What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Resolved] Desperately Need Help with XP Antivirus 2008

23 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #18
coastercarl1,

My brain cramp. SDFix won't work on Vista. :blush:

Lets try this.

Lets run an F-Secure online scan it will scan for Viruses, Spyware and RootKits:
  • Click HERE
  • Scroll to the bottom of the page and click the Start Scanning button. A window will pop up.
  • Allow the Active X control to be installed on your computer, then click the Accept button
  • Click Full System Scan and allow the components to download and the scan to complete.
  • If malware is found, check Submit samples to F-Secure then select Automatic cleaning
  • When cleaning has finished, click Show report (this will open an Internet Explorer window containing the report)
    Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan
  • When the cleaning option is presented, Uncheck Submit samples to F-Secure
  • Click Automatic cleaning
  • When cleaning has finished, click Show report (this will open an Internet Explorer window containing the report)
  • Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post with a new Hijackthis log.

Note: This scan will only work with Internet Explorer.
You must be logged on a administrator rights to run this scan.
The scan may take a few hours.
Post #19
Haha that's ok. Ok i tried to access the F-secure website but my internet wouldn't let me get to that page. I was able to navigate other pages but not this one. Its been kind of characteristic of this virus that I can't access alot of anti virus sites. I can't even access these forums I'm currently on a friends computer.
Post #20 last edited
coastercarl1,

This is a relatively new tool (that works on Vista). It has some interesting abilities. Lets see if we can get it in there.

Disable resident protections (Antivirus…); you'll re-enable them after the scan

Download Lop S&D < here

Double-click Lop S&D.exe
Choose the language, then choose Option 1 (Search)
Wait till the end of the scan
Post the log which is created: (%SystemDrive%\lopR.txt)
Post #21
Ok here's my log



——————–\\ Lop S&D 4.2.4-3 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel® Core™ Duo CPU T2350 @ 1.86GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A15
USER : CJ ( Not Administrator ! )
BOOT : Fail-safe with network boot
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 137 Go Free : 62 Go
D:\ (Local Disk) - NTFS - Total : 9 Go Free : 6 Go
E:\ (CD or DVD) - UDF - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
Option : [1] ( Tue 09/16/2008|17:21 )

[ UAC => 0 ]

——————–\\ Listing folders in Local

[12/05/2007|04:59] C:\Users\CJ\AppData\Local\ Adobe
[07/20/2007|09:48] C:\Users\CJ\AppData\Local\ AOL
[06/08/2007|09:53] C:\Users\CJ\AppData\Local\ AOL OCP
[08/25/2007|03:43] C:\Users\CJ\AppData\Local\ Apple
[10/23/2007|10:35] C:\Users\CJ\AppData\Local\ Apple Computer
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ Application Data
[06/07/2007|02:48] C:\Users\CJ\AppData\Local\ ATI
[11/21/2007|12:16] C:\Users\CJ\AppData\Local\7,592 d3d9caps.dat
[08/10/2008|06:07] C:\Users\CJ\AppData\Local\77,312 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[09/11/2008|05:13] C:\Users\CJ\AppData\Local\128,664 GDIPFONTCACHEV1.DAT
[12/18/2007|09:19] C:\Users\CJ\AppData\Local\ Google
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ History
[04/06/2008|07:52] C:\Users\CJ\AppData\Local\ IsolatedStorage
[06/07/2007|02:48] C:\Users\CJ\AppData\Local\ MediaDirect
[03/18/2008|11:00] C:\Users\CJ\AppData\Local\ Microsoft
[08/18/2008|09:24] C:\Users\CJ\AppData\Local\ Microsoft Games
[08/23/2007|02:24] C:\Users\CJ\AppData\Local\ Microsoft Help
[03/15/2008|01:42] C:\Users\CJ\AppData\Local\ Mozilla
[10/04/2007|09:15] C:\Users\CJ\AppData\Local\ Oblivion
[02/19/2008|03:33] C:\Users\CJ\AppData\Local\ Participatory Culture Foundation
[08/22/2007|11:19] C:\Users\CJ\AppData\Local\ Symantec
[09/16/2008|05:14] C:\Users\CJ\AppData\Local\ Temp
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ Temporary Internet Files
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ VirtualStore

——————–\\ Scheduled Tasks located in C:\Windows\Tasks

[09/12/2008 07:30 PM][–a——] C:\Windows\tasks\Norton Security Scan.job
[09/16/2008 02:46 PM][–ah—–] C:\Windows\tasks\SA.DAT
[09/15/2008 10:01 PM][–a——] C:\Windows\tasks\SCHEDLGU.TXT

——————–\\ Listing Folders in C:\ProgramData

[06/02/2007|07:35] C:\ProgramData\ Adobe
[07/20/2007|03:36] C:\ProgramData\ AOL
[11/18/2007|01:10] C:\ProgramData\ AOL Downloads
[06/08/2007|09:53] C:\ProgramData\ AOL OCP
[07/03/2007|11:42] C:\ProgramData\ Apple
[06/08/2007|03:37] C:\ProgramData\ Apple Computer
[06/07/2007|02:43] C:\ProgramData\ Application Data
[08/22/2007|10:55] C:\ProgramData\ Avg7
[06/02/2007|07:37] C:\ProgramData\ CyberLink
[01/28/2008|12:04] C:\ProgramData\ Dell
[06/07/2007|02:43] C:\ProgramData\ Desktop
[06/07/2007|02:43] C:\ProgramData\ Documents
[08/13/2008|12:50] C:\ProgramData\ DVD Shrink
[06/07/2007|02:43] C:\ProgramData\ Favorites
[06/11/2008|11:12] C:\ProgramData\ Google
[09/15/2008|09:58] C:\ProgramData\ Google Updater
[06/02/2007|07:26] C:\ProgramData\ Gtek
[06/02/2007|07:22] C:\ProgramData\ InstallShield
[12/01/2007|04:04] C:\ProgramData\ Lavasoft
[09/14/2008|10:58] C:\ProgramData\ Malwarebytes
[09/11/2008|03:57] C:\ProgramData\ Media Center Programs
[03/18/2008|11:00] C:\ProgramData\ Microsoft
[07/09/2008|08:21] C:\ProgramData\ Microsoft Help
[01/17/2008|11:47] C:\ProgramData\ Office Genuine Advantage
[02/19/2008|03:32] C:\ProgramData\ Participatory Culture Foundation
[06/07/2007|04:01] C:\ProgramData\ Pinnacle
[06/07/2007|04:44] C:\ProgramData\ QuickTime
[01/02/2008|10:45] C:\ProgramData\ Roxio
[06/02/2007|07:25] C:\ProgramData\ Sonic
[09/16/2008|06:45] C:\ProgramData\ Spybot - Search & Destroy
[06/07/2007|02:43] C:\ProgramData\ Start Menu
[08/22/2007|11:19] C:\ProgramData\ Symantec
[06/07/2007|02:43] C:\ProgramData\ Templates
[01/17/2008|11:48] C:\ProgramData\ Transparent
[11/18/2007|01:11] C:\ProgramData\ Viewpoint
[08/10/2008|07:23] C:\ProgramData\5,071 xqkcebzs.dik
[06/02/2007|07:33] C:\ProgramData\ YAHOO

——————–\\ Listing Folders in C:\Program Files

[06/02/2007|07:35] C:\Program Files\ Adobe
[09/16/2008|06:45] C:\Program Files\ Adzgalore Games Collection
[11/18/2007|01:14] C:\Program Files\ AIM6
[09/11/2008|03:47] C:\Program Files\ America's Army
[07/20/2007|03:35] C:\Program Files\ AOL
[06/02/2007|07:36] C:\Program Files\ AOL Install
[11/25/2007|05:23] C:\Program Files\ Apple Software Update
[06/02/2007|07:18] C:\Program Files\ ATI Technologies
[08/10/2008|07:43] C:\Program Files\ AviSynth 2.5
[06/02/2007|07:32] C:\Program Files\ BAE
[10/04/2007|09:04] C:\Program Files\ Bethesda Softworks
[01/20/2008|06:17] C:\Program Files\ Bonjour
[09/04/2007|07:27] C:\Program Files\ CAPCOM
[01/13/2008|04:57] C:\Program Files\ Cisco Systems
[12/02/2007|03:04] C:\Program Files\ Common Files
[06/02/2007|07:01] C:\Program Files\ CONEXANT
[06/02/2007|07:37] C:\Program Files\ CyberLink
[06/02/2007|07:42] C:\Program Files\ Dell
[06/02/2007|07:26] C:\Program Files\ DellSupport
[06/02/2007|07:21] C:\Program Files\ Digital Line Detect
[03/21/2008|10:14] C:\Program Files\ Diino
[09/13/2007|11:12] C:\Program Files\ DivX
[09/11/2008|03:51] C:\Program Files\ DominateGame
[12/08/2007|02:39] C:\Program Files\ DOOM 3
[12/10/2007|04:02] C:\Program Files\ Doom II for Windows 95
[12/08/2007|03:30] C:\Program Files\ Doom Shareware for Windows 95
[06/07/2008|08:45] C:\Program Files\ DOSBox-0.72
[08/10/2008|11:22] C:\Program Files\ DVD Decrypter
[08/13/2008|12:47] C:\Program Files\ DVD Shrink
[06/02/2007|07:39] C:\Program Files\ EarthLink Setup
[04/13/2008|02:35] C:\Program Files\ Emergent Music LLC
[12/10/2007|07:46] C:\Program Files\ Final DOOM for Windows 95
[08/13/2008|03:47] C:\Program Files\ Free iPod Video Converter
[08/03/2007|10:50] C:\Program Files\ Game On
[09/16/2008|06:45] C:\Program Files\ GetModule
[09/16/2008|06:45] C:\Program Files\ GetPack
[07/31/2008|06:33] C:\Program Files\ Google
[06/07/2007|04:48] C:\Program Files\ Hasbro Interactive
[09/16/2008|06:45] C:\Program Files\ iCheck
[06/02/2007|07:34] C:\Program Files\ illiminable
[06/28/2007|09:50] C:\Program Files\ Illustrate
[07/27/2007|03:52] C:\Program Files\ Infogrames Interactive
[09/11/2008|03:59] C:\Program Files\ InstallShield Installation Information
[08/23/2008|06:30] C:\Program Files\ Internet Explorer
[03/20/2008|11:44] C:\Program Files\ iPod
[03/20/2008|11:44] C:\Program Files\ iTunes
[05/15/2008|06:55] C:\Program Files\ Java
[11/30/2007|09:51] C:\Program Files\ Kuma Games
[12/01/2007|04:04] C:\Program Files\ Lavasoft
[09/15/2008|11:30] C:\Program Files\ LimeWire
[09/14/2008|10:58] C:\Program Files\ Malwarebytes' Anti-Malware
[03/01/2008|12:27] C:\Program Files\ Maxis
[08/24/2007|08:15] C:\Program Files\ Microsoft CAPICOM 2.1.0.2
[11/02/2006|08:37] C:\Program Files\ Microsoft Games
[08/23/2007|02:32] C:\Program Files\ Microsoft Office
[08/09/2008|10:44] C:\Program Files\ Microsoft Silverlight
[08/23/2007|02:31] C:\Program Files\ Microsoft Visual Studio
[08/23/2007|02:26] C:\Program Files\ Microsoft Visual Studio 8
[08/23/2007|02:33] C:\Program Files\ Microsoft Works
[08/23/2007|02:30] C:\Program Files\ Microsoft.NET
[06/02/2007|07:19] C:\Program Files\ Modem Diagnostic Tool
[08/23/2008|06:30] C:\Program Files\ Movie Maker
[09/16/2008|05:11] C:\Program Files\ Mozilla Firefox
[08/23/2007|02:33] C:\Program Files\ MSBuild
[06/02/2007|07:13] C:\Program Files\ MSXML 4.0
[06/02/2007|07:20] C:\Program Files\ NetWaiting
[06/02/2007|07:21] C:\Program Files\ NetZeroInstallers
[09/12/2008|06:00] C:\Program Files\ Norton Security Scan
[09/16/2008|06:45] C:\Program Files\ OINAnalytics
[06/07/2007|04:12] C:\Program Files\ Pinnacle
[08/22/2007|11:22] C:\Program Files\ PittNet
[08/14/2007|11:22] C:\Program Files\ Quake III Arena
[02/17/2008|04:15] C:\Program Files\ QuickTime
[08/10/2008|07:43] C:\Program Files\ Red Kawa
[11/02/2006|08:37] C:\Program Files\ Reference Assemblies
[06/02/2007|07:24] C:\Program Files\ Roxio
[03/20/2008|11:52] C:\Program Files\ Safari
[06/02/2007|07:17] C:\Program Files\ SigmaTel
[09/14/2008|09:20] C:\Program Files\ Spybot - Search & Destroy
[08/22/2007|11:18] C:\Program Files\ Symantec
[08/22/2007|11:16] C:\Program Files\ Symantec AntiVirus
[06/02/2007|02:54] C:\Program Files\ Synaptics
[01/17/2008|11:48] C:\Program Files\ Transparent
[12/01/2007|09:08] C:\Program Files\ Trend Micro
[11/02/2006|09:01] C:\Program Files\ Uninstall Information
[04/06/2008|07:49] C:\Program Files\ Virtual Earth 3D
[06/25/2007|10:01] C:\Program Files\ Webshots
[08/23/2008|06:30] C:\Program Files\ Windows Calendar
[08/23/2008|06:30] C:\Program Files\ Windows Collaboration
[08/23/2008|06:29] C:\Program Files\ Windows Defender
[08/23/2008|06:30] C:\Program Files\ Windows Journal
[08/23/2008|06:30] C:\Program Files\ Windows Mail
[08/23/2008|06:30] C:\Program Files\ Windows Media Player
[11/02/2006|08:37] C:\Program Files\ Windows NT
[08/23/2008|06:30] C:\Program Files\ Windows Photo Gallery
[08/23/2008|06:30] C:\Program Files\ Windows Sidebar
[08/12/2008|11:50] C:\Program Files\ Winnydows
[08/10/2008|11:03] C:\Program Files\ Xvid
[06/02/2007|07:33] C:\Program Files\ Yahoo!

——————–\\ Listing Folders in C:\Program Files\Common Files

[01/12/2008|08:20] C:\Program Files\Common Files\ Adobe
[07/20/2007|03:36] C:\Program Files\Common Files\ AOL
[07/03/2007|11:42] C:\Program Files\Common Files\ Apple
[08/03/2007|10:50] C:\Program Files\Common Files\ Broderbund
[08/23/2007|02:31] C:\Program Files\Common Files\ DESIGNER
[06/02/2007|07:23] C:\Program Files\Common Files\ InstallShield
[12/02/2007|03:04] C:\Program Files\Common Files\ Java
[12/13/2007|04:07] C:\Program Files\Common Files\ microsoft shared
[06/02/2007|07:22] C:\Program Files\Common Files\ Roxio Shared
[11/02/2006|07:18] C:\Program Files\Common Files\ Services
[06/02/2007|07:24] C:\Program Files\Common Files\ Sonic Shared
[11/02/2006|07:18] C:\Program Files\Common Files\ SpeechEngines
[06/02/2007|07:34] C:\Program Files\Common Files\ SureThing Shared
[08/22/2007|11:18] C:\Program Files\Common Files\ Symantec Shared
[08/23/2008|06:29] C:\Program Files\Common Files\ System
[12/01/2007|04:02] C:\Program Files\Common Files\ Wise Installation Wizard

——————–\\ Process

( 27 Processes )

… OK !

——————–\\ Searching with S_Lop

No Lop folder found !

——————–\\ Searching for Lop Files - Folders

C:\Users\CJ\AppData\Local\Temp\nsa5716.tmp
C:\Users\CJ\AppData\Local\Temp\nsb9E53.tmp
C:\Users\CJ\AppData\Local\Temp\nsf6B03.tmp
C:\Users\CJ\AppData\Local\Temp\nsg71A8.tmp
C:\Users\CJ\AppData\Local\Temp\nsl687.tmp
C:\Users\CJ\AppData\Local\Temp\nslA841.tmp
C:\Users\CJ\AppData\Local\Temp\nsq5D2E.tmp
C:\Users\CJ\AppData\Local\Temp\nsu4BEA.tmp
C:\Users\CJ\AppData\Local\Temp\nsvB481.tmp
C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\cj@advertising[2].txt
C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\cj@advertising[3].txt
C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\[removed][2].txt
C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\[removed][3].txt

——————–\\ Searching within the Registry

….. OK !

——————–\\ Checking the Hosts file

Hosts file CLEAN


——————–\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-16 17:21:57
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes …
scanning hidden files …
disk error: C:\Windows\System32\
please note that you need administrator rights to perform deep scan

——————–\\ Searching for other infections

——————–\\ ROOTKIT !!

Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet003\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet003\Enum\Root\tdssserv]


Trojan ! .. C:\Windows\system32\drivers\tdssserv.sys
Trojan ! .. C:\Windows\system32\tdssservers.dat
Trojan ! .. C:\Windows\system32\tdssinit.dll
Trojan ! .. C:\Windows\system32\tdssadw.dll
Trojan ! .. C:\Windows\system32\tdssl.dll

——————–\\ Cracks & Keygens ..

C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\.datVista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Torrent downloaded from Demonoid.com.txt
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Ultimate Doom.rar
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Windows Vista Activation Crack.rar


[F:38][D:428]-> C:\Users\CJ\AppData\Local\Temp
[F:235][D:1]-> C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1736][D:23]-> C:\Users\CJ\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:18][D:6]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - Tue 09/16/2008|17:23 - Option : [1]

——————–\\ Scan completed at 17:23:55
[ UAC => 1 ]
Post #22
coastercarl1,

As you can read, the scanner found a bunch of cracked software. Per forum policy I'm not allowed to help you until you remove the cracked software. However, I don't believe you will be able to do that in the current state of your computer. Therefore to continue (for now).

Restart Lop S&D

This time choose Option 3 (Fix - Hosts)
Don't close the window during suppression!
Post the log which is created: (%SystemDrive%\lopR.txt)
Post #23
Ok here's my new log. How can i get rid of the cracked files



——————–\\ Lop S&D 4.2.4-3 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel® Core™ Duo CPU T2350 @ 1.86GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A15
USER : CJ ( Not Administrator ! )
BOOT : Fail-safe with network boot
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 137 Go Free : 62 Go
D:\ (Local Disk) - NTFS - Total : 9 Go Free : 6 Go
E:\ (CD or DVD) - UDF - Total : 0 Go Free : 0 Go

"C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
Option : [3] ( Tue 09/16/2008|17:51 )

[ UAC => 1 ]


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ FIX

Deleted! - C:\Users\CJ\AppData\Local\Temp\nsa5716.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsb9E53.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsf6B03.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsg71A8.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsl687.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nslA841.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsq5D2E.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsu4BEA.tmp
Deleted! - C:\Users\CJ\AppData\Local\Temp\nsvB481.tmp
Deleted! - C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\cj@advertising[2].txt
Deleted! - C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\cj@advertising[3].txt
Deleted! - C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\[removed][2].txt
Deleted! - C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies\[removed][3].txt

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

Deleted! - C:\PROGRA~2\Viewpoint

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


——————–\\ Listing folders in Local

[12/05/2007|04:59] C:\Users\CJ\AppData\Local\ Adobe
[07/20/2007|09:48] C:\Users\CJ\AppData\Local\ AOL
[06/08/2007|09:53] C:\Users\CJ\AppData\Local\ AOL OCP
[08/25/2007|03:43] C:\Users\CJ\AppData\Local\ Apple
[10/23/2007|10:35] C:\Users\CJ\AppData\Local\ Apple Computer
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ Application Data
[06/07/2007|02:48] C:\Users\CJ\AppData\Local\ ATI
[11/21/2007|12:16] C:\Users\CJ\AppData\Local\7,592 d3d9caps.dat
[08/10/2008|06:07] C:\Users\CJ\AppData\Local\77,312 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[09/11/2008|05:13] C:\Users\CJ\AppData\Local\128,664 GDIPFONTCACHEV1.DAT
[12/18/2007|09:19] C:\Users\CJ\AppData\Local\ Google
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ History
[04/06/2008|07:52] C:\Users\CJ\AppData\Local\ IsolatedStorage
[06/07/2007|02:48] C:\Users\CJ\AppData\Local\ MediaDirect
[03/18/2008|11:00] C:\Users\CJ\AppData\Local\ Microsoft
[08/18/2008|09:24] C:\Users\CJ\AppData\Local\ Microsoft Games
[08/23/2007|02:24] C:\Users\CJ\AppData\Local\ Microsoft Help
[03/15/2008|01:42] C:\Users\CJ\AppData\Local\ Mozilla
[10/04/2007|09:15] C:\Users\CJ\AppData\Local\ Oblivion
[02/19/2008|03:33] C:\Users\CJ\AppData\Local\ Participatory Culture Foundation
[08/22/2007|11:19] C:\Users\CJ\AppData\Local\ Symantec
[09/16/2008|05:51] C:\Users\CJ\AppData\Local\ Temp
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ Temporary Internet Files
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ VirtualStore

——————–\\ Scheduled Tasks located in C:\Windows\Tasks

[09/12/2008 07:30 PM][–a——] C:\Windows\tasks\Norton Security Scan.job
[09/16/2008 02:46 PM][–ah—–] C:\Windows\tasks\SA.DAT
[09/15/2008 10:01 PM][–a——] C:\Windows\tasks\SCHEDLGU.TXT

——————–\\ Listing Folders in C:\ProgramData

[06/02/2007|07:35] C:\ProgramData\ Adobe
[07/20/2007|03:36] C:\ProgramData\ AOL
[11/18/2007|01:10] C:\ProgramData\ AOL Downloads
[06/08/2007|09:53] C:\ProgramData\ AOL OCP
[07/03/2007|11:42] C:\ProgramData\ Apple
[06/08/2007|03:37] C:\ProgramData\ Apple Computer
[06/07/2007|02:43] C:\ProgramData\ Application Data
[08/22/2007|10:55] C:\ProgramData\ Avg7
[06/02/2007|07:37] C:\ProgramData\ CyberLink
[01/28/2008|12:04] C:\ProgramData\ Dell
[06/07/2007|02:43] C:\ProgramData\ Desktop
[06/07/2007|02:43] C:\ProgramData\ Documents
[08/13/2008|12:50] C:\ProgramData\ DVD Shrink
[06/07/2007|02:43] C:\ProgramData\ Favorites
[06/11/2008|11:12] C:\ProgramData\ Google
[09/15/2008|09:58] C:\ProgramData\ Google Updater
[06/02/2007|07:26] C:\ProgramData\ Gtek
[06/02/2007|07:22] C:\ProgramData\ InstallShield
[12/01/2007|04:04] C:\ProgramData\ Lavasoft
[09/14/2008|10:58] C:\ProgramData\ Malwarebytes
[09/11/2008|03:57] C:\ProgramData\ Media Center Programs
[03/18/2008|11:00] C:\ProgramData\ Microsoft
[07/09/2008|08:21] C:\ProgramData\ Microsoft Help
[01/17/2008|11:47] C:\ProgramData\ Office Genuine Advantage
[02/19/2008|03:32] C:\ProgramData\ Participatory Culture Foundation
[06/07/2007|04:01] C:\ProgramData\ Pinnacle
[06/07/2007|04:44] C:\ProgramData\ QuickTime
[01/02/2008|10:45] C:\ProgramData\ Roxio
[06/02/2007|07:25] C:\ProgramData\ Sonic
[09/16/2008|06:45] C:\ProgramData\ Spybot - Search & Destroy
[06/07/2007|02:43] C:\ProgramData\ Start Menu
[08/22/2007|11:19] C:\ProgramData\ Symantec
[06/07/2007|02:43] C:\ProgramData\ Templates
[01/17/2008|11:48] C:\ProgramData\ Transparent
[08/10/2008|07:23] C:\ProgramData\5,071 xqkcebzs.dik
[06/02/2007|07:33] C:\ProgramData\ YAHOO

——————–\\ Listing Folders in C:\Program Files

[06/02/2007|07:35] C:\Program Files\ Adobe
[09/16/2008|06:45] C:\Program Files\ Adzgalore Games Collection
[11/18/2007|01:14] C:\Program Files\ AIM6
[09/11/2008|03:47] C:\Program Files\ America's Army
[07/20/2007|03:35] C:\Program Files\ AOL
[06/02/2007|07:36] C:\Program Files\ AOL Install
[11/25/2007|05:23] C:\Program Files\ Apple Software Update
[06/02/2007|07:18] C:\Program Files\ ATI Technologies
[08/10/2008|07:43] C:\Program Files\ AviSynth 2.5
[06/02/2007|07:32] C:\Program Files\ BAE
[10/04/2007|09:04] C:\Program Files\ Bethesda Softworks
[01/20/2008|06:17] C:\Program Files\ Bonjour
[09/04/2007|07:27] C:\Program Files\ CAPCOM
[01/13/2008|04:57] C:\Program Files\ Cisco Systems
[12/02/2007|03:04] C:\Program Files\ Common Files
[06/02/2007|07:01] C:\Program Files\ CONEXANT
[06/02/2007|07:37] C:\Program Files\ CyberLink
[06/02/2007|07:42] C:\Program Files\ Dell
[06/02/2007|07:26] C:\Program Files\ DellSupport
[06/02/2007|07:21] C:\Program Files\ Digital Line Detect
[03/21/2008|10:14] C:\Program Files\ Diino
[09/13/2007|11:12] C:\Program Files\ DivX
[09/11/2008|03:51] C:\Program Files\ DominateGame
[12/08/2007|02:39] C:\Program Files\ DOOM 3
[12/10/2007|04:02] C:\Program Files\ Doom II for Windows 95
[12/08/2007|03:30] C:\Program Files\ Doom Shareware for Windows 95
[06/07/2008|08:45] C:\Program Files\ DOSBox-0.72
[08/10/2008|11:22] C:\Program Files\ DVD Decrypter
[08/13/2008|12:47] C:\Program Files\ DVD Shrink
[06/02/2007|07:39] C:\Program Files\ EarthLink Setup
[04/13/2008|02:35] C:\Program Files\ Emergent Music LLC
[12/10/2007|07:46] C:\Program Files\ Final DOOM for Windows 95
[08/13/2008|03:47] C:\Program Files\ Free iPod Video Converter
[08/03/2007|10:50] C:\Program Files\ Game On
[09/16/2008|06:45] C:\Program Files\ GetModule
[09/16/2008|06:45] C:\Program Files\ GetPack
[07/31/2008|06:33] C:\Program Files\ Google
[06/07/2007|04:48] C:\Program Files\ Hasbro Interactive
[09/16/2008|06:45] C:\Program Files\ iCheck
[06/02/2007|07:34] C:\Program Files\ illiminable
[06/28/2007|09:50] C:\Program Files\ Illustrate
[07/27/2007|03:52] C:\Program Files\ Infogrames Interactive
[09/11/2008|03:59] C:\Program Files\ InstallShield Installation Information
[08/23/2008|06:30] C:\Program Files\ Internet Explorer
[03/20/2008|11:44] C:\Program Files\ iPod
[03/20/2008|11:44] C:\Program Files\ iTunes
[05/15/2008|06:55] C:\Program Files\ Java
[11/30/2007|09:51] C:\Program Files\ Kuma Games
[12/01/2007|04:04] C:\Program Files\ Lavasoft
[09/15/2008|11:30] C:\Program Files\ LimeWire
[09/14/2008|10:58] C:\Program Files\ Malwarebytes' Anti-Malware
[03/01/2008|12:27] C:\Program Files\ Maxis
[08/24/2007|08:15] C:\Program Files\ Microsoft CAPICOM 2.1.0.2
[11/02/2006|08:37] C:\Program Files\ Microsoft Games
[08/23/2007|02:32] C:\Program Files\ Microsoft Office
[08/09/2008|10:44] C:\Program Files\ Microsoft Silverlight
[08/23/2007|02:31] C:\Program Files\ Microsoft Visual Studio
[08/23/2007|02:26] C:\Program Files\ Microsoft Visual Studio 8
[08/23/2007|02:33] C:\Program Files\ Microsoft Works
[08/23/2007|02:30] C:\Program Files\ Microsoft.NET
[06/02/2007|07:19] C:\Program Files\ Modem Diagnostic Tool
[08/23/2008|06:30] C:\Program Files\ Movie Maker
[09/16/2008|05:25] C:\Program Files\ Mozilla Firefox
[08/23/2007|02:33] C:\Program Files\ MSBuild
[06/02/2007|07:13] C:\Program Files\ MSXML 4.0
[06/02/2007|07:20] C:\Program Files\ NetWaiting
[06/02/2007|07:21] C:\Program Files\ NetZeroInstallers
[09/12/2008|06:00] C:\Program Files\ Norton Security Scan
[09/16/2008|06:45] C:\Program Files\ OINAnalytics
[06/07/2007|04:12] C:\Program Files\ Pinnacle
[08/22/2007|11:22] C:\Program Files\ PittNet
[08/14/2007|11:22] C:\Program Files\ Quake III Arena
[02/17/2008|04:15] C:\Program Files\ QuickTime
[08/10/2008|07:43] C:\Program Files\ Red Kawa
[11/02/2006|08:37] C:\Program Files\ Reference Assemblies
[06/02/2007|07:24] C:\Program Files\ Roxio
[03/20/2008|11:52] C:\Program Files\ Safari
[06/02/2007|07:17] C:\Program Files\ SigmaTel
[09/14/2008|09:20] C:\Program Files\ Spybot - Search & Destroy
[08/22/2007|11:18] C:\Program Files\ Symantec
[08/22/2007|11:16] C:\Program Files\ Symantec AntiVirus
[06/02/2007|02:54] C:\Program Files\ Synaptics
[01/17/2008|11:48] C:\Program Files\ Transparent
[12/01/2007|09:08] C:\Program Files\ Trend Micro
[11/02/2006|09:01] C:\Program Files\ Uninstall Information
[04/06/2008|07:49] C:\Program Files\ Virtual Earth 3D
[06/25/2007|10:01] C:\Program Files\ Webshots
[08/23/2008|06:30] C:\Program Files\ Windows Calendar
[08/23/2008|06:30] C:\Program Files\ Windows Collaboration
[08/23/2008|06:29] C:\Program Files\ Windows Defender
[08/23/2008|06:30] C:\Program Files\ Windows Journal
[08/23/2008|06:30] C:\Program Files\ Windows Mail
[08/23/2008|06:30] C:\Program Files\ Windows Media Player
[11/02/2006|08:37] C:\Program Files\ Windows NT
[08/23/2008|06:30] C:\Program Files\ Windows Photo Gallery
[08/23/2008|06:30] C:\Program Files\ Windows Sidebar
[08/12/2008|11:50] C:\Program Files\ Winnydows
[08/10/2008|11:03] C:\Program Files\ Xvid
[06/02/2007|07:33] C:\Program Files\ Yahoo!

——————–\\ Listing Folders in C:\Program Files\Common Files

[01/12/2008|08:20] C:\Program Files\Common Files\ Adobe
[07/20/2007|03:36] C:\Program Files\Common Files\ AOL
[07/03/2007|11:42] C:\Program Files\Common Files\ Apple
[08/03/2007|10:50] C:\Program Files\Common Files\ Broderbund
[08/23/2007|02:31] C:\Program Files\Common Files\ DESIGNER
[06/02/2007|07:23] C:\Program Files\Common Files\ InstallShield
[12/02/2007|03:04] C:\Program Files\Common Files\ Java
[12/13/2007|04:07] C:\Program Files\Common Files\ microsoft shared
[06/02/2007|07:22] C:\Program Files\Common Files\ Roxio Shared
[11/02/2006|07:18] C:\Program Files\Common Files\ Services
[06/02/2007|07:24] C:\Program Files\Common Files\ Sonic Shared
[11/02/2006|07:18] C:\Program Files\Common Files\ SpeechEngines
[06/02/2007|07:34] C:\Program Files\Common Files\ SureThing Shared
[08/22/2007|11:18] C:\Program Files\Common Files\ Symantec Shared
[08/23/2008|06:29] C:\Program Files\Common Files\ System
[12/01/2007|04:02] C:\Program Files\Common Files\ Wise Installation Wizard

——————–\\ Process

( 27 Processes )

… OK !

——————–\\ Searching with S_Lop

No Lop folder found !

——————–\\ Searching for Lop Files - Folders

No Lop folder found !

——————–\\ Searching within the Registry

….. OK !

——————–\\ Checking the Hosts file

Hosts file CLEAN


——————–\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-16 17:51:55
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes …
scanning hidden files …
disk error: C:\Windows\System32\
please note that you need administrator rights to perform deep scan

——————–\\ Searching for other infections

——————–\\ ROOTKIT !!

Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet003\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet003\Enum\Root\tdssserv]


Trojan ! .. C:\Windows\system32\drivers\tdssserv.sys
Trojan ! .. C:\Windows\system32\tdssservers.dat
Trojan ! .. C:\Windows\system32\tdssinit.dll
Trojan ! .. C:\Windows\system32\tdssadw.dll
Trojan ! .. C:\Windows\system32\tdssl.dll

——————–\\ Cracks & Keygens ..

C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\.datVista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Torrent downloaded from Demonoid.com.txt
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Ultimate Doom.rar
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Windows Vista Activation Crack.rar


[F:38][D:419]-> C:\Users\CJ\AppData\Local\Temp
[F:231][D:1]-> C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1736][D:23]-> C:\Users\CJ\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:18][D:6]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - Tue 09/16/2008|17:23 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - Tue 09/16/2008|17:53 - Option : [3]

——————–\\ Scan completed at 17:53:09
[ UAC => 1 ]
Post #24
coastercarl1,

This should take care of the ones it found. :)

Backup Your Registry with ERUNT
  • Download ERUNT from here and save it to your desktop.
  • Right-click erunt.zip, choose Extract All… and follow the prompts to unzip the program
  • Open the erunt folder on your Desktop and double-click ERUNT.exe to start the program
  • OK all the prompts to back up your registry to the default location.
Note:
The backups can be restored from here:
C:\windows\ERDNT\\ERDNT.exe

Please open Notepad

  • Click Start , then Run
  • Type notepad.exe in the Run Box.
    • Copy and Paste everything from the Quote box into Notepad:

    REGEDIT4

    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]
    [-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\tdssserv]
    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\tdssserv]
    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\tdssserv]
    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\LEGACY_TDSSSERV]
    [-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Enum\Root\tdssserv]


    Make sure there are NO blank lines before REGEDIT4
    Make sure there IS one blank line at the end of the file.

    Go to File > Save As
    Save File name as Fix.reg
    Change Save as Type to All Files and save the file to your desktop.

    Close Notepad, and double-click Fix.reg on your Desktop. When it asks if you want to merge the info to the registry, hit YES/OK.

    Select the entire area below, then right-click and choose Copy
    C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\.datVista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Torrent downloaded from Demonoid.com.txt
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Ultimate Doom.rar
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Windows Vista Activation Crack.rar
C:\Windows\system32\drivers\tdssserv.sys
C:\Windows\system32\tdssservers.dat
C:\Windows\system32\tdssinit.dll
C:\Windows\system32\tdssadw.dll
C:\Windows\system32\tdssl.dll
    Restart Lop S&D
    Choose Option 4 (LopScript)
    A blank page will be opened, right-click it and choose Paste
    Close the page, you'll be asked to save it, click [Save]
    Don't close the windows during suppression!
    Post the log which is created: (%SystemDrive%\lopR.txt)
Post #25
OK here's my new log


——————–\\ Lop S&D 4.2.4-3 XP/Vista

Microsoft® Windows Vista™ Home Premium ( v6.0.6001 ) Service Pack 1
X86-based PC ( Multiprocessor Free : Intel® Core™ Duo CPU T2350 @ 1.86GHz )
BIOS : Phoenix ROM BIOS PLUS Version 1.10 A15
USER : CJ ( Not Administrator ! )
BOOT : Fail-safe with network boot
Firewall : Norton Internet Security 2007 (Not Activated)
C:\ (Local Disk) - NTFS - Total : 137 Go Free : 62 Go
D:\ (Local Disk) - NTFS - Total : 9 Go Free : 6 Go
E:\ (CD or DVD)
F:\ (USB) - FAT - Total : 967 Mo Free : 0 Go

"C:\Lop SD" ( MAJ : 14-09-2008|22:40 )
Option : [4] ( Tue 09/16/2008|19:16 )

[ UAC => 1 ]

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ Lop Script

C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\.datVista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Torrent downloaded from Demonoid.com.txt
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Ultimate Doom.rar
C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Windows Vista Activation Crack.rar
C:\Windows\system32\drivers\tdssserv.sys
C:\Windows\system32\tdssservers.dat
C:\Windows\system32\tdssinit.dll
C:\Windows\system32\tdssadw.dll
C:\Windows\system32\tdssl.dll


\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ FIX

… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf -> does not exist !
Deleted! - C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\.datVista Crack and DOOM
Deleted! - C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Torrent downloaded from Demonoid.com.txt
Deleted! - C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Ultimate Doom.rar
Deleted! - C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Windows Vista Activation Crack.rar
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen -> does not exist !
Deleted! - C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM
Failed ! - C:\Windows\system32\drivers\tdssserv.sys
Failed ! - C:\Windows\system32\tdssservers.dat
Failed ! - C:\Windows\system32\tdssinit.dll
Failed ! - C:\Windows\system32\tdssadw.dll
Failed ! - C:\Windows\system32\tdssl.dll
-
[ Hosts file ] .. Restored!

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SECOND PASS

… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf -> does not exist !
… C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\.datVista Crack and DOOM -> does not exist !
… C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Torrent downloaded from Demonoid.com.txt -> does not exist !
… C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Ultimate Doom.rar -> does not exist !
… C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM\Windows Vista Activation Crack.rar -> does not exist !
… C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen -> does not exist !
… C:\Users\CJ\Incomplete\QDZS3CSDHPAARM57ZKFZPZWRRGB5YISE\Vista Crack and DOOM -> does not exist !
Failed ! - C:\Windows\system32\drivers\tdssserv.sys
Failed ! - C:\Windows\system32\tdssservers.dat
Failed ! - C:\Windows\system32\tdssinit.dll
Failed ! - C:\Windows\system32\tdssadw.dll
Failed ! - C:\Windows\system32\tdssl.dll

\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\


——————–\\ Listing folders in Local

[12/05/2007|04:59] C:\Users\CJ\AppData\Local\ Adobe
[07/20/2007|09:48] C:\Users\CJ\AppData\Local\ AOL
[06/08/2007|09:53] C:\Users\CJ\AppData\Local\ AOL OCP
[08/25/2007|03:43] C:\Users\CJ\AppData\Local\ Apple
[10/23/2007|10:35] C:\Users\CJ\AppData\Local\ Apple Computer
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ Application Data
[06/07/2007|02:48] C:\Users\CJ\AppData\Local\ ATI
[11/21/2007|12:16] C:\Users\CJ\AppData\Local\7,592 d3d9caps.dat
[08/10/2008|06:07] C:\Users\CJ\AppData\Local\77,312 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[09/11/2008|05:13] C:\Users\CJ\AppData\Local\128,664 GDIPFONTCACHEV1.DAT
[12/18/2007|09:19] C:\Users\CJ\AppData\Local\ Google
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ History
[04/06/2008|07:52] C:\Users\CJ\AppData\Local\ IsolatedStorage
[06/07/2007|02:48] C:\Users\CJ\AppData\Local\ MediaDirect
[03/18/2008|11:00] C:\Users\CJ\AppData\Local\ Microsoft
[08/18/2008|09:24] C:\Users\CJ\AppData\Local\ Microsoft Games
[08/23/2007|02:24] C:\Users\CJ\AppData\Local\ Microsoft Help
[03/15/2008|01:42] C:\Users\CJ\AppData\Local\ Mozilla
[10/04/2007|09:15] C:\Users\CJ\AppData\Local\ Oblivion
[02/19/2008|03:33] C:\Users\CJ\AppData\Local\ Participatory Culture Foundation
[08/22/2007|11:19] C:\Users\CJ\AppData\Local\ Symantec
[09/16/2008|07:16] C:\Users\CJ\AppData\Local\ Temp
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ Temporary Internet Files
[06/07/2007|02:47] C:\Users\CJ\AppData\Local\ VirtualStore

——————–\\ Scheduled Tasks located in C:\Windows\Tasks

[09/12/2008 07:30 PM][–a——] C:\Windows\tasks\Norton Security Scan.job
[09/16/2008 02:46 PM][–ah—–] C:\Windows\tasks\SA.DAT
[09/15/2008 10:01 PM][–a——] C:\Windows\tasks\SCHEDLGU.TXT

——————–\\ Listing Folders in C:\ProgramData

[06/02/2007|07:35] C:\ProgramData\ Adobe
[07/20/2007|03:36] C:\ProgramData\ AOL
[11/18/2007|01:10] C:\ProgramData\ AOL Downloads
[06/08/2007|09:53] C:\ProgramData\ AOL OCP
[07/03/2007|11:42] C:\ProgramData\ Apple
[06/08/2007|03:37] C:\ProgramData\ Apple Computer
[06/07/2007|02:43] C:\ProgramData\ Application Data
[08/22/2007|10:55] C:\ProgramData\ Avg7
[06/02/2007|07:37] C:\ProgramData\ CyberLink
[01/28/2008|12:04] C:\ProgramData\ Dell
[06/07/2007|02:43] C:\ProgramData\ Desktop
[06/07/2007|02:43] C:\ProgramData\ Documents
[08/13/2008|12:50] C:\ProgramData\ DVD Shrink
[06/07/2007|02:43] C:\ProgramData\ Favorites
[06/11/2008|11:12] C:\ProgramData\ Google
[09/15/2008|09:58] C:\ProgramData\ Google Updater
[06/02/2007|07:26] C:\ProgramData\ Gtek
[06/02/2007|07:22] C:\ProgramData\ InstallShield
[12/01/2007|04:04] C:\ProgramData\ Lavasoft
[09/14/2008|10:58] C:\ProgramData\ Malwarebytes
[09/11/2008|03:57] C:\ProgramData\ Media Center Programs
[03/18/2008|11:00] C:\ProgramData\ Microsoft
[07/09/2008|08:21] C:\ProgramData\ Microsoft Help
[01/17/2008|11:47] C:\ProgramData\ Office Genuine Advantage
[02/19/2008|03:32] C:\ProgramData\ Participatory Culture Foundation
[06/07/2007|04:01] C:\ProgramData\ Pinnacle
[06/07/2007|04:44] C:\ProgramData\ QuickTime
[01/02/2008|10:45] C:\ProgramData\ Roxio
[06/02/2007|07:25] C:\ProgramData\ Sonic
[09/16/2008|06:45] C:\ProgramData\ Spybot - Search & Destroy
[06/07/2007|02:43] C:\ProgramData\ Start Menu
[08/22/2007|11:19] C:\ProgramData\ Symantec
[06/07/2007|02:43] C:\ProgramData\ Templates
[01/17/2008|11:48] C:\ProgramData\ Transparent
[08/10/2008|07:23] C:\ProgramData\5,071 xqkcebzs.dik
[06/02/2007|07:33] C:\ProgramData\ YAHOO

——————–\\ Listing Folders in C:\Program Files

[06/02/2007|07:35] C:\Program Files\ Adobe
[09/16/2008|06:45] C:\Program Files\ Adzgalore Games Collection
[11/18/2007|01:14] C:\Program Files\ AIM6
[09/11/2008|03:47] C:\Program Files\ America's Army
[07/20/2007|03:35] C:\Program Files\ AOL
[06/02/2007|07:36] C:\Program Files\ AOL Install
[11/25/2007|05:23] C:\Program Files\ Apple Software Update
[06/02/2007|07:18] C:\Program Files\ ATI Technologies
[08/10/2008|07:43] C:\Program Files\ AviSynth 2.5
[06/02/2007|07:32] C:\Program Files\ BAE
[10/04/2007|09:04] C:\Program Files\ Bethesda Softworks
[01/20/2008|06:17] C:\Program Files\ Bonjour
[09/04/2007|07:27] C:\Program Files\ CAPCOM
[01/13/2008|04:57] C:\Program Files\ Cisco Systems
[12/02/2007|03:04] C:\Program Files\ Common Files
[06/02/2007|07:01] C:\Program Files\ CONEXANT
[06/02/2007|07:37] C:\Program Files\ CyberLink
[06/02/2007|07:42] C:\Program Files\ Dell
[06/02/2007|07:26] C:\Program Files\ DellSupport
[06/02/2007|07:21] C:\Program Files\ Digital Line Detect
[03/21/2008|10:14] C:\Program Files\ Diino
[09/13/2007|11:12] C:\Program Files\ DivX
[09/11/2008|03:51] C:\Program Files\ DominateGame
[12/08/2007|02:39] C:\Program Files\ DOOM 3
[12/10/2007|04:02] C:\Program Files\ Doom II for Windows 95
[12/08/2007|03:30] C:\Program Files\ Doom Shareware for Windows 95
[06/07/2008|08:45] C:\Program Files\ DOSBox-0.72
[08/10/2008|11:22] C:\Program Files\ DVD Decrypter
[08/13/2008|12:47] C:\Program Files\ DVD Shrink
[06/02/2007|07:39] C:\Program Files\ EarthLink Setup
[04/13/2008|02:35] C:\Program Files\ Emergent Music LLC
[12/10/2007|07:46] C:\Program Files\ Final DOOM for Windows 95
[08/13/2008|03:47] C:\Program Files\ Free iPod Video Converter
[08/03/2007|10:50] C:\Program Files\ Game On
[09/16/2008|06:45] C:\Program Files\ GetModule
[09/16/2008|06:45] C:\Program Files\ GetPack
[07/31/2008|06:33] C:\Program Files\ Google
[06/07/2007|04:48] C:\Program Files\ Hasbro Interactive
[09/16/2008|06:45] C:\Program Files\ iCheck
[06/02/2007|07:34] C:\Program Files\ illiminable
[06/28/2007|09:50] C:\Program Files\ Illustrate
[07/27/2007|03:52] C:\Program Files\ Infogrames Interactive
[09/11/2008|03:59] C:\Program Files\ InstallShield Installation Information
[08/23/2008|06:30] C:\Program Files\ Internet Explorer
[03/20/2008|11:44] C:\Program Files\ iPod
[03/20/2008|11:44] C:\Program Files\ iTunes
[05/15/2008|06:55] C:\Program Files\ Java
[11/30/2007|09:51] C:\Program Files\ Kuma Games
[12/01/2007|04:04] C:\Program Files\ Lavasoft
[09/15/2008|11:30] C:\Program Files\ LimeWire
[09/14/2008|10:58] C:\Program Files\ Malwarebytes' Anti-Malware
[03/01/2008|12:27] C:\Program Files\ Maxis
[08/24/2007|08:15] C:\Program Files\ Microsoft CAPICOM 2.1.0.2
[11/02/2006|08:37] C:\Program Files\ Microsoft Games
[08/23/2007|02:32] C:\Program Files\ Microsoft Office
[08/09/2008|10:44] C:\Program Files\ Microsoft Silverlight
[08/23/2007|02:31] C:\Program Files\ Microsoft Visual Studio
[08/23/2007|02:26] C:\Program Files\ Microsoft Visual Studio 8
[08/23/2007|02:33] C:\Program Files\ Microsoft Works
[08/23/2007|02:30] C:\Program Files\ Microsoft.NET
[06/02/2007|07:19] C:\Program Files\ Modem Diagnostic Tool
[08/23/2008|06:30] C:\Program Files\ Movie Maker
[09/16/2008|06:03] C:\Program Files\ Mozilla Firefox
[08/23/2007|02:33] C:\Program Files\ MSBuild
[06/02/2007|07:13] C:\Program Files\ MSXML 4.0
[06/02/2007|07:20] C:\Program Files\ NetWaiting
[06/02/2007|07:21] C:\Program Files\ NetZeroInstallers
[09/12/2008|06:00] C:\Program Files\ Norton Security Scan
[09/16/2008|06:45] C:\Program Files\ OINAnalytics
[06/07/2007|04:12] C:\Program Files\ Pinnacle
[08/22/2007|11:22] C:\Program Files\ PittNet
[08/14/2007|11:22] C:\Program Files\ Quake III Arena
[02/17/2008|04:15] C:\Program Files\ QuickTime
[08/10/2008|07:43] C:\Program Files\ Red Kawa
[11/02/2006|08:37] C:\Program Files\ Reference Assemblies
[06/02/2007|07:24] C:\Program Files\ Roxio
[03/20/2008|11:52] C:\Program Files\ Safari
[06/02/2007|07:17] C:\Program Files\ SigmaTel
[09/14/2008|09:20] C:\Program Files\ Spybot - Search & Destroy
[08/22/2007|11:18] C:\Program Files\ Symantec
[08/22/2007|11:16] C:\Program Files\ Symantec AntiVirus
[06/02/2007|02:54] C:\Program Files\ Synaptics
[01/17/2008|11:48] C:\Program Files\ Transparent
[12/01/2007|09:08] C:\Program Files\ Trend Micro
[11/02/2006|09:01] C:\Program Files\ Uninstall Information
[04/06/2008|07:49] C:\Program Files\ Virtual Earth 3D
[06/25/2007|10:01] C:\Program Files\ Webshots
[08/23/2008|06:30] C:\Program Files\ Windows Calendar
[08/23/2008|06:30] C:\Program Files\ Windows Collaboration
[08/23/2008|06:29] C:\Program Files\ Windows Defender
[08/23/2008|06:30] C:\Program Files\ Windows Journal
[08/23/2008|06:30] C:\Program Files\ Windows Mail
[08/23/2008|06:30] C:\Program Files\ Windows Media Player
[11/02/2006|08:37] C:\Program Files\ Windows NT
[08/23/2008|06:30] C:\Program Files\ Windows Photo Gallery
[08/23/2008|06:30] C:\Program Files\ Windows Sidebar
[08/12/2008|11:50] C:\Program Files\ Winnydows
[08/10/2008|11:03] C:\Program Files\ Xvid
[06/02/2007|07:33] C:\Program Files\ Yahoo!

——————–\\ Listing Folders in C:\Program Files\Common Files

[01/12/2008|08:20] C:\Program Files\Common Files\ Adobe
[07/20/2007|03:36] C:\Program Files\Common Files\ AOL
[07/03/2007|11:42] C:\Program Files\Common Files\ Apple
[08/03/2007|10:50] C:\Program Files\Common Files\ Broderbund
[08/23/2007|02:31] C:\Program Files\Common Files\ DESIGNER
[06/02/2007|07:23] C:\Program Files\Common Files\ InstallShield
[12/02/2007|03:04] C:\Program Files\Common Files\ Java
[12/13/2007|04:07] C:\Program Files\Common Files\ microsoft shared
[06/02/2007|07:22] C:\Program Files\Common Files\ Roxio Shared
[11/02/2006|07:18] C:\Program Files\Common Files\ Services
[06/02/2007|07:24] C:\Program Files\Common Files\ Sonic Shared
[11/02/2006|07:18] C:\Program Files\Common Files\ SpeechEngines
[06/02/2007|07:34] C:\Program Files\Common Files\ SureThing Shared
[08/22/2007|11:18] C:\Program Files\Common Files\ Symantec Shared
[08/23/2008|06:29] C:\Program Files\Common Files\ System
[12/01/2007|04:02] C:\Program Files\Common Files\ Wise Installation Wizard

——————–\\ Process

( 27 Processes )

… OK !

——————–\\ Searching with S_Lop

No Lop folder found !

——————–\\ Searching for Lop Files - Folders

No Lop folder found !

——————–\\ Searching within the Registry

….. OK !

——————–\\ Checking the Hosts file

Hosts file CLEAN


——————–\\ Searching for hidden files with Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-16 19:17:49
Windows 6.0.6001 Service Pack 1 NTFS
scanning hidden processes …
scanning hidden files …
disk error: C:\Windows\System32\
please note that you need administrator rights to perform deep scan

——————–\\ Searching for other infections

——————–\\ ROOTKIT !!

Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\CurrentControlSet\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet001\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet002\Enum\Root\tdssserv]
Rootkit Tibs ! .. [HKLM\..\ControlSet003\Enum\Root\LEGACY_TDSSSERV]
Rootkit Tibs ! .. [HKLM\..\ControlSet003\Enum\Root\tdssserv]


Trojan ! .. C:\Windows\system32\drivers\tdssserv.sys
Trojan ! .. C:\Windows\system32\tdssservers.dat
Trojan ! .. C:\Windows\system32\tdssinit.dll
Trojan ! .. C:\Windows\system32\tdssadw.dll
Trojan ! .. C:\Windows\system32\tdssl.dll

——————–\\ Cracks & Keygens ..

C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\.datTiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\instructions.txt
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\keygen.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Tiger Woods PGA Tour 08 .iso
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\TW2008.exe
C:\Users\CJ\Incomplete\PMXQ5IDO23FKCTACSX2DCG7WDZ2Y252J\Tiger Woods PGA Tour 08 (PC) with Crack + Keygen\Y-How to get the PlayStation 3 for nothing.rtf


[F:38][D:419]-> C:\Users\CJ\AppData\Local\Temp
[F:231][D:1]-> C:\Users\CJ\AppData\Roaming\MICROS~1\Windows\Cookies
[F:1736][D:23]-> C:\Users\CJ\AppData\Local\MICROS~1\Windows\TEMPOR~1\content.IE5
[F:20][D:6]-> C:\$Recycle.Bin

1 - "C:\Lop SD\LopR_1.txt" - Tue 09/16/2008|17:23 - Option : [1]
2 - "C:\Lop SD\LopR_2.txt" - Tue 09/16/2008|17:53 - Option : [3]
3 - "C:\Lop SD\LopR_3.txt" - Tue 09/16/2008|19:19 - Option : [4]

——————–\\ Scan completed at 19:19:03
[ UAC => 1 ]
Post #26
coastercarl1, That stupid rootkit really wants to stay on your computer. :pullhair: Usually Malwarebytes removes it. (Combofix normally does also) Couple questions while I try to figure out a new move. Are you working in normal mode now? When you ran Malwarebytes in post #13 did you run in normal or Safe mode? Did you run as administrator?
Post #27
No i ran the last few things in safe mode. I didn't try and run it in normal mode though so it may work. I also ran Malwarebytes in safe mode but I can't remember if I ran it as an administrator
Post #30
coastercarl1, I'm really sorry about all the mucking around but don't give up on me. We'll wear it down. I'm working on a fix with yet another tool. :blush: I hope to be back to you shortly.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI