What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Please Urgent Help

2 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi,
I had a hause guest use my PC and I dont know what he did but sisce than I am having major problems. I use to use Mcafee. i uninstaled it and installed Kersprsky 2009 trail. It find multible infections but it wont fix them( I hope it is not becaouse its trail vergin). Scan never finishes. gets stuck around 90% complate. than explore crashes and than PC.
Type: vulnerability (events: 32)
3/22/2009 5:20:23 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Device Central CS4\Required\Opera\program\plugins\ NPSWF32.dll Very dangerous
3/22/2009 5:26:02 AM Detected vulnerability http://www.viruslist.com/en/advisories/13246 File C:\Program Files\Citrix\icaweb32\ wfica32.exe Not dangerous
3/22/2009 6:26:21 AM Detected vulnerability http://www.viruslist.com/en/advisories/32270 File C:\WINDOWS\system32\Macromed\Flash\ swflash.ocx Moderately dangerous
3/22/2009 6:28:41 AM Detected vulnerability http://www.viruslist.com/en/advisories/23138 File L:\LaCie\SOFTWARE\Windows Utilities\Reader\Reader\ AcroRd32.exe Not dangerous
3/22/2009 5:18:53 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Bridge CS4\browser\plugins\ NPSWF32.dll Very dangerous
3/22/2009 5:20:33 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Extension Manager CS4\ NPSWF32.dll Very dangerous
3/22/2009 5:21:07 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Flash CS4\AIK1.1\runtimes\air\win\Adobe AIR\Versions\1.0\Resources\ NPSWF32.dll Very dangerous
3/22/2009 5:32:43 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\ NPSWF32.dll Very dangerous
3/22/2009 5:32:52 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Common Files\Adobe AIR\Versions\1.0\ Adobe AIR.dll Very dangerous
3/22/2009 5:36:04 AM Detected vulnerability http://www.viruslist.com/en/advisories/32991 File C:\Program Files\DupeEliminator\jre\bin\ java.exe Very dangerous
3/22/2009 5:52:11 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ QuickTimeQD3D.qtr Very dangerous
3/22/2009 5:52:11 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:11 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 6:27:06 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\ msxml4.dll Very dangerous
3/22/2009 6:27:07 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\ msxml4.dll Very dangerous
3/22/2009 6:27:07 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\ msxml4.dll Very dangerous
3/22/2009 6:27:08 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\ msxml4.dll Very dangerous
Type: vulnerability (events: 32)
3/8/2009 11:49:43 PM Not found malware Multi.Packed File C:\Program Files\WinRAR\ UnRAR.exe
3/8/2009 11:49:43 PM Not found malware Multi.Packed File C:\Program Files\WinRAR\UnRAR.exe// ASPack
3/8/2009 11:50:13 PM Not found malware Multi.Packed File C:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1971\ A0751192.exe
3/8/2009 11:50:13 PM Not found malware Multi.Packed File C:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1971\A0751192.exe// ASPack
3/8/2009 11:50:13 PM Not found malware Multi.Packed File C:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1972\ A0751201.exe
3/8/2009 11:50:13 PM Not found malware Multi.Packed File C:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1972\A0751201.exe// ASPack
Type: vulnerability (events: 32)
3/12/2009 5:27:21 AM Not found Trojan program Trojan-Dropper.Win32.VB.dfr File D:\Setup\ XSetup.exe
3/10/2009 7:58:15 PM Deleted Trojan program Trojan-Dropper.Win32.VB.dfr File C:\Documents and Settings\Adam Dumen\Local Settings\Temp\IXP000.TMP\ stub.exe
3/12/2009 7:12:02 AM Not found Trojan program Trojan-Dropper.Win32.VB.dfr File d:\setup\xsetup.exe//data0000.cab/ XSetup.exe
Type: vulnerability (events: 32)
3/12/2009 5:27:21 AM Not found undefined File D:\Setup\ XSetup.exe
Type: vulnerability (events: 32)
Type: vulnerability (events: 32)
3/19/2009 12:31:38 PM Detected virus HEUR:Trojan.Script.Iframer Web page http://www.mixlivetv.com/ Galatasaray-Hamburger-SV.html .


ACTIVE TREATS

Type: vulnerability (events: 32)
3/22/2009 5:20:23 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Device Central CS4\Required\Opera\program\plugins\ NPSWF32.dll Very dangerous
3/22/2009 5:26:02 AM Detected vulnerability http://www.viruslist.com/en/advisories/13246 File C:\Program Files\Citrix\icaweb32\ wfica32.exe Not dangerous
3/22/2009 6:26:21 AM Detected vulnerability http://www.viruslist.com/en/advisories/32270 File C:\WINDOWS\system32\Macromed\Flash\ swflash.ocx Moderately dangerous
3/22/2009 6:28:41 AM Detected vulnerability http://www.viruslist.com/en/advisories/23138 File L:\LaCie\SOFTWARE\Windows Utilities\Reader\Reader\ AcroRd32.exe Not dangerous
3/22/2009 5:18:53 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Bridge CS4\browser\plugins\ NPSWF32.dll Very dangerous
3/22/2009 5:20:33 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Extension Manager CS4\ NPSWF32.dll Very dangerous
3/22/2009 5:21:07 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Adobe\Adobe Flash CS4\AIK1.1\runtimes\air\win\Adobe AIR\Versions\1.0\Resources\ NPSWF32.dll Very dangerous
3/22/2009 5:32:43 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\ NPSWF32.dll Very dangerous
3/22/2009 5:32:52 AM Detected vulnerability http://www.viruslist.com/en/advisories/34012 File C:\Program Files\Common Files\Adobe AIR\Versions\1.0\ Adobe AIR.dll Very dangerous
3/22/2009 5:36:04 AM Detected vulnerability http://www.viruslist.com/en/advisories/32991 File C:\Program Files\DupeEliminator\jre\bin\ java.exe Very dangerous
3/22/2009 5:52:11 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ QuickTimeQD3D.qtr Very dangerous
3/22/2009 5:52:11 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:11 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 5:52:12 AM Detected vulnerability http://www.viruslist.com/en/advisories/33632 File C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj\ QuickTimeQD3DLocalized.qtr Very dangerous
3/22/2009 6:27:06 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\ msxml4.dll Very dangerous
3/22/2009 6:27:07 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\ msxml4.dll Very dangerous
3/22/2009 6:27:07 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\ msxml4.dll Very dangerous
3/22/2009 6:27:08 AM Detected vulnerability http://www.viruslist.com/en/advisories/23655 File C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\ msxml4.dll Very dangerous

QUARANTINED

Type: riskware (events: 2)
3/12/2009 7:10:30 AM Quarantined riskware Trojan.generic Running process C:\DOCUMENTS AND SETTINGS\ADAM DUMEN\LOCAL SETTINGS\TEMP\IS-JK2TU.TMP\ IS-8KHNB.TMP
3/22/2009 10:52:14 AM Quarantined riskware Trojan.generic Running process C:\DOCUMENTS AND SETTINGS\ADAM DUMEN\LOCAL SETTINGS\TEMP\IS-JAQOA.TMP\ IS-MBEGV.TMP

DISINFECTED

3/10/2009 7:58:15 PM Deleted Trojan program Trojan-Dropper.Win32.VB.dfr File C:\Documents and Settings\Adam Dumen\Local Settings\Temp\IXP000.TMP\ stub.exe

SCAN HISTORY

Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/6/2009 4:02:02 PM Task started
3/6/2009 4:07:45 PM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/6/2009 4:13:40 PM Task started
3/6/2009 4:15:04 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/6/2009 5:37:44 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec386.rbf
3/6/2009 5:37:45 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec394.rbf
3/6/2009 5:38:02 PM Detected: http://www.viruslist.com/en/advisories/29320 c:\Config.Msi\3ec3a3.rbf
3/6/2009 5:38:14 PM Detected: http://www.viruslist.com/en/advisories/31453 c:\Config.Msi\3ec3a9.rbf
3/6/2009 5:38:40 PM Detected: http://www.viruslist.com/en/advisories/30975 c:\Config.Msi\3ec3bc.rbf
3/6/2009 5:38:45 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec3ee.rbf
3/6/2009 5:38:54 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec455.rbf
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/7/2009 2:28:31 AM Task started
3/7/2009 2:36:34 AM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/7/2009 3:00:56 AM Task started
3/7/2009 3:02:21 AM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/7/2009 3:09:50 AM Task stopped
3/7/2009 12:28:52 PM Task started
3/7/2009 1:37:27 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec386.rbf
3/7/2009 1:37:27 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec394.rbf
3/7/2009 1:37:28 PM Detected: http://www.viruslist.com/en/advisories/29320 c:\Config.Msi\3ec3a3.rbf
3/7/2009 1:37:36 PM Detected: http://www.viruslist.com/en/advisories/31453 c:\Config.Msi\3ec3a9.rbf
3/7/2009 1:37:38 PM Detected: http://www.viruslist.com/en/advisories/30975 c:\Config.Msi\3ec3bc.rbf
3/7/2009 1:37:52 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec3ee.rbf
3/7/2009 1:37:58 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec455.rbf
3/7/2009 2:18:34 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/7/2009 2:23:09 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
3/7/2009 2:23:10 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Acrobat 9.0\Designer 8.2\jre\bin\javaws.exe
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 2:55:25 PM Task started
3/8/2009 2:56:40 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/8/2009 3:48:07 PM Detected: http://www.viruslist.com/en/advisories/29320 c:\Config.Msi\3ec3a3.rbf
3/8/2009 3:48:11 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec394.rbf
3/8/2009 3:48:15 PM Detected: http://www.viruslist.com/en/advisories/31453 c:\Config.Msi\3ec3a9.rbf
3/8/2009 3:48:15 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec386.rbf
3/8/2009 3:48:24 PM Detected: http://www.viruslist.com/en/advisories/30975 c:\Config.Msi\3ec3bc.rbf
3/8/2009 3:48:30 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec3ee.rbf
3/8/2009 3:48:36 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec455.rbf
3/8/2009 4:20:05 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/8/2009 4:23:58 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Acrobat 9.0\Designer 8.2\jre\bin\javaws.exe
3/8/2009 4:23:58 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
3/8/2009 4:27:23 PM Detected: http://www.viruslist.com/en/advisories/25023 c:\program files\adobe\Adobe After Effects CS4\Support Files\Plug-ins\Format\BMP.8bi
3/8/2009 4:31:33 PM Detected: http://www.viruslist.com/en/advisories/28083 c:\program files\adobe\Adobe Device Central CS4\Required\Opera\program\plugins\NPSWF32.dll
3/8/2009 4:39:04 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Adobe Flash CS4\JVM\bin\javaws.exe
3/8/2009 4:39:04 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Adobe Flash CS4\JVM\bin\java.exe
3/8/2009 5:13:36 PM Detected: http://www.viruslist.com/en/advisories/13246 c:\program files\Citrix\icaweb32\wfica32.exe
3/8/2009 5:14:11 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\java.exe
3/8/2009 5:14:12 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\javaws.exe
3/8/2009 5:27:01 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\CS4ServiceManager\jre\bin\java.exe
3/8/2009 5:27:01 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\CS4ServiceManager\jre\bin\javaws.exe
3/8/2009 6:09:42 PM Detected: http://www.viruslist.com/en/advisories/29321 c:\program files\Common Files\Microsoft Shared\Office10\MSO.DLL
3/8/2009 6:43:05 PM Detected: Multi.Packed c:\program files\WinRAR\UnRAR.exe/ASPack
3/8/2009 6:43:06 PM Untreated: Multi.Packed c:\program files\WinRAR\UnRAR.exe/ASPack Postponed
3/8/2009 7:26:06 PM Detected: http://www.viruslist.com/en/advisories/28083 c:\WINDOWS\system32\Macromed\Flash\swflash.ocx
3/8/2009 7:30:10 PM Detected: http://www.viruslist.com/en/advisories/23138 L:\LaCie\SOFTWARE\Windows Utilities\Reader\Reader\AcroRd32.exe
3/8/2009 9:48:18 PM Task stopped
3/8/2009 9:55:54 PM Task started
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 10:29:48 PM Task started
3/8/2009 10:30:16 PM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 10:31:15 PM Task started
3/8/2009 10:31:31 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/8/2009 10:31:50 PM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 10:32:11 PM Task started
3/8/2009 10:32:12 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/8/2009 10:32:19 PM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 10:35:19 PM Task started
3/8/2009 10:54:27 PM Detected: Multi.Packed c:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1971\A0751192.exe/ASPack
3/8/2009 10:54:28 PM Untreated: Multi.Packed c:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1971\A0751192.exe/ASPack Postponed
3/8/2009 10:54:36 PM Detected: Multi.Packed c:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1972\A0751201.exe/ASPack
3/8/2009 10:54:36 PM Untreated: Multi.Packed c:\System Volume Information\_restore{EEC77EF7-18E6-407F-878B-95D80AF8D466}\RP1972\A0751201.exe/ASPack Postponed
3/8/2009 11:05:07 PM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 11:12:55 PM Task started
3/8/2009 11:15:57 PM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 11:32:05 PM Task started
3/8/2009 11:45:15 PM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/8/2009 11:45:53 PM Task started
3/8/2009 11:46:10 PM Detected: Trojan-Dropper.Win32.VB.dfr D:\Setup\XSetup.exe/data0000.cab/stub.exe
3/8/2009 11:46:10 PM Untreated: Trojan-Dropper.Win32.VB.dfr D:\Setup\XSetup.exe/data0000.cab/stub.exe Postponed
3/9/2009 12:07:42 AM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/9/2009 3:10:45 AM Task started
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/9/2009 4:15:47 AM Task started
3/9/2009 4:17:37 AM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/9/2009 5:11:05 AM Detected: http://www.viruslist.com/en/advisories/29320 c:\Config.Msi\3ec3a3.rbf
3/9/2009 5:11:08 AM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec394.rbf
3/9/2009 5:11:11 AM Detected: http://www.viruslist.com/en/advisories/31453 c:\Config.Msi\3ec3a9.rbf
3/9/2009 5:11:11 AM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec386.rbf
3/9/2009 5:11:22 AM Detected: http://www.viruslist.com/en/advisories/30975 c:\Config.Msi\3ec3bc.rbf
3/9/2009 5:11:27 AM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec3ee.rbf
3/9/2009 5:11:37 AM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec455.rbf
3/9/2009 5:48:26 AM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/9/2009 5:08:01 PM Task started
3/9/2009 5:37:32 PM Detected: http://www.viruslist.com/en/advisories/29320 c:\Config.Msi\3ec3a3.rbf
3/9/2009 5:37:35 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec394.rbf
3/9/2009 5:37:38 PM Detected: http://www.viruslist.com/en/advisories/31453 c:\Config.Msi\3ec3a9.rbf
3/9/2009 5:37:38 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec386.rbf
3/9/2009 5:37:46 PM Detected: http://www.viruslist.com/en/advisories/30975 c:\Config.Msi\3ec3bc.rbf
3/9/2009 5:38:43 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec3ee.rbf
3/9/2009 5:38:49 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec455.rbf
3/9/2009 6:27:05 PM Detected: http://www.viruslist.com/en/advisories/23483 c:\program files\adobe\acrobat 5.0\acrobat\acrobat.exe
3/9/2009 6:30:55 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
3/9/2009 6:30:55 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Acrobat 9.0\Designer 8.2\jre\bin\javaws.exe
3/9/2009 6:34:55 PM Detected: http://www.viruslist.com/en/advisories/25023 c:\program files\adobe\Adobe After Effects CS4\Support Files\Plug-ins\Format\BMP.8bi
3/9/2009 6:40:21 PM Detected: http://www.viruslist.com/en/advisories/28083 c:\program files\adobe\Adobe Device Central CS4\Required\Opera\program\plugins\NPSWF32.dll
3/9/2009 6:50:47 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Adobe Flash CS4\JVM\bin\java.exe
3/9/2009 6:50:47 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\adobe\Adobe Flash CS4\JVM\bin\javaws.exe
3/9/2009 7:29:47 PM Detected: http://www.viruslist.com/en/advisories/13246 c:\program files\Citrix\icaweb32\wfica32.exe
3/9/2009 7:30:22 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\java.exe
3/9/2009 7:30:22 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\javaws.exe
3/9/2009 7:38:09 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\CS4ServiceManager\jre\bin\java.exe
3/9/2009 7:38:11 PM Detected: http://www.viruslist.com/en/advisories/31010 c:\program files\Common Files\Adobe\CS4ServiceManager\jre\bin\javaws.exe
3/9/2009 8:11:04 PM Detected: http://www.viruslist.com/en/advisories/29321 c:\program files\Common Files\Microsoft Shared\Office10\MSO.DLL
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/9/2009 9:23:03 PM Task started
3/9/2009 9:46:09 PM Detected: http://www.viruslist.com/en/advisories/29320 c:\Config.Msi\3ec3a3.rbf
3/9/2009 9:46:14 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec394.rbf
3/9/2009 9:46:16 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec386.rbf
3/9/2009 9:46:19 PM Detected: http://www.viruslist.com/en/advisories/31453 c:\Config.Msi\3ec3a9.rbf
3/9/2009 9:46:23 PM Detected: http://www.viruslist.com/en/advisories/30975 c:\Config.Msi\3ec3bc.rbf
3/9/2009 9:46:25 PM Detected: http://www.viruslist.com/en/advisories/31454 c:\Config.Msi\3ec3ee.rbf
3/9/2009 9:47:01 PM Detected: http://www.viruslist.com/en/advisories/30150 c:\Config.Msi\3ec455.rbf
3/9/2009 10:19:48 PM Task stopped
3/10/2009 7:41:22 AM Task started
3/10/2009 7:52:32 AM Detected: http://www.viruslist.com/en/advisories/23483 C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe
3/10/2009 7:57:14 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
3/10/2009 7:57:14 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\javaws.exe
3/10/2009 8:03:50 AM Detected: http://www.viruslist.com/en/advisories/25023 C:\Program Files\Adobe\Adobe After Effects CS4\Support Files\Plug-ins\Format\BMP.8bi
3/10/2009 8:11:53 AM Detected: http://www.viruslist.com/en/advisories/28083 C:\Program Files\Adobe\Adobe Device Central CS4\Required\Opera\program\plugins\NPSWF32.dll
3/10/2009 8:22:00 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Adobe Flash CS4\JVM\bin\java.exe
3/10/2009 8:22:00 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Adobe Flash CS4\JVM\bin\javaws.exe
3/10/2009 8:34:16 AM Detected: http://www.viruslist.com/en/advisories/13246 C:\Program Files\Citrix\icaweb32\wfica32.exe
3/10/2009 8:34:49 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\java.exe
3/10/2009 8:34:49 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\javaws.exe
3/10/2009 8:37:35 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\CS4ServiceManager\jre\bin\java.exe
3/10/2009 8:37:36 AM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\CS4ServiceManager\jre\bin\javaws.exe
3/10/2009 8:50:09 AM Detected: http://www.viruslist.com/en/advisories/29321 C:\Program Files\Common Files\Microsoft Shared\Office10\MSO.DLL
3/10/2009 9:56:46 AM Detected: http://www.viruslist.com/en/advisories/28083 C:\WINDOWS\system32\Macromed\Flash\swflash.ocx
3/10/2009 10:01:19 AM Detected: http://www.viruslist.com/en/advisories/23138 L:\LaCie\SOFTWARE\Windows Utilities\Reader\Reader\AcroRd32.exe
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/10/2009 3:49:22 PM Task started
3/10/2009 4:03:29 PM Detected: http://www.viruslist.com/en/advisories/29320 C:\Config.Msi\3ec3a3.rbf
3/10/2009 4:03:38 PM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec394.rbf
3/10/2009 4:03:43 PM Detected: http://www.viruslist.com/en/advisories/31453 C:\Config.Msi\3ec3a9.rbf
3/10/2009 4:03:46 PM Detected: http://www.viruslist.com/en/advisories/31454 C:\Config.Msi\3ec386.rbf
3/10/2009 4:03:59 PM Detected: http://www.viruslist.com/en/advisories/30975 C:\Config.Msi\3ec3bc.rbf
3/10/2009 4:04:08 PM Detected: http://www.viruslist.com/en/advisories/31454 C:\Config.Msi\3ec3ee.rbf
3/10/2009 4:04:13 PM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec455.rbf
3/10/2009 4:39:57 PM Detected: http://www.viruslist.com/en/advisories/23483 C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe
3/10/2009 4:44:08 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
3/10/2009 4:44:08 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\javaws.exe
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/10/2009 7:48:43 PM Task started
3/10/2009 7:48:45 PM Detected: Trojan-Dropper.Win32.VB.dfr D:\Setup\XSetup.exe/data0000.cab/stub.exe
3/10/2009 7:48:47 PM Untreated: Trojan-Dropper.Win32.VB.dfr D:\Setup\XSetup.exe/data0000.cab/stub.exe Postponed
3/10/2009 7:53:08 PM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/11/2009 4:57:09 PM Task started
3/11/2009 5:23:23 PM Detected: http://www.viruslist.com/en/advisories/29320 C:\Config.Msi\3ec3a3.rbf
3/11/2009 5:23:23 PM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec394.rbf
3/11/2009 5:23:32 PM Detected: http://www.viruslist.com/en/advisories/31454 C:\Config.Msi\3ec386.rbf
3/11/2009 5:23:44 PM Detected: http://www.viruslist.com/en/advisories/31453 C:\Config.Msi\3ec3a9.rbf
3/11/2009 5:24:02 PM Detected: http://www.viruslist.com/en/advisories/30975 C:\Config.Msi\3ec3bc.rbf
3/11/2009 5:24:33 PM Detected: http://www.viruslist.com/en/advisories/31454 C:\Config.Msi\3ec3ee.rbf
3/11/2009 5:24:51 PM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec455.rbf
3/11/2009 6:20:57 PM Detected: http://www.viruslist.com/en/advisories/23483 C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe
3/11/2009 6:25:46 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\java.exe
3/11/2009 6:25:47 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Acrobat 9.0\Designer 8.2\jre\bin\javaws.exe
3/11/2009 6:31:46 PM Detected: http://www.viruslist.com/en/advisories/25023 C:\Program Files\Adobe\Adobe After Effects CS4\Support Files\Plug-ins\Format\BMP.8bi
3/11/2009 6:38:53 PM Detected: http://www.viruslist.com/en/advisories/28083 C:\Program Files\Adobe\Adobe Device Central CS4\Required\Opera\program\plugins\NPSWF32.dll
3/11/2009 6:49:41 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Adobe Flash CS4\JVM\bin\java.exe
3/11/2009 6:49:41 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Adobe\Adobe Flash CS4\JVM\bin\javaws.exe
3/11/2009 7:54:14 PM Detected: http://www.viruslist.com/en/advisories/13246 C:\Program Files\Citrix\icaweb32\wfica32.exe
3/11/2009 7:55:49 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\java.exe
3/11/2009 7:55:49 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\Adobe Version Cue CS4\Server\jre\bin\javaws.exe
3/11/2009 8:11:18 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\CS4ServiceManager\jre\bin\java.exe
3/11/2009 8:11:17 PM Detected: http://www.viruslist.com/en/advisories/31010 C:\Program Files\Common Files\Adobe\CS4ServiceManager\jre\bin\javaws.exe
3/11/2009 9:00:36 PM Detected: http://www.viruslist.com/en/advisories/29321 C:\Program Files\Common Files\Microsoft Shared\Office10\MSO.DLL
3/11/2009 9:17:45 PM Task stopped
3/11/2009 9:19:03 PM Task started
3/12/2009 12:11:05 AM Detected: http://www.viruslist.com/en/advisories/28083 C:\WINDOWS\system32\Macromed\Flash\swflash.ocx
3/12/2009 12:24:55 AM Task completed
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/12/2009 7:40:43 AM Task started
3/12/2009 7:48:41 AM Detected: http://www.viruslist.com/en/advisories/23483 C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe
3/12/2009 7:57:12 AM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/12/2009 1:44:24 PM Task started
3/12/2009 1:46:50 PM Detected: http://www.viruslist.com/en/advisories/23483 C:\Program Files\Adobe\Acrobat 5.0\Acrobat\Acrobat.exe
3/12/2009 2:07:38 PM Detected: http://www.viruslist.com/en/advisories/29320 C:\Config.Msi\3ec3a3.rbf
3/12/2009 2:07:46 PM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec394.rbf
3/12/2009 2:07:48 PM Detected: http://www.viruslist.com/en/advisories/31453 C:\Config.Msi\3ec3a9.rbf
3/12/2009 2:07:50 PM Detected: http://www.viruslist.com/en/advisories/31454 C:\Config.Msi\3ec386.rbf
3/12/2009 2:08:02 PM Detected: http://www.viruslist.com/en/advisories/30975 C:\Config.Msi\3ec3bc.rbf
3/12/2009 2:08:09 PM Detected: http://www.viruslist.com/en/advisories/31454 C:\Config.Msi\3ec3ee.rbf
3/12/2009 2:08:19 PM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec455.rbf
3/12/2009 2:36:13 PM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/15/2009 2:42:04 AM Task started
3/15/2009 3:07:37 AM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/19/2009 12:13:49 AM Task started
3/19/2009 12:46:27 AM Detected: http://www.viruslist.com/en/advisories/29320 C:\Config.Msi\3ec3a3.rbf
3/19/2009 12:46:33 AM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec394.rbf
3/19/2009 12:46:37 AM Detected: http://www.viruslist.com/en/advisories/31453 C:\Config.Msi\3ec3a9.rbf
3/19/2009 12:46:39 AM Detected: http://www.viruslist.com/en/advisories/31593 C:\Config.Msi\3ec386.rbf
3/19/2009 12:46:47 AM Detected: http://www.viruslist.com/en/advisories/30285 C:\Config.Msi\3ec3bc.rbf
3/19/2009 12:46:54 AM Detected: http://www.viruslist.com/en/advisories/31593 C:\Config.Msi\3ec3ee.rbf
3/19/2009 12:47:00 AM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec455.rbf
3/19/2009 1:14:24 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Bridge CS4\browser\plugins\NPSWF32.dll
3/19/2009 1:15:50 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Device Central CS4\Required\Opera\program\plugins\NPSWF32.dll
3/19/2009 1:16:02 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Extension Manager CS4\NPSWF32.dll
3/19/2009 1:16:36 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Flash CS4\AIK1.1\runtimes\air\win\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/19/2009 1:21:47 AM Detected: http://www.viruslist.com/en/advisories/13246 C:\Program Files\Citrix\icaweb32\wfica32.exe
3/19/2009 1:28:37 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/19/2009 1:28:45 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/19/2009 1:31:56 AM Detected: http://www.viruslist.com/en/advisories/32991 C:\Program Files\DupeEliminator\jre\bin\java.exe
3/19/2009 1:47:58 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\QuickTimeQD3D.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 1:47:59 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj\QuickTimeQD3DLocalized.qtr
3/19/2009 2:21:48 AM Task stopped
3/20/2009 8:32:14 PM Task started
3/20/2009 8:40:54 PM Detected: http://www.viruslist.com/en/advisories/32270 C:\WINDOWS\system32\Macromed\Flash\swflash.ocx
3/20/2009 8:42:09 PM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
3/20/2009 8:42:09 PM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
3/20/2009 8:42:10 PM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\msxml4.dll
3/20/2009 8:42:10 PM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll
3/20/2009 8:44:37 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Adobe CS4\payloads\AdobeAIR1.0\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/20/2009 8:44:37 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Adobe CS4\payloads\AdobeAIR1.0\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/20/2009 8:44:46 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Adobe CS4\payloads\AdobeAMP-mul\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/20/2009 8:44:47 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Adobe CS4\payloads\AdobeAMP-mul\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/20/2009 9:21:46 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Master Collection\Adobe CS4\payloads\Acrobatcom-mul\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/20/2009 9:21:51 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Master Collection\Adobe CS4\payloads\Acrobatcom-mul\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/20/2009 9:21:52 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Master Collection\Adobe CS4\payloads\AdobeAIR1.0\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/20/2009 9:21:56 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Master Collection\Adobe CS4\payloads\AdobeAIR1.0\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/20/2009 9:21:57 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Master Collection\Adobe CS4\payloads\AdobeAMP-mul\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/20/2009 9:22:02 PM Detected: http://www.viruslist.com/en/advisories/34012 K:\APPS_N_SOFT\AdobeCS4_MasterISO\Master Collection\Adobe CS4\payloads\AdobeAMP-mul\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/20/2009 9:23:26 PM Detected: MultiPacked.Multi.Generic K:\APPS_N_SOFT\WinRARCrystal\WinRAR_Crystal.exe/UnRAR.exe/ASPack
3/20/2009 9:23:30 PM Untreated: MultiPacked.Multi.Generic K:\APPS_N_SOFT\WinRARCrystal\WinRAR_Crystal.exe/UnRAR.exe/ASPack Postponed
3/20/2009 10:36:41 PM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/21/2009 2:50:05 AM Task started
3/21/2009 3:22:26 AM Detected: http://www.viruslist.com/en/advisories/29320 C:\Config.Msi\3ec3a3.rbf
3/21/2009 3:22:33 AM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec394.rbf
3/21/2009 3:22:37 AM Detected: http://www.viruslist.com/en/advisories/31453 C:\Config.Msi\3ec3a9.rbf
3/21/2009 3:22:39 AM Detected: http://www.viruslist.com/en/advisories/31593 C:\Config.Msi\3ec386.rbf
3/21/2009 3:22:47 AM Detected: http://www.viruslist.com/en/advisories/30285 C:\Config.Msi\3ec3bc.rbf
3/21/2009 3:22:54 AM Detected: http://www.viruslist.com/en/advisories/31593 C:\Config.Msi\3ec3ee.rbf
3/21/2009 3:23:00 AM Detected: http://www.viruslist.com/en/advisories/30150 C:\Config.Msi\3ec455.rbf
3/21/2009 3:38:04 AM Task stopped
Full Scan: error (events: 10, objects: 1, time: 00:42:36)
3/22/2009 4:30:17 AM Task started
3/22/2009 5:18:53 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Bridge CS4\browser\plugins\NPSWF32.dll
3/22/2009 5:20:23 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Device Central CS4\Required\Opera\program\plugins\NPSWF32.dll
3/22/2009 5:20:33 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Extension Manager CS4\NPSWF32.dll
3/22/2009 5:21:07 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Adobe\Adobe Flash CS4\AIK1.1\runtimes\air\win\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/22/2009 5:26:02 AM Detected: http://www.viruslist.com/en/advisories/13246 C:\Program Files\Citrix\icaweb32\wfica32.exe
3/22/2009 5:32:43 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Resources\NPSWF32.dll
3/22/2009 5:32:52 AM Detected: http://www.viruslist.com/en/advisories/34012 C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll
3/22/2009 5:36:05 AM Detected: http://www.viruslist.com/en/advisories/32991 C:\Program Files\DupeEliminator\jre\bin\java.exe
3/22/2009 5:52:11 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\QuickTimeQD3D.qtr
3/22/2009 5:52:11 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\da.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:11 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\de.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\en.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fi.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\fr.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\es.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ja.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\it.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ko.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nl.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\nb.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pl.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\ru.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\pt_PT.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\sv.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_CN.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 5:52:12 AM Detected: http://www.viruslist.com/en/advisories/33632 C:\Program Files\QuickTime\QTSystem\QuickTimeQD3D.Resources\zh_TW.lproj\QuickTimeQD3DLocalized.qtr
3/22/2009 6:26:21 AM Detected: http://www.viruslist.com/en/advisories/32270 C:\WINDOWS\system32\Macromed\Flash\swflash.ocx
3/22/2009 6:27:06 AM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9818.0_x-ww_8ff50c5d\msxml4.dll
3/22/2009 6:27:07 AM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9841.0_x-ww_18171213\msxml4.dll
3/22/2009 6:27:07 AM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.1.0.0_x-ww_b319d8da\msxml4.dll
3/22/2009 6:27:08 AM Detected: http://www.viruslist.com/en/advisories/23655 C:\WINDOWS\WinSxS\x86_Microsoft.MSXML2_6bd6b9abf345378f_4.20.9848.0_x-ww_1b897e9a\msxml4.dll
3/22/2009 6:28:41 AM Detected: http://www.viruslist.com/en/advisories/23138 L:\LaCie\SOFTWARE\Windows Utilities\Reader\Reader\AcroRd32.exe


AND MY HIJACKTHIS REPORT IS ATTACHED.

I backed up all data to external. Please help. I dont know if my comp will reboot next time crashes. THANK YOU! ADAM

Attachments:

Post #2
[external image: Posted Image]

DO NOT use any TOOLS such as Combofix, SmitfraudFix, MBAM, Vundofix, or HijackThis fixes without supervision.

Doing so could make your pc inoperatible and could require a full reinstall of your OS, losing all your programs and data.



Stay with this topic until I give you the all clean post.

You might want to print these instructions out.

I suggest you do this:

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Uncheck "Hide file extensions for known file types."
Under the "Hidden files" folder, select "Show hidden files and folders."
Uncheck "Hide protected operating system files."
Click Apply, and then click OK.


Please do not delete anything unless instructed to.


Please download ATF Cleaner by Atribune.
Download - ATF Cleaner»
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

(If you use FireFox or the Opera browser
To keep saved passwords, click No at the prompt.)

It's normal after running ATF cleaner that the PC will be slower to boot the first time or two.

Next:

Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.
Also "copy/paste" a new HijackThis log file into this thread.

Also please describe how your computer behaves at the moment.


Please don't attach the scans / logs, use "copy/paste".

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI