MyPillowTalks

10 Sep 09, 06:39

I have avg antivirus free, but i think this few weeks it have not been running in the background(anyway i dun really care). When i on avg it keeps telling me no upgrades available

When i start my computer, sometimes something pops up and tells me something in the system32 folder is being denied access.

When idling the ram usage was 500mb???!!!!

the system process in the task manager is taking way too much resource like 75,625K

I didnt notice anything going wrong until it started random hanging yesterday, i did a scan with microsoft's malicious software removal tool and it told me i have 2000+, yes two thousand plus???!!!. It removed some and it took around a 6 hours plus scan in safe mode yesterday, today there the same file from system32 is still being denied access

===================================================================

Log Files:

-------------------------------------------------------

1st Scan, 10 september

1. Pillow's HijackThis Log

2.Pillow's DDS.txt File

3.Pillow's Attach.zip File

--------------------------------------------------------

===================================================================

Updates:

My Hardisk activity light seems to be keeping on(not blinking), and when i plug in a thumbdrive, my computer is slow in initialising the drive and opening it

I closed my torrent, but my usb wireless adaptor is blinking at a very fast rate, as if there are a lot of data transfer going on. I have wireshark but im not good at interpreting whether it is uploading stuff or downlaoding stuff

13 September:

I found out that the virus might have been transferred to my desktop through my thmbdrive. i plugged my thumdrive into my laptop and mcafee told me that it is infected and cleaned it

I did a manual update on avg(somehow the auto update doesnt work) and now i am using the command line scanner to scan my c drive

playmemory

10 Sep 09, 14:29

seems like u got damn big problem. now adays even with anti virus it is not possible to detect the latest virus or back door software installed unknowingly.

i suggest u remove ur hard drive and use a good working computer to scan ur infected disk. after that if still no good, u gotta reinstall ur windows.

good luck.

yiha093

10 Sep 09, 15:58

wa. com whiz tio virus

need wait for mayi alr. ~.~

eagle

10 Sep 09, 16:07

Pillow

try if this works

http://www.malwarebytes.org/

ndmmxiaomayi

10 Sep 09, 19:56

http://www.techsupportforum.com/security-center/virus-trojan-spyware-help/305963-new-instructions-read-before-posting-malware-removal-help.html

Follow instructions in the above link and upload the logs.

MyPillowTalks

10 Sep 09, 22:46

Pillow's DDS.txt File

Pillow's Attach.zip File

ok done already

must buy u satay one day liao

from last time till now i still haven buy

MyPillowTalks

11 Sep 09, 19:56

ndmmxiaomayi

12 Sep 09, 02:44

Ka zhua!!!!!!

ndmmxiaomayi

12 Sep 09, 02:47

c:\windows\system32 eader_s.exe

Upload this file to Virus Total or VirSCAN to scan. (I suspect that you have to reformat your machine)

MyPillowTalks

12 Sep 09, 03:41

u mean reader_s.exe?

they say cannot upload the file

ndmmxiaomayi

12 Sep 09, 10:57

Try other files, such as C:\Windows\explorer.exe

MyPillowTalks

12 Sep 09, 12:28

ok, explorer.exe can, but 31/41 of the scanners said it is infected

My C:\ have many weird numbers.exe, like 12432.exe, deleted them, and didnt came back except one, 2008.exe

Raraken

12 Sep 09, 19:39

If it came back, then look in the registry liao. Good luck trying to remove the infections, but best bet is to reformat the com.

Herzog_Zwei

12 Sep 09, 19:42

Originally posted by ndmmxiaomayi:

Ka zhua!!!!!!

mayi jiejie's nemesis!!!!

MyPillowTalks

12 Sep 09, 20:26

Originally posted by Raraken:

If it came back, then look in the registry liao. Good luck trying to remove the infections, but best bet is to reformat the com.

lazy reformat, should have dl the é›¨æž—æœ¨é£Ž to format

MyPillowTalks

13 Sep 09, 03:21

scanning in safemode using command prompt now

there is this msxm192z.dll, deleted it from the folder, it was easy though, but easy deletion may not mean a good sign

AVG 8.5 Anti-Virus command line scanner
Copyright (c) 1992 - 2009 AVG Technologies
Program version 8.0.401, engine 8.0.408
Virus Database: Version 270.13.86/2364 2009-09-11

C:\WINDOWS\system32\wnddsl.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
HKU\S-1-5-21-2052111302-484061587-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Run\\czwmgr Found registry key with reference to infected file C:\WINDOWS\system32\wnddsl.exe Object was moved to Virus Vault.
C:\WINDOWS\system32\bcllps.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
HKU\S-1-5-21-2052111302-484061587-1801674531-500\Software\Microsoft\Windows\CurrentVersion\Run\\clrtss Found registry key with reference to infected file C:\WINDOWS\system32\bcllps.exe Object was moved to Virus Vault.
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Locked file. Not tested.
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Locked file. Not tested.
C:\Documents and Settings\Administrator\Local Settings\Temp\365.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Administrator\Local Settings\Temp\610.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\1GUGN3D1\cxlsdda[1].exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\LPO6Q3SK\cxlsddb[1].exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Administrator\NTUSER.DAT Locked file. Not tested.
C:\Documents and Settings\Administrator tuser.dat.LOG Locked file. Not tested.
C:\Documents and Settings\All Users\Application Data\Microsoft\Dr Watson\user.dmp Locked file. Not tested.
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Locked file. Not tested.
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Locked file. Not tested.
C:\Documents and Settings\NetworkService\NTUSER.DAT Locked file. Not tested.
C:\Documents and Settings\NetworkService tuser.dat.LOG Locked file. Not tested.
C:\Documents and Settings\Pillow\Local Settings\Temp\078.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\043.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\086.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\135.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\118.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\255.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\256.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\211.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\245.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\281.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\266.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\392.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\404.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\435.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\557.exe Trojan horse SHeur2.BCFP Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\507.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\595.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\609.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\781.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\785.exe Trojan horse SHeur2.BCFP Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\870.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\725.exe Trojan horse Dropper.Bravix.R Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\874.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\636.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\886.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\894.exe Trojan horse Dropper.Bravix.R Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\962.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\976.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\a.exe Trojan horse SHeur2.BBKZ Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\c.exe Trojan horse FakeAlert.MJ Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\extension32.exe Trojan horse Generic14.AKDF Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\Temporary Internet Files\Content.IE5\F5M0XSCC\cxlsdda[1].exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\Temporary Internet Files\Content.IE5\MH1NLJXF\cxlsdda[1].exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\Temporary Internet Files\Content.IE5\MH1NLJXF\cxlsddb[2].exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\Temporary Internet Files\Content.IE5\RQT6N2VH\cxlsddb[2].exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\TMP000000015EFB7EAA6767071D Trojan horse FakeAlert.MJ Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\TMP000000010919FE968E3DC9CE Trojan horse FakeAlert.MJ Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temp\unzip86.exe Virus identified Win32/Rustock.Q Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\248PU1RG\cxlsddb[1].exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\248PU1RG\mal[1].txt Virus identified Packed.Monder Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\EP9C1TJK\ic15[1].exe Virus identified Win32/Rustock.Q Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\I5R4E27G\abb[1].txt Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\RRR0P27N\cb15[1].exe Trojan horse Generic14.AKDF Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\VSCGMVEK\bot[1].txt Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\VSCGMVEK\cxlsdda[1].exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\Documents and Settings\Pillow\Local Settings\Temporary Internet Files\Content.IE5\YYITXTJL\cxlsddc[2].exe Trojan horse Dropper.Bravix.R Object was moved to Virus Vault.
C:\Documents and Settings\Pillow eader_s.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\pagefile.sys Locked file. Not tested.
C:\System Volume Information\MountPointManagerRemoteDatabase Locked file. Not tested.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP165\A0088792.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP165\A0088793.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0088948.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0088949.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0090970.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0090971.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0091385.scr Virus found Win32/Heur Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0091561.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0091643.exe Virus found Win32/Heur Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0091741.exe Virus found Win32/Heur Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0091843.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0091869.exe Trojan horse FakeAlert.MJ Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0092101.exe Virus found Win32/Virut Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0092329.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP166\A0092330.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP168\A0092412.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP168\A0092413.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092469.exe Virus found Win32/Virut Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092470.exe Virus found Win32/Virut Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092481.sys Trojan horse PSW.Agent.NWI Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092479.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092480.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092492.exe Trojan horse SHeur2.BBNS Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092507.sys Trojan horse PSW.Agent.NWI Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092505.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092506.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092534.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092533.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092536.sys Trojan horse PSW.Agent.NWI Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092548.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092550.sys Trojan horse PSW.Agent.NWI Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092549.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092574.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092575.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092576.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092577.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092579.exe Trojan horse Crypt.HAL Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092580.exe Trojan horse Crypt.HAO Object was moved to Virus Vault.
C:\System Volume Information\_restore{98AE307B-7D6A-48EF-954A-0B83DC892126}\RP169\A0092582.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\WINDOWS\msa.exe Trojan horse FakeAlert.MJ Object was moved to Virus Vault.
C:\WINDOWS\system32\100.tmp Trojan horse SHeur2.BBIB Object was moved to Virus Vault.
C:\WINDOWS\system32\12.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\15.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\13.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\154.tmp Trojan horse SHeur2.BBIB Object was moved to Virus Vault.
C:\WINDOWS\system32\1A.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\16.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\19.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\1B.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\228.tmp Trojan horse SHeur2.BBIB Object was moved to Virus Vault.
C:\WINDOWS\system32\33.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\38.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\34.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\39.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7B6.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7B7.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7BB.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7C0.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7BC.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7C1.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7C5.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7CA.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7D0.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7C6.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7CB.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7D5.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7DA.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7D1.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7D6.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7E7.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7DB.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7E8.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7EC.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7ED.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7F1.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7F8.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7FD.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\7F9.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\7F2.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\9.tmp Trojan horse SHeur2.BBIB Object was moved to Virus Vault.
C:\WINDOWS\system32\96.tmp Trojan horse SHeur2.BBIB Object was moved to Virus Vault.
C:\WINDOWS\system32\7FE.tmp Virus identified Packed.Monder Object was moved to Virus Vault.
C:\WINDOWS\system32\config\default Locked file. Not tested.
C:\WINDOWS\system32\config\default.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\SAM Locked file. Not tested.
C:\WINDOWS\system32\config\SAM.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\SECURITY Locked file. Not tested.
C:\WINDOWS\system32\config\SECURITY.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\software Locked file. Not tested.
C:\WINDOWS\system32\config\software.LOG Locked file. Not tested.
C:\WINDOWS\system32\config\system Locked file. Not tested.
C:\WINDOWS\system32\config\system.LOG Locked file. Not tested.
C:\WINDOWS\system32\drivers\protect.sys Trojan horse PSW.Agent.NWI Object was moved to Virus Vault.
C:\WINDOWS\system32\drivers\sptd.sys Locked file. Not tested.
C:\WINDOWS\system32\F.tmp Trojan horse Agent_r.MM Object was moved to Virus Vault.
C:\WINDOWS\system32\msxm192z.dll Trojan horse PSW.OnlineGames3.MVF Object was moved to Virus Vault.
C:\WINDOWS\system32\msxml71.dll Trojan horse Crypt.GUS Object was moved to Virus Vault.
C:\WINDOWS\system32 eader_s.exe Trojan horse Generic14.ZVH Object was moved to Virus Vault.
C:\WINDOWS\Temp\VRT105.tmp Trojan horse PSW.OnlineGames3.MML Object was moved to Virus Vault.
C:\WINDOWS\Temp\VRT106.tmp Trojan horse Generic14.APQM Object was moved to Virus Vault.
C:\WINDOWS\Temp\VRTC.tmp Trojan horse PSW.OnlineGames3.MML Object was moved to Virus Vault.
C:\WINDOWS\Temp\VRTD.tmp Trojan horse Generic14.APQM Object was moved to Virus Vault.

------------------------------------------------------------
Objects scanned     : 331867
Found infections    : 144
Found PUPs          :    0
Healed infections   : 144
Healed PUPs         :    0
Warnings            :    0
------------------------------------------------------------

Song boh?

MyPillowTalks

14 Sep 09, 20:21

bump

still infected

Bus&Soccer l0v3r (VO3x 1)

14 Sep 09, 20:24

Lolx

Torjan Virus

gg

the onli way

which i always do

REFORMAT

MyPillowTalks

14 Sep 09, 20:30

Originally posted by Bus&Soccer l0v3r (VO3x 1):

Lolx

Torjan Virus

gg

the onli way

which i always do

REFORMAT

lazzyyy

nvm, time for windows 7

ndmmxiaomayi

14 Sep 09, 21:06

Virut = reformat.

Raraken

15 Sep 09, 00:40

Originally posted by MyPillowTalks:

lazzyyy

nvm, time for windows 7

Buy, or........pirated?

MyPillowTalks

15 Sep 09, 09:12

Originally posted by Raraken:

Buy, or........pirated?

msdnaa~!!

free, but licence is per student per installation per computer

MyPillowTalks

15 Sep 09, 14:22

ok, i get signed out of my msn automatically

is it getting very bad?

my internet explorer pops up advertisements randomly

last post from windows xp

ndmmxiaomayi

15 Sep 09, 22:35

http://sgforums.com/forums/2250/topics/374951#post_9366608

MyPillowTalks

15 Sep 09, 23:16

Originally posted by ndmmxiaomayi:

http://sgforums.com/forums/2250/topics/374951#post_9366608

im on win 7 now

really must buy u satay soon

My turn to get infected

msdnaa~!!