Can you solve my problem?

My computer was infected about one week ago and I have finally had time to deal with it. After much cleaning I am now left with one virus called a Downloader.Tib. Kaspersky tells me I have one virus and 45 infections and I just cannot seem to get rid of the remnant problems that are "squatting" in my desktop. Please see if you can help me figure this one out, and many thanks….JAZZ003 The 2 following posts will contain the HijackThis Log File and Kaspersky Log File.

Saturday, February 03, 2007 10:42:37 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.83.0 Kaspersky Anti-Virus database last update: 3/02/2007 Kaspersky Anti-Virus database records: 264597 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ Scan Statistics Total number of scanned objects 87700 Number of viruses found 1 Number of infected objects 45 / 0 Number of suspicious objects 0 Duration of the scan process 01:46:47 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\Avg7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\Russ\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Russ\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Russ\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Russ\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Russ\Local Settings\Temporary Internet Files\AntiPhishing\B3BB5BBA-E7D5-40AB-A041-A5B1C0B26C8F.dat Object is locked skipped C:\Documents and Settings\Russ\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-06-17\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-20\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-08-31\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-18\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-25\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2002-12-27\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-13\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\2003-02-22\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donna&Carols Birthday\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Donnas Cousin & Orchid\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Lions BBQ & Chase Fire\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04AirCatalog\##04S\##04S Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04AirCatalog\Catalog Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04AirCatalog\ContainerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04AirCatalog\DocList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04AirCatalog\Moniker Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04AirCatalog\MonikerList Object is locked skipped C:\Documents and Settings\Russ\My Documents\My Pictures\Otterplay&Family\##04IndexerRunning Object is locked skipped C:\Documents and Settings\Russ\ntuser.dat Object is locked skipped C:\Documents and Settings\Russ\ntuser.dat.LOG Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{48806464-3F3C-4C5F-94A6-B4BF4BD69759}\RP14\A0001812.exe Object is locked skipped C:\System Volume Information\_restore{48806464-3F3C-4C5F-94A6-B4BF4BD69759}\RP14\change.log Object is locked skipped C:\WINDOWS\$NtServicePackUninstall$\agentsvr.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\ahui.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\alg.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\at.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\autofmt.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\cipher.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\cleanmgr.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\evcreate.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\eventcreate.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\evntcmd.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\evntwin.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\ftp.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\fxsclnt.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\gpresult.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\gprslt.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\ipconfig.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\ipxroute.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\migwiz.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\mmc.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\mobsync.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\mplay32.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\narrator.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\netsetup.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\ntvdm.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\oemig50.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\oobebaln.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\openfiles.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\opnfiles.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\osk.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\osloader.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\ping.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\rcp.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\rstrui.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\sdbinst.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\shrpubw.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\smi2smir.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\smlogsvc.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\vssvc.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\wbemtest.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\winlogon.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\wmiadap.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\wordpad.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\wpabaln.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\$NtServicePackUninstall$\wuauclt.exe Infected: Email-Worm.Win32.Mixor.a skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.

Sorry for the delay
If you still need help and haven't posted at another forum.


Rescan with hijackthis and post a new log with the results from AVG .
Also please describe how your computer behaves at the moment.
I will be emailed when you reply.

Hi Little Eagle, I was able to clean everything. It was a while ago and I am having trouble remember exactly what I did but I do know Kapersky was one of the main helps. I believe I downloaded a specific removal tool that ridded my infection for good, I just can't remember what it was called. Jazz003

Gald you got it taken care for sorry we miss you

To help keep your PC clean follow the recommendations in Tony Klein's article
So how did I get infected in the first place?