[Resolved] Baseline

Hi Keej3

Welcome to the What the tech Forums
My name is mschroe919 and I am going to read your log.
I would like to help you So if you would….
Please be patient and I will be back as soon as possible.

Please while I am gone do these steps:

Show hidden files, Here is how:

Windows XP

* Click Start.
* Open My Computer.
* Select the Tools menu and click Folder Options.
* Select the View Tab.
* Under the Hidden files and folders heading select Show hidden files and folders.
* Uncheck the Hide protected operating system files (recommended) option.
* Click Yes to confirm.
* Click OK.

NEXT:

Please download ATF Cleaner by Atribune.

Download it

HERE:

This program is for XP and Windows 2000 only
Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

NEXT:

Malwarebytes' Anti-Malware

HERE

* Double-click mbam-setup.exe and follow the prompts to install the program.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform FULL SCAN, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt
post a new scanner[HJT] log and the Malwarebytes' Anti-Malware log

Be sure not to delete anything intill said ok to. also don't run any other cleanup programs till we
get done it may goof ours up.
Also if you have any questions feel fre to ask first.

When you post another rhjt log and the Malwarebytes' Anti-Malware log , let me know how your PC is behavuing

I will be waiting to see new logs

Please stay with us till you pc is clean, cause what may soon look like your pc is doing fine,
a hidden virus shows up.
mschroe919

Hi Mschroe919. THANK YOU! I am working on this now! James

Hi mschroe, Here is the MBAM log: Malwarebytes' Anti-Malware 1.27 Database version: 1127 Windows 5.1.2600 Service Pack 3 9/29/2008 10:04:23 PM mbam-log-2008-09-29 (22-04-23).txt Scan type: Full Scan (C:\|) Objects scanned: 117991 Time elapsed: 54 minute(s), 39 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 28 Registry Values Infected: 3 Registry Data Items Infected: 13 Folders Infected: 13 Files Infected: 245 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\tracker.trackerobj (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\tracker.trackerobj.1 (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{0be385a3-85a5-4722-b677-68dae891ff21} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{272c0d60-0561-4c83-b3db-eb0a71f9d2eb} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{284477e4-a7cb-4055-9e1b-0ea7cba28945} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{70ca4938-6a0f-4641-a9a9-c936e4c1e7de} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{7468213e-010e-4ec6-a17d-642e909ba7ec} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{89dc33a2-f86f-42a1-8b5f-d4d1943efc9c} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{b86f4810-19a9-4050-9ac9-b5cf60b5799a} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{bb5b7e14-f8b4-4365-a24d-f4965c33e1ee} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{c13d4627-02f5-4b03-897a-bf6a90022dd2} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{c636f1fc-6ae4-4e6a-90ab-6d61d821a0dd} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{cb971ac0-6408-40da-a540-92f9f256f51f} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{d5694dfe-43b6-4e05-aa29-8c556c968973} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e2032ec2-a9ac-4ed7-9bdb-ebecacf076f2} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{e85f6aa5-7a0c-49a5-9e5e-936fed62347d} (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{ebab4a71-8c34-461a-b57d-dd041d439555} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{f06fea43-0cc3-4bf6-a85b-5efb1c07aa4b} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\Interface\{fc94a0f7-9c7c-4ae2-9106-5c212332b209} (Adware.WhenUSave) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{5D4348FB-DF43-0334-69B8-DAD6CA156781} (Rogue.Multiple) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{10c52a42-db8b-4ade-aa4a-ced6a8282b85} (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{daed9266-8c28-4c1c-8b58-5c66eff1d302} (Search.Hijack) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\MacroVirus (Rogue.MacroVirus) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\ugac (Rogue.PCSecureSystem) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\VSPlugin (Trojan.FakeAlert) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\adware away v3.1.4_is1 (Rogue.AdwareAway) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Online Add-on (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\multimediaControls.chl (Trojan.Zlob) -> Quarantined and deleted successfully. Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securewebinfo.com (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.safetyincludes.com (Trojan.Zlob) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow\*.securemanaging.com (Trojan.Zlob) -> Quarantined and deleted successfully. Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductId (Trojan.FakeAlert) -> Bad: (VIRUS ALERT!) Good: (55277-OEM-0011903-00106) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\Control Panel\International\sTimeFormat (Trojan.FakeAlert) -> Bad: (HH:mm: VIRUS ALERT!) Good: (h:mm:ss tt) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowControlPanel (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowRun (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMorePrograms (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDrives (Hijack.Drives) -> Bad: (12) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoToolbarCustomize (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders (Hijack.Explorer) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. Folders Infected: C:\Program Files\Sotfone (Trojan.Zlob) -> Quarantined and deleted successfully. C:\Program Files\Adware Away (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\WinSpyControl (Rogue.WinSpyControl) -> Quarantined and deleted successfully. C:\WinSpyControl\AVQuar (Rogue.WinSpyControl) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\SalesMon (Rogue.Multiple) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Application Data\SalesMon\Data (Rogue.Multiple) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\Adware Away (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Quarantine (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Registry Backups (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings (Rogue.MacroVirus) -> Quarantined and deleted successfully. Files Infected: C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP60\A0011212.dll (Adware.WebHancer) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{0A438C3B-A487-4C6D-850C-C76CC3327FD0}\RP60\A0011213.dll (Adware.WebHancer) -> Quarantined and deleted successfully. C:\WINDOWS\mqgldfvo.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\activex.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\AdAway.dll (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\AdAway.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\AdAway.exe.BAK (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\adware.away.3.1.3-patch.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\AdwareAway.chm (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\autorun.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\EnumAutoRun.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\EnumDlls.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\EProcess.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\explorerbar.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\fa.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\FixDesktopBackground.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\folderdll.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\global.dll (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\iebhotoolbar.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\iepage.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\ietoolbarbutton.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\ieurlprefix.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\ieurlsearchhook.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\lsp.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\nameserver.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\notifydll.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\overall.log (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\process.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\protocolfilter.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\ScanAtStartup.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\screenshot.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\securitysite.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\service.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\shellextension.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\shellextensionhook.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\SPAP.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\svchostdll.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\sysrestriction.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\unins000.dat (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\unins000.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\uninstall.tmp (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\Adware Away\Update2.exe (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\253b483c820d94526e61999374175ef5.full.mup (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\89a45a4cc88eb734bc059f73247d1b24.partial.mup (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\98ee443eb803507021f3f147da576823.partial.mup (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\b38466be3669e8086988d0d0d9748c8d.partial.mup (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\mav.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\mavapi.pyd (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\msvcr71.dll (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\python24.dll (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\zlib.pyd (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\_sqlite.pyd (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Program Files\MacroVirus\_tst.pyd (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\Adware Away\Adware Away.lnk (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\Adware Away\Uninstall.lnk (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\Adware Away\Update.lnk (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\Adware Away\User Manual.lnk (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 15 - 03_00_01 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 16 - 07_39_16 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 16 - 07_39_17 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 18 - 07_33_34 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 18 - 09_39_57 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 21 - 08_49_01 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 26 - 03_17_40 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 30 - 05_15_31 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Apr 30 - 05_15_32 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 02 - 07_12_03 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 03 - 09_14_47 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 04 - 02_04_33 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 04 - 08_47_25 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 04 - 08_47_26 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 05 - 08_00_47 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 05 - 08_00_49 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 06 - 06_41_46 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 11 - 05_00_39 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 11 - 07_28_58 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 13 - 07_18_21 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 13 - 07_18_22 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 13 - 10_09_31 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 14 - 09_14_17 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 15 - 08_34_51 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 16 - 09_08_44 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 16 - 09_08_45 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 17 - 06_55_31 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 17 - 07_54_54 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 17 - 07_54_56 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 18 - 04_44_09 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 18 - 08_37_23 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 20 - 07_37_49 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 20 - 07_37_50 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 22 - 04_45_27 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 23 - 01_38_16 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 23 - 01_38_17 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 23 - 08_36_05 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 23 - 08_42_07 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 23 - 08_42_08 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 24 - 08_32_09 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 24 - 08_32_10 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 25 - 04_04_36 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 26 - 05_56_35 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 26 - 05_56_36 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 27 - 04_10_37 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 27 - 04_10_38 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 27 - 09_36_28 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 27 - 09_36_29 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 28 - 05_07_24 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 28 - 05_07_25 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Aug 31 - 08_30_17 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 03 - 05_24_42 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 03 - 05_24_43 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 04 - 10_01_37 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 05 - 04_31_38 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 05 - 04_31_39 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 06 - 02_33_31 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 09 - 07_38_37 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 09 - 07_38_38 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 12 - 07_53_06 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 13 - 08_52_13 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 15 - 07_58_13 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 15 - 07_58_16 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 20 - 04_46_02 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 20 - 07_47_30 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 20 - 07_47_31 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 20 - 10_39_40 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 20 - 11_34_49 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 22 - 07_29_45 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 22 - 07_29_46 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 25 - 04_36_14 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 25 - 05_13_17 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 25 - 05_13_18 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 26 - 08_56_04 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 26 - 10_15_41 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 27 - 08_34_22 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 28 - 06_25_20 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 29 - 06_18_55 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 29 - 06_18_56 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jul 30 - 05_23_30 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 01 - 09_32_35 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 01 - 09_32_36 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 02 - 05_58_57 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 07 - 06_50_17 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 07 - 06_50_18 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 07 - 07_49_11 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 07 - 07_49_12 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 08 - 08_11_43 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 09 - 07_53_43 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 14 - 06_32_12 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 15 - 11_02_20 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 16 - 05_38_41 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 21 - 05_11_28 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 21 - 05_11_29 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 21 - 07_01_53 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 21 - 09_27_15 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 21 - 09_27_16 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 23 - 06_52_48 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 23 - 06_52_49 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 24 - 03_07_08 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 24 - 04_38_38 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 24 - 08_45_44 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 24 - 08_45_45 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 26 - 03_04_51 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 27 - 09_45_53 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 28 - 10_21_07 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 28 - 10_21_10 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 29 - 06_07_21 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Jun 30 - 06_10_53 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 03 - 11_13_52 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 03 - 11_13_54 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 03 - 12_47_14 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 13 - 02_58_41 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 13 - 02_58_42 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 13 - 03_40_03 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 14 - 06_36_32 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 14 - 06_36_33 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 15 - 07_15_56 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 16 - 07_05_35 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 16 - 07_05_36 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 17 - 10_01_11 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 17 - 10_01_12 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 18 - 09_12_35 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 19 - 05_27_14 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 21 - 05_46_06 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 21 - 08_14_08 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 22 - 07_03_41 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 24 - 09_19_54 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 25 - 08_42_40 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 25 - 09_22_16 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 25 - 09_22_17 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 25 - 09_48_47 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 25 - 09_48_48 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 26 - 04_05_09 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 26 - 04_55_24 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 27 - 08_08_17 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 27 - 08_08_18 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 28 - 07_01_43 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 30 - 06_15_53 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 30 - 06_15_54 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 May 31 - 02_03_27 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 01 - 07_28_18 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 04 - 04_32_51 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 04 - 05_09_48 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 04 - 07_24_43 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 05 - 05_18_38 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 05 - 05_18_39 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 06 - 07_56_50 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 06 - 07_56_51 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 07 - 07_56_44 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 08 - 02_34_39 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 08 - 10_36_58 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 09 - 06_59_30 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 09 - 07_16_14 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 09 - 07_21_43 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 09 - 07_21_44 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 09 - 10_40_22 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 09 - 10_40_23 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 10 - 06_13_25 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 10 - 09_38_32 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 10 - 09_38_33 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 11 - 05_20_54 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 11 - 06_51_26 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 11 - 06_51_27 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 12 - 04_45_12 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 12 - 04_45_14 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 12 - 08_11_50 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 02_20_30 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 02_20_31 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 03_24_33 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 03_24_34 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 09_15_51 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 09_15_52 AM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 12_06_22 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 12_06_24 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 12_09_33 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Log\2008 Sep 13 - 12_09_34 PM.log (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings\CustomScan.stg (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings\IgnoreList.stg (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings\ScanInfo.stg (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings\ScanResults.stg (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings\SelectedFolders.stg (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Application Data\MacroVirus\Settings\Settings.stg (Rogue.MacroVirus) -> Quarantined and deleted successfully. C:\WINDOWS\adaway.lic (Rogue.AdwareAway) -> Quarantined and deleted successfully. C:\Program Files\setup.exe (Rogue.Installer) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Favorites\Error Cleaner.url (Rogue.Link) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Favorites\Privacy Protector.url (Rogue.Link) -> Quarantined and deleted successfully. C:\Documents and Settings\Owner\Favorites\Spyware&Malware Protection.url (Rogue.Link) -> Quarantined and deleted successfully. New HJT log is on the way! THANKS! James

Hi Keej3

NEXT:

Make sure Internet Explorer isn't open

Run hijackthis again. Hit None of the above,
Click Do a System Scan Only.
Put a Check in the box on the left side on these: (Not to worry if not there)

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

Close ALL windows and browsers except HijackThis and click Fix checked
Then reboot

After reboot

NEXT:
Lets try something here to speed up your PC.

First:

Please download System Security Suite.

HERE:

Extract it from the zip file into a folder.
.
Run 3S under “Items To Clear” tab place a checkmark in all of them but the last.

then under autorun tasks just lock the ones you don't want to start. Your not deleteing them
just stopping them. You can start them manualy. You can use google to see what every auto run is.

This is a list of ones I suggest can be safly lock

LIST:
mobsync.exe
HPWuSchd2.exe
ctfmon.exe
msnmsgr.exe

NEXT:

FIRST:
Backup Your Registry with ERUNT
Please use the following link and scroll down to ERUNT and download it

HERE:


For version with the Installer:
Use the setup program to install ERUNT on your computer

Click Erunt.exe to backup your registry to the folder of your choice.

Note: to restore your registry, go to the folder and start ERDNT.exe

Finally a reg cleaner that works without paying to clean
after backing up do this next:

I recommend you download RegSeeker.Get it

HERE:

Extract it to it's own folder, open and double click RegSeeker.exe to start the program. Maximize the window and click clean registry. Check all sections and click OK. When the scan is complete, verify the backup box in lower left corner is checked and click the select all button, then select all again. Then right click within the search results and select delete. Run it again, deleting everything it finds until it finds nothing. Reboot and make sure your programs are working properly, control panel and add/remove programs windows open, etc (basically just do a quick check of everything). In the event anything was 'broken', you can open RegSeeker, click backups and double click any/all files to put the information back. A reboot may be required for the effects to be seen. Reboot When done.
Talk about speeding up the PC?

This will definitly do something to speed up your pc
After running this just post back another HJT log and let me know how your PV is running now, then I will have a few good things to do to help keep it running good.
good luck mschroe919

Hi Mschroe, I am working on this now. THANK YOU! James

Hi mschroe, I have a questions as I am bit confused and not sure what to do. I am in Security Suite, as directed, and under AutoRun Tasks. When googling these things in here, I am not finding any definitive answers as to whether they should be in start up or not. Can you tell me what should be checked that I should "lock", just so I will be sure I am not messing this thing up Thanks for your patience with me. Here is what is in the AutoRun box: S3TRAY2 - I checked this one Synchronization Manager ? HP Software Update - I think this should not be checked but not sure. I don't think I will remember to manually check for any HP Updates. KBD ? hpqSRMon ? lgfxTray ? hpsysdrv ? HotKeysCmds ? PestPatrolCL - I checked this one AVP - I checked this one I f you could tell me what should be locked here, I would appreciate it and then I can proceed with the rest of your instructions. I would like the least amount of stuff at initial start up as I can and still keep the computer running. MUCH thanks! James

Hi mschroe, I have a questions as I am bit confused and not sure what to do. I am in Security Suite, as directed, and under AutoRun Tasks. When googling these things in here, I am not finding any definitive answers as to whether they should be in start up or not. Can you tell me what should be checked that I should "lock", just so I will be sure I am not messing this thing up Thanks for your patience with me. Here is what is in the AutoRun box: S3TRAY2 - I checked this one Synchronization Manager ? HP Software Update - I think this should not be checked but not sure. I don't think I will remember to manually check for any HP Updates. KBD ? hpqSRMon ? lgfxTray ? hpsysdrv ? HotKeysCmds ? PestPatrolCL - I checked this one AVP - I checked this one I f you could tell me what should be locked here, I would appreciate it and then I can proceed with the rest of your instructions. I would like the least amount of stuff at initial start up as I can and still keep the computer running. MUCH thanks! James PS: I am an AutoCAD designer for my business and I have a feeling that this is in my start up but I don't see it. This is huge program so I really don't want it in my start up. Do you see it perhaps?

Hi Keej3

Always google the .exe comands as you see in red:

Synchronization Manager ?

[Synchronization Manager] %SystemRoot%\system32\mobsync.exe

mobsync.exe is a process associated with Internet Explorer and is used to synchronize the offline pages you have chosen to be stored locally with the matching online pages.

KBD ?
C:\HP\KBD\KBD.EXE

kbd.exe is a process from Logitech which allows you to configure the additional keys on their multimedia keyboard products. This is a non-essential process. Disabling or enabling it is down to user preference.

hpqSRMon ?
C:\Program Files\HP\Digital Imaging\bin\hpqSRMon.exe

This process is still being reviewed by our team. We shall be adding additional information, such as Security Rating, once the process is reviewed.

lgfxTray ?
C:\WINDOWS\System32\igfxtray.exe[/vb]

igfxtray.exe is a process which allows you to access the Intel Graphics configuration and diagnostic application for the Intel 810 series graphics chipset. This program is a non-essential system process, and is installed for ease of use via the desktop tray.

ETC………
As I stated earlier is that you are not deleteing thes just stopping them from starting and running in the back ground, slowing up you pc.
These as I said in last post
This is a list of ones I suggest can be safly lock

LIST:
mobsync.exe
HPWuSchd2.exe
ctfmon.exe
msnmsgr.exe
once you lock them you can always go back and unlock them
To see what is in startups :
Click Start > All Programs > StartUp >>(look here for your AutoCAD program)
Let me know how you make out on the other stuff.
good luck mschroe919

Hi Keej3 Lets try something different here. Some of the bad stuff hides when its sees HJT. so go to your: C:\Program Files\Trend Micro\HijackThis\HijackThis.exe when you get to the HijackThis.exe right click on it and left click on rename rename it scanner this.exe Once that is done reboot and post another log. Good luck mschroe919

Hi Mschroe, I tried to do that and when I do, it says that "the file name or path is invalid." It doesn't seem to want to let me change it. It seems like whenever I try to open any application, it is v e r y s l o w. Not sure what else to do now. Any other suggestions? THANKS! James

Hi Keej3 open HJT click on open the misc. tools section then click on open uninstall manager then click on save list save it and when it opens copy and paste here another question did you install this: C:\WINDOWS\Speech\Dragon\web_ie.dll I don't see it in your files? let me know as soon as possible. Thanks