[Resolved] AwesomeHomepage

hi, after a new kaspersksy scan it is still showing 1 virus and 13 suspicious objects, I have deleted combofix and all quarantines from my system, this log is: KASPERSKY ONLINE SCANNER REPORT Sunday, October 07, 2007 1:17:29 PM Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.93.1 Kaspersky Anti-Virus database last update: 7/10/2007 Kaspersky Anti-Virus database records: 428608 Scan Settings Scan using the following antivirus database extended Scan Archives true Scan Mail Bases true Scan Target My Computer A:\ C:\ D:\ E:\ Scan Statistics Total number of scanned objects 43920 Number of viruses found 1 Number of infected objects 0 Number of suspicious objects 13 Duration of the scan process 01:03:45 Infected Object Name Virus Name Last Action C:\Documents and Settings\All Users\Application Data\AVG7\Log\emc.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log Object is locked skipped C:\Documents and Settings\All Users\Application Data\Grisoft\Avg7Data\avg7log.log.lck Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\PCWorld\Application Data\SUPERAntiSpyware.com\SUPERAntiSpyware\SUPERANTISPYWARE.LOG Object is locked skipped C:\Documents and Settings\PCWorld\Cookies\index.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\AOL\UserProfiles\1146591198\pulsebabe1968\cls\common.cls Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Identities\{2E7CCE5F-283C-4D22-9B58-A825F9B24E31}\Microsoft\Outlook Express\Folders.dbx Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Identities\{2E7CCE5F-283C-4D22-9B58-A825F9B24E31}\Microsoft\Outlook Express\Inbox.dbx Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Identities\{2E7CCE5F-283C-4D22-9B58-A825F9B24E31}\Microsoft\Outlook Express\Offline.dbx Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Identities\{2E7CCE5F-283C-4D22-9B58-A825F9B24E31}\Microsoft\Outlook Express\Pop3uidl.dbx Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Logs\Dfsr00005.log Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\pending.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_B494_53C9_9453_8CAC\dfsr.db Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_B494_53C9_9453_8CAC\fsr.log Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_B494_53C9_9453_8CAC\fsrtmp.log Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Messenger\[removed]\SharingMetadata\Working\database_B494_53C9_9453_8CAC\tmp.edb Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/19 Apr 2004 08:45 from [removed]:Mail Deliv.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/18 Apr 2004 07:04 from [removed]:Mail Deliver.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/26 Apr 2004 03:51 from [removed]:[Norton AntiSpam] M.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/27 Apr 2004 04:22 from [removed]:[Norton AntiSpam] M.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/29 Apr 2004 05:34 from [removed]:.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/01 May 2004 17:48 from [removed]:[Norton AntiSpam] Mail Deli.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/02 May 2004 15:22 from [removed]:[Norton AntiSpam] Mail.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/03 May 2004 02:45 from [removed]:[Norton AntiSpam] Mail.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/03 May 2004 22:46 from [removed]:[Norton AntiSpam.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/05 May 2004 05:49 from [removed]:[Norton AntiSpa.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/06 May 2004 04:56 from [removed]:[Norton AntiSpam] Ma.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items/07 May 2004 04:46 from [removed]:[Norton AntiSpam.rtf Suspicious: Exploit.HTML.Iframe.FileDownload skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst Mail MS Mail: suspicious - 12 skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\real\members.stg Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Windows Live Contacts\[removed]\shadow\members.stg Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\History\History.IE5\MSHist012007100720071008\index.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\Perflib_Perfdata_9f4.dat Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\~DF1174.tmp Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\~DF54BE.tmp Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\~DF5587.tmp Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\~DF8FDD.tmp Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\~DF907D.tmp Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temp\~DFB396.tmp Object is locked skipped C:\Documents and Settings\PCWorld\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\PCWorld\ntuser.dat Object is locked skipped C:\Documents and Settings\PCWorld\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\PCWorld\UserData\index.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\chandir.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\chandir.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\chn.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\chn.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\D0000000.FCS Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\inuse.txt Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\L0000003.FCS Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\main.log Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_die.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_die.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_dnd.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_dnd.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_ext.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_ext.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_rcv.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\prs_rcv.idx Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\storydb.dat Object is locked skipped C:\Program Files\Logitech\Desktop Messenger\8876480\Users\PCWorld\Data\storydb.idx Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\billing_PCWorld.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\client_PCWorld.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\GIPS.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\network_PCWorld.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\p2pce.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\voice.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\YSDP.log Object is locked skipped C:\Program Files\Yahoo!\Messenger\logs\YSIP.log Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{21300053-C757-46D6-BBD4-E1BE7491382D}\RP412\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{ABB8E4C1-1CE4-419E-B7D5-BD01D9D1BBAB}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.

Hi There is nothing to worry about in the log. If you can Navigate to this folder C:\Documents and Settings\PCWorld\Local Settings\Application Data\Microsoft\Outlook\Outlook.pst/Personal Folders/Deleted Items and delete what's in there, there will be no problem. Then follow the rest of my instructions to remove the tools from we have used. the kaspersky Scanner can be removed through Add/Remove programs. When you are done post a new HijackThis log and tell me how the computer is behaving.

got as far as the outlook folder and in there are - extend (DAT file) and outlook (office data file) if i click on the outlook one (and im not sure if thats the one i should be clicking on) it asks me what i want to open it with….so im stuck again lol

hope i have downloaded the right java, it was the offline version jre-6u3-windows-i586-p.exe 13.93mg that is now saved in my downloads folder. btw, i keep getting asked more and more about secure and non-secure areas, didnt have this many alerts before? and also the previous viruses that were on my pc, would they have copied online banking details as i set u a couple of new accounts just before finding your site? thanks

Hi

A .pst file opens with Word or one of the other Office applications. Those old emails are not really a risk, it's purely housekeeping. They relate to a vulnerability in reading .htm files through internet Explorer which was probably fixed a long time ago, (see the date of the emails-2004)

Yes, Java is now at update 3. install that.

If you had what we call, a trojan/Backdoor, which allows info stealers into your pc, you can be assured I would have told you, and given a nice speech about it.

As long as you have a good firewall, anti-virus, anti-spyware, banking should be fine. Be wary of downloading files, P2P filesharing, and so on.

You seem a little paranoid, pulsebabe, but using commonsense will keep you infection free. Another neat program to install, an IE plug-in, is Site Advisor, from McAfee. It will tell you if the site you are about to enter is good or bad.
It's available here.

If you follow the advice in this earlier post you should be fine.

http://forums.whatthetech.com/AwesomeHomep…797#entry406797

im paranoid now, wasnt before i these viruses lol it wont let me open that outlook document without searching the net for an appropriate thing to open it into, but i havent a clue what im looking for… i cant believe that all the spam email/porn that i filter to delete still remain on my system, ive set it now to filter and delete from server but i just hope no important ones get deleted at the same time and its impossible to filter every word so a lot will still get thru

Hi

Ever thought of mailWasher?

Link

You can then train it as to what should be auto deleted and what is good.

hi, you didnt say how i access that outlook file to delete the old emails, or am i unable to do this? thanks

Hi Open Outlook, then select Personal Folders, in the left pane. You should see a Deleted Items folder there. Open that, click on Edit>Select All and then delete.

i have already said twice now that this system wont allow me to open the outlook option, it asks what i want to open it with but doesnt give me a 'windows' option as u previously mentioned….

You cant open Outlook at all? I mean the application, not the .pst folder.

are you referring to outlook express? the deleted items in there are deleted constantly, spam and anything thats in there is never left for more than 5 minutes, so the ones showing up on the virus report arent in there???

No, I mean Outlook, the more powerful email that is part of MS Office, which you have installed. It might be safest just to delete that whole Archive folder itself, for it will, or can, be recreated.

oh ur referring to microsoft outlook, i never use it so am surprised to know theres stuff in it, maybe it automatically got filled up when all my work was transferred over from my old pc to this one, i will delete everything in it. thanks

Hi that's the boy. Once youre deletions are finished follow my previous all-clean speech and let me know you are done, or still having troubles.