Login | Live Chat & Podcast at 1:00PM Eastern on Sunday! |
 Search | |
| |
| Thread Tools |
08-Nov-2009, 05:46 PM
#1 | |||||
| Purple (not Blue) Screen of Death and Now I Have Pop-Ups for "Personal Guard 2009" |
| |
11-Nov-2009, 01:28 AM
#2 | |||||
| |
12-Nov-2009, 01:35 AM
#3 | |||||
| |
12-Nov-2009, 03:46 AM
#4 | |||||
| Hello there  Welcome to the Tech Support Guy forums.My name is NeonFx. I'll be glad to help you with your computer problems. Logs can take some time to research, so please be patient with me. Please note the following:
Step 1 Download OTS to your Desktop
Code: %SYSTEMDRIVE%\eventlog.dll /s /md5 %SYSTEMDRIVE%\scecli.dll /s /md5 %SYSTEMDRIVE%\netlogon.dll /s /md5 %SYSTEMDRIVE%\cngaudit.dll /s /md5 %SYSTEMDRIVE%\sceclt.dll /s /md5 %SYSTEMDRIVE%\ntelogon.dll /s /md5 %SYSTEMDRIVE%\logevent.dll /s /md5 %SYSTEMDRIVE%\iaStor.sys /s /md5 %SYSTEMDRIVE%\nvstor.sys /s /md5 %SYSTEMDRIVE%\atapi.sys /s /md5 %SYSTEMDRIVE%\IdeChnDr.sys /s /md5 %SYSTEMDRIVE%\viasraid.sys /s /md5 %SYSTEMDRIVE%\AGP440.sys /s /md5 %SYSTEMDRIVE%\vaxscsi.sys /s /md5
Please attach the log in your next post. To do so click on the blue "Reply" button or "Go Advanced" and click on the "Manage Attachments" button To ensure that I get all the information this log will need to be attached. If it is too large to attach then upload it to Dropio and post the sharing link/url (The Drop's URL will be similar to : http:://drop.io/daerk) Step 2 Download SysProt Antirootkit from the link below (you will find it at the bottom of the page under attachments, or you can get it from one of the mirrors). http://sites.google.com/site/sysprotantirootkit/ Unzip it into a folder on your desktop. Start the Sysprot.exe program.
__________________ Please post the final results, good or bad. Let me know if you won't be responding any longer. Please don't send me requests for help. Use the forums instead. |
12-Nov-2009, 07:26 PM
#5 | |||||
| Thank you!  Here is the Drop.io link for the OST log: http://drop.io/plyqivl And below is the SysProt log: SysProt AntiRootkit v1.0.1.0 by swatkat *************************************************************************** *************** *************************************************************************** *************** No Hidden Processes found *************************************************************************** *************** *************************************************************************** *************** Kernel Modules: Module Name: \SystemRoot\System32\Drivers\dump_atapi.sys Service Name: --- Module Base: A9DC5000 Module End: A9DDD000 Hidden: Yes Module Name: \SystemRoot\System32\Drivers\dump_WMILIB.SYS Service Name: --- Module Base: F8A0A000 Module End: F8A0C000 Hidden: Yes *************************************************************************** *************** *************************************************************************** *************** SSDT: Function Name: ZwAlertResumeThread Address: 826F8F28 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwAlertThread Address: 826F8008 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwAllocateVirtualMemory Address: 826F9B28 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwConnectPort Address: 82713B80 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwCreateKey Address: A9C7C6EA Driver Base: A9C72000 Driver End: A9C85000 Driver Name: \SystemRoot\System32\DRIVERS\KmxSbx.sys Function Name: ZwCreateMutant Address: 826F8C88 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwCreateSection Address: AA197FD2 Driver Base: AA18E000 Driver End: AA1A1000 Driver Name: \SystemRoot\System32\DRIVERS\kmxagent.sys Function Name: ZwCreateSymbolicLinkObject Address: A9C7D40B Driver Base: A9C72000 Driver End: A9C85000 Driver Name: \SystemRoot\System32\DRIVERS\KmxSbx.sys Function Name: ZwCreateThread Address: 826FA148 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwDeleteValueKey Address: AA3C2350 Driver Base: AA3AE000 Driver End: AA3D0000 Driver Name: \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS Function Name: ZwFreeVirtualMemory Address: 826F9838 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwImpersonateAnonymousToken Address: 826F8D68 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwImpersonateThread Address: 826F8E48 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwMakeTemporaryObject Address: A9C7D75C Driver Base: A9C72000 Driver End: A9C85000 Driver Name: \SystemRoot\System32\DRIVERS\KmxSbx.sys Function Name: ZwMapViewOfSection Address: 827019E0 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwOpenEvent Address: 826F8BA8 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwOpenKey Address: A9C7C64E Driver Base: A9C72000 Driver End: A9C85000 Driver Name: \SystemRoot\System32\DRIVERS\KmxSbx.sys Function Name: ZwOpenProcessToken Address: 826F9BF8 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwOpenSection Address: A9C7D130 Driver Base: A9C72000 Driver End: A9C85000 Driver Name: \SystemRoot\System32\DRIVERS\KmxSbx.sys Function Name: ZwOpenThreadToken Address: 826F94F0 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwQueryValueKey Address: 826F8AB8 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwResumeThread Address: 827104F0 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwSetContextThread Address: 826F9410 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwSetInformationProcess Address: 826F95D0 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwSetInformationThread Address: 826F9330 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwSetSystemInformation Address: A9C7D538 Driver Base: A9C72000 Driver End: A9C85000 Driver Name: \SystemRoot\System32\DRIVERS\KmxSbx.sys Function Name: ZwSetValueKey Address: AA3C2580 Driver Base: AA3AE000 Driver End: AA3D0000 Driver Name: \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS Function Name: ZwSuspendProcess Address: 826F89D8 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwSuspendThread Address: 826F9170 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwTerminateProcess Address: 826FA218 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwTerminateThread Address: 826F9250 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwUnmapViewOfSection Address: 826F96B0 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ Function Name: ZwWriteVirtualMemory Address: 826F9918 Driver Base: 0 Driver End: 0 Driver Name: _unknown_ *************************************************************************** *************** *************************************************************************** *************** No Kernel Hooks found *************************************************************************** *************** *************************************************************************** *************** IRP Hooks: Hooked Module: C:\WINDOWS\System32\Drivers\Modem.SYS Hooked IRP: IRP_MJ_WRITE Jump To: AA169040 Hooking Module: C:\WINDOWS\System32\DRIVERS\kmxfw.sys Hooked Module: C:\WINDOWS\system32\DRIVERS\tcpip.sys Hooked IRP: IRP_MJ_CREATE Jump To: AA169990 Hooking Module: C:\WINDOWS\System32\DRIVERS\kmxfw.sys Hooked Module: C:\WINDOWS\system32\DRIVERS\tcpip.sys Hooked IRP: IRP_MJ_CLOSE Jump To: AA169AF0 Hooking Module: C:\WINDOWS\System32\DRIVERS\kmxfw.sys Hooked Module: C:\WINDOWS\system32\DRIVERS\tcpip.sys Hooked IRP: IRP_MJ_DEVICE_CONTROL Jump To: AA16A5B0 Hooking Module: C:\WINDOWS\System32\DRIVERS\kmxfw.sys Hooked Module: C:\WINDOWS\system32\DRIVERS\tcpip.sys Hooked IRP: IRP_MJ_INTERNAL_DEVICE_CONTROL Jump To: AA16A570 Hooking Module: C:\WINDOWS\System32\DRIVERS\kmxfw.sys Hooked Module: C:\WINDOWS\system32\DRIVERS\tcpip.sys Hooked IRP: IRP_MJ_CLEANUP Jump To: AA169B50 Hooking Module: C:\WINDOWS\System32\DRIVERS\kmxfw.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_CREATE Jump To: A9511480 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_CLOSE Jump To: A9511EC0 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_READ Jump To: A9512150 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_WRITE Jump To: A9511F20 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_DEVICE_CONTROL Jump To: A95121A0 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_INTERNAL_DEVICE_CONTROL Jump To: A95114C0 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys Hooked Module: C:\WINDOWS\System32\drivers\afd.sys Hooked IRP: IRP_MJ_CLEANUP Jump To: A9511EF0 Hooking Module: C:\WINDOWS\System32\DRIVERS\KmxCF.sys *************************************************************************** *************** *************************************************************************** *************** Ports: Local Address: ANDREW.MSHOME.NET:4468 Remote Address: 74.125.15.83:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4466 Remote Address: LAX04S01-IN-F137.1E100.NET:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4465 Remote Address: PX-IN-F139.1E100.NET:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4464 Remote Address: LAX04S01-IN-F103.1E100.NET:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4463 Remote Address: LAX04S01-IN-F103.1E100.NET:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4462 Remote Address: NUQ04S01-IN-F113.1E100.NET:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4453 Remote Address: LAX04S01-IN-F100.1E100.NET:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW.MSHOME.NET:4419 Remote Address: EC2-75-101-137-43.COMPUTE-1.AMAZONAWS.COM:HTTP Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: CLOSE_WAIT Local Address: ANDREW.MSHOME.NET:NETBIOS-SSN Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: ANDREW:27015 Remote Address: LOCALHOST:1061 Type: TCP Process: C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe State: ESTABLISHED Local Address: ANDREW:27015 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe State: LISTENING Local Address: ANDREW:8999 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\OpenCase\OpenCASE Media Agent\MediaAgent.exe State: LISTENING Local Address: ANDREW:5354 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\Bonjour\mDNSResponder.exe State: LISTENING Local Address: ANDREW:5152 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\Java\jre6\bin\jqs.exe State: LISTENING Local Address: ANDREW:4306 Remote Address: LOCALHOST:4305 Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW:4305 Remote Address: LOCALHOST:4306 Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW:4303 Remote Address: LOCALHOST:4302 Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW:4302 Remote Address: LOCALHOST:4303 Type: TCP Process: C:\Program Files\Mozilla Firefox\firefox.exe State: ESTABLISHED Local Address: ANDREW:1061 Remote Address: LOCALHOST:27015 Type: TCP Process: C:\Program Files\iTunes\iTunesHelper.exe State: ESTABLISHED Local Address: ANDREW:1060 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\Common Files\Symantec Shared\ccApp.exe State: LISTENING Local Address: ANDREW:1027 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\WINDOWS\system32\alg.exe State: LISTENING Local Address: ANDREW.SSG5-SERIAL:NETBIOS-SSN Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: ANDREW:37935 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\CA\SharedComponents\HIPSEngine\UmxFwHlp.exe State: LISTENING Local Address: ANDREW:2967 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\Program Files\Symantec AntiVirus\Rtvscan.exe State: LISTENING Local Address: ANDREW:2869 Remote Address: 0.0.0.0:0 Type: TCP Process: C:\WINDOWS\system32\svchost.exe State: LISTENING Local Address: ANDREW:MICROSOFT-DS Remote Address: 0.0.0.0:0 Type: TCP Process: System State: LISTENING Local Address: ANDREW:EPMAP Remote Address: 0.0.0.0:0 Type: TCP Process: C:\WINDOWS\system32\svchost.exe State: LISTENING Local Address: ANDREW.MSHOME.NET:5353 Remote Address: NA Type: UDP Process: C:\Program Files\Bonjour\mDNSResponder.exe State: NA Local Address: ANDREW.MSHOME.NET:1900 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: ANDREW.MSHOME.NET:138 Remote Address: NA Type: UDP Process: System State: NA Local Address: ANDREW.MSHOME.NET:NETBIOS-NS Remote Address: NA Type: UDP Process: System State: NA Local Address: ANDREW.MSHOME.NET OMAINRemote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: ANDREW:1900 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: ANDREW:1030 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: ANDREW.SSG5-SERIAL:5353 Remote Address: NA Type: UDP Process: C:\Program Files\Bonjour\mDNSResponder.exe State: NA Local Address: ANDREW.SSG5-SERIAL:1900 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: ANDREW.SSG5-SERIAL:138 Remote Address: NA Type: UDP Process: System State: NA Local Address: ANDREW.SSG5-SERIAL:NETBIOS-NS Remote Address: NA Type: UDP Process: System State: NA Local Address: ANDREW:50490 Remote Address: NA Type: UDP Process: C:\Program Files\Bonjour\mDNSResponder.exe State: NA Local Address: ANDREW:4500 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\lsass.exe State: NA Local Address: ANDREW:1029 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\svchost.exe State: NA Local Address: ANDREW:1025 Remote Address: NA Type: UDP Process: C:\Program Files\Bonjour\mDNSResponder.exe State: NA Local Address: ANDREW:500 Remote Address: NA Type: UDP Process: C:\WINDOWS\system32\lsass.exe State: NA Local Address: ANDREW:MICROSOFT-DS Remote Address: NA Type: UDP Process: System State: NA *************************************************************************** *************** *************************************************************************** *************** Hidden files/folders: Object: C:\System Volume Information\MountPointManagerRemoteDatabase Status: Access denied Object: C:\System Volume Information\tracking.log Status: Access denied Object: C:\System Volume Information\_restore{202550A8-7A33-4BCA-9586-051D24DDBF8F} Status: Access denied |
15-Nov-2009, 06:50 PM
#7 | |||||
| |
19-Nov-2009, 03:27 AM
#9 | |||||
| |
19-Nov-2009, 04:33 AM
#10 | |||||
| Looking much better  STEP 1 Run OTS
Code: [Unregister Dlls] [Empty Temp Folders] [ClearAllRestorePoints] [Reboot]
Note: You may receive some errors while running the fix. Just press Ok and the fix should continue normally. If it seems to get stuck, give it some time. It's probably still working. STEP 2  Please download Malwarebytes' Anti-Malware from Here.Double Click mbam-setup.exe to install the application.
Extra Note: If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediatly.
__________________ Please post the final results, good or bad. Let me know if you won't be responding any longer. Please don't send me requests for help. Use the forums instead. |
24-Nov-2009, 10:06 PM
#11 | |||||
| |
25-Nov-2009, 02:14 AM
#12 | |||||
| Excellent. Let's run a full scan of your system to be sure you're clean. This will take a while but it's worth it. It can often find things all other scans will miss. STEP 1 Before we do, I need you to update Internet Explorer to IE8. Even if you don't use it, we need to have it updated as its components are deeply connected with Windows itself. Please go here to download the installer: http://www.microsoft.com/windows/internet-explorer/ STEP 2 The online scanner uses Java, so I will need you to download and install the latest version for that. Please go here to download the installer: http://java.com/en/download/index.jsp Reboot your machine when that's done. STEP 3 Using Internet Explorer or Firefox, visit Kaspersky Online Scanner 1. Click Accept, when prompted to download and install the program files and database of malware definitions. 2. To optimize scanning time and produce a more sensible report for review:
3. Click Run at the Security prompt. The program will then begin downloading and installing and will also update the database. Please be patient as this can take quite a long time to download.
__________________ Please post the final results, good or bad. Let me know if you won't be responding any longer. Please don't send me requests for help. Use the forums instead. |
25-Nov-2009, 11:08 PM
#13 | |||||
| Here are the scan results. And Happy (early) Thanksgiving -------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER 7.0: scan report Wednesday, November 25, 2009 Operating system: Microsoft Windows XP Home Edition Service Pack 3 (build 2600) Kaspersky Online Scanner version: 7.0.26.13 Last database update: Wednesday, November 25, 2009 22:15:47 Records in database: 3291079 -------------------------------------------------------------------------------- Scan settings: scan using the following database: extended Scan archives: yes Scan e-mail databases: yes Scan area - My Computer: C:\ D:\ Scan statistics: Objects scanned: 75479 Threats found: 2 Infected objects found: 15 Suspicious objects found: 0 Scan duration: 03:03:57 File name / Threat / Threats count C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0BD00000.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0000.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0001\4EFFA245.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0002\4EFFA291.VBN Infected: Trojan.Win32.Vilsel.lou 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0003\4EFFA2CA.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0004\4EFFA2DC.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0005\4EFD1CC5.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0006\4EFD3560.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0007\4EFD5182.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0008\4EFD6DA1.VBN Infected: Trojan.Win32.Vilsel.lou 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C0009\4EFD8CB0.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C000A\4EFDA623.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C000B\4EFDC20A.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C000C\4EFDDE11.VBN Infected: Packed.Win32.TDSS.aa 1 C:\Documents and Settings\All Users\Application Data\Symantec\Symantec AntiVirus Corporate Edition\7.5\Quarantine\0C5C000D\4EFDFA30.VBN Infected: Packed.Win32.TDSS.aa 1 Selected area has been scanned. |
26-Nov-2009, 02:38 PM
#15 | |||||
| |
|
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 12:10 AM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
Facebook
Twitter
TechGuy.tv
TSG Mobile