I am posting a new thread and posting the names of files from the log of Symantec that have Trojans on them, they can not deleted in safe mode. I still get a message from Symantec that Trojans have been discovered.
Logfile of HijackThis v1.99.1
Scan saved at 21:15:00, on 30/05/05
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v5.50 (5.50.4134.0600)
Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\RTVSCN95.EXE
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\DEFWATCH.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\INTERNAT.EXE
C:\WINDOWS\SYSTEM\SYSTRAY.EXE
C:\WINDOWS\TASKMON.EXE
C:\PROGRAM FILES\SYMANTEC ANTIVIRUS\VPTRAY.EXE
C:\PROGRAM FILES\WINAMP\WINAMPA.EXE
C:\PROGRAM FILES\MICROSOFT HARDWARE\MOUSE\POINT32.EXE
C:\PROGRAM FILES\HUJACKTHIS\SPYBOT - SEARCH & DESTROY\TEATIMER.EXE
C:\WINDOWS\START MENU\PROGRAMS\STARTUP\WINVNC.EXE
C:\WINDOWS\SYSTEM\WMIEXE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\PROGRAM FILES\HUJACKTHIS\HIJACKTHIS.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.bbc.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = wwwproxy.bbc.com:8080
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\HUJACK~1\SPYBOT~1\SDHELPER.DLL
O4 - HKLM\..\Run: [internat.exe] internat.exe
O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\vptray.exe
O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [POINTER] point32.exe
O4 - HKLM\..\RunServices: [rtvscn95] C:\PROGRA~1\SYMANT~1\rtvscn95.exe
O4 - HKLM\..\RunServices: [defwatch] C:\PROGRA~1\SYMANT~1\defwatch.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\hujackthis\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: WinVNC.exe
O4 - Startup: Shortcut to WinVNC.lnk = C:\Program Files\ORL\VNC\WinVNC.exe
O17 - HKLM\System\CCS\Services\VxD\MSTCP: Domain = bbc.com
O17 - HKLM\System\CCS\Services\VxD\MSTCP: NameServer = 128.139.6.1,128.
Date,Filename,Virus Name,Virus Type,Action Taken,Computer,User,Original Location,Status,Current Location,Primary Action,
30/05/05 cghaee.dll,Trojan.StartPage.M,File,Quarantined C:\WINDOWS\SYSTEM\,Infected,Quarantine,
30/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine,
29/05/05 enoddak.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,Clean virus from file,Quarantine
29/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine
26/05/05 fico.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,Clean virus from file,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\GH0T6BMX\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine
26/05/05 ipno.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 nfaj.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine
26/05/05 hpcj.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 nccfed.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine
26/05/05 us3432xzcb.exe,Trojan.StartPage,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 intronsad.exe,Download.Trojan,File,Left alone in Quarantine,C:\WINDOWS\SYSTEM\,Infected,Quarantine,
26/05/05 izxczxcr.exe,Download.Trojan,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine,(log only)
26/05/05 cjkcc.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine (log only)
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine(log only)
26/05/05 balh.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\7YOCIOO0\,Infected,Quarantine only
26/05/05 gdpjlea.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\GH0T6BMX\,Infected,Quarantine,
26/05/05 boepmb.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine
26/05/05 jnahga.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
26/05/05 Dummy[1].class,Trojan.ByteVerify,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
26/05/05 BlackBox[1].class,Trojan.ByteVerify,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
26/05/05 1[1].htm,MHTMLRedir.Exploit,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\0YOUZPS5\,Infected,Quarantine
26/05/05 aham.exe,Trojan.Desktophijack,File,Left alone in Quarantine, C:\WINDOWS\TEMP\,Infected,Quarantine
26/05/05 loader[1].exe,Trojan.Desktophijack,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\83MBQJGZ\,Infected,Quarantine
26/05/05 ighl.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine,
26/05/05 mgcl.exe,Trojan.Desktophijack,File,Left alone in Quarantine, C:\WINDOWS\TEMP\,Infected,Quarantine,
26/05/05 loader[1].exe,Trojan.Desktophijack,File,Left alone in Quarantine ,C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine,
26/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\7YOCIOO0\,Infected,Quarantine
25/05/05 ipno.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,Clean virus from file,Quarantine
25/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine,
24/05/05 nfaj.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,Clean virus from file,Quarantine
24/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine,
23/05/05 hpcj.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,
23/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\6789JKCD\,Infected,Quarantine,
22/05/05 nccfed.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,Clean virus from file,
22/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine,
19/05/05 us3432xzcb.exe,Trojan.StartPage,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,
19/05/05 izxczxcr.exe,Download.Trojan,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,
19/05/05 intronsad.exe,Download.Trojan,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,
19/05/05 cjkcc.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine,
19/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine
19/05/05 balh.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
19/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\7YOCIOO0\,Infected,Quarantine
19/05/05 gdpjlea.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
19/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\GH0T6BMX\,Infected,Quarantine
19/05/05 boepmb.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
19/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine
19/05/05 jnahga.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
19/05/05 Dummy[1].class,Trojan.ByteVerify,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
19/05/05 BlackBox[1].class,Trojan.ByteVerify,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
19/05/05 1[1].htm,MHTMLRedir.Exploit,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\0YOUZPS5\,Infected,Quarantine
19/05/05 aham.exe,Trojan.Desktophijack,File,Left alone in Quarantine,C:\WINDOWS\TEMP\,Infected,Quarantine
19/05/05 loader[1].exe,Trojan.Desktophijack,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\83MBQJGZ\,Infected,Quarantine
19/05/05 ighl.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
19/05/05 mgcl.exe,Trojan.Desktophijack,File,Left alone in Quarantine, C:\WINDOWS\TEMP\,Infected,Quarantine
19/05/05 loader[1].exe,Trojan.Desktophijack,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine,
19/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\7YOCIOO0\,Infected,Quarantine
19/05/05 cjkcc.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine,Clean virus from file,Quarantine
19/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine
18/05/05 balh.dll,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\SYSTEM\,Infected,Quarantine
18/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined, C:\WINDOWS\Temporary Internet Files\Content.IE5\7YOCIOO0\,Infected,Quarantine
17/05/05 gdpjlea.dll,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\SYSTEM\,Infected,Quarantine
17/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine, C:\WINDOWS\Temporary Internet Files\Content.IE5\GH0T6BMX\,Infected,Quarantine
17/05/05 boepmb.dll,Trojan.StartPage.M,File,Left alone in Quarantine,C:\WINDOWS\SYSTEM\,Infected,Quarantine
17/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\KRS5O7KX\,Infected,Quarantine
17/05/05 jnahga.dll,Trojan.StartPage.M,File,Left alone in Quarantine,C:\WINDOWS\SYSTEM\,Infected,Quarantine
17/05/05 Dummy[1].class,Trojan.ByteVerify,File,Left alone in Quarantine,LIBRARY_,library,C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
17/05/05 BlackBox[1].class,Trojan.ByteVerify,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
17/05/05 1[1].htm,MHTMLRedir.Exploit,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\0YOUZPS5\,Infected,Quarantine
17/05/05 aham.exe,Trojan.Desktophijack,File,Left alone in Quarantine,C:\WINDOWS\TEMP\,Infected,Quarantine,Clean virus from file,Leave alone (log only),Defwatch Scan
17/05/05 loader[1].exe,Trojan.Desktophijack,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\83MBQJGZ\,Infected,Quarantine
17/05/05 ighl.dll,Trojan.StartPage.M,File,Left alone in Quarantine,C:\WINDOWS\SYSTEM\,Infected,Quarantine
17/05/05 mgcl.exe,Trojan.Desktophijack,File,Left alone in Quarantine,C:\WINDOWS\TEMP\,Infected,Quarantine
17/05/05 loader[1].exe,Trojan.Desktophijack,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\0TAFKTMJ\,Infected,Quarantine
17/05/05 m[1].bin,Trojan.StartPage.M,File,Left alone in Quarantine,C:\WINDOWS\Temporary Internet Files\Content.IE5\7YOCIOO0\,Infected,Quarantine
17/05/05 gdpjlea.dll,Trojan.StartPage.M,File,Quarantined,C:\WINDOWS\SYSTEM\,Infected,Quarantine
17/05/05 m[1].bin,Trojan.StartPage.M,File,Quarantined,C:\WINDOWS\Temporary Internet Files\Content.IE5\GH0T6BMX\,Infected,Quarantine
