What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

cxx916xxp

5 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My computer has been running fine but when I ran a Kasperky (sp?) scan it found 2 viruses and over 2,000 infected files. Please someone help me!

HJT LOG:
Logfile of HijackThis v1.99.1
Scan saved at 11:18:43 PM, on 5/25/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Beverly Tu\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {E9A7F56F-C40F-4928-8C6F-7A72F2A25222} (AxRUploadControl Object) - http://www.imagestation.com/common/classes….cab?v=1,0,0,34
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: ewido security suite control - Unknown owner - C:\Documents and Settings\Beverly Tu\Desktop\ewido anti-malware\ewidoctrl.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

Kasperksy Log:
——————————————————————————-
KASPERSKY ON-LINE SCANNER REPORT
Friday, May 26, 2006 12:42:31 AM
Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
Kaspersky On-line Scanner version: 5.0.78.0
Kaspersky Anti-Virus database last update: 26/05/2006
Kaspersky Anti-Virus database records: 196457
——————————————————————————-

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\

Scan Statistics:
Total number of scanned objects: 62022
Number of viruses found: 2
Number of infected objects: 2797
Number of suspicious objects: 0
Duration of the scan process: 01:00:10

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\# SurfNOW Professional Gold 2.8.0.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\#1 DVD Ripper 1.3.26.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\007 Email Sender Express 4.6.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\007 Spy Software 3.86.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\007 Spy Software v3.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\007 Spy Software v3.86.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1 Click DVD Copy.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\18 Wheels Of Steel - Across America.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1Click DVD Copy Pro 2.2.2.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1Click DVD Copy Pro v2.2.2.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1st File Hider software v3.21.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1st Mail Sender V3.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1st MP3 Tag Editor 5.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\1st Popup Killer.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\2006 FIFA World Cup.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\2Flyer Screensaver Builder Pro v7.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3D Aquatic Screen Saver.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3D MAX 5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3D MP3 Sound Recorder 3.9.7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3D MP3 Sound Recorder v3.8.17.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3D MP3 Sound Recorder v3.9.7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3GP Video Converter v2.1.59.0316b.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\3gpConvert v.2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\4Diskclean Gold v5.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\4Play Adult Game.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\50 Mobiles Games.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\5star Audio Studio v1.0.0.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\5star Game Copy v1.0.5.118.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\6 Templates from templatemonster.com.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\602Pro Print Pack v3.0.03.1202.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\7 Browser [AIO].exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\7tools Partition Manager 2005.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\8Signs Firewall v2.3.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\A Walk To Remeber.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\A-Converter v1.0.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\A-one iPod PSP 3GP Video Converter v2.16.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\A1 DVD Ripper Professional v1.1.14.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ABF Password Recovery 1.7.3.101.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Absolute MP3 Splitter v2.32.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Absolute Sound Recorder v3.2.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Absolute Sound Recorder v3.28.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Absolute Video Converter v2.5.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Absolute Video Converter v2.65.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Absolute Video Converter v2.66.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ABViewer 5.1.1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Access Administrator Pro v4.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Access Password Recover v1.01.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Access Remote PC v4.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Accessbar V1.1.3.213.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ACD Systems CANVAS 9 Professional.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ACDSee Photo Viewer 5.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ace Buddy v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ace CD Burner v1.31.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ace Video Workshop 1.4.11.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AceFTP v3.01 Pro.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AceHTML Pro v6.04.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AceMoney v3.1.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acemoney v3.2.7a.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AcePlanner 1.1.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acme Cad Converter V6.51.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acoustica 3.xx.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acoustica Beatcraft ver. 1.02.14.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ACP Medicine, 2006 Edition.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acronis Disk Director Suite 10.2064.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acronis Disk Director Suite 9.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acronis Disk Director Suite v9.0.554.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acronis OS Selector 8.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Acronis True Image 9.0 Build 3633.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Active Desktop Calendar v.6.00.060517.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Active Desktop Calendar v6.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Active Key Logger v1.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Active KeyBoard v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Active WebCam 7.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Actual Window Manager v4.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ACXtractor 3.20.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ad muncher v4.7 Build 23669 1281 BETA.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ad Popup Killer v4.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ad-Aware SE Personal Edition 1.06.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ada Bubble Bomb v1.05.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Add Remove Plus! 2004 5.0.0.100.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adensoft Audio Data CD Burner v2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adobe Creative Suite 2 Premium Edition.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adobe Illustrator CS2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adobe InCopy CS2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adobe Premiere Pro 2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adobe Reader Speed-Up 1.33.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AdsGone 2004 v4.9.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AdsGone Popup Killer ad Stopper.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ADSLKeepalive Version v3.1 FULL.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adult Game Virtually Jenna2 v24+patch.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Adv. I.M. Password Recovery.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Anti Keylogger v3.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Desktop Shield v1.7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Desktop Shield v1.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Emailer 2.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced File Woker v2.03.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Flight Trainer.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Internet Kiosk v2.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Intuit Password Recovery v1.35.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced MP3 Converter v2.62.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Pop Up Killer 3.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced SMTP Server v2.7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced System Optimizer v2.10.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Tracks Cleaner v1.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Uninstaller Pro 2004 6.7.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced Uninstaller PRO 2004 6.7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Advanced ZIP Password Recovery v4.00 build 24.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AdwareX Eliminator 2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Age of Empires 2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Agendus for Outlook Edition v4.0 Build 1397 Multilang.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Agnitum Outpost Firewall Pro 3.51 Build 759 462.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Agnitum Outpost Firewall Pro 3.51.759.462.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Agnitum Outpost Firewall Pro v3.51.759.6511.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ahead DVD Ripper Standard v1.3.15.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AI Roboform Pro 6.7.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ai Roboform v6.71.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIDA32 System Info.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIDA32 System Information.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO - Download Managers.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO - Nero Apps.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO - Security Applications.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO - Top 9 FTP Tools.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO - Unattended XP Making Tools.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO BOOTBLE CD, ALL IN ONE BOOTABLE CD.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO Greenmix 7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO PDF Tools.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO Slysoft Apps.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AIO Sony Media _ $1500.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Air Guard.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Air Offensive The Art of Flying.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Air Offensive.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AirMagnet Laptop ANALYZER 5.0 Build 3535(New Link).exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Airmagnet Laptop Analyzer v5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alarm Master Plus ver. 4.13.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Album Generator and Viewer v2.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alchemy Eye Pro 7.8.10.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alias PortfolioWall v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alice in Wonderland.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alien Stars.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alive MP3 WAV Converter v1.6.3.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alive Video Converter 2.2.0.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Alive! Jigsaw v6.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All in one divx.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All In One Spam Mail.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All In One Talking Utilites, 12 working softwares.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All My Software 1.6 (Build 1106).exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All Sound Recorder XP v2.01.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All Video Converter v1.0.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All Video Joiner v1.0.11.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\All-In-One Journal v2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Allok MOV Converter v1.6.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Allok MP3 WAV Converter v1.0.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Allok Video Joiner v1.4.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Allok Video to 3GP Converter v1.2.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Almeza MultiSet v1.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ALZip v6.62.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Amadis DVD Ripper Professional ver. 1.0.3 Full.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Amayeta SWF Encrypt 3.05.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Amazing MP3 Creator v2.10.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Amazon DVD Shrinker 2.5.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\American Conquest Divided Nation.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\American Shaolin (2006).exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Americas Army 1.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Americas Army 1.90.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Americas Army Ops 1.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Americas Army Ops.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Americas Army.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Amigo Easy Video Converter v4.54.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AML Pages v8.22.723.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AML Pages v8.30.733.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AmorSoft Cute CD Ripper 1.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AMUST Registry Cleaner v1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Amust Registry Cleaner v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Animal Paradise Tycoon.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Animated GIF Producer v 3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Animation Factory Essential Collection 3 Vol. 7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Antechinus C Sharp Editor v5.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Anti Spyware 9 In 1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Anti Tracks v5.9.8 Eclipse.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Anti Tracks v6.0.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Anti-Porn v7.2.8.19.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Antimatter Game v1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Antirus 4.0 Released.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AntiVir PersonalEdition Classic 7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnVir Task Manager v3.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Anydown v1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD 5.5.2.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD 5.9.5.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD 5.9.6.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD v5.5.2.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD v5.5.5.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD v5.9.5.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyDVD v5.9.6.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AnyReader v1.1.14.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AoA DVD Copy 2.7.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AoA DVD Copy v2.74.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AoA iPod PSP 3GP MP4 Converter 2.0.0.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aone Photo Screensaver Maker v5.02.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aone Ultra WMV Converter v2.1.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ap TIFF to PDF convert v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aplus Video To 3GP v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aplus Video to iPod v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apolisoft MCataloguer v2.7.4.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DivX to DVD Creator 3.1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD to 3GP v.2.1.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD To iPod v2.0.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD To iPod v2.3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD To iPod v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD to PSP v.3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD To PSP v2.0.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo DVD To PSP v3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo iPod Video Converter v2.3.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo Photo2VCD v1.1.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apollo Versatile Burner v1.2.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Apple QuickTime 5.02.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aqua Bubble 2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aqua Garden Deluxe Screensaver.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arabian Nights.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arafasoft E-Book Creator v1.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arafasoft Virtual Drive Creator v2.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arc DVD Copy v1.1.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arc DVD Copy v1.2.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arc DVD Copy v1.2.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ArcNotes v1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ArcSoft Photo Studio 5.5.0.61 Retail.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ardosoft Privacy Guard 2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Are We There Yet.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Area 51.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ArGoSoft News Server v1.0.1.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arial CD Ripper 1.4.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Arial CD Ripper v1.4.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Armies of Exigo.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Armor2net Personal Firewall 3.12.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Armor2net Personal Firewall v3.12.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Army Men II.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aromatherapy and Essential Oils 1.3.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Array Designer v4.10.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Art Antiques Organizer Deluxe v2.6 Incl Keygen-TBE.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ASCII Art Tools AIO 2006.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo Burn Ya Audio CD 2.60.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo Burning Studio 6.01 SE.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo BurnYa AudioCD v2.60.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo BurnYa DataDisc v2.60.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo Photo Commander v4.0.1.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo PowerUp XP Platinum 2 2.20.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Ashampoo UnInstaller Platinum Suite v2.0.0.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Asiva Shift and Gain v2.2 for Adobe Photoshop.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Asmw PC-Optimizer PRO 6.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ASPMaker 2.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\ASPMaker v5.0.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aspose Chart v1.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aspose Spell v1.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aspose.License ver. 1.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AT Screen Thief v3.2.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AT Screen Thief v3.85.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Atlantis Ocean Mind v1.5.1.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Atomic Alarm Clock v3.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Atomic Mail Verifier v3.33.0.51.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Atomix Virtual DJ v3.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AtomSync Pro v2.03.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Auction Sentry v2.3.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio Commander v3.3.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio Converter CD Ripper 4.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio Editor Gold v7.5.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio Grabber 1.83.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio MP3 Converter 3.20.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio Recorder Pro v1.15 build2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio to Video Mixer 3.0.117.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audio Video To Wav Converter 1.0.0.742.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Audiotools v4.60.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Auqio Sound Studio v2.0.02.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aurora DVD Copy v3.1.2.3.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aurora Media Workshop v2.5.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aurora Media Workshop ver. 3.3.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Auto Backup v2.3.0.185.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Auto Imager v3.04.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Auto-Keyboard v4.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Autodesk AliasStudio v13.02.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Autodesk AutoCAD 2007.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Autodesk AutoCAD LT 2007.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Automize Enterprise v7.01.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AutoPatcher XP may 2006 FULL.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Autopilot XP v4.1.2 RETAIL.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AutoPlay Media Studio 4.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AutoPlay Media Studio 6.02.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AV DVD Player Morpher Gold v1.5.43.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Avast Antivirus Pro 4.6.817.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Avast Professional 4.6.731.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Avast professional edition v4.6.691.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\avast! 4 Professional Edition.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Avatar Software MSIStudio 3.2.04.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVCataloger v3.2.2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVConverter MP3 Converter Pro v4.1.13.11.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVD Graphic Studio v6.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVG Anti-Virus Professional Edition 7.1.394 Build 75.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVG Anti-Virus Professional Edition 7.1.394 Build.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVG Anti-Virus Professional Edition.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVI DivX To DVD SVCD VCD Converter v1.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVI MPEG Converter v2.1.59.0303b.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVI MPEG WMV RM to MP3 Converter 1.5.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\AVID Xpress Pro HD 5.23.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Aye Shutdown v5.41.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Babes And Balls Xtreme Beach.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Background Remover v1.0 for Adobe Photoshop.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Background Remover v1.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Backlink Reporter v1.0.0.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Backnine Bookie 2003 v1.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Backup DVD Pro 2.01.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Backup Magic 1.6.4.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bad Copy 3.70.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bad Copy Repair.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BadCopy Pro v3.80.1108.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Band Camp XXX DVDRip.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bandwidth Monitor v2.9.623.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Banner Maker Pro for Flash 1.01 Retail.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bass Guitar Mode Maker v2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Batch Doc Print v1.4.8.10.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Batch Image Commander v1.22a.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Batch Image Resizer 2.72.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Batch Video Converter v1.9.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BatchRename 2 v2.70.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Batman Begins DVDRip XviD.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BATMAN BEGiNS v1.0.2 J2Me RETAiL.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Battle Mages Sign of Darkness.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Battle Zone.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Battlestar Galactica (2003) DivX.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Beach Volleyball.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BearShare 5.2.1.9.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BearShare Pro 5.2.1.3 DIGERATI.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Beat The Devil XXX DVDRip.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Belltech CaptureXT v2.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Best MIDI to MP3 1.3.5.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BestAddress HTML Editor 2004 Professional v5.1.8.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bewod v0.20.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BidSlayer v3.4.7.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Big Biz Tycoon 2.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Big Mutha Truckers 2 Truck Me Harder.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bikers Log ver. 5.0 Gold.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bill Geyts & student.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Binteko FairBot v1.55.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Birthday Reminder v1.01.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BitComet 0.61.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bitstream New Font Collection Volume 1 ($399US -totally.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Bitsum PECompact v2.66 Retail.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Black & Decker Everyday Home Repairs.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Black & White 2 - Battle of the Gods.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Black Widow Media Desktop v5.3.0.0.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\BlackICE PC Protection 3.6.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Blake Stone Aliens of Gold.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Blaze Media Pro.exe Infected: Trojan-Dropper.Win32.VB.lu skipped
C:\Documents and Settings\Beverly Tu\Shared\_\Blaze Video Magic 2.0.1.1.exe Inf
Post #2
hi cxx916xxp,

thats strange that it couldnt fix them. that looks like a p2p shared folder. do you have a resident antivirus app present on your computer? if not i can provide some links to afew free ones.

heres what i would do:
do a few online scans or two like you did with KASPERSKY ON-LINE, just to see what others have to say, if they come back positive and cant clean it up then i would delete the entire folder, at least there all in the same folder.
online scanners:
BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php
check AutoClean under Scan Options.

Panda ActiveScan
http://www.pandasoftware.com/products/acti…CACHEHINT=Guest

Kaspersky virus scanner
http://www.kaspersky.com/virusscanner

Housecall at TrendMicro
http://housecall.trendmicro.com/housecall/start_corp.asp
check Auto Clean.

F-Secure virus scanner
http://support.f-secure.com/enu/home/ols.shtml


eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

i have afew file-sharing tips here:
http://security-central.us/SafeHex/file%20sharing.htm

let me know how its going…………shelf life
Post #3
Hi! Thanks for the help! I'm pretty computer illiterate so you're going to have to be patient with me. Sorry! :) Well I ran one of those things you suggested and here are the logs.

Logfile of HijackThis v1.99.1
Scan saved at 9:18:29 PM, on 5/31/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Documents and Settings\Beverly Tu\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O4 - Global Startup: svchost.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {E9A7F56F-C40F-4928-8C6F-7A72F2A25222} (AxRUploadControl Object) - http://www.imagestation.com/common/classes….cab?v=1,0,0,34
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: ewido security suite control - Unknown owner - C:\Documents and Settings\Beverly Tu\Desktop\ewido anti-malware\ewidoctrl.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE



For the bitdefender scan that I ran, everything said disinfection failed so the object was deleted. The log for it is extremely long and filed with those (object deleted things) so I'm just going to show you what it was unable to delete or disinfect.



C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
Infected with: Trojan.Dropper.VB.Q

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
Disinfection failed

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
Delete failed
Post #4
hi cxx916xxp,

be patient with me

no problem iam a patient person.

i dont see any antivirus software in your hjt log. i see these :
Windows Defender
SpywareGuard
Spy Sweeper
all good for malware, but you really need a antivirus app also. you can get a free one here:
http://free.grisoft.com/freeweb.php/doc/2/

download, install update and do a system scan with it.
—————————————————————–

everything said disinfection failed so the object was deleted

ok good, so if you went and looked here:
C:\Documents and Settings\Beverly Tu\Shared, then all those files from the earleir long list in the hjt log are gone now?
————————————————————–
for the other 3:
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
Infected with: Trojan.Dropper.VB.Q

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
Disinfection failed

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\svchost.exe
Delete failed

see if AVG can take care of them, if not you can manually delete them:
right click on start>explore>C:>Documents and Settings>All Users>Start Menu>Programs>Startup> delete the svchost.exe file itself.

let me know how its going…………..shelf life
Post #5
Thank you so much! It worked. Here's the new HJT log, tell me how it looks!

Logfile of HijackThis v1.99.1
Scan saved at 12:22:22 PM, on 6/2/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Dell\Media Experience\PCMService.exe
C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
C:\Program Files\Winamp\winampa.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\PROGRA~1\COMMON~1\PCSuite\Services\SERVIC~1.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\3M\PSNLite\PsnLite.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\PROGRA~1\3M\PSNLite\PSNGive.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Beverly Tu\Desktop\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\Media Experience\PCMService.exe"
O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe"
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [DwlClient] C:\Program Files\Common Files\Dell\EUSW\Support.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [DataLayer] C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\TRAYAP~1.EXE
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SpySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Post-it® Software Notes Lite.lnk = C:\Program Files\3M\PSNLite\PsnLite.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: MUSICMATCH MX Web Player - {d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} - http://upload.facebook.com/controls/Facebo…otoUploader.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {9600F64D-755F-11D4-A47F-0001023E6D5A} (Shutterfly Picture Upload Plugin) - http://web1.shutterfly.com/downloads/Uploader.cab
O16 - DPF: {E9A7F56F-C40F-4928-8C6F-7A72F2A25222} (AxRUploadControl Object) - http://www.imagestation.com/common/classes….cab?v=1,0,0,34
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: ewido security suite control - Unknown owner - C:\Documents and Settings\Beverly Tu\Desktop\ewido anti-malware\ewidoctrl.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: WLTRYSVC - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
Post #6
hi cxx916xxp,

tell me how it looks!


you look great! uh wait sorry, i mean your log looks good.

dont forget to keep avg updated, you can do it manually maybe twice a week. or schedule avg to check automatically on a schedule you pick.
if everything is good then i leave you with this:

Be careful of what you download, and where you download it from. Many programs come bundled with extra software.You may be installing more than you think. Visit the makers website, learn more about the program, Does the program you want come bundled with other "3rd party" programs? What do the 3rd party programs do? Will they deliver ads? Track your surfing habits?. Read the EULA agreement, you know, that paragraph of stuff you "agree to" before the software installs? If you search hard enough you can always find a "clean" alternative to any software. Stay away from warez and crack sites. Becarful what you download from file sharing networks. If you are not sure, scan it with your Antivirus app. A small file (in KB) is probably not what you think it is. DO YOU TRUST THE SOURCE? Check this database:Spyware Guide A Few p2p file sharing tips.

Make sure you keep your Windows OS current by visiting Windows update
occasionaly to download and install any critical updates and service packs. With out these you are leaving the backdoor open.

Adjust your browser settings: Change your(active x) settings in IE. With IE open go to tools, internet options, security tab. Click on the internet globe, then custom level. Set the first option "download signed active x controls" to prompt, the next two to disable. Read more:
Internet Explorer Privacy & Security Settings
Working with Internet Explorer 6 Security
Many exploits are directed at Internet Explorer, you dont have to use it. Try a different browser. You can have and use more than one browser on your computer.
Like Firefox,


Install a Firewall:A firewall will control what comes in from the internet and what leaves your computer to the internet. A firewall will also alert you when a application trys to connect to the internet from your computer, this is a good way to catch crapware or trojans, trying to connect out bound from your computer- whats that and why does it need a internet connection? You can deny it access it until more investigation is done. Zone Alarm is a free and easy to use firewall, that will provide in and outbound protection. Microsoft XP firewall only provides inbound protection. SP2 adds in and out bound protection which is better than nothing, but is not as robust as third party firewalls, Be sure to run only >one< firewall.If you use another, be sure to disable XP's built in firewall. If you use Zone Alarm learn what needs/uses your internet connection. If something unusal or out of the ordinary "asks" deny it access until more investigation is done.
Zone Alarm
OutPost Lite

Outlook Express with the default settings is not secure. It will run scripts, download images etc, just like a browser. You dont have to use it. Windows SP1/SP2 updates have made some improvments to Outlook. Another reason to stay updated.
look here
and here
Or try Pegasus Mail, safer by default,no tweaking needed.

Make sure you have and keep updated Antivirus software
Free for home users:
avast! 4 Home Edition Download
AVG free version 7.0
AntiVir Personal Edition
clam Win

Download one or two of these, install and update before using:(if these are constantly finding malware, then you need to make changes to your browser and or your habits)
CounterSpy Free trial version
Spybot Search and destroy
Ad-Aware SE Personal edition
Microsoft Windows Defender
Becarful with spyware "removers and scanners"– there are many "rogue/suspect" programs that "claim to remove" spyware.Check here first.

Dont be tempted to click on popup ads offering free scans or free downloads for malware removers. Read the above line again.

AntiTrojan software to fill in the gap:
a2 free
Ewido Anti-Malware
Trojan Hunter (30 day trial version)
Tauscan trial version

Other programs to consider:
Process Guard stop events/processes with user intervention
SpywareBlaster add security to IE
IE-SPYAD adds adware peddlers sites/domains to IE restricted zone
CleanUp cleans out temp files,history, autoforms etc
ATF cleaner (W2K,XP only) cleans out temp files, history etc

Learn More:
Browser Checkup
Parasite Free
Safe Hex
Shelf Lifes page
Home Computer Security
Post #7

you look great!


Haha thank you very much :) and thank you for helping me get rid of all those viruses! I downloaded some of those programs you suggested so hopefully I won't be having any more problems. Thanks again shelflife. You were such a tremendous help!!~
Post #8
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI