1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

svhost.exe Spyware, Malware, etc.

Discussion in 'Virus & Other Malware Removal' started by Cardcop, Feb 2, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    Due to circumstances beyond my control, my Internet time has been severly limited over the past year. I'm stuck with a 56-K dial-up connection with PeoplePC. Over the past 6-months my system started getting slower & slower as did my Internet connection. I had an old un-updated version of Spybot, and 2006 Norton Anti-Virus (with a 2003 Norton SystemWorks version). I was running scan after scan and NOTHING ever came up as a virus, Spyware, Malware or the like. I regularly ran system defragmenter, and I have a program called Window Washer (which I HIGHLY RECOMMEND) to get rid of Internet/system junk.

    Then I decided to dedicate a day to solve this problem (or try anyway). DAMN... Data Mining, and Spyware BOOMED over the last year! Seems like almost every system has stuff hiding that most programs don't detect. I took 5 hours of research and downloading one free Spyware/Malware remover after another to partially fix my problems. There were hidden files EVERYWHERE!!!! It seemed like svhost.exe running in the background was doing the most damage. Using CTRL>>>ALT>>>DELETE, I try to monitor programs running in the background but it's not as easy as it used to be to determine stuff that is not needed or shouldn't be there.

    Overall, everything is faster now, but I know it can be much better still. Starting up my system is just as slow as it used to be. From the time I push the button until it's ready to go is 4-5 minutes.

    Two files that bother me are svchost.exe that state NETWORK SERVICE. I'm not on a Network other than PeoplePC for my net connection, plus these are running BEFORE I ever run PeoplePC??? Nothing runs in my System Tray except Norton and this is a one person PC.

    What should I try?

    James
     
  2. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    hi, welcome to TSG.

    Download hijack this from the link below.Please do this. Click here:

    http://www.thespykiller.co.uk/files/hijackthis_sfx.exe

    to download HijackThis. Click scan and save a logfile, then post it here so
    we can take a look at it for you. Don't click fix on anything in hijack this
    as most of the files are legitimate.
     
  3. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    SORRY FOR THE DELAY!

    Logfile of HijackThis v1.99.1
    Scan saved at 1:38:28 PM, on 2/6/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    C:\WINDOWS\System32\nvsvc32.exe
    C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
    C:\WINDOWS\System32\svchost.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\system32\ps2.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\NOTEPAD.EXE
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Owner\Desktop\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us7.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us7.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.peoplepc.com/search
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us7.hpwis.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://home.peoplepc.com/search
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us7.hpwis.com/
    R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\nzsearch\nzsearchenh.dll
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: (no name) - {63CF97E8-4133-438a-A831-CC9C6D47D673} - (no file)
    O2 - BHO: (no name) - {7371F073-AC0F-4b80-BB2F-96A488CEFB32} - (no file)
    O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
    O4 - HKCU\..\Run: [FreeRAM XP] "C:\DOCUME~1\Owner\LOCALS~1\Temp\cczipwiz\FreeRAM XP Pro 1.31.exe" -win
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Search Tool - {6218F5AF-02A5-4BAA-965D-2817DADDF200}} - C:\Program Files\IECustomizer\Tools\IESearchURls.exe (HKCU)
    O9 - Extra 'Tools' menuitem: Search Tool - {6218F5AF-02A5-4BAA-965D-2817DADDF200}} - C:\Program Files\IECustomizer\Tools\IESearchURls.exe (HKCU)
    O11 - Options group: [INTERNATIONAL] International*
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {01CA75F1-054B-4A63-9221-C6926369EC52} (HS_live Control) - http://install.homestead.com/~site/InstallFiles/SIFiles/lpxlive/HS_live.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
    O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1098830955546
    O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.140/code/PWActiveXImgCtl.CAB
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129228318687
    O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
    O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton SystemWorks\Norton Utilities\NPROTECT.EXE
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Speed Disk service - Symantec Corporation - C:\PROGRA~1\NORTON~2\SPEEDD~1\nopdb.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
     
  4. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    hi, welcome to TSG.




    Download AVG Anti-Spyware

    http://www.ewido.net/en/


    * Once you have downloaded AVG Anti-spyware, locate the icon on the desktop and double-click it to launch the set up program.
    * Once the setup is complete you will need run AVG and update the definition files.
    * On the main screen select the icon "Update" then select the "Update now" link.
    * Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed.
    * Once the update has completed select the "Scanner" icon at the top of the screen, then select the "Settings" tab.
    * Once in the Settings screen click on "Recommended actions" and then select "Delete"
    * Under "Reports"
    * Select "Automatically generate report after every scan"
    * Un-Select "Only if threats were found"


    Close AVG Anti-Spyware. Anti-spyware, Do NOT run a scan yet. We will do that later in safe mode.



    * Click here to download ATF Cleaner by Atribune and save it to your desktop.

    http://majorgeeks.com/ATF_Cleaner_d4949.html


    * Double-click ATF-Cleaner.exe to run the program.
    * Under Main choose: Select All
    * Click the Empty Selected button.
    o If you use Firefox:
    + Click Firefox at the top and choose: Select All
    + Click the Empty Selected button.
    + NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    o If you use Opera:
    + Click Opera at the top and choose: Select All
    + Click the Empty Selected button.
    + NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    * Click Exit on the Main menu to close the program.


    * Click here for info on how to boot to safe mode if you don't already know
    how.

    http://service1.symantec.com/SUPPOR...2001052409420406?OpenDocument&src=sec_doc_nam



    * Now copy these instructions to notepad and save them to your desktop. You
    will need them to refer to in safe mode.


    * Restart your computer into safe mode now. Perform the following steps in
    safe mode:



    have hijack this fix these entries. close all browsers and programmes before
    clicking FIX.


    R3 - URLSearchHook: URLSearchHook Class - {37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - C:\Program Files\nzsearch\nzsearchenh.dll
    O2 - BHO: (no name) - {63CF97E8-4133-438a-A831-CC9C6D47D673} - (no file)
    O2 - BHO: (no name) - {7371F073-AC0F-4b80-BB2F-96A488CEFB32} - (no file)
    O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
    O16 - DPF: {6B4788E2-BAE8-11D2-A1B4-00400512739B} (PWMediaSendControl Class) - http://216.249.24.140/code/PWActiveXImgCtl.CAB



    Run AVG Anti-Spyware!

    # IMPORTANT: Do not open any other windows or programs while AVG is scanning as it may interfere with the scanning process:
    # Launch AVG Anti-spyware by double-clicking the icon on your desktop.
    # Select the "Scanner" icon at the top and then the "Scan" tab then click on "Complete System Scan".
    # AVG will now begin the scanning process. Be patient this may take a little time.
    Once the scan is complete do the following:
    # If you have any infections you will prompted, then select "Apply all actions"
    # Next select the "Reports" icon at the top.
    # Select the "Save report as" button in the lower left hand of the screen and save it to a text file on your system (make sure to remember where you saved that file, this is important).
    # Close AVG and reboot your system back into Normal Mode.



    reboot to normal mode and run a few online scans!



    Note: this is a stand alone, it doesn't install to start/programmes.

    Download Mwav,

    http://www.spywareinfo.dk/download/mwav.exe


    double click on it and it will extract to C:\kaspersky. Click
    on the kaspersky folder and click on Kavupd, a black dos window will open
    and it will update the programme for you, be patient it will take 5-10
    minutes to download the new definitions. Once it's updated, click on mwavscan
    to launch the programme.

    Use the defaults of:

    Memory
    startup folders
    Registry
    system folders
    services

    Choose drive , all drives and, click scan all files
    and then click scan/clean. After it finishes scanning and cleaning post
    the log here with a new hijack this log.

    Note: this is a very thorough scanner, it might take anything up to an hour
    or more, depending on how many drives you have and how badly infected your
    pc is.



    Highlight the portion of the scan that lists infected items and hold
    CTRL + C to Copy then paste it here. The whole log with be extremely
    big so there is no way to copy the whole thing. I just need the
    infected items list.


    post another hijack this log, the AVG Anti-Spyware log and the Mwav scan log.
     
  5. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    No offense Khazars, I appreciate the work- but that's too much for me to do. With a maximum of 2 hours connection time 3 times a week with only dial-up @ 49.2 >>> well you do the math.

    James
     
  6. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    Fair enough, enjoy the sick computer!
     
  7. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    That reply probably came out all wrong- I was in OUTRAGIOUS pain that day. Please accept my apology.

    I was prompted to uninstall & reinstall Norton Anti-Virus 2 days ago that I just paid $49.99 for a month ago. After doing as they requested & rescanning Norton still found NOTHING. I'm used to locating files that aren't supposed to be on my computer by running regedit & deleting malicious looking files manually.

    Are there specific files that you can see which are causing the problems? Have systems changed so much since Winsows ME that doing it my old fashioned way won't work anymore?

    I'll try your way as soon as I can.

    James
     
  8. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    Spyware has changed enormously over the past few years and are becoming harder to find and clean off! The days of finding and simply deleting many hiajckers is long gone and namy specialised tools ahve to be employed.

    Using ME just makes hthings worse as it is no longer supported by Microsoft and will obviously have many security flaws.

    However, deploying a good firewall and anti virus should help but sadly won't plug all the gaps, best would be to upgrade to XP home which shouldn't cost too much but this will only be supported for another 2 years?


    Oops, you can't run AVG on ME another problem with ME!

    Try this instead and do the other things I said in my first post!


    Please download WebRoot SpySweeper from HERE (It's a 2 week trial):

    http://www.webroot.com/consumer/products/spysweeper/index.html?acode=af1&rc=4129


    * Click the Free Trial link under "Downloads/SpySweeper" to download the program.
    * Install it. Once the program is installed, it will open.
    * It will prompt you to update to the latest definitions, click Yes.
    * Once the definitions are installed, click Options on the left side.
    * Click the Sweep Options tab.
    * Under What to Sweep please put a check next to the following:
    o
    o Sweep Memory
    o Sweep Registry
    o Sweep Cookies
    o Sweep All User Accounts
    o Enable Direct Disk Sweeping
    o Sweep Contents of Compressed Files
    o Sweep for Rootkits
    o Please UNCHECK Do not Sweep System Restore Folder.
    * Click Sweep Now on the left side.
    * Click the Start button.
    * When it's done scanning, click the Next button.
    * Make sure everything has a check next to it, then click the Next button.
    * It will remove all of the items found.
    * Click Session Log in the upper right corner, copy everything in that window.
    * Click the Summary tab and click Finish.
    * Paste the contents of the session log you copied into your next reply.
     
  9. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    I do have XP on my Internet computer. I have ME on my old computer which I use for non-Internet stuff (so my most personal info is not exposed). I must have worded my last response goofy. I have so much leg pain that I'd prefer to have my legs chopped off.

    James
     
  10. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    It took a total of 8 hours over four days to do what you asked. Even as disabled as I am, I'd pay good money to go 12 rounds with Bill Gates and/or the CEO of Norton Anti-Virus. Your anti-virus located 409 possible viri. Norton found NOTHING!!! Should I just uninstall Norton?

    Here are the log files you requested:

    1)Logfile of HijackThis v1.99.1
    Scan saved at 2:59:27 PM, on 2/15/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.5730.0011)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
    C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\windows\system\hpsysdrv.exe
    C:\WINDOWS\system32\ps2.exe
    C:\Program Files\Common Files\Symantec Shared\ccApp.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Kaspersky\mwavscan.com
    C:\Kaspersky\kavss.exe
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\PeoplePC\ISP6230\Browser\Bartshel.exe
    C:\Program Files\PeoplePC\ISP6230\Browser\Bartshel.exe
    C:\PROGRA~1\PeoplePC\ISP6230\Browser\PPShared.exe
    C:\Documents and Settings\Owner\Desktop\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://us7.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us7.hpwis.com/
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://home.peoplepc.com/search
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us7.hpwis.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://home.peoplepc.com/search
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://us7.hpwis.com/
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O3 - Toolbar: hp toolkit - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - C:\HP\EXPLOREBAR\HPTOOLKT.DLL
    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton AntiVirus\osCheck.exe"
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Search Tool - {6218F5AF-02A5-4BAA-965D-2817DADDF200}} - C:\Program Files\IECustomizer\Tools\IESearchURls.exe (HKCU)
    O9 - Extra 'Tools' menuitem: Search Tool - {6218F5AF-02A5-4BAA-965D-2817DADDF200}} - C:\Program Files\IECustomizer\Tools\IESearchURls.exe (HKCU)
    O11 - Options group: [INTERNATIONAL] International*
    O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
    O16 - DPF: {01CA75F1-054B-4A63-9221-C6926369EC52} (HS_live Control) - http://install.homestead.com/~site/InstallFiles/SIFiles/lpxlive/HS_live.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
    O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
    O16 - DPF: {200B3EE9-7242-4EFD-B1E4-D97EE825BA53} (VerifyGMN Class) - http://h20270.www2.hp.com/ediags/gmn/install/hpobjinstaller_gmn.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.c...ls/en/x86/client/wuweb_site.cab?1098830955546
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1129228318687
    O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
    O16 - DPF: {E855A2D4-987E-4F3B-A51C-64D10A7E2479} (EPSImageControl Class) - http://tools.ebayimg.com/eps/activex/EPSControl_v1-32.cab
    O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
    O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\isPwdSvc.exe
    O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
    O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\AppCore\AppSvc32.exe

    -------------------
    2) AVG Anti-Spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 4:05:32 PM 2/14/2007

    + Scan result:



    C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP394\A0061040.EXE -> Adware.Sidesearch : Cleaned.


    ::Report end

    ------------------
    #3 is on next post
     
  11. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    3) eScan Anti-Virus

    File C:\Documents and Settings\Owner\Desktop\PROGRAMS\MSpeedUp.exe tagged as not-a-virus:AdWare.Win32.FlashTrack.c. No Action Taken.
    File C:\hp\bin\KillWind.exe tagged as not-a-virus:RiskTool.Win32.PsKill.p. No Action Taken.
    File C:\Program Files\PeoplePC\Toolbar\PPCToolbar.dll tagged as not-a-virus:AdWare.Win32.Agent.ac. No Action Taken.
    File C:\Program Files\temp\xmod_inst.exe tagged as not-a-virus:AdWare.Win32.FlashTrack.c. No Action Taken.
    File C:\RECYCLER\NPROTECT\00003254.com infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003390.com infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003398. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003432. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003434. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003435. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003458. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003466. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003527. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003529. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003530. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003567. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003585. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003712. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003746. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003805. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003822. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003893. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003910. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003912. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003965. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00003967. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004006. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004049. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004060. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004062. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004068. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004071. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004082. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004087. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004088. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004089. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004103. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004104. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004124. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004151. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004163. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004197. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004198. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004202. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004213. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004320. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004331. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004332. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004334. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004354. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004356. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004357. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004359. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004362. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004374. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004414. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004415. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004417. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004444. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004511. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004515. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004516. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004529. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004538. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004552. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004566. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004598. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004685. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004691. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004706. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004711. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004713. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004749. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004785. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004792. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004838. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004839. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004845. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004867. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004900. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004903. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004907. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004921. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004940. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004975. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00004982. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005047. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005079. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005080. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005081. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005108. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005109. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005118. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005129. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005130. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005161. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005162. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005207. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005237. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005241. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005267. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005268. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005269. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005270. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005271. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005272. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005273. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005274. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005313. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005314. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005315. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005316. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005317. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005318. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005319. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005320. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005321. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005322. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005323. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005324. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005325. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005326. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005327. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005328. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005329. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005330. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005331. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005332. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005333. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005334. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005335. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005336. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005398. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005400. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005401. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005402. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005409. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005414. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005423. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005429. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005456. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005470. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005478. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005482. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005483. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005505. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005519. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005524. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005534. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005535. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005569. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005577. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005588. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005590. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005591. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005597. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005602. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005603. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005613. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005622. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005625. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005648. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005658. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005661. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005682. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005692. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005726. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005773. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005830. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005833. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005940. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005941. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005953. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005972. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00005996.Bishop infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006002. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006003. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006004. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006031. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006032. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006041. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006052. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006053. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006084. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006085. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006130. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006160. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006164. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006190. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006191. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006192. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006193. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006194. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006195. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006196. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006197. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006236. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006237. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006238. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006239. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006240. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006241. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006242. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006243. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006244. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006245. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006246. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006247. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006248. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006249. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006250. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006251. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006252. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006253. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006254. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006255. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006256. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006257. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006258. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006259. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006321. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006323. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006324. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006325. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006332. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006337. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006346. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006352. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006379. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006393. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006401. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006405. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006406. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006428. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006442. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006447. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006457. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006458. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006492. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006500. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006511. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006513. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006514. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006520. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006525. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006526. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006536. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006545. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006548. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006571. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006581. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006584. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006605. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006681. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006715. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006774. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006791. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006862. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006879. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006881. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006934. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006936. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00006975. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
     
  12. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    File C:\RECYCLER\NPROTECT\00007018. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007029. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007031. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007037. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007040. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007051. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007056. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007057. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007058. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007072. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007073. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007093. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007120. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007132. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007166. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007167. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007171. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007182. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007289. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007300. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007301. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007303. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007323. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007325. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007326. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007328. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007331. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007343. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007383. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007384. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007386. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007413. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007480. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007484. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007485. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007498. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007507. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007521. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007535. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007567. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007654. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007660. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007675. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007680. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007682. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007718. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007754. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007761. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007807. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007808. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007814. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007836. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007869. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007872. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007876. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007890. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007909. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007944. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00007951. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008016. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008048. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008049. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008050. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008077. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008078. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008087. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008098. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008099. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008130. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008131. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008176. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008206. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008210. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008236. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008237. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008238. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008239. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008240. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008241. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008242. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008243. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008282. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008283. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008284. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008285. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008286. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008287. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008288. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008289. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008290. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008291. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008292. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008293. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008294. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008295. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008296. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008297. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008298. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008299. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008300. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008301. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008302. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008303. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008304. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008305. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008367. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008369. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008370. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008371. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008378. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008383. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008392. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008398. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008425. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008439. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008447. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008451. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008452. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008474. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008488. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008493. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008503. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008504. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008538. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008546. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008557. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008559. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008560. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008566. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008571. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008572. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008582. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008591. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008594. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008617. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008627. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008630. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008651. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008661. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008695. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008742. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008799. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\RECYCLER\NPROTECT\00008802. infected by "BkCln.Unknown" Virus. Action Taken: File Renamed.
    File C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP385\A0059777.dll tagged as not-a-virus:AdWare.Win32.FlashTrack.c. No Action Taken.
    File C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP385\A0059778.dll tagged as not-a-virus:AdWare.Win32.Flt.a. No Action Taken.
    File C:\System Volume Information\_restore{F03BC7CA-958E-4E73-B64E-7D9F75261CF2}\RP385\A0059780.exe tagged as not-a-virus:AdWare.Win32.Flt.a. No Action Taken.
     
  13. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    Yea I would uninstall Norton and install anti vur a good free anti virus from below!


    Anti-vir

    http://www.free-av.com/


    Also install this firewall for added protection!

    you don't appear to have a firewall, even if you have a router you still need
    a software frewall, downlaod the one from the link below!


    Comodo firewall. Sign up it's free!

    http://www.personalfirewall.trustix.com/


    Threads on comodo!

    http://www.wilderssecurity.com/forumdisplay.php?f=31



    * Go to Control Panel > Java. On the General tab under Temporary Internet
    Files" click the "Delete Files" button to clear the Java cache. Or open
    Java and clcik clear cache for older version of Java! If you have
    Microsoft's uninstall it and download Sun's java.


    * Go to Control Panel > Internet Options. On the General tab under
    "Temporary Internet Files" Click "Delete Files". Put a check by "Delete
    Offline Content" and click OK. Click on the "Delete Cookies" button to clear
    the cookies.


    To block cookies in IE.

    Go to view/privacy report/highlight the offending cookie/click summary/
    and choose never allow this site to use cookies/ click ok and exit!This
    will block all tracking cookies from being set on your computer!


    For Mozilla

    To block cookies in mozilla and stop them from coming back click on
    tools/ options/privacy/click view cookies, now you will now see a
    list of cookies, click on all the cookies to delete that you don't want
    to keep! You can view all the blocked cookies by clicking exceptions!




    Download the pocket killbox

    http://www.bleepingcomputer.com/files/killbox.php



    Double-click on Killbox.exe to run it. Now put a tick by Delete on
    Reboot. In the "Full Path of File to Delete" box, copy and paste each
    of the following lines one at a time then click on the button that has
    the red circle with the X in the middle after you enter each file.
    It will ask for confimation to delete the file on next reboot. Click
    Yes. It will then ask if you want to reboot now. Click No. Continue
    with that same procedure until you have copied and pasted all of
    these in the "Paste Full Path of File to Delete" box.Then click yes
    to reboot after you entered the last one.


    Note: It is possible that Killbox will tell you that one or more files do not
    exist. If that happens, just continue on with all the files. Be sure you
    don't miss any.




    C:\Program Files\PeoplePC\Toolbar\PPCToolbar.dll
    C:\Program Files\PeoplePC\Toolbar
    C:\Program Files\temp\xmod_inst.exe



    go to this site and download these tools and once you get both
    adaware Se 1.6 and spybot, update both of them.

    Set adaware to do a full system scan and deselect, "search for neglible risk
    entries". Click next to start the scan. Delete everything adaware finds.

    reboot and now run spybot

    Spybot: Search and destroy.

    Delete what spybot finds marked in red. After updating spybot hit the
    immunize button.



    Download Superantispyware.

    http://www.superantispyware.com/


    Once downloaded and installed update the defintions
    and then run a full system scan quarantine what it finds!



    All tools can be downloaded at the link below and found on that page!

    . SUPERAntiSpyware
    . SpyBot search and destroy
    . AdAware SE personal


    http://www.majorgeeks.com/downloads31.html





    Make sure your ActiveX controls are set as follows:

    Go to Internet Options - Security - Internet, press 'default level', then OK.
    Now press "Custom Level."

    In the ActiveX section, set the first two options (Download signed and
    unsigned ActiveX controls) to 'prompt', and 'Initialize and Script ActiveX
    controls not marked as safe" to 'disable'.


    Active X settings

    http://www.compu-docs.com/activex.htm


    Run ActiveScan online virus scan here

    http://www.pandasoftware.com/products/activescan.htm

    When the scan is finished, anything that it cannot clean have it delete it.
    Make a note of the file location of anything that cannot be deleted so you
    can delete it yourself.
    - Save the results from the scan!



    post another log and the panda scan log!
     
  14. Cardcop

    Cardcop Thread Starter

    Joined:
    Feb 2, 2007
    Messages:
    11
    Thank you my friend. Your help has been GREATLY appreciated.

    I will pass this knowledge on to those in similar situations>>> the way the net used to be.

    James M.
     
  15. khazars

    khazars

    Joined:
    Feb 15, 2004
    Messages:
    12,302
    Are you clean now? Post another log?
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Similar Threads - svhost Spyware Malware
  1. dano_61
    Replies:
    14
    Views:
    684
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/540478

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice