Daemon
I'll try to make it as easy as possible. Click here to download Pocket Killbox by Option^Explicit. Extract it from the zip file to it's own folder - we will use it later.
Spyware / Malware / Virus Removal
Here Is My Log
30 min read
ffconfused
Okay, Pillbox is loaded and ready to go. Here is the scan results.
File C:\WINDOWS\n_xjtbdo.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\n_uzzhkq.dat infected by "TrojanDownloader.Win32.Agent.bq" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\n_luztvq.dat infected by "TrojanDownloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javaei32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atceao.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlyg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlim.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apilj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sysmf.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ntyk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ieup.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ieyj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlkc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipce32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iebt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfckr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apppz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iesn32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\msvd.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcpp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ntet32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlrq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\tphvmo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winaz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netqx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlis.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkgr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlum32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crdl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ocyohk.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkqx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\syscv.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\cwtybf.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlym.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlik32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\estdrp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mstn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crlm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\pcqvsp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addgp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crhj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javaov.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\uapmwo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apipu32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crst32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\nter32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkua32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\rgayyn.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iiwtyo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\aoaojp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlnl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javavq32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winqs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apiwi.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipbb.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipkt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apinh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netdx32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlui.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcwp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javazg32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winpc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winzj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\pidgfe.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcgn32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcwv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\xxiemx.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apipm32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkou32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\bbsozg.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crrl.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\syset32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\nthk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlwd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addjv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\msoy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\d3ft32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netmx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ntqz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkrk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crkt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apinw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crii32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkcq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winjp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netct32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlmo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addea32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ljmnb.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkdy.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\wqkduw.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ippo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ieba32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winyy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javabj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkgx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ntoh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ksarnh.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfclt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\appet32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apibs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlra32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apisj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\d3ru.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\applw32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addwp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sysat.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\igabrh.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crex.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\appwz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\d3wn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iegk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipph32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winse.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\vnplhz.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apilz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\auaqpp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcba32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\appkd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addue.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crrj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\msjr32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javafa32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\mfcyq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\msgg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iphl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iesc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javaua32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sysud.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addvz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sysix.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\msxg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\netfv.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addtf.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\nethw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\apiut.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\winno.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\ntkn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\winpe.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\mfcne.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addan.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\msfk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javacy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crlh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\apiji.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appfr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\ipdw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\apima32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\mfcxz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crsd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appsz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iphe32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sdkxm32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\cruv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sdkjw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iecf32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\apixv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\winqb.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\systl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\ipco.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javaql.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iexz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\netgh.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iedj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3lj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sysmj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addzt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\netgk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\mfcxc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\msct.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addjd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\winkk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crvw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\mfcaw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3hs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appwr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\netnz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javavm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\cryk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\apihy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\netuo.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iemg.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3oo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javati32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\atlzs32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appuf32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appev32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sdkbi32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appyt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\atlau.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\apinu32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3lm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3jl.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\appjj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3ou.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\atlxh.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\ntoy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\addio.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sysot.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\mfcio32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sdkkx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\d3nk32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\ntpx32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\wingt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crqd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crdq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\iewr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\javawp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\ntqh.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\crts.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\SYSTEM\sysfu.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iesn32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\msvd.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcpp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ntet32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlrq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\tphvmo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winaz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netqx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlis.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkgr.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlum32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crdl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ocyohk.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkqx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\syscv.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\cwtybf.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlym.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlik32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\estdrp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mstn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crlm.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\pcqvsp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addgp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crhj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javaov.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apipu32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crst32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkua32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\rgayyn.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iiwtyo.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\aoaojp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlnl32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javavq32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winqs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apiwi.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipbb.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipkt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apinh32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netdx32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlui.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcwp32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javazg32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winpc32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winzj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\pidgfe.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcgn32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcwv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\xxiemx.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apipm32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkou32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\bbsozg.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crrl.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\syset32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\nthk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlwd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addjv32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\msoy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\d3ft32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netmx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ntqz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkrk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crkt.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apinw.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crii32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkcq.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winjp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\netct32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlmo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addea32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ljmnb.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkdy.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\wqkduw.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ippo32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ieba32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winyy32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\javabj.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sdkgx.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ksarnh.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfclt32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\appet32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apibs.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\atlra32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apisj32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\d3ru.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\applw32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\addwp.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\sysat.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\igabrh.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\crex.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\appwz32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\d3wn.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\iegk.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\ipph32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\winse.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\vnplhz.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\apilz.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\auaqpp.dat infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\mfcba32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
File C:\WINDOWS\appkd32.dll infected by "Trojan-Downloader.Win32.Agent.an" Virus. Action Taken: No Action Taken.
Daemon
Start TheKillbox, copy and paste each of the following lines into the "Full Path of File to Delete" box in Killbox, and click the red button with the white X on it after each. Keep track of any files it tells you either could not be found or could not be deleted, as you'll need those later:
C:\WINDOWS\addea32.dll
C:\WINDOWS\addgp.dll
C:\WINDOWS\addjv32.dll
C:\WINDOWS\addwp.dll
C:\WINDOWS\aoaojp.dat
C:\WINDOWS\apibs.dll
C:\WINDOWS\apilj32.dll
C:\WINDOWS\apilz.dll
C:\WINDOWS\apinh32.dll
C:\WINDOWS\apinw.dll
C:\WINDOWS\apipm32.dll
C:\WINDOWS\apipu32.dll
C:\WINDOWS\apisj32.dll
C:\WINDOWS\apiwi.dll
C:\WINDOWS\appet32.dll
C:\WINDOWS\appkd32.dll
C:\WINDOWS\applw32.dll
C:\WINDOWS\apppz.dll
C:\WINDOWS\appwz32.dll
C:\WINDOWS\atceao.dat
C:\WINDOWS\atlik32.dll
C:\WINDOWS\atlim.dll
C:\WINDOWS\atlis.dll
C:\WINDOWS\atlkc32.dll
C:\WINDOWS\atlmo32.dll
C:\WINDOWS\atlnl32.dll
C:\WINDOWS\atlra32.dll
C:\WINDOWS\atlrq.dll
C:\WINDOWS\atlui.dll
C:\WINDOWS\atlum32.dll
C:\WINDOWS\atlwd32.dll
C:\WINDOWS\atlyg.dll
C:\WINDOWS\atlym.dll
C:\WINDOWS\auaqpp.dat
C:\WINDOWS\bbsozg.dat
C:\WINDOWS\crdl32.dll
C:\WINDOWS\crex.dll
C:\WINDOWS\crhj32.dll
C:\WINDOWS\crii32.dll
C:\WINDOWS\crkt.dll
C:\WINDOWS\crlm.dll
C:\WINDOWS\crrl.dll
C:\WINDOWS\crst32.dll
C:\WINDOWS\cwtybf.dat
C:\WINDOWS\d3ft32.dll
C:\WINDOWS\d3ru.dll
C:\WINDOWS\d3wn.dll
C:\WINDOWS\estdrp.dat
C:\WINDOWS\ieba32.dll
C:\WINDOWS\iebt.dll
C:\WINDOWS\iegk.dll
C:\WINDOWS\iesn32.dll
C:\WINDOWS\ieup.dll
C:\WINDOWS\ieyj32.dll
C:\WINDOWS\igabrh.dat
C:\WINDOWS\iiwtyo.dat
C:\WINDOWS\ipbb.dll
C:\WINDOWS\ipce32.dll
C:\WINDOWS\ipkt32.dll
C:\WINDOWS\ipph32.dll
C:\WINDOWS\ippo32.dll
C:\WINDOWS\javabj.dll
C:\WINDOWS\javaei32.dll
C:\WINDOWS\javaov.dll
C:\WINDOWS\javavq32.dll
C:\WINDOWS\javazg32.dll
C:\WINDOWS\ksarnh.dat
C:\WINDOWS\ljmnb.dll
C:\WINDOWS\mfcba32.dll
C:\WINDOWS\mfcgn32.dll
C:\WINDOWS\mfckr.dll
C:\WINDOWS\mfclt32.dll
C:\WINDOWS\mfcpp32.dll
C:\WINDOWS\mfcwp32.dll
C:\WINDOWS\mfcwv32.dll
C:\WINDOWS\msoy32.dll
C:\WINDOWS\mstn.dll
C:\WINDOWS\msvd.dll
C:\WINDOWS\n_luztvq.dat
C:\WINDOWS\n_uzzhkq.dat
C:\WINDOWS\n_xjtbdo.dat
C:\WINDOWS\netct32.dll
C:\WINDOWS\netdx32.dll
C:\WINDOWS\netmx.dll
C:\WINDOWS\netqx.dll
C:\WINDOWS\nter32.dll
C:\WINDOWS\ntet32.dll
C:\WINDOWS\nthk.dll
C:\WINDOWS\ntoh32.dll
C:\WINDOWS\ntqz32.dll
C:\WINDOWS\ntyk32.dll
C:\WINDOWS\ocyohk.dat
C:\WINDOWS\pcqvsp.dat
C:\WINDOWS\pidgfe.dat
C:\WINDOWS\rgayyn.dat
C:\WINDOWS\sdkcq.dll
C:\WINDOWS\sdkdy.dll
C:\WINDOWS\sdkgr.dll
C:\WINDOWS\sdkgx.dll
C:\WINDOWS\sdkou32.dll
C:\WINDOWS\sdkqx.dll
C:\WINDOWS\sdkrk.dll
C:\WINDOWS\sdkua32.dll
C:\WINDOWS\sysat.dll
C:\WINDOWS\syscv.dll
C:\WINDOWS\syset32.dll
C:\WINDOWS\sysmf.dll
C:\WINDOWS\SYSTEM\addan.dll
C:\WINDOWS\SYSTEM\addio.dll
C:\WINDOWS\SYSTEM\addjd32.dll
C:\WINDOWS\SYSTEM\addtf.dll
C:\WINDOWS\SYSTEM\addue.dll
C:\WINDOWS\SYSTEM\addvz32.dll
C:\WINDOWS\SYSTEM\addzt32.dll
C:\WINDOWS\SYSTEM\apihy32.dll
C:\WINDOWS\SYSTEM\apiji.dll
C:\WINDOWS\SYSTEM\apima32.dll
C:\WINDOWS\SYSTEM\apinu32.dll
C:\WINDOWS\SYSTEM\apiut.dll
C:\WINDOWS\SYSTEM\apixv32.dll
C:\WINDOWS\SYSTEM\appev32.dll
C:\WINDOWS\SYSTEM\appfr.dll
C:\WINDOWS\SYSTEM\appjj32.dll
C:\WINDOWS\SYSTEM\appsz.dll
C:\WINDOWS\SYSTEM\appuf32.dll
C:\WINDOWS\SYSTEM\appwr.dll
C:\WINDOWS\SYSTEM\appyt32.dll
C:\WINDOWS\SYSTEM\atlau.dll
C:\WINDOWS\SYSTEM\atlxh.dll
C:\WINDOWS\SYSTEM\atlzs32.dll
C:\WINDOWS\SYSTEM\crdq.dll
C:\WINDOWS\SYSTEM\crlh32.dll
C:\WINDOWS\SYSTEM\crqd32.dll
C:\WINDOWS\SYSTEM\crrj32.dll
C:\WINDOWS\SYSTEM\crsd32.dll
C:\WINDOWS\SYSTEM\crts.dll
C:\WINDOWS\SYSTEM\cruv32.dll
C:\WINDOWS\SYSTEM\crvw.dll
C:\WINDOWS\SYSTEM\cryk.dll
C:\WINDOWS\SYSTEM\d3hs.dll
C:\WINDOWS\SYSTEM\d3jl.dll
C:\WINDOWS\SYSTEM\d3lj.dll
C:\WINDOWS\SYSTEM\d3lm.dll
C:\WINDOWS\SYSTEM\d3nk32.dll
C:\WINDOWS\SYSTEM\d3oo32.dll
C:\WINDOWS\SYSTEM\d3ou.dll
C:\WINDOWS\SYSTEM\iecf32.dll
C:\WINDOWS\SYSTEM\iedj32.dll
C:\WINDOWS\SYSTEM\iemg.dll
C:\WINDOWS\SYSTEM\iesc32.dll
C:\WINDOWS\SYSTEM\iewr.dll
C:\WINDOWS\SYSTEM\iexz.dll
C:\WINDOWS\SYSTEM\ipco.dll
C:\WINDOWS\SYSTEM\ipdw.dll
C:\WINDOWS\SYSTEM\iphe32.dll
C:\WINDOWS\SYSTEM\iphl32.dll
C:\WINDOWS\SYSTEM\javacy32.dll
C:\WINDOWS\SYSTEM\javafa32.dll
C:\WINDOWS\SYSTEM\javaql.dll
C:\WINDOWS\SYSTEM\javati32.dll
C:\WINDOWS\SYSTEM\javaua32.dll
C:\WINDOWS\SYSTEM\javavm.dll
C:\WINDOWS\SYSTEM\javawp32.dll
C:\WINDOWS\SYSTEM\mfcaw.dll
C:\WINDOWS\SYSTEM\mfcio32.dll
C:\WINDOWS\SYSTEM\mfcne.dll
C:\WINDOWS\SYSTEM\mfcxc32.dll
C:\WINDOWS\SYSTEM\mfcxz32.dll
C:\WINDOWS\SYSTEM\mfcyq.dll
C:\WINDOWS\SYSTEM\msct.dll
C:\WINDOWS\SYSTEM\msfk32.dll
C:\WINDOWS\SYSTEM\msgg.dll
C:\WINDOWS\SYSTEM\msjr32.dll
C:\WINDOWS\SYSTEM\msxg.dll
C:\WINDOWS\SYSTEM\netfv.dll
C:\WINDOWS\SYSTEM\netgh.dll
C:\WINDOWS\SYSTEM\netgk32.dll
C:\WINDOWS\SYSTEM\nethw.dll
C:\WINDOWS\SYSTEM\netnz32.dll
C:\WINDOWS\SYSTEM\netuo.dll
C:\WINDOWS\SYSTEM\ntkn.dll
C:\WINDOWS\SYSTEM\ntoy32.dll
C:\WINDOWS\SYSTEM\ntpx32.dll
C:\WINDOWS\SYSTEM\ntqh.dll
C:\WINDOWS\SYSTEM\sdkbi32.dll
C:\WINDOWS\SYSTEM\sdkjw.dll
C:\WINDOWS\SYSTEM\sdkkx.dll
C:\WINDOWS\SYSTEM\sdkxm32.dll
C:\WINDOWS\SYSTEM\sysfu.dll
C:\WINDOWS\SYSTEM\sysix.dll
C:\WINDOWS\SYSTEM\sysmj.dll
C:\WINDOWS\SYSTEM\sysot.dll
C:\WINDOWS\SYSTEM\systl32.dll
C:\WINDOWS\SYSTEM\sysud.dll
C:\WINDOWS\SYSTEM\wingt.dll
C:\WINDOWS\SYSTEM\winkk32.dll
C:\WINDOWS\SYSTEM\winno.dll
C:\WINDOWS\SYSTEM\winpe.dll
C:\WINDOWS\SYSTEM\winqb.dll
C:\WINDOWS\tphvmo.dat
C:\WINDOWS\uapmwo.dat
C:\WINDOWS\vnplhz.dat
C:\WINDOWS\winaz32.dll
C:\WINDOWS\winjp.dll
C:\WINDOWS\winpc32.dll
C:\WINDOWS\winqs.dll
C:\WINDOWS\winse.dll
C:\WINDOWS\winyy32.dll
C:\WINDOWS\winzj.dll
C:\WINDOWS\wqkduw.dat
C:\WINDOWS\xxiemx.dat
For the files that it either couldn't find or couldn't delete, in the killbox again this time, put a mark next to "Delete on Reboot". Copy and paste each file into the file name box, then click the red button with the X after each. It will ask you if you want to reboot each time you click it, answer NO until after you've pasted the last file name, at which time you should answer Yes.
Reboot if it doesn't do so automatically. Using Windows Explorer, navigate to the !Submit folder on the C:\ drive and delete it. Post a new mwavscan log when done.
C:\WINDOWS\addea32.dll
C:\WINDOWS\addgp.dll
C:\WINDOWS\addjv32.dll
C:\WINDOWS\addwp.dll
C:\WINDOWS\aoaojp.dat
C:\WINDOWS\apibs.dll
C:\WINDOWS\apilj32.dll
C:\WINDOWS\apilz.dll
C:\WINDOWS\apinh32.dll
C:\WINDOWS\apinw.dll
C:\WINDOWS\apipm32.dll
C:\WINDOWS\apipu32.dll
C:\WINDOWS\apisj32.dll
C:\WINDOWS\apiwi.dll
C:\WINDOWS\appet32.dll
C:\WINDOWS\appkd32.dll
C:\WINDOWS\applw32.dll
C:\WINDOWS\apppz.dll
C:\WINDOWS\appwz32.dll
C:\WINDOWS\atceao.dat
C:\WINDOWS\atlik32.dll
C:\WINDOWS\atlim.dll
C:\WINDOWS\atlis.dll
C:\WINDOWS\atlkc32.dll
C:\WINDOWS\atlmo32.dll
C:\WINDOWS\atlnl32.dll
C:\WINDOWS\atlra32.dll
C:\WINDOWS\atlrq.dll
C:\WINDOWS\atlui.dll
C:\WINDOWS\atlum32.dll
C:\WINDOWS\atlwd32.dll
C:\WINDOWS\atlyg.dll
C:\WINDOWS\atlym.dll
C:\WINDOWS\auaqpp.dat
C:\WINDOWS\bbsozg.dat
C:\WINDOWS\crdl32.dll
C:\WINDOWS\crex.dll
C:\WINDOWS\crhj32.dll
C:\WINDOWS\crii32.dll
C:\WINDOWS\crkt.dll
C:\WINDOWS\crlm.dll
C:\WINDOWS\crrl.dll
C:\WINDOWS\crst32.dll
C:\WINDOWS\cwtybf.dat
C:\WINDOWS\d3ft32.dll
C:\WINDOWS\d3ru.dll
C:\WINDOWS\d3wn.dll
C:\WINDOWS\estdrp.dat
C:\WINDOWS\ieba32.dll
C:\WINDOWS\iebt.dll
C:\WINDOWS\iegk.dll
C:\WINDOWS\iesn32.dll
C:\WINDOWS\ieup.dll
C:\WINDOWS\ieyj32.dll
C:\WINDOWS\igabrh.dat
C:\WINDOWS\iiwtyo.dat
C:\WINDOWS\ipbb.dll
C:\WINDOWS\ipce32.dll
C:\WINDOWS\ipkt32.dll
C:\WINDOWS\ipph32.dll
C:\WINDOWS\ippo32.dll
C:\WINDOWS\javabj.dll
C:\WINDOWS\javaei32.dll
C:\WINDOWS\javaov.dll
C:\WINDOWS\javavq32.dll
C:\WINDOWS\javazg32.dll
C:\WINDOWS\ksarnh.dat
C:\WINDOWS\ljmnb.dll
C:\WINDOWS\mfcba32.dll
C:\WINDOWS\mfcgn32.dll
C:\WINDOWS\mfckr.dll
C:\WINDOWS\mfclt32.dll
C:\WINDOWS\mfcpp32.dll
C:\WINDOWS\mfcwp32.dll
C:\WINDOWS\mfcwv32.dll
C:\WINDOWS\msoy32.dll
C:\WINDOWS\mstn.dll
C:\WINDOWS\msvd.dll
C:\WINDOWS\n_luztvq.dat
C:\WINDOWS\n_uzzhkq.dat
C:\WINDOWS\n_xjtbdo.dat
C:\WINDOWS\netct32.dll
C:\WINDOWS\netdx32.dll
C:\WINDOWS\netmx.dll
C:\WINDOWS\netqx.dll
C:\WINDOWS\nter32.dll
C:\WINDOWS\ntet32.dll
C:\WINDOWS\nthk.dll
C:\WINDOWS\ntoh32.dll
C:\WINDOWS\ntqz32.dll
C:\WINDOWS\ntyk32.dll
C:\WINDOWS\ocyohk.dat
C:\WINDOWS\pcqvsp.dat
C:\WINDOWS\pidgfe.dat
C:\WINDOWS\rgayyn.dat
C:\WINDOWS\sdkcq.dll
C:\WINDOWS\sdkdy.dll
C:\WINDOWS\sdkgr.dll
C:\WINDOWS\sdkgx.dll
C:\WINDOWS\sdkou32.dll
C:\WINDOWS\sdkqx.dll
C:\WINDOWS\sdkrk.dll
C:\WINDOWS\sdkua32.dll
C:\WINDOWS\sysat.dll
C:\WINDOWS\syscv.dll
C:\WINDOWS\syset32.dll
C:\WINDOWS\sysmf.dll
C:\WINDOWS\SYSTEM\addan.dll
C:\WINDOWS\SYSTEM\addio.dll
C:\WINDOWS\SYSTEM\addjd32.dll
C:\WINDOWS\SYSTEM\addtf.dll
C:\WINDOWS\SYSTEM\addue.dll
C:\WINDOWS\SYSTEM\addvz32.dll
C:\WINDOWS\SYSTEM\addzt32.dll
C:\WINDOWS\SYSTEM\apihy32.dll
C:\WINDOWS\SYSTEM\apiji.dll
C:\WINDOWS\SYSTEM\apima32.dll
C:\WINDOWS\SYSTEM\apinu32.dll
C:\WINDOWS\SYSTEM\apiut.dll
C:\WINDOWS\SYSTEM\apixv32.dll
C:\WINDOWS\SYSTEM\appev32.dll
C:\WINDOWS\SYSTEM\appfr.dll
C:\WINDOWS\SYSTEM\appjj32.dll
C:\WINDOWS\SYSTEM\appsz.dll
C:\WINDOWS\SYSTEM\appuf32.dll
C:\WINDOWS\SYSTEM\appwr.dll
C:\WINDOWS\SYSTEM\appyt32.dll
C:\WINDOWS\SYSTEM\atlau.dll
C:\WINDOWS\SYSTEM\atlxh.dll
C:\WINDOWS\SYSTEM\atlzs32.dll
C:\WINDOWS\SYSTEM\crdq.dll
C:\WINDOWS\SYSTEM\crlh32.dll
C:\WINDOWS\SYSTEM\crqd32.dll
C:\WINDOWS\SYSTEM\crrj32.dll
C:\WINDOWS\SYSTEM\crsd32.dll
C:\WINDOWS\SYSTEM\crts.dll
C:\WINDOWS\SYSTEM\cruv32.dll
C:\WINDOWS\SYSTEM\crvw.dll
C:\WINDOWS\SYSTEM\cryk.dll
C:\WINDOWS\SYSTEM\d3hs.dll
C:\WINDOWS\SYSTEM\d3jl.dll
C:\WINDOWS\SYSTEM\d3lj.dll
C:\WINDOWS\SYSTEM\d3lm.dll
C:\WINDOWS\SYSTEM\d3nk32.dll
C:\WINDOWS\SYSTEM\d3oo32.dll
C:\WINDOWS\SYSTEM\d3ou.dll
C:\WINDOWS\SYSTEM\iecf32.dll
C:\WINDOWS\SYSTEM\iedj32.dll
C:\WINDOWS\SYSTEM\iemg.dll
C:\WINDOWS\SYSTEM\iesc32.dll
C:\WINDOWS\SYSTEM\iewr.dll
C:\WINDOWS\SYSTEM\iexz.dll
C:\WINDOWS\SYSTEM\ipco.dll
C:\WINDOWS\SYSTEM\ipdw.dll
C:\WINDOWS\SYSTEM\iphe32.dll
C:\WINDOWS\SYSTEM\iphl32.dll
C:\WINDOWS\SYSTEM\javacy32.dll
C:\WINDOWS\SYSTEM\javafa32.dll
C:\WINDOWS\SYSTEM\javaql.dll
C:\WINDOWS\SYSTEM\javati32.dll
C:\WINDOWS\SYSTEM\javaua32.dll
C:\WINDOWS\SYSTEM\javavm.dll
C:\WINDOWS\SYSTEM\javawp32.dll
C:\WINDOWS\SYSTEM\mfcaw.dll
C:\WINDOWS\SYSTEM\mfcio32.dll
C:\WINDOWS\SYSTEM\mfcne.dll
C:\WINDOWS\SYSTEM\mfcxc32.dll
C:\WINDOWS\SYSTEM\mfcxz32.dll
C:\WINDOWS\SYSTEM\mfcyq.dll
C:\WINDOWS\SYSTEM\msct.dll
C:\WINDOWS\SYSTEM\msfk32.dll
C:\WINDOWS\SYSTEM\msgg.dll
C:\WINDOWS\SYSTEM\msjr32.dll
C:\WINDOWS\SYSTEM\msxg.dll
C:\WINDOWS\SYSTEM\netfv.dll
C:\WINDOWS\SYSTEM\netgh.dll
C:\WINDOWS\SYSTEM\netgk32.dll
C:\WINDOWS\SYSTEM\nethw.dll
C:\WINDOWS\SYSTEM\netnz32.dll
C:\WINDOWS\SYSTEM\netuo.dll
C:\WINDOWS\SYSTEM\ntkn.dll
C:\WINDOWS\SYSTEM\ntoy32.dll
C:\WINDOWS\SYSTEM\ntpx32.dll
C:\WINDOWS\SYSTEM\ntqh.dll
C:\WINDOWS\SYSTEM\sdkbi32.dll
C:\WINDOWS\SYSTEM\sdkjw.dll
C:\WINDOWS\SYSTEM\sdkkx.dll
C:\WINDOWS\SYSTEM\sdkxm32.dll
C:\WINDOWS\SYSTEM\sysfu.dll
C:\WINDOWS\SYSTEM\sysix.dll
C:\WINDOWS\SYSTEM\sysmj.dll
C:\WINDOWS\SYSTEM\sysot.dll
C:\WINDOWS\SYSTEM\systl32.dll
C:\WINDOWS\SYSTEM\sysud.dll
C:\WINDOWS\SYSTEM\wingt.dll
C:\WINDOWS\SYSTEM\winkk32.dll
C:\WINDOWS\SYSTEM\winno.dll
C:\WINDOWS\SYSTEM\winpe.dll
C:\WINDOWS\SYSTEM\winqb.dll
C:\WINDOWS\tphvmo.dat
C:\WINDOWS\uapmwo.dat
C:\WINDOWS\vnplhz.dat
C:\WINDOWS\winaz32.dll
C:\WINDOWS\winjp.dll
C:\WINDOWS\winpc32.dll
C:\WINDOWS\winqs.dll
C:\WINDOWS\winse.dll
C:\WINDOWS\winyy32.dll
C:\WINDOWS\winzj.dll
C:\WINDOWS\wqkduw.dat
C:\WINDOWS\xxiemx.dat
For the files that it either couldn't find or couldn't delete, in the killbox again this time, put a mark next to "Delete on Reboot". Copy and paste each file into the file name box, then click the red button with the X after each. It will ask you if you want to reboot each time you click it, answer NO until after you've pasted the last file name, at which time you should answer Yes.
Reboot if it doesn't do so automatically. Using Windows Explorer, navigate to the !Submit folder on the C:\ drive and delete it. Post a new mwavscan log when done.
ffconfused
Okay, I used killbox and killed everything, ran another mwav scan and killed the one trojan it found. It does find one error when scanning, here it is. Anything to worry about? Otherwise it looks good. I also have an updated HJT log too. After the mwav section.. Thanks BTW, Housecall did eventually run and delete 1 file.
Wed Dec 22 11:46:28 2004 => ***** Scanning Service Files *****
Wed Dec 22 11:46:28 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Wed Dec 22 11:46:28 2004 => Scanning File C:\WINDOWS\system32\drivers\rt.sys
Wed Dec 22 11:46:28 2004 => Scanning File C:\WINDOWS\System32\Drivers\wdmfs.sys
Wed Dec 22 11:46:29 2004 => ERROR!!! Invalid Entry \SystemRoot\System\atmarpc.sys in SYSTEM\CurrentControlSet\Services\ATMARPC…
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\SYSTEM\PSTORES.EXE
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\System32\drivers\ctlface.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\System32\drivers\sfman.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\system32\drivers\redbook.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\system32\drivers\sbemul.sys
Logfile of HijackThis v1.99.0
Scan saved at 1:38:05 PM, on 12/22/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
Wed Dec 22 11:46:28 2004 => ***** Scanning Service Files *****
Wed Dec 22 11:46:28 2004 => Scanning HKLM\SYSTEM\CurrentControlSet\Services
Wed Dec 22 11:46:28 2004 => Scanning File C:\WINDOWS\system32\drivers\rt.sys
Wed Dec 22 11:46:28 2004 => Scanning File C:\WINDOWS\System32\Drivers\wdmfs.sys
Wed Dec 22 11:46:29 2004 => ERROR!!! Invalid Entry \SystemRoot\System\atmarpc.sys in SYSTEM\CurrentControlSet\Services\ATMARPC…
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\SYSTEM\PSTORES.EXE
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\System32\drivers\ctlface.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\System32\drivers\sfman.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\system32\drivers\wdmaud.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\system32\drivers\redbook.sys
Wed Dec 22 11:46:29 2004 => Scanning File C:\WINDOWS\system32\drivers\sbemul.sys
Logfile of HijackThis v1.99.0
Scan saved at 1:38:05 PM, on 12/22/2004
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\SSDPSRV.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\DEVLDR16.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\PROGRAM FILES\ADAPTEC\EASY CD CREATOR 5\DIRECTCD\DIRECTCD.EXE
C:\PROGRAM FILES\NORTON ANTIVIRUS\NAVAPW32.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE
C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\NETGUARD.EXE
C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\ZEROSPYWARE.EXE
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\WORKS SHARED\WKCALREM.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\DESKTOP\HIJACKTHIS\HIJACKTHIS.EXE
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: MSN Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\EN-US\MSNTB.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRAM FILES\YAHOO!\COMPANION\INSTALLS\CPN\YCOMP5_5_7_0.DLL
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [AdaptecDirectCD] "C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe"
O4 - HKLM\..\Run: [Norton Auto-Protect] C:\PROGRA~1\NORTON~1\NAVAPW32.EXE /LOADQUIET
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [HP Component Manager] "C:\PROGRAM FILES\HP\HPCORETECH\HPCMPMGR.EXE"
O4 - HKLM\..\Run: [devldr16.exe] C:\WINDOWS\SYSTEM\devldr16.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
O4 - HKLM\..\RunServices: [MSNIA] C:\PROGRA~1\MSN\MSNIA\MSNIASVC.EXE
O4 - HKLM\..\RunOnce: [RemoveFileUAF] "C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\FileDeleter.exe" C:\PROGRAM FILES\FBM SOFTWARE\ZEROSPYWARE 2004\uaf.dat
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [NetGuard] "C:\Program Files\FBM Software\ZeroSpyware 2004\NetGuard.exe" -STARTUP
O4 - HKCU\..\Run: [ZeroSpyware] "C:\Program Files\FBM Software\ZeroSpyware 2004\ZeroSpyware.exe" -STARTUP
O4 - Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Startup: Microsoft Works Calendar Reminders.lnk = C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
O8 - Extra context menu item: &Define - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O8 - Extra context menu item: Look Up in &Encyclopedia - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra 'Tools' menuitem: Encarta Encyclopedia - {2FDEF853-0759-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_ENC.HTM
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra 'Tools' menuitem: Send to PDA… - {32B4916D-1E13-450C-8A7A-35AC12E90EF9} - C:\Program Files\PDAMate\PDAMateIE.dll
O9 - Extra button: Dell Home - {08DCFC6C-B6E4-480C-95A4-FC64F37B787E} - http://www.dellnet.com (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'fbm.dll' missing
O12 - Plugin for .mid: C:\PROGRA~1\INTERN~1\PLUGINS\npqtplugin2.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.dellnet.com
O16 - DPF: {F621C77F-126F-4CA5-BC8B-2F64189E93A5} (CWDL_DownLoadControl Class) - http://www.callwave.com/include/cab/CWDL_DownLoad.CAB
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://bin.mcafee.com/molbin/shared/mcinsc…55/mcinsctl.cab
O16 - DPF: {0C568603-D79D-11D2-87A7-00C04FF158BB} (BrowseFolderPopup Class) - http://download.mcafee.com/molbin/Shared/MGBrwFld.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} - http://download.mcafee.com/molbin/iss-loc/…284/mcfscan.cab
O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-0-3-0.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061…all/xscan53.cab
O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.bitdefender.com/scan/Msie/bitdefender.cab
O16 - DPF: {C81B5180-AFD1-41A3-97E1-99E8D254DB98} (CSS Web Installer Class) - http://www.commandondemand.com/eval/cod/cabs/cssweb.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\PROGRAM FILES\HP\HPCORETECH\COMP\HPUIPROT.DLL
Daemon
That looks good now - how is it running?
ffconfused
Everything seems to be running good. Thanks a bunch
Daemon
You're welcome - glad to help 
To help keep you clean follow the recommendations in Tony's article here:
So how did I get infected in the first place?
As this problem has been resolved the topic will be closed. If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
The subject of the email must be "Reopen". Include your post username and details about why you need it reopened, with a valid link to your post.
To help keep you clean follow the recommendations in Tony's article here:
So how did I get infected in the first place?
As this problem has been resolved the topic will be closed. If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
The subject of the email must be "Reopen". Include your post username and details about why you need it reopened, with a valid link to your post.
Ask AI
AI can make mistakes. Check the cited posts. Archived advice can be out-of-date
Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI