trojan horse hider.mpr [Closed]

also should i also tick the scan archives and scan for potentially unsafe applications

Yes please try again and if you still have problems let me know.

also should i also tick the scan archives and scan for potentially unsafe applications

No

ok finally done this is the malware bytes log and im going to paste the eset log below this one. Malwarebytes Anti-Malware 1.62.0.1300 www.malwarebytes.org Database version: v2012.07.13.06 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 8.0.7601.17514 buddy :: BUDDY-TOSH [administrator] 13/07/2012 13:39:24 mbam-log-2012-07-13 (13-43-45).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 225139 Time elapsed: 2 minute(s), 50 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 2 HKCR\AppID\{11C27351-716B-4052-9361-E3B0A3F8221C} (Adware.ClickPotato) -> No action taken. HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> No action taken. Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Users\buddy\Downloads\Setup.exe (Adware.HotBar.Gen) -> No action taken. (end) This is the eset log file C:\Program Files (x86)\Common Files\ZugoInstaller.exe Win32/Toolbar.Zugo application C:\Users\buddy\AppData\Local\Akamai\Languages\chs.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\cht.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\csy.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\dan.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\deu.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\esp.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\fin.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\fra.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\ita.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\jpn.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\kor.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\nld.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\nor.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\plk.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\ptb.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\ptg.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\rus.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\sve.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Local\Akamai\Languages\trk.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.exe a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\freebl3.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\javaxpcomglue.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\js3250.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\mozctl.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\mozctlx.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\MSVCP71.DLL a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\msvcr71.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\nspr4.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\sqlite3.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\ssl3.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\updater.exe a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\xpicleanup.exe a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\xpidl.exe a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner-stub.exe a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\components\auth.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\plugins\npnul32.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\OpenCandy\OpenCandy_3065C309BBC64819955F574B34C8BBD2\registrybooster(5).exe a variant of Win32/RegistryBooster application C:\Users\buddy\AppData\Roaming\Spotify\Data\gnsdk_dsp.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\Spotify\Data\gnsdk_musicid_file.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\AppData\Roaming\Spotify\Data\gnsdk_sdkmanager.dll a variant of Win32/Ramnit.T virus C:\Users\buddy\Desktop\applications\FreeYouTubeDownloaderSetup.exe multiple threats C:\Users\buddy\Desktop\applications\VLCSetup.exe a variant of Win32/Adware.HotBar.H application C:\Works\MSWorks\Common\MSShared\Textconv\msvcr71.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\msvcr71.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfc80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfc80u.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfcm80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfcm80u.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\msvcm80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\msvcp80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\msvcr80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfc80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfc80u.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfcm80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfcm80u.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfc80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfc80u.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfcm80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfcm80u.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\p6hpravq.lm8\msvcm80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\p6hpravq.lm8\msvcp80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\p6hpravq.lm8\msvcr80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\r6hpravq.lm8\msvcm80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\r6hpravq.lm8\msvcp80.dll a variant of Win32/Ramnit.T virus C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\r6hpravq.lm8\msvcr80.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\binkw32.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\Bnclient.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\BNUpdate.exe a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Client.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2CMP.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Common.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2DDraw.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Direct3D.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Game.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Gdi.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2gfx.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Glide.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Lang.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Launch.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2MCPClient.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Multi.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Net.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2sound.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2VidTst.exe a variant of Win32/Ramnit.T virus D:\d2\Diablo II\D2Win.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\Fog.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\Game.exe a variant of Win32/Ramnit.T virus D:\d2\Diablo II\ijl11.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\SmackW32.dll a variant of Win32/Ramnit.T virus D:\d2\Diablo II\Storm.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\cew.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\dmcr.exe a variant of Win32/Ramnit.T virus D:\games\Art of War\drvmgt.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\httpc.exe a variant of Win32/Ramnit.T virus D:\games\Art of War\HView.exe a variant of Win32/Ramnit.T virus D:\games\Art of War\ScenarioEditor.exe a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Algeria.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Austria.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Bavaria.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\England.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\France.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\German.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Holland.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Piemont.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Poland.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Portugalia.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Russia.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Saksinia.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Spain.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Sveden.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Turcia.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Ukraine.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\AI\Venecia.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\History_battl\Denbar.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\History_battl\Gogenfridberg.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\History_battl\MarstonMur.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\History_battl\Mook.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\History_battl\NewPort.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\History_battl\Rymnik.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Algeria\Missal01\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Algeria\Missal02\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Algeria\Missal04\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Algeria\Missal05\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau01\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau02\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau03\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau04\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau06\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau07\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau08\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau09\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Austria\Missau10\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Poland\Misspo01\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Prussia\Misspru01\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Prussia\Misspru02\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Prussia\Misspru03\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Prussia\Misspru04\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Prussia\Misspru05\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Saxony\Missax01\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Saxony\Missax02\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Saxony\Missax03\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Saxony\Missax04\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\Missions\Saxony\Missax05\Mission.dll a variant of Win32/Ramnit.T virus D:\games\Art of War\UserMissions\CMS_Start.dll a variant of Win32/Ramnit.T virus

I have bad news for you… You're not only dealing with Ramnit but you are also dealing with a lot of other malware as well. What I suggest in your case is to format and reinstall Windows. This because, Ramnit is a file infector which infects every exe present on your system. The problem with Ramnit is, this is a buggy file infector and that's why scanners cannot disinfect them properly either > result > files are corrupted, won't work anymore. And as I already explained, Ramnit infects every exe. This means that you may not delete these files, but they should be disinfected. And since it's a buggy virus, the files cannot be properly disinfected. This unfortunately means that this is a game over situation and there's nothing much you can do besides formatting and reinstalling Windows. Don't backup your files either, because when you backup exe files, they are also infected. You can however backup pictures and documents.

ahhhhh carp** i thought it was just a trojan aswell lol i think i got this through trying to stream a video and java popped up at the top saying install java to which i always click no but this one had run this once which i should of known was a trick really, oh well the only problem is when i bought my laptop from the shop it already came installed with windows 7 so i dont have the disc for it so im going to have to get a disc first also i know pics are fine what about videos and music? and one last thing is your picture of vegeta from dbz lol anyway thank you so much for all your help it has been interesting learning all this stuff and talking to you,thankyou taking time out of your schedule in trying to help me. thanks daniel

Yes I hate to be the bearer of bad news. You are more than welcome. I am just sorry we really can't do more.

What kind of a computer is it? Dell, HP….
——

Do not backup any executable files (.exe .scr .html or .htm) or compressed files (zip/cab/rar) files that may contain .exe or .scr files, but anything else SHOULD be ok.
———

and one last thing is your picture of vegeta from dbz lol

LOL!! Yes it is! Good observation.

i thought it was lol, i love dbz that was actually the cause of this i think i tried to watch it on a badsite when i clicked on the java thing lol oh well ill be morecarefull in the future. yeah im only taking .avi, mp3, mpeg, mp4 thats it nothing else and should i disable theautorun functions of windows so the infection cant carryy on and then run eset one more time to clean up a little.

oh and its a toshiba l500 satellite, 500gb hard drive but split into 2, dou core proccesser at 2.10 ghz

You know what….run ESET again and have it remove all threats and post the new log created. Lets see what happens.

ok no probs i shall post the logs once its done and restart my comp to see if it comes up with anything

this is the log file i have qaurintined the files and deleted them C:\Program Files (x86)\Common Files\ZugoInstaller.exe Win32/Toolbar.Zugo application cleaned by deleting - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\chs.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\cht.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\csy.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\dan.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\deu.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\esp.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\fin.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\fra.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\ita.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\jpn.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\kor.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\nld.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\nor.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\plk.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\ptb.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\ptg.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\rus.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\sve.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Local\Akamai\Languages\trk.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\crashreporter.exe a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\freebl3.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\javaxpcomglue.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\js3250.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\mozctl.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\mozctlx.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\MSVCP71.DLL a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\msvcr71.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\nspr4.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\sqlite3.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\ssl3.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\updater.exe a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\xpicleanup.exe a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\xpidl.exe a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\xulrunner-stub.exe a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\components\auth.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\LimeWire\browser\xulrunner\plugins\npnul32.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\OpenCandy\OpenCandy_3065C309BBC64819955F574B34C8BBD2\registrybooster(5).exe a variant of Win32/RegistryBooster application cleaned by deleting - quarantined C:\Users\buddy\AppData\Roaming\Spotify\Data\gnsdk_dsp.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\Spotify\Data\gnsdk_musicid_file.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\AppData\Roaming\Spotify\Data\gnsdk_sdkmanager.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Users\buddy\Desktop\applications\FreeYouTubeDownloaderSetup.exe multiple threats cleaned by deleting - quarantined C:\Users\buddy\Desktop\applications\VLCSetup.exe a variant of Win32/Adware.HotBar.H application cleaned by deleting - quarantined C:\Works\MSWorks\Common\MSShared\Textconv\msvcr71.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\msvcr71.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfc80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfc80u.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfcm80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\mfcm80u.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\msvcm80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\msvcp80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\system32\msvcr80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfc80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfc80u.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfcm80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\9ql1q2cs.lm8\mfcm80u.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfc80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfc80u.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfcm80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\bql1q2cs.lm8\mfcm80u.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\p6hpravq.lm8\msvcm80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\p6hpravq.lm8\msvcp80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\p6hpravq.lm8\msvcr80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\r6hpravq.lm8\msvcm80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\r6hpravq.lm8\msvcp80.dll a variant of Win32/Ramnit.T virus deleted - quarantined C:\Works\MSWorks\PFiles\MSWorks\Windows\winsxs\r6hpravq.lm8\msvcr80.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\binkw32.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\Bnclient.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\BNUpdate.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Client.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2CMP.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Common.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2DDraw.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Direct3D.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Game.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Gdi.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2gfx.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Glide.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Lang.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Launch.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2MCPClient.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Multi.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Net.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2sound.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2VidTst.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\D2Win.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\Fog.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\Game.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\ijl11.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\SmackW32.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\d2\Diablo II\Storm.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\cew.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\dmcr.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\drvmgt.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\httpc.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\HView.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\ScenarioEditor.exe a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Algeria.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Austria.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Bavaria.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\England.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\France.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\German.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Holland.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Piemont.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Poland.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Portugalia.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Russia.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Saksinia.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Spain.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Sveden.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Turcia.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Ukraine.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\AI\Venecia.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\History_battl\Denbar.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\History_battl\Gogenfridberg.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\History_battl\MarstonMur.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\History_battl\Mook.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\History_battl\NewPort.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\History_battl\Rymnik.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Algeria\Missal01\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Algeria\Missal02\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Algeria\Missal04\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Algeria\Missal05\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau01\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau02\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau03\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau04\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau06\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau07\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau08\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau09\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Austria\Missau10\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Poland\Misspo01\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Prussia\Misspru01\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Prussia\Misspru02\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Prussia\Misspru03\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Prussia\Misspru04\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Prussia\Misspru05\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Saxony\Missax01\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Saxony\Missax02\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Saxony\Missax03\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Saxony\Missax04\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\Missions\Saxony\Missax05\Mission.dll a variant of Win32/Ramnit.T virus deleted - quarantined D:\games\Art of War\UserMissions\CMS_Start.dll a variant of Win32/Ramnit.T virus deleted - quarantined going to restart my comp and do another eset scan which will take two hours again and ill see if the infection spread while i was scanning

Yes please do that and we will see what we have.

well its either a miracle or too good to be true but since i saw what files the ramnit was in i deleted all associated files all of my games like diablo and cossacks, ran antimalware multiple times and everything seems to be clean, my google chrome is working, my anti virus is on and not detecting anything, going to do one final eset scan and hopefully all clear i shall post you the log later on when its done, if thats ok.

Good to know. Please yes let me know about the next scan and then we can get some updates on your system.