willb4ever
Topic Starter
Hello,
I'm following up for the topic located at: http://forums.whatthetech.com/Help_Infecti…al_t111184.html
I was just able to follow the last set of instructions today.
Here is my new OTL log:
All processes killed
========== OTL ==========
C:\Documents and Settings\Denise\Local Settings\Application Data\Mh3jm32txN moved successfully.
C:\Documents and Settings\All Users\Application Data\Mh3jm32txN moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41044 bytes
User: Denise
->Temp folder emptied: 311830471 bytes
->Temporary Internet Files folder emptied: 136149033 bytes
->Java cache emptied: 1483856 bytes
->FireFox cache emptied: 126907767 bytes
->Flash cache emptied: 18429724 bytes
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33666 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2573933 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2176856 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2475995 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 10949938 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 1746 bytes
Total Files Cleaned = 585.00 mb
[EMPTYFLASH]
User: All Users
User: Default User
->Flash cache emptied: 0 bytes
User: Denise
->Flash cache emptied: 0 bytes
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0.00 mb
OTL by OldTimer - Version 3.1.37.3 log created on 04042010_131741
Files\Folders moved on Reboot…
Registry entries deleted on Reboot…
Here is the MalwareBytes log:
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Database version: 3954
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
4/4/2010 2:26:37 PM
mbam-log-2010-04-04 (14-26-37).txt
Scan type: Quick scan
Objects scanned: 101109
Time elapsed: 23 minute(s), 57 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CLASSES_ROOT\.exe\shell\open\command\(default) (Hijack.ExeFile) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Thanks.
I'm following up for the topic located at: http://forums.whatthetech.com/Help_Infecti…al_t111184.html
I was just able to follow the last set of instructions today.
Here is my new OTL log:
All processes killed
========== OTL ==========
C:\Documents and Settings\Denise\Local Settings\Application Data\Mh3jm32txN moved successfully.
C:\Documents and Settings\All Users\Application Data\Mh3jm32txN moved successfully.
========== COMMANDS ==========
[EMPTYTEMP]
User: All Users
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41044 bytes
User: Denise
->Temp folder emptied: 311830471 bytes
->Temporary Internet Files folder emptied: 136149033 bytes
->Java cache emptied: 1483856 bytes
->FireFox cache emptied: 126907767 bytes
->Flash cache emptied: 18429724 bytes
User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33666 bytes
User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 2573933 bytes
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2176856 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 2475995 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 10949938 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 1746 bytes
Total Files Cleaned = 585.00 mb
[EMPTYFLASH]
User: All Users
User: Default User
->Flash cache emptied: 0 bytes
User: Denise
->Flash cache emptied: 0 bytes
User: LocalService
User: NetworkService
Total Flash Files Cleaned = 0.00 mb
OTL by OldTimer - Version 3.1.37.3 log created on 04042010_131741
Files\Folders moved on Reboot…
Registry entries deleted on Reboot…
Here is the MalwareBytes log:
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Database version: 3954
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702
4/4/2010 2:26:37 PM
mbam-log-2010-04-04 (14-26-37).txt
Scan type: Quick scan
Objects scanned: 101109
Time elapsed: 23 minute(s), 57 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CLASSES_ROOT\.exe\shell\open\command\(default) (Hijack.ExeFile) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Thanks.