Virus

I have been getting a few virus alrets from my zone alarm security sweet

What exactly does your security sweet tell you? File names and paths would be helpful, as would any infection names that it uses.

Sorry for not responding sooner . Zone alarm quarantine log shows win32.trojan.yspy as well as Trojan-downloader.js.Agent.rn, Trojan-downloader.win32.ani,c, Trojan-downloader.SWF.Gida.a, Sniffer.Win32.WPEPro.a, Trojan-downloader.JS.Agent.ccv, Trojan Downloader.HTML.IFrame.sk, Net-worm,JS,Aspxor.a Iam also getting prett constant alrets from Zone alarm ns621.tmp is trying to launch C:\WINDOWS\system32\Macromed\Flash\FLASHSHUTIL9F.EXE Each of these alerts has a different number after the ns

Do you have file names and paths for these?

I am trying to figure out how to get them into a log that I can copy here. As soon as I do I will post them

Ok could not figure out a log but think I have screen shots showing the information you are requesting

number 2

and number 3

Simple yet effective - top job. All but one of the detections is a file that was in the Temporary Internet Files folder - I guess you surfed where you shouldn't! The other is some sort of packet sniffer for games file mods or some such. I'm not sure that this is particularly nasty unless you didn't download it knowingly of course, but it could be used maliciously which is probably why it got flagged and quarantined.
This is what you pay for an anti-virus program for, so don't worry.

Iam also getting prett constant alrets from Zone alarm ns621.tmp is trying to launch C:\WINDOWS\system32\Macromed\Flash\FLASHSHUTIL9F.EXE

This one i'm not totally sure about, so we'll send it for a little inspection. Please go to Jotti's and click on the Browse… button at the top and navigate to the suspect file and then click on Submit:

C:\WINDOWS\system32\Macromed\Flash\FLASHSHUTIL9F.EXE

When all the scans have been completed, please copy and paste the results into your next reply.

If this site is busy, try VirusTotal: Click the Browse … button, navigate to the file and double click it and then click the Send button.

You may need to set Windows to show All Hidden Files and Folders - Instructions can be found here.
* These files are hidden to stop you accidentally removing something important.
It is advisable to hide them again after you have done. *

This is the log you were looking for i assume. Scan taken on 08 Jul 2008 12:06:52 (GMT) A-Squared Found nothing AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing CPsecure Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Ikarus Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing Panda Antivirus Found nothing Sophos Antivirus Found nothing VirusBuster Found nothing VBA32 Found nothing

Go here and click the Kaspersky Online Scanner button - I.E. is required for this scan.

• Read the Requirements and limitations before you click Accept.
• Allow the ActiveX download if necessary.
• Once the database has downloaded click Next.
• Click Scan Settings and check the "Scan using the following antivirus database" is set to extended, not standard, and then click OK.
• Click on "My Computer" and then put the kettle on!
• When the scan has completed, click Save Report As…
• Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
• Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.

Copy and paste the report into your next reply along with a fresh HJT log, run in Normal Mode, and a description of how your PC is behaving.

Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.

Also, run HJT and click on Open the Misc Tools section.

• Click Open Uninstall Manager…
• Click Save list… and save it to your Desktop.
• Copy and paste the file uninstall_list.txt into your next reply.

——————————————————————————- KASPERSKY ONLINE SCANNER REPORT Tuesday, July 08, 2008 6:39:15 PM Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600) Kaspersky Online Scanner version: 5.0.98.0 Kaspersky Anti-Virus database last update: 8/07/2008 Kaspersky Anti-Virus database records: 928985 ——————————————————————————- Scan Settings: Scan using the following antivirus database: extended Scan Archives: true Scan Mail Bases: true Scan Target - My Computer: C:\ D:\ Scan Statistics: Total number of scanned objects: 74030 Number of viruses found: 0 Number of infected objects: 0 Number of suspicious objects: 0 Duration of the scan process: 00:44:10 Infected Object Name / Virus Name / Last Action C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\ph Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\ACS\1.0\variable Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\aolusers.fus Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\dw0378sc\MyDB.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\dw0378sc\toolbar.lst Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\idb\SNMaster.idx Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\CACHE\dw037800 Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\dw0378sc Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\dw0378sc.abi Object is locked skipped C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.1\organize\dw0378sc.aby Object is locked skipped C:\Documents and Settings\All Users\Application Data\MailFrontier\reginfo.xml Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked skipped C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\acccore\nss\cert8.db Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\acccore\nss\key3.db Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\AOL\C_AOL 9.1\IDB\Apps.Lst Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\AOL\C_AOL 9.1\IDB\art.idx Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\AOL\C_AOL 9.1\IDB\sap.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\AOL\C_AOL 9.1\IDB\spool.lst Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\AOL\C_AOL 9.1\IDB\sysnews.lst Object is locked skipped C:\Documents and Settings\Darren Wetsell\Application Data\MailFrontier\ASD.log Object is locked skipped C:\Documents and Settings\Darren Wetsell\Cookies\index.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\AOL\UserProfiles\All Users\cls\common.cls Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\AOL OCP\AIM\Storage\All Users\localStorage\common.cls Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\AOL OCP\AIM\Storage\data\daewoo592\localStorage\common.cls Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\AOL OCP\AIM\Storage\data\dw0378sc\localStorage\common.cls Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\History\History.IE5\MSHist012008070820080709\index.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Temp\Perflib_Perfdata_2ac.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Temp\~DFCAEB.tmp Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Temp\~DFD772.tmp Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Temp\~DFD900.tmp Object is locked skipped C:\Documents and Settings\Darren Wetsell\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\Darren Wetsell\NTUSER.DAT Object is locked skipped C:\Documents and Settings\Darren Wetsell\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped C:\Program Files\Onlineeye\gmxffcsrv.exe_trace.log Object is locked skipped C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped C:\System Volume Information\_restore{FFC31B1C-26E2-4ACB-B78B-357F1E36DA84}\RP294\change.log Object is locked skipped C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped C:\WINDOWS\Internet Logs\DARREN-QYCPOZN5.ldb Object is locked skipped C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped C:\WINDOWS\SchedLgU.Txt Object is locked skipped C:\WINDOWS\SoftwareDistribution\EventCache\{A39A947A-6DCA-4DD6-9104-639B3D4FB353}.bin Object is locked skipped C:\WINDOWS\SoftwareDistribution\ReportingEvents.log Object is locked skipped C:\WINDOWS\Sti_Trace.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\edb.log Object is locked skipped C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked skipped C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\default Object is locked skipped C:\WINDOWS\system32\config\default.LOG Object is locked skipped C:\WINDOWS\system32\config\Internet.evt Object is locked skipped C:\WINDOWS\system32\config\SAM Object is locked skipped C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\SECURITY Object is locked skipped C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped C:\WINDOWS\system32\config\software Object is locked skipped C:\WINDOWS\system32\config\software.LOG Object is locked skipped C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped C:\WINDOWS\system32\config\system Object is locked skipped C:\WINDOWS\system32\config\system.LOG Object is locked skipped C:\WINDOWS\system32\drivers\fidbox.dat Object is locked skipped C:\WINDOWS\system32\drivers\fidbox.idx Object is locked skipped C:\WINDOWS\system32\h323log.txt Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked skipped C:\WINDOWS\Temp\Perflib_Perfdata_330.dat Object is locked skipped C:\WINDOWS\Temp\ZLT03123.TMP Object is locked skipped C:\WINDOWS\Temp\ZLT03126.TMP Object is locked skipped C:\WINDOWS\wiadebug.log Object is locked skipped C:\WINDOWS\wiaservc.log Object is locked skipped C:\WINDOWS\WindowsUpdate.log Object is locked skipped Scan process completed.

Run HJT and click on Open the Misc Tools section.

• Click Open Uninstall Manager…
• Click Save list… and save it to your Desktop.
• Copy and paste the file uninstall_list.txt into your next reply.

Ad-Aware Adobe Flash Player ActiveX Adobe Flash Player Plugin Adobe Reader 8.1.2 AIM 6 AMD Processor Driver AOL Toolbar 5.0 AOL Uninstaller (Choose which Products to Remove) Apple Software Update Cabela's Trophy Bucks Cablenut 4.08 CCleaner (remove only) Compatibility Pack for the 2007 Office system CSI-Hard Evidence DH Driver Cleaner Professional Edition Dual-Core Optimizer EndItAll 2.0 ESET Online Scanner Eyeball Chat 2.2 Fraps Google Toolbar for Internet Explorer High Definition Audio Driver Package - KB888111 HijackThis 2.0.2 Hotfix for Microsoft .NET Framework 3.0 (KB932471) Hotfix for Windows Internet Explorer 7 (KB947864) Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows Media Player 11 (KB939683) Hotfix for Windows XP (KB896344) Hotfix for Windows XP (KB914440) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) Hotfix for Windows XP (KB935448) HP My Display ISO Recorder Java™ 6 Update 3 Java™ 6 Update 5 Kaspersky Online Scanner Lexmark 5400 Series Lexmark Toolbar Malwarebytes' Anti-Malware Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 1 Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office Professional Edition 2003 Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable Mozilla Firefox (2.0) MSXML 4.0 SP2 (KB936181) MSXML 6.0 Parser (KB933579) MySurvey Messenger neroxml Nitto 1320 Legends Public Beta 0.9.9.90 NVIDIA Drivers NVIDIA nTune Onlineeye Pro PC Wizard 2008.1.81 Pivot Software QuickTime RealPlayer Realtek High Definition Audio Driver Scientific Atlanta WebSTAR 2000 series Cable Modem SDK SeaTools for Windows Secunia PSI (RC1) Security Task Manager 1.7e Security Update for Windows Internet Explorer 7 (KB938127) Security Update for Windows Internet Explorer 7 (KB939653) Security Update for Windows Internet Explorer 7 (KB942615) Security Update for Windows Internet Explorer 7 (KB944533) Security Update for Windows Internet Explorer 7 (KB950759) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 11 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows Media Player 9 (KB936782) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929123) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB933729) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937894) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938829) Security Update for Windows XP (KB939653) Security Update for Windows XP (KB941202) Security Update for Windows XP (KB941568) Security Update for Windows XP (KB941569) Security Update for Windows XP (KB941644) Security Update for Windows XP (KB941693) Security Update for Windows XP (KB943055) Security Update for Windows XP (KB943460) Security Update for Windows XP (KB943485) Security Update for Windows XP (KB944653) Security Update for Windows XP (KB945553) Security Update for Windows XP (KB946026) Security Update for Windows XP (KB948590) Security Update for Windows XP (KB948881) Security Update for Windows XP (KB950749) Security Update for Windows XP (KB950760) Security Update for Windows XP (KB950762) Security Update for Windows XP (KB951376) Security Update for Windows XP (KB951376-v2) Security Update for Windows XP (KB951698) Security Update for Windows XP (KB951748) Spybot - Search & Destroy Spybot - Search & Destroy 1.5.2.20 SUPERAntiSpyware Professional System Requirements Lab Tiger Woods PGA TOUR 08 TuneUp Utilities 2007 Update for Windows XP (KB894391) Update for Windows XP (KB896256) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB911280) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB925720) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB932823-v3) Update for Windows XP (KB933360) Update for Windows XP (KB938828) Update for Windows XP (KB942763) VCRedistSetup Video Card Stability Test Windows Imaging Component Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows Media Player 11 Windows Presentation Foundation Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB891781 Windows XP Service Pack 2 Yahoo! Messenger Yahoo! Toolbar ZoneAlarm Security Suite