Starter	Views	Last Action
Virus, Spyware & Malware Removal Something Is Wrong Here	10	Jim Jiminy	1,207	14th September 2004 - 01:05 PM Last post by: ChrisRLG
Virus, Spyware & Malware Removal I Apologize Wrong Version	8	joeydog8189	939	30th October 2004 - 08:05 AM Last post by: Daemon
Virus, Spyware & Malware Removal See Anything Wrong?	2	tsunami III	653	8th January 2005 - 08:18 PM Last post by: little eagle
Virus, Spyware & Malware Removal Something Wrong.... 12	15	LilAzn	1,107	26th December 2004 - 09:21 AM Last post by: little eagle
Virus, Spyware & Malware Removal Any Ideas, I Can't Figure Out Whats Wrong	3	araffo21	1,382	27th December 2004 - 07:48 PM Last post by: little eagle