What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Infected Browser [<ab>]

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #17
:wavey: I'm back, sorry for the delay. Here is the final HJT (hopefully)

Thank you

Logfile of HijackThis v1.99.0
Scan saved at 3:14:45 PM, on 12/21/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\GWMDMMSG.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SAMSUNG\LASERSMMGR\SSMMGR.EXE
C:\PROGRAM FILES\SYMANTEC\ACT\SIDEACT.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\DESKTOP\SPY SOTWARE\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by CableONE.net
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX (file missing)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar1.dll
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Web Entry - {B4E30F61-16D9-11D3-85D1-005004229569} - C:\LOTUS\ORGANIZE\BANDOBJS.DLL
O15 - Trusted IP range: (HKLM)
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.meadroid.com/scriptx/ScriptX.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac…ta/SymAData.cab
O18 - Protocol: g7ps - {9EACF0FB-4FC7-436E-989B-3197142AD979} - C:\PROGRA~1\COMMON~1\G7PS\SHARED~1\G7PSDLL\G7PS.DLL
Post #18 last edited
Hmm.. I'm not happy yet. With only HJT running, have it fix:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
O15 - Trusted IP range: (HKLM)

Click here to download mwavscan. Double-click it to run it, select all local drives, scan all files, press 'scan' and when it is completed, anything found will be displayed in the lower pane. Highlight it, CTRL C and paste it in your next reply.
Post #19
Daemon, Here is the results of the eScan I did. Below that will be the recent log of hijack. What next? File C:\WINDOWS\d3nb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_ccieca.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_wzqgec.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netrr.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_tgxfkj.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_wrcmrg.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ierb.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apieh.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3at.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_upsfvo.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_nhvnff.txt infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_cyddkp.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appjt32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netwb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_mevuvu.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcod.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntjg32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3gp.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winso32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ioojcv.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntgy.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msyo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appfa32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netpt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msqj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_jhmhya.dat infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\nzvnbw.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntbo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\zzewv.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\rggser.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlae32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkva32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_hvytyk.txt infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_dkmnqd.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apiio.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieer.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iekd.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winps.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_ogxbza.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javawo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crpm32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3wb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3ry32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javavp.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winhu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crmo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winod.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlte32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javaxa.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipdc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netdn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_daisrt.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfccq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javajk32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3na.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdksp32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netux.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msja.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crqb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iedq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_rpthrw.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_dqitmp.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_fbrqwe.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crjv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appvt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msfw.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcuf32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appfk.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syshm.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_nbrlcb.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_asmhqv.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_flyibs.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_aqmhdg.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appkz.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_imbmog.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_gggbun.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netvl.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3bi.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipzk32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javall32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msez32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javaxu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcir32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntes.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysik.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syscv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieda.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntqc32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntbw.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mstf32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msns32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipzy32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkpn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javask.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apixe32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysio.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntuq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javabs.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msei32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlff32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crba32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msak.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appyx32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msmq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_lckjqu.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_kgbpeq.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipbi32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_knqrhj.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_pemjng.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iesx32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntpw32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysrm32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netqq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysia32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appil32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntlh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iptc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crzn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_hzxfyt.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_krmrqo.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieij.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bxxdqw.dat infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ulqcd.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ieyl.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ieyv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3sa.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atljx.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nthr.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiyt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apitj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netzi32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netmt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netxr.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkmj32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msmc32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winhg32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appcc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlvn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntky32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javair.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysvl32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysiz.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntbi.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crea.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addzg.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addux32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkdc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlaa.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netaq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netox32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ieqo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiop32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntru32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wingu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3wb.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apprh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkko.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crth.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netdn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysrp32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlga32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javalh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ievc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netit32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apisz32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addfx.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msew.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ipnq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlsu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iefm.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crfn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crse32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiev.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3ak32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apihe.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crug32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mspd.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3gi.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\syshh.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apirq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wines32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netep.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlbj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appty.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntcf32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appxs32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlpz32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nttt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netpv32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netbs32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netci32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mshb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winkd32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javaan.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appkw.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netxe.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netwb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iett32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addfs.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntsv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appec32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlkb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appeh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ipqj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iptt32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winwy.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3ia32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiyg.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crip.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysiv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javavp32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mslz32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javale.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiul.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crgx32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkos.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysxf.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkcj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msqh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msrt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\added.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appaq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcqg.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Desktop\backups\backup-20041217-163027-129.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Desktop\spy sotware\backups\backup-20041220-131638-453.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM32\secure32.txt infected by "Trojan.JS.StartPage.r" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ulqcd.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ieyl.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ieyv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3sa.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atljx.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nthr.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiyt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apitj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netzi32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netmt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netxr.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkmj32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msmc32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winhg32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appcc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlvn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntky32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javair.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysvl32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysiz.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntbi.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crea.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addzg.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addux32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkdc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlaa.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netaq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netox32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ieqo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiop32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntru32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wingu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3wb.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apprh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkko.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crth.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netdn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysrp32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlga32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javalh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ievc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netit32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apisz32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addfx.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msew.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ipnq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlsu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iefm.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crfn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crse32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiev.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3ak32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apihe.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crug32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mspd.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3gi.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\syshh.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apirq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\wines32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netep.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlbj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appty.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntcf32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appxs32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlpz32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\nttt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netpv32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netbs32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netci32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mshb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winkd32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javaan.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appkw.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netxe.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\netwb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iett32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\addfs.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ntsv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appec32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\atlkb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appeh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\ipqj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\iptt32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\winwy.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\d3ia32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiyg.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crip.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysiv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javavp32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mslz32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\javale.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\apiul.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\crgx32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkos.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sysxf.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\sdkcj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msqh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\msrt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\added.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\appaq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\SYSTEM\mfcqg.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\OPTIONS\CABS\WIN98_66.CAB tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\OPTIONS\CABS\OLS\CSI\USKIT.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\OPTIONS\CABS\OLS\AT&T\ATTKIT.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\OPTIONS\CABS\OLS\AOL\AOL40AU.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\OPTIONS\CABS\OLS\AOL\AOL40CA.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\OPTIONS\CABS\OLS\AOL\AOL40UK.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\OPTIONS\CABS\OLS\AOL\AOL40US.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\WINDOWS\d3nb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_ccieca.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_wzqgec.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netrr.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_tgxfkj.log infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_wrcmrg.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ierb.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apieh.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3at.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_upsfvo.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_nhvnff.txt infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_cyddkp.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appjt32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netwb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_mevuvu.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcod.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntjg32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3gp.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winso32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ioojcv.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntgy.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msyo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appfa32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netpt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msqj.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_jhmhya.dat infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\nzvnbw.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntbo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\zzewv.dll infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\rggser.dat infected by "TrojanDownloader.Win32.WinShow.ak" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlae32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkva32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_hvytyk.txt infected by "Trojan-Downloader.Win32.Agent.bc" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_dkmnqd.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apiio.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieer.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iekd.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winps.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_ogxbza.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javawo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crpm32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3wb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3ry32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javavp.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winhu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crmo32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\winod.dll infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlte32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javaxa.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipdc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netdn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_daisrt.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfccq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javajk32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3na.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdksp32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netux.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msja.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crqb32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iedq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_rpthrw.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_dqitmp.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_fbrqwe.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crjv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appvt.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msfw.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcuf32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appfk.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syshm.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_nbrlcb.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_asmhqv.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_flyibs.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_aqmhdg.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appkz.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_imbmog.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_gggbun.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netvl.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\d3bi.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipzk32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javall32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msez32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javaxu.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mfcir32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntes.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysik.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\syscv.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieda.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntqc32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntbw.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\mstf32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msns32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipzy32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sdkpn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javask.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\apixe32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysio.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntuq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\javabs.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msei32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\atlff32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crba32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msak.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appyx32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\msmq32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_lckjqu.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_kgbpeq.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ipbi32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_knqrhj.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_pemjng.log infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iesx32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntpw32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysrm32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\netqq.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\sysia32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\appil32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ntlh32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\iptc.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\crzn32.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_hzxfyt.txt infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\n_krmrqo.dat infected by "Trojan-Downloader.Win32.Agent.db" Virus. Action Taken: No Action Taken. File C:\WINDOWS\ieij.dll infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\WINDOWS\bxxdqw.dat infected by "Trojan-Downloader.Win32.Agent.ap" Virus. Action Taken: No Action Taken. File C:\Classic glass\WxBugSetup27.exe infected by "not-a-virus:AdWare.Gator.1023" Virus. Action Taken: No Action Taken. File C:\Program Files\Online Services\AT&T\ATTSETUP.EXE tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\Online Services\CompuServe\cs2000us.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. AND THE RECENT LOG OF HIJACK: Logfile of HijackThis v1.99.0 Scan saved at 4:35:20 PM, on 12/21/2004 Platform: Windows 98 SE (Win9x 4.10.2222A) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\SYSTEM\KERNEL32.DLL C:\WINDOWS\SYSTEM\MSGSRV32.EXE C:\WINDOWS\SYSTEM\SPOOL32.EXE C:\WINDOWS\SYSTEM\MPREXE.EXE C:\WINDOWS\GWMDMMSG.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE C:\WINDOWS\SYSTEM\MSTASK.EXE C:\WINDOWS\SYSTEM\RPCSS.EXE C:\WINDOWS\SYSTEM\mmtask.tsk C:\WINDOWS\EXPLORER.EXE C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCS
Post #20 last edited
Yikes! It's amazing what lurks beneath the surface. Click here to download Pocket Killbox by Option^Explicit. Extract it from the zip file then double-click on Killbox.exe to run it.

Copy and paste each of the following lines into the "Full Path of File to Delete" box in Killbox, and click the red button with the white X on it after each. Keep track of any files it tells you either could not be found or could not be deleted, as you'll need those later:

C:\Classic glass\WxBugSetup27.exe
C:\WINDOWS\apieh.dll
C:\WINDOWS\apiio.dll
C:\WINDOWS\apixe32.dll
C:\WINDOWS\appfa32.dll
C:\WINDOWS\appfk.dll
C:\WINDOWS\appil32.dll
C:\WINDOWS\appjt32.dll
C:\WINDOWS\appkz.dll
C:\WINDOWS\appvt.dll
C:\WINDOWS\appyx32.dll
C:\WINDOWS\atlae32.dll
C:\WINDOWS\atlff32.dll
C:\WINDOWS\atlte32.dll
C:\WINDOWS\bxxdqw.dat
C:\WINDOWS\crba32.dll
C:\WINDOWS\crjv.dll
C:\WINDOWS\crmo32.dll
C:\WINDOWS\crpm32.dll
C:\WINDOWS\crqb32.dll
C:\WINDOWS\crzn32.dll
C:\WINDOWS\d3at.dll
C:\WINDOWS\d3bi.dll
C:\WINDOWS\d3gp.dll
C:\WINDOWS\d3na.dll
C:\WINDOWS\d3nb32.dll
C:\WINDOWS\d3ry32.dll
C:\WINDOWS\d3wb32.dll
C:\WINDOWS\Desktop\backups\backup-20041217-163027-129.dll
C:\WINDOWS\Desktop\spy sotware\backups\backup-20041220-131638-453.dll
C:\WINDOWS\ieda.dll
C:\WINDOWS\iedq32.dll
C:\WINDOWS\ieer.dll
C:\WINDOWS\ieij.dll
C:\WINDOWS\iekd.dll
C:\WINDOWS\ierb.dll
C:\WINDOWS\iesx32.dll
C:\WINDOWS\ioojcv.dat
C:\WINDOWS\ipbi32.dll
C:\WINDOWS\ipdc.dll
C:\WINDOWS\iptc.dll
C:\WINDOWS\ipzk32.dll
C:\WINDOWS\ipzy32.dll
C:\WINDOWS\javabs.dll
C:\WINDOWS\javajk32.dll
C:\WINDOWS\javall32.dll
C:\WINDOWS\javask.dll
C:\WINDOWS\javavp.dll
C:\WINDOWS\javawo32.dll
C:\WINDOWS\javaxa.dll
C:\WINDOWS\javaxu.dll
C:\WINDOWS\mfccq32.dll
C:\WINDOWS\mfcir32.dll
C:\WINDOWS\mfcod.dll
C:\WINDOWS\mfcuf32.dll
C:\WINDOWS\msak.dll
C:\WINDOWS\msei32.dll
C:\WINDOWS\msez32.dll
C:\WINDOWS\msfw.dll
C:\WINDOWS\msja.dll
C:\WINDOWS\msmq32.dll
C:\WINDOWS\msns32.dll
C:\WINDOWS\msqj.dll
C:\WINDOWS\mstf32.dll
C:\WINDOWS\msyo32.dll
C:\WINDOWS\n_aqmhdg.log
C:\WINDOWS\n_asmhqv.log
C:\WINDOWS\n_ccieca.log
C:\WINDOWS\n_cyddkp.dat
C:\WINDOWS\n_daisrt.txt
C:\WINDOWS\n_dkmnqd.dat
C:\WINDOWS\n_dqitmp.txt
C:\WINDOWS\n_fbrqwe.log
C:\WINDOWS\n_flyibs.txt
C:\WINDOWS\n_gggbun.log
C:\WINDOWS\n_hvytyk.txt
C:\WINDOWS\n_hzxfyt.txt
C:\WINDOWS\n_imbmog.log
C:\WINDOWS\n_jhmhya.dat
C:\WINDOWS\n_kgbpeq.txt
C:\WINDOWS\n_knqrhj.txt
C:\WINDOWS\n_krmrqo.dat
C:\WINDOWS\n_lckjqu.dat
C:\WINDOWS\n_mevuvu.log
C:\WINDOWS\n_nbrlcb.dat
C:\WINDOWS\n_nhvnff.txt
C:\WINDOWS\n_ogxbza.log
C:\WINDOWS\n_pemjng.log
C:\WINDOWS\n_rpthrw.log
C:\WINDOWS\n_tgxfkj.log
C:\WINDOWS\n_upsfvo.txt
C:\WINDOWS\n_wrcmrg.log
C:\WINDOWS\n_wzqgec.dat
C:\WINDOWS\netdn32.dll
C:\WINDOWS\netpt.dll
C:\WINDOWS\netqq.dll
C:\WINDOWS\netrr.dll
C:\WINDOWS\netux.dll
C:\WINDOWS\netvl.dll
C:\WINDOWS\netwb32.dll
C:\WINDOWS\ntbo32.dll
C:\WINDOWS\ntbw.dll
C:\WINDOWS\ntes.dll
C:\WINDOWS\ntgy.dll
C:\WINDOWS\ntjg32.dll
C:\WINDOWS\ntlh32.dll
C:\WINDOWS\ntpw32.dll
C:\WINDOWS\ntqc32.dll
C:\WINDOWS\ntuq.dll
C:\WINDOWS\nzvnbw.dat
C:\WINDOWS\rggser.dat
C:\WINDOWS\sdkpn32.dll
C:\WINDOWS\sdksp32.dll
C:\WINDOWS\sdkva32.dll
C:\WINDOWS\syscv.dll
C:\WINDOWS\syshm.dll
C:\WINDOWS\sysia32.dll
C:\WINDOWS\sysik.dll
C:\WINDOWS\sysio.dll
C:\WINDOWS\sysrm32.dll
C:\WINDOWS\SYSTEM32\secure32.txt
C:\WINDOWS\SYSTEM\added.dll
C:\WINDOWS\SYSTEM\addfs.dll
C:\WINDOWS\SYSTEM\addfx.dll
C:\WINDOWS\SYSTEM\addux32.dll
C:\WINDOWS\SYSTEM\addzg.dll
C:\WINDOWS\SYSTEM\apiev.dll
C:\WINDOWS\SYSTEM\apihe.dll
C:\WINDOWS\SYSTEM\apiop32.dll
C:\WINDOWS\SYSTEM\apirq.dll
C:\WINDOWS\SYSTEM\apisz32.dll
C:\WINDOWS\SYSTEM\apitj.dll
C:\WINDOWS\SYSTEM\apiul.dll
C:\WINDOWS\SYSTEM\apiyg.dll
C:\WINDOWS\SYSTEM\apiyt.dll
C:\WINDOWS\SYSTEM\appaq32.dll
C:\WINDOWS\SYSTEM\appcc.dll
C:\WINDOWS\SYSTEM\appec32.dll
C:\WINDOWS\SYSTEM\appeh32.dll
C:\WINDOWS\SYSTEM\appkw.dll
C:\WINDOWS\SYSTEM\apprh32.dll
C:\WINDOWS\SYSTEM\appty.dll
C:\WINDOWS\SYSTEM\appxs32.dll
C:\WINDOWS\SYSTEM\atlaa.dll
C:\WINDOWS\SYSTEM\atlbj.dll
C:\WINDOWS\SYSTEM\atlga32.dll
C:\WINDOWS\SYSTEM\atljx.dll
C:\WINDOWS\SYSTEM\atlkb32.dll
C:\WINDOWS\SYSTEM\atlpz32.dll
C:\WINDOWS\SYSTEM\atlsu.dll
C:\WINDOWS\SYSTEM\atlvn32.dll
C:\WINDOWS\SYSTEM\crea.dll
C:\WINDOWS\SYSTEM\crfn32.dll
C:\WINDOWS\SYSTEM\crgx32.dll
C:\WINDOWS\SYSTEM\crip.dll
C:\WINDOWS\SYSTEM\crse32.dll
C:\WINDOWS\SYSTEM\crth.dll
C:\WINDOWS\SYSTEM\crug32.dll
C:\WINDOWS\SYSTEM\d3ak32.dll
C:\WINDOWS\SYSTEM\d3gi.dll
C:\WINDOWS\SYSTEM\d3ia32.dll
C:\WINDOWS\SYSTEM\d3sa.dll
C:\WINDOWS\SYSTEM\d3wb.dll
C:\WINDOWS\SYSTEM\iefm.dll
C:\WINDOWS\SYSTEM\ieqo32.dll
C:\WINDOWS\SYSTEM\iett32.dll
C:\WINDOWS\SYSTEM\ievc.dll
C:\WINDOWS\SYSTEM\ieyl.dll
C:\WINDOWS\SYSTEM\ieyv.dll
C:\WINDOWS\SYSTEM\ipnq32.dll
C:\WINDOWS\SYSTEM\ipqj.dll
C:\WINDOWS\SYSTEM\iptt32.dll
C:\WINDOWS\SYSTEM\javaan.dll
C:\WINDOWS\SYSTEM\javair.dll
C:\WINDOWS\SYSTEM\javale.dll
C:\WINDOWS\SYSTEM\javalh32.dll
C:\WINDOWS\SYSTEM\javavp32.dll
C:\WINDOWS\SYSTEM\mfcqg.dll
C:\WINDOWS\SYSTEM\msew.dll
C:\WINDOWS\SYSTEM\mshb32.dll
C:\WINDOWS\SYSTEM\mslz32.dll
C:\WINDOWS\SYSTEM\msmc32.dll
C:\WINDOWS\SYSTEM\mspd.dll
C:\WINDOWS\SYSTEM\msqh32.dll
C:\WINDOWS\SYSTEM\msrt.dll
C:\WINDOWS\SYSTEM\netaq.dll
C:\WINDOWS\SYSTEM\netbs32.dll
C:\WINDOWS\SYSTEM\netci32.dll
C:\WINDOWS\SYSTEM\netdn32.dll
C:\WINDOWS\SYSTEM\netep.dll
C:\WINDOWS\SYSTEM\netit32.dll
C:\WINDOWS\SYSTEM\netmt.dll
C:\WINDOWS\SYSTEM\netox32.dll
C:\WINDOWS\SYSTEM\netpv32.dll
C:\WINDOWS\SYSTEM\netwb32.dll
C:\WINDOWS\SYSTEM\netxe.dll
C:\WINDOWS\SYSTEM\netxr.dll
C:\WINDOWS\SYSTEM\netzi32.dll
C:\WINDOWS\SYSTEM\ntbi.dll
C:\WINDOWS\SYSTEM\ntcf32.dll
C:\WINDOWS\SYSTEM\nthr.dll
C:\WINDOWS\SYSTEM\ntky32.dll
C:\WINDOWS\SYSTEM\ntru32.dll
C:\WINDOWS\SYSTEM\ntsv.dll
C:\WINDOWS\SYSTEM\nttt.dll
C:\WINDOWS\SYSTEM\sdkcj.dll
C:\WINDOWS\SYSTEM\sdkdc.dll
C:\WINDOWS\SYSTEM\sdkko.dll
C:\WINDOWS\SYSTEM\sdkmj32.dll
C:\WINDOWS\SYSTEM\sdkos.dll
C:\WINDOWS\SYSTEM\syshh.dll
C:\WINDOWS\SYSTEM\sysiv.dll
C:\WINDOWS\SYSTEM\sysiz.dll
C:\WINDOWS\SYSTEM\sysrp32.dll
C:\WINDOWS\SYSTEM\sysvl32.dll
C:\WINDOWS\SYSTEM\sysxf.dll
C:\WINDOWS\SYSTEM\ulqcd.dll
C:\WINDOWS\SYSTEM\wines32.dll
C:\WINDOWS\SYSTEM\wingu.dll
C:\WINDOWS\SYSTEM\winhg32.dll
C:\WINDOWS\SYSTEM\winkd32.dll
C:\WINDOWS\SYSTEM\winwy.dll
C:\WINDOWS\winhu.dll
C:\WINDOWS\winod.dll
C:\WINDOWS\winps.dll
C:\WINDOWS\winso32.dll
C:\WINDOWS\zzewv.dll

For the files that it either couldn't find or couldn't delete, in the killbox again this time, put a mark next to "Delete on Reboot". Copy and paste each file into the file name box, then click the red button with the X after each. It will ask you if you want to reboot each time you click it, answer NO until after you've pasted the last file name, at which time you should answer Yes.

Reboot if it doesn't automatically, find and delete the C:\!Submit folder.

Post a new HJT log and mwavscan log again.
Post #21
Logfile of HijackThis v1.99.0
Scan saved at 9:16:06 AM, on 12/22/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\GWMDMMSG.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\SAMSUNG\LASERSMMGR\SSMMGR.EXE
C:\PROGRAM FILES\SYMANTEC\ACT\SIDEACT.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\TEMP\MWAVSCAN.COM
C:\WINDOWS\TEMP\KAVSS.EXE
C:\WINDOWS\DESKTOP\SPY SOTWARE\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by CableONE.net
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar1.dll
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O4 - HKCU\..\RunServices: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Web Entry - {B4E30F61-16D9-11D3-85D1-005004229569} - C:\LOTUS\ORGANIZE\BANDOBJS.DLL
O15 - Trusted IP range: (HKLM)
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.meadroid.com/scriptx/ScriptX.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac…ta/SymAData.cab
O18 - Protocol: g7ps - {9EACF0FB-4FC7-436E-989B-3197142AD979} - C:\PROGRA~1\COMMON~1\G7PS\SHARED~1\G7PSDLL\G7PS.DLL
Post #23
C:\WINDOWS\SYSTEM\atlpz32.dll was still detected through mwavescan, I must not have skipped over that file. I will delete it now with killbox…completed. Here is the hijack this log.


Logfile of HijackThis v1.99.0
Scan saved at 12:42:00 PM, on 12/22/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\GWMDMMSG.EXE
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\WINDOWS\TEMP\MWAVSCAN.COM
C:\WINDOWS\TEMP\KAVSS.EXE
C:\WINDOWS\DESKTOP\SPY SOTWARE\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by CableONE.net
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar1.dll
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O4 - HKCU\..\RunServices: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Web Entry - {B4E30F61-16D9-11D3-85D1-005004229569} - C:\LOTUS\ORGANIZE\BANDOBJS.DLL
O15 - Trusted IP range: (HKLM)
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.meadroid.com/scriptx/ScriptX.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac…ta/SymAData.cab
O18 - Protocol: g7ps - {9EACF0FB-4FC7-436E-989B-3197142AD979} - C:\PROGRA~1\COMMON~1\G7PS\SHARED~1\G7PSDLL\G7PS.DLL
Post #24
Fix these entries with HJT:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system\ulqcd.dll/sp.html#28129

Reboot when done and recheck with HJT. If they come back, disable Spysweeper and try again.
Post #25
I fixed the entries in HJTand rechecked. They did not come back, here is the log:



Logfile of HijackThis v1.99.0
Scan saved at 1:05:40 PM, on 12/22/2004
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\SPOOL32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\GWMDMMSG.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCEVTMGR.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCSETMGR.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\RPCSS.EXE
C:\WINDOWS\EXPLORER.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
C:\PROGRAM FILES\COMMON FILES\SYMANTEC SHARED\CCAPP.EXE
C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
C:\PROGRAM FILES\WEBROOT\SPY SWEEPER\SPYSWEEPER.EXE
C:\WINDOWS\DESKTOP\SPY SOTWARE\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer provided by CableONE.net
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\windows\googletoolbar1.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - c:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\windows\googletoolbar1.dll
O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe start
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [NAV CfgWiz] c:\Program Files\Common Files\Symantec Shared\CfgWiz.exe /GUID NAV /CMDLINE "REBOOT"
O4 - HKLM\..\Run: [EM_EXEC] C:\PROGRAM FILES\LOGITECH\MOUSEWARE\SYSTEM\EM_EXEC.EXE
O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Common Files\Symantec Shared\Script Blocking\SBServ.exe" -reg
O4 - HKLM\..\RunServices: [ccEvtMgr] "c:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"
O4 - HKLM\..\RunServices: [ccSetMgr] "c:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O4 - HKCU\..\RunServices: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SPYSWEEPER.EXE" /0
O8 - Extra context menu item: &Google Search - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Similar Pages - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Backward Links - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Translate into English - res://C:\WINDOWS\GOOGLETOOLBAR1.DLL/cmtrans.html
O9 - Extra button: Web Entry - {B4E30F61-16D9-11D3-85D1-005004229569} - C:\LOTUS\ORGANIZE\BANDOBJS.DLL
O15 - Trusted IP range: (HKLM)
O16 - DPF: {1663ed61-23eb-11d2-b92f-008048fdd814} (MeadCo ScriptX Basic) - http://www.meadroid.com/scriptx/ScriptX.cab
O16 - DPF: {E77C0D62-882A-456F-AD8F-7C6C9569B8C7} (ActiveDataObj Class) - https://www-secure.symantec.com/techsupp/ac…/ActiveData.cab
O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/ac…ta/SymAData.cab
O18 - Protocol: g7ps - {9EACF0FB-4FC7-436E-989B-3197142AD979} - C:\PROGRA~1\COMMON~1\G7PS\SHARED~1\G7PSDLL\G7PS.DLL
Post #27
Daemon, The Internet seems to be working better. No more pop-ups and its running faster. The only problem is our homepage will not change from MSN.com. Any suggestions. Thanks
Post #28
Have you tried going into IE>Tools>Internet Options and setting it. If it won't hold, disable SpySweeper whilst you change it. Let me know how you get on.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI