What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Possible hijack attempt?

18 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
First off being new here I apologise if I am posting in the wrong section. A few days ago while defragging I got an error message telling me that the defrag had stopped because of a file in the Windows/Temp folder. Looking in there I found a file named f4d4851e835eebefof2eb52b3212bc9PSK_PLUGINS_1. Its Properties list it as File and it's size is 8.65 MB. I then deleted all Temp files through Tools-Internet Options-Delete Files but when I checked the Temp folder although all the other files had gone that one remained.I then tried dragging it into the Recycle Bin but got a message telling me that access was denied. Opening my Panda security I then quarantined it and deleted it and that seemed to work because checking in the Temp folder it was gone but the next time I started the computer it was back. I sent it to Panda and got an acknowledgement of reciept but despite Panda updating itself several times since the problem is still there and it's worrying me. Sometimes when I check in Windows/Temp after start up I get a report in there which I believe is part of the problem. Entry Point Function: CheckVulnerabilidades Entry Point Function: CheckVulnerabilidad. SO: WINXP Service Pack: 3 Vulnerabilidad: MS05-049 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS05-051 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS05-052 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS05-053 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS05-054 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS05-055 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-001 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-002 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-004 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-006 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-007 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-008 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-011 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-013 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-015 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-016 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-018 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-021 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-022 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-025 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-026 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-030 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-031 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-032 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-035 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-036 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-040 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-041 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-042 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-043 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-044 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-045 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-046 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-049 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-050 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-051 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-052 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-053 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-055 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-057 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-063 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-064 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-065 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-067 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-070 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-072 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS06-075 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-004 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-006 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-007 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-008 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-011 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-012 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-013 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-016 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-017 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-019 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-020 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-021 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-022 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-027 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-031 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-033 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-035 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-043 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-045 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-046 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-050 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-051 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-057 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-058 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-061 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-067 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS07-069 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-001 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-002 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-008 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-010 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-020 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-021 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-024 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-025 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-030 Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-031 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-037 Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-045 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-049 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-058 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-061 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-063 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-064 Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-066 Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-067 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-068 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-071 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-073 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS08-078 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-001 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-002 Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-006 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-007 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-012 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-013 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-014 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-015 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-019 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 componente IE encontrado CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Service Pack encontrado. Entry Point Function: CheckComponent Entry Point Function: IsInstalledThisComponent Buscando componente IE Version IE 6.0 SP3 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-022 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-025 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. Entry Point Function: CheckVulnerabilidad. Vulnerabilidad: MS09-026 Entry Point Function: CheckSystem. Entry Point Function: CheckSystem. Service Pack encontrado. CheckPatch. Entry Point Function: CheckPatch. Parche encontrado en los Hotfix. System not vulnerable. Entry Point Function: CheckSystem. I would be grateful for any suggestions or advice.
Post #2
Please do the following:

STEP #1

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.pif to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.



STEP #2


[external image: Posted Image]
Download GMER Rootkit Scanner from here or here.
  • Extract the contents of the zipped file to desktop.
  • Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
  • If it gives you a warning about rootkit activity and asks if you want to run scan…click on NO.

    [external image: Posted Image]
    Click the image to enlarge it
  • In the right panel, you will see several boxes that have been checked. Uncheck the following …
    • Sections
    • IAT/EAT
    • Drives/Partition other than Systemdrive (typically C:\)
    • Show All (don't miss this one)
  • Then click the Scan button & wait for it to finish.
  • Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
  • Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<— ROOKIT" entries
Post #3 last edited
[CatByte. Thank you for your reply. Please find attached the documents you requested. DDS (Ver_09-06-26.01) - NTFSx86 Run by [removed] at 18:42:19.64 on 08/07/2009 Internet Explorer: 6.0.2900.5512 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1471.954 [GMT 1:00] AV: Panda Internet Security 2009 *On-access scanning enabled* (Updated) {4570FB70-5C9E-47E9-B16C-A3A6A06C4BF0} FW: Panda Personal Firewall 2009 *enabled* {7B090DC0-8905-4BAF-8040-FD98A41C8FB8} ============== Running Processes =============== C:\WINDOWS\system32\svchost -k DcomLaunch svchost.exe C:\WINDOWS\system32\svchost.exe -k netsvcs C:\Program Files\Panda Security\Panda Internet Security 2009\TPSrv.exe svchost.exe C:\PROGRAM FILES\PANDA SECURITY\PANDA INTERNET SECURITY 2009\WebProxy.exe svchost.exe C:\WINDOWS\system32\spoolsv.exe svchost.exe C:\WINDOWS\system32\svchost -k Panda C:\WINDOWS\runservice.exe C:\WINDOWS\system32\nvsvc32.exe C:\Program Files\Panda Security\Panda Internet Security 2009\PsCtrls.exe C:\Program Files\Panda Security\Panda Internet Security 2009\PavFnSvr.exe C:\Program Files\Common Files\Panda Security\PavShld\pavprsrv.exe C:\Program Files\Panda Security\Panda Internet Security 2009\PsImSvc.exe C:\Program Files\Panda Security\Panda Internet Security 2009\PskSvc.exe C:\Program Files\Panda Security\Panda Internet Security 2009\pavsrv51.exe C:\Program Files\Panda Security\Panda Internet Security 2009\AVENGINE.EXE c:\program files\panda security\panda internet security 2009\firewall\PSHOST.EXE C:\WINDOWS\Explorer.EXE C:\Program Files\Panda Security\Panda Internet Security 2009\ApvxdWin.exe C:\WINDOWS\system32\RUNDLL32.EXE C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\Codebox\BitMeter\BitMeter2.exe C:\WINDOWS\System32\svchost.exe -k HTTPFilter C:\Program Files\Panda Security\Panda Internet Security 2009\SRVLOAD.EXE C:\Program Files\Panda Security\Panda Internet Security 2009\PavBckPT.exe C:\Documents and Settings\Owner\Desktop\dds.pif ============== Pseudo HJT Report =============== uStart Page = hxxp://uk.yahoo.com/ uSearch Page = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sp/*http://uk.search.yahoo.com/ uSearch Bar = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html mDefault_Search_URL = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/su/*http://uk.search.yahoo.com/ mSearch Page = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sp/*http://uk.search.yahoo.com/ mSearch Bar = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/sb/*http://uk.docs.yahoo.com/info/bt_side.html uSearchURL,(Default) = hxxp://uk.red.clientapps.yahoo.com/customize/btyahoo/defaults/su/*http://uk.search.yahoo.com/ uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Yahoo! IE Services Button: {5bab4b5b-68bc-4b02-94d6-2fc0de4a7897} - c:\progra~1\yahoo!\common\yiesrvc.dll TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - uRun: [NBJ] "c:\program files\ahead\nero backitup\NBJ.exe" mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit mRun: [APVXDWIN] "c:\program files\panda security\panda internet security 2009\APVXDWIN.EXE" /s mRun: [SCANINICIO] "c:\program files\panda security\panda internet security 2009\Inicio.exe" mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe" mRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\isuspm.exe" -startup mRun: [nwiz] nwiz.exe /install mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [Alcmtr] ALCMTR.EXE dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\bitmet~1.lnk - c:\program files\codebox\bitmeter\BitMeter2.exe IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000 IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe IE: {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - c:\progra~1\yahoo!\common\yiesrvc.dll IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL Trusted Zone: motive.com\pbttbc.bt DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab Notify: avldr - avldr.dll ============= SERVICES / DRIVERS =============== R0 pavboot;Panda boot driver;c:\windows\system32\drivers\pavboot.sys [2009-3-6 28544] R1 APPFLT;App Filter Plugin;c:\windows\system32\drivers\APPFLT.SYS [2009-3-6 73728] R1 DSAFLT;DSA Filter Plugin;c:\windows\system32\drivers\dsaflt.sys [2009-3-6 52992] R1 FNETMON;NetMon Filter Plugin;c:\windows\system32\drivers\fnetmon.sys [2009-3-6 22072] R1 IDSFLT;Ids Filter Plugin;c:\windows\system32\drivers\idsflt.sys [2009-3-6 193792] R1 NETFLTDI;Panda Net Driver [TDI Layer];c:\windows\system32\drivers\NETFLTDI.SYS [2009-3-6 158848] R1 ShldDrv;Panda File Shield Driver;c:\windows\system32\drivers\ShlDrv51.sys [2009-3-6 41144] R1 WNMFLT;Wifi Monitor Filter Plugin;c:\windows\system32\drivers\wnmflt.sys [2009-3-6 46720] R2 Gwmsrv;Panda Goodware Cache Manager;c:\windows\system32\svchost -k panda –> c:\windows\system32\svchost -k Panda [?] R2 LicCtrlService;LicCtrl Service;c:\windows\Runservice.exe [2009-3-13 2560] R2 Panda Software Controller;Panda Software Controller;c:\program files\panda security\panda internet security 2009\PsCtrlS.exe [2009-3-6 181504] R2 PAVDRV;pavdrv;c:\windows\system32\drivers\pavdrv51.sys [2009-3-6 84024] R2 PAVFNSVR;Panda Function Service;c:\program files\panda security\panda internet security 2009\PavFnSvr.exe [2009-3-6 169216] R2 PavProc;Panda Process Protection Driver;c:\windows\system32\drivers\PavProc.sys [2009-3-6 179640] R2 PavPrSrv;Panda Process Protection Service;c:\program files\common files\panda security\pavshld\PavPrSrv.exe [2009-3-6 62768] R2 PAVSRV;Panda On-Access Anti-Malware Service;c:\program files\panda security\panda internet security 2009\PAVSRV51.EXE [2009-3-6 288512] R2 PskSvcRetail;Panda PSK service;c:\program files\panda security\panda internet security 2009\psksvc.exe [2009-3-6 28928] R3 AvFlt;Antivirus Filter Driver;c:\windows\system32\drivers\av5flt.sys –> c:\windows\system32\drivers\av5flt.sys [?] R3 MRVW225;802.11g/b Wireless LAN Dirver for Windows XP;c:\windows\system32\drivers\MRVW225.sys [2009-3-20 299904] R3 NETIMFLT01060034;PANDA NDIS IM Filter Miniport v1.6.0.34;c:\windows\system32\drivers\neti1634.sys [2009-3-6 197888] R3 PavSRK.sys;PavSRK.sys;\??\c:\windows\system32\pavsrk.sys –> c:\windows\system32\PavSRK.sys [?] R3 PavTPK.sys;PavTPK.sys;\??\c:\windows\system32\pavtpk.sys –> c:\windows\system32\PavTPK.sys [?] R3 SaiHA501;SaiHA501;c:\windows\system32\drivers\SaiHA501.sys [2009-3-7 176640] R3 SaiLA501;SaiLA501;c:\windows\system32\drivers\SaiLA501.sys [2009-3-7 14976] R3 SaiUA501;SaiUA501;c:\windows\system32\drivers\SaiUA501.sys [2009-3-7 27264] S2 gupdate1c9b07bf8029b9a;Google Update Service (gupdate1c9b07bf8029b9a);c:\program files\google\update\GoogleUpdate.exe [2009-3-29 133104] ============== File Associations =============== JSEFile=c:\progra~1\pandas~1\pandai~1\PAVSCRIP.EXE "%1" %* VBEFile=c:\progra~1\pandas~1\pandai~1\PAVSCRIP.EXE "%1" %* VBSFile=c:\progra~1\pandas~1\pandai~1\PAVSCRIP.EXE "%1" %* =============== Created Last 30 ================ 2009-06-27 09:47 –d—– c:\docume~1\alluse~1\applic~1\Spybot - Search & Destroy 2009-06-24 14:51 13,768 a——- c:\windows\system32\wpa.bak 2009-06-24 14:00 –d—– c:\docume~1\owner\applic~1\Malwarebytes 2009-06-24 13:59 –d—– c:\docume~1\alluse~1\applic~1\Malwarebytes 2009-06-20 21:02 409,600 a——- c:\windows\system32\wrap_oal.dll 2009-06-20 21:02 114,688 a——- c:\windows\system32\OpenAL32.dll ==================== Find3M ==================== 2009-07-08 18:32 1,132 a——- c:\windows\system32\drivers\APPFLTR.CFG.bck 2009-07-08 18:32 1,132 a——- c:\windows\system32\drivers\APPFLTR.CFG 2009-07-08 18:32 1,985 a–sh— c:\windows\system32\mmf.sys 2009-07-06 20:46 243,600 a——- c:\windows\system32\drivers\APPFCONT.DAT.bck 2009-07-06 20:46 243,600 a——- c:\windows\system32\drivers\APPFCONT.DAT 2009-05-07 16:32 345,600 a——- c:\windows\system32\localspl.dll 2009-04-29 05:46 666,624 a——- c:\windows\system32\wininet.dll 2009-04-29 05:46 81,920 a——- c:\windows\system32\ieencode.dll 2009-04-17 13:26 1,847,168 a——- c:\windows\system32\win32k.sys 2009-04-15 15:51 585,216 a——- c:\windows\system32\rpcrt4.dll 2009-03-11 18:41 87,608 a——- c:\docume~1\owner\applic~1\inst.exe 2009-03-11 18:41 47,360 a——- c:\docume~1\owner\applic~1\pcouffin.sys ============= FINISH: 18:42:53.96 ===============

Attachments:

Post #4
Hi,

The file you are concerned about is related to your Panda Security Program PSK Service.

R2 PskSvcRetail;Panda PSK service;c:\program files\panda security\panda internet security 2009\psksvc.exe [2009-3-6 28928]


We can do a couple of scans to make certain this is not malware related.

Please do the following:

Download TFC to your desktop
  • Close any open windows.
  • Double click the TFC icon to run the program
  • TFC will close all open programs itself in order to run,
  • Click the Start button to begin the process.
  • Allow TFC to run uninterrupted.
  • The program should not take long to finish it's job
  • Once its finished it should automatically reboot your machine,
  • if it doesn't, manually reboot to ensure a complete clean
It's normal after running TFC cleaner that the PC will be slower to boot the first time.

NEXT

Please download Malwarebytes' Anti-Malware
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish, so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected. <– very important
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart. (See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the entire report in your next reply.

Extra Note:If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.



NEXT

Run an on-line scan with Kaspersky

Using Internet Explorer or Firefox, visit Kaspersky On-line Scanner

1. Click Accept, when prompted to download and install the program files and database of malware definitions.
2. To optimize scanning time and produce a more sensible report for review:
  • Close any open programs
  • Turn off the real time scanner of any existing antivirus program while performing the online scan
3. Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
  • Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
  • Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
  • Do NOT be alarmed by what you see in the report. Many of the finds have likely been quarantined.
  • Click View scan report at the bottom.

    [external image: Posted Image]
  • Click the Save as Text button to save the file to your desktop so that you may post it in your next reply


In your next reply please include
  • MBAM Log
  • Kaspersky report
Post #6
Hi,

Well those scans are clean.

How is the computer behaving?

Are there any outstanding issues?

Try this program:

Download and run Auslogics Disc Defragmenter

If you are still having issues, you might want to contact Panda, or uninstall and re-install the program after a defrag, the installation may be corrupt.
Post #7
CatByte hi. Thank you so much for your expert advice and the time you gave to help me. I am much happier now I know the file is one of Pandas although why they didn't inform me of this after I sent their labs a copy I just don't know. Anyway my computer is going well except that when I was trying to get rid of that problem file before I looked for help here, I discovered that my System Restore is not working so sometime this weekend I'll go to your Windows section and look for some advice there. Once again many thanks for all your effort on my behalf. :notworthy:
Post #8
Hi,



Please do this to restore your system restore

log in as administrator,

go to start, then run.

Type the following commands into the run box one after the other:

first type> regsvr32 jscript.dll > hit enter
now type> regsvr32 vbscript.dll > hit enter

your system restore should now be restored.
Post #12
Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI