Vundo trojan problem solved OK.Thank you.

Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

eirmos

Thread Starter
Joined
Jul 9, 2007
Messages
1
SDFix: Version 1.88
Run by Nicos on 07/02/2007 at 11:56
Microsoft Windows XP [Version 5.1.2600]
Running From: C:\DOCUME~1\Nikos\Desktop\sdfix\SDFix
Safe Mode:
Checking Services:
Name:
ldrsvc
runtime
ImagePath:
%SystemRoot%\System32\svchost.exe -k netsvcs
\??\C:\WINDOWS\System32\drivers\runtime.sys
ldrsvc - Deleted
Restoring Windows Registry Values
Restoring Windows Default Hosts File
Rebooting...
Normal Mode:
Checking Files:
Below files will be copied to Backups folder then removed:
C:\Documents and Settings\Nikos\Favorites\Error Cleaner.url - Deleted
C:\Documents and Settings\Nikos\Favorites\Privacy Protector.url - Deleted
C:\Documents and Settings\Nikos\Favorites\Spyware&Malware Protection.url - Deleted
C:\WINDOWS\privacy_danger\index.htm - Deleted
C:\WINDOWS\privacy_danger\images\capt.gif - Deleted
C:\WINDOWS\privacy_danger\images\danger.jpg - Deleted
C:\WINDOWS\privacy_danger\images\down.gif - Deleted
C:\WINDOWS\privacy_danger\images\spacer.gif - Deleted
C:\DOCUME~1\Nikos\LOCALS~1\Temp\hd-log.txt - Deleted
C:\WINDOWS\dat.txt - Deleted
C:\WINDOWS\ddesupport.dll - Deleted
C:\WINDOWS\main_uninstaller.exe - Deleted
C:\WINDOWS\msdde.dll - Deleted
C:\WINDOWS\msole.dll - Deleted
C:\WINDOWS\rs.txt - Deleted
C:\WINDOWS\search_res.txt - Deleted
C:\WINDOWS\system32\3_exception.nls - Deleted
C:\WINDOWS\system32\drivers\asc3550u.sys - Deleted
Folder C:\WINDOWS\privacy_danger - Removed
Removing Temp Files...
ADS Check:
Checking C:\WINDOWS
C:\WINDOWS
No streams found.

Checking C:\WINDOWS\system32
C:\WINDOWS\system32
No streams found.

Checking C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
No streams found.

Checking C:\WINDOWS\system32\ntoskrnl.exe
C:\WINDOWS\system32\ntoskrnl.exe
No streams found.

Final Check:

Remaining Services:
------------------





Remaining Files:
---------------

Backups Folder: - C:\DOCUME~1\Nikos\Desktop\sdfix\SDFix\backups\backups.zip

Listing Files with Hidden Attributes:

C:\xvxja6hw.sys
C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0004.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0005.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0831.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL1223.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3131.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3317.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3687.tmp
C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3768.tmp
C:\Documents and Settings\Nikos\Desktop\recent\EAP\ƒ„Ž10\2006-2007\ANDRIANA\~WRL2974.TMP
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Desktop folders\Draft offers\~WRL2272.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\~WRL0003.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\~WRL1700.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\Outgoing\~WRL1267.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\Outgoing\~WRL3649.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL2757.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL2759.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL3838.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\Carnitech\~WRL3043.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\Carnitech\~WRL3317.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\WEBOMATIC\Machinery\~WRL1186.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\WEBOMATIC\Machinery\~WRL2770.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\ƒˆ€”Ž€\~WRL0018.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\ƒˆ€”Ž€\€Ž•„‘\~WRL0003.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\„¥¦¬© ¦›¦«γ©œ \~WRL0001.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\~WRL0563.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\¨˜΅« ΅α\~WRL3112.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\¨˜΅« ΅α\~WRL3505.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL0893.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL1499.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL2943.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0459.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0492.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0526.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0744.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0817.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL1379.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL1856.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL2057.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL2233.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3741.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3746.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3959.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\~WRL3194.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\~WRL3621.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\~WRL0350.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\Egyrofarm\~WRL1803.tmp
C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\Egyrofarm\~WRL2256.tmp
C:\Documents and Settings\Nikos\My Documents\My eBooks\CREM\Crem\„¤«¦Άβ_Άž¨ΰ£γ\„¤«¦Άβ_Άž¨ΰ£γ_PACLINE\~WRL0002.tmp
C:\Program Files\Messenger\SET116F.tmp
Finished
(y) :)
 
Status
This thread has been Locked and is not open to further replies. Please start a New Thread if you're having a similar issue. View our Welcome Guide to learn how to use this site.

Users Who Are Viewing This Thread (Users: 0, Guests: 1)

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 807,865 other people just like you!

Latest posts

Members online

Top