Advice Needede

Rickles
Rickles
in Malware talk

Please take a look at the attached log and tell me what the ###### is going on.... cheers.


BitDefender Log File !!!!!


Product : BitDefender Internet Security 2008


Version : BitDefender UIScanner v.11


Log date : 14:52:20 22/11/2008


Log path : C:\Documents and Settings\All Users.WINDOWS\Application Data\BitDefender\Desktop\Profiles\Logs\deep_scan\1227390740_1_02.xml


Scan Paths:Path0000: C:\


Scan Options:Scan for viruses : Yes


Scan for adware : Yes


Scan for spyware : Yes


Scan for applications : Yes


Scan for dialers : Yes


Scan for rootkits : Yes


Target selection options:Scan registry keys : Yes


Scan cookies : Yes


Scan boot sectors : Yes


Scan memory processes : Yes


Scan archives : Yes


Scan runtime packers : Yes


Scan emails : Yes


Scan all files : Yes


Heuristic Scan : Yes


Scanned extensions :


Excluded extensions :


Target ProcessingDefault action for infected objects : Disinfect


Default action for suspicious objects : None


Default action for hidden objects : None


Scan engines summaryNumber of virus signatures : 2249759


Archive plugins : 43


Email plugins : 6


Scan plugins : 12


Archive plugins : 43


System plugins : 5


Unpack plugins : 7


Overall scan summaryScanned items : 213125


Infected items : 37


Suspicious items : 0


Resolved items : 6


Individual viruses found : 21


Scanned directories : 5931


Scanned boot sectors : 2


Scanned archives : 6594


Input-output errors : 28


Scan time : 00:01:16:53


Files per second : 45


Scanned processes summaryScanned : 25


Infected : 0


Scanned registry keys summaryScanned : 1006


Infected : 0


Scanned cookies summaryScanned : 180


Infected : 0


Remaining issues:Object Name Threat Name Final Status


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 2) Adware.Downloadware.A Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 2) Adware.Downloadware.A Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 25) Adware.Errorsafe.B Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 25) Adware.Errorsafe.B Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 16) Adware.Generic.18929 Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 16) Adware.Generic.18929 Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 18) Adware.Winantispyware.B Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 18) Adware.Winantispyware.B Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 8) Application.Generic.12582 Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 8) Application.Generic.12582 Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 14) Application.Sysprotect.DLL Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 14) Application.Sysprotect.DLL Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 6) Application.Winfixer.AD Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 6) Application.Winfixer.AD Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 12) Application.Winfixer.AE Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 12) Application.Winfixer.AE Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 11) Application.Winfixer.AG Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 11) Application.Winfixer.AG Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 7) Application.Winfixer.AH Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 7) Application.Winfixer.AH Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 10) Application.Winfixer.AK Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 10) Application.Winfixer.AK Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 13) Application.Winfixer.AM Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 13) Application.Winfixer.AM Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 24) Application.Winfixer.AW Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 24) Application.Winfixer.AW Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 1) Spyware.Dldr.Winfixer.E Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 1) Spyware.Dldr.Winfixer.E Infected (no action was possible, file was in an archive)


C:\WINDOWS\Temp\lxj2gq1i.TMP=]c-setup.exe Trojan.Delflob.B Move to Quarantine Failed


C:\Documents and Settings\Owner\Local Settings\Temp\NI.UWFX6_0001_N57M0912\setup.exe=](Dropped 0)=](Instyler o)=](Instyler Module 17) Trojan.Dldr.Fakeav.A Infected (no action was possible, file was in an archive)


C:\Documents and Settings\Owner\Local Settings\Temp\WinFixer2006Setup.exe=](Instyler o)=](Instyler Module 17) Trojan.Dldr.Fakeav.A Infected (no action was possible, file was in an archive)


Resolved issues:Object Name Threat Name Final Status


[system]=]C:\Documents and Settings\Owner\Cookies\owner@adtech[1].txt Cookie.Adtech Deleted


[system]=]C:\Documents and Settings\Owner\Cookies\owner@bs.serving-sys[1].txt Cookie.BS.Serving-Sys Deleted


[system]=]C:\Documents and Settings\Owner\Cookies\owner@www.burstnet[2].txt Cookie.BurstNet Deleted


[system]=]C:\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt Cookie.DoubleClick Deleted


[system]=]C:\Documents and Settings\Owner\Cookies\owner@ehg-newscientist.hitbox[2].txt Cookie.Hitbox Deleted


[system]=]C:\Documents and Settings\Owner\Cookies\owner@hitbox[2].txt Cookie.Hitbox Deleted


Objects that were not scanned:Object Name Reason Final Status


C:\WINDOWS\Cache\Adobe Reader 6.0.1\ENUMIN\Data1.cab=]RdrMsgENU.pdf Password-Protected No action was possible

Comments

  • alexcrist
    alexcrist ✭
    edited November 2008

    Hello,


    Please go to


    C:\Documents and Settings\Owner\Local Settings\Temp\

    select all files and folders and delete them (make sure to delete them from Recycle bin also).


    Those are temporary files, and will be created again if they are needed.


    After that, make a new scan and see if you have any other problems.


    Cris.

  • rootkit
    rootkit ✭✭✭

    Or just use:


    Download ATF (Atribune Temp File) Cleaner© by Atribune to your desktop.


    http://www.atribune.org/ccount/click.php?id=1


    Double-click ATF Cleaner.exe to open it


    Under Main choose: Select all


    Then click the Empty Selected button.


    pic1atf.gif


    If you use Firefox:


    Click Firefox at the top and choose: Select All


    Click the Empty Selected button.


    NOTE: If you would like to keep your saved passwords, please click NO at the prompt.


    If you use Opera:


    Click Opera at the top and choose: Select All


    Click the Empty Selected button.


    NOTE: If you would like to keep your saved passwords, please click NO at the prompt.


    Click Exit on the Main menu to close the program.

All Time Leaders

Categories

Defenders of the month