1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Vundo trojan problem solved OK.Thank you.

Discussion in 'Virus & Other Malware Removal' started by eirmos, Jul 9, 2007.

Thread Status:
Not open for further replies.
  1. eirmos

    eirmos Thread Starter

    Joined:
    Jul 9, 2007
    Messages:
    1
    SDFix: Version 1.88
    Run by Nicos on 07/02/2007 at 11:56
    Microsoft Windows XP [Version 5.1.2600]
    Running From: C:\DOCUME~1\Nikos\Desktop\sdfix\SDFix
    Safe Mode:
    Checking Services:
    Name:
    ldrsvc
    runtime
    ImagePath:
    %SystemRoot%\System32\svchost.exe -k netsvcs
    \??\C:\WINDOWS\System32\drivers\runtime.sys
    ldrsvc - Deleted
    Restoring Windows Registry Values
    Restoring Windows Default Hosts File
    Rebooting...
    Normal Mode:
    Checking Files:
    Below files will be copied to Backups folder then removed:
    C:\Documents and Settings\Nikos\Favorites\Error Cleaner.url - Deleted
    C:\Documents and Settings\Nikos\Favorites\Privacy Protector.url - Deleted
    C:\Documents and Settings\Nikos\Favorites\Spyware&Malware Protection.url - Deleted
    C:\WINDOWS\privacy_danger\index.htm - Deleted
    C:\WINDOWS\privacy_danger\images\capt.gif - Deleted
    C:\WINDOWS\privacy_danger\images\danger.jpg - Deleted
    C:\WINDOWS\privacy_danger\images\down.gif - Deleted
    C:\WINDOWS\privacy_danger\images\spacer.gif - Deleted
    C:\DOCUME~1\Nikos\LOCALS~1\Temp\hd-log.txt - Deleted
    C:\WINDOWS\dat.txt - Deleted
    C:\WINDOWS\ddesupport.dll - Deleted
    C:\WINDOWS\main_uninstaller.exe - Deleted
    C:\WINDOWS\msdde.dll - Deleted
    C:\WINDOWS\msole.dll - Deleted
    C:\WINDOWS\rs.txt - Deleted
    C:\WINDOWS\search_res.txt - Deleted
    C:\WINDOWS\system32\3_exception.nls - Deleted
    C:\WINDOWS\system32\drivers\asc3550u.sys - Deleted
    Folder C:\WINDOWS\privacy_danger - Removed
    Removing Temp Files...
    ADS Check:
    Checking C:\WINDOWS
    C:\WINDOWS
    No streams found.

    Checking C:\WINDOWS\system32
    C:\WINDOWS\system32
    No streams found.

    Checking C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    No streams found.

    Checking C:\WINDOWS\system32\ntoskrnl.exe
    C:\WINDOWS\system32\ntoskrnl.exe
    No streams found.

    Final Check:

    Remaining Services:
    ------------------





    Remaining Files:
    ---------------

    Backups Folder: - C:\DOCUME~1\Nikos\Desktop\sdfix\SDFix\backups\backups.zip

    Listing Files with Hidden Attributes:

    C:\xvxja6hw.sys
    C:\Documents and Settings\All Users\Application Data\GTek\GTUpdate\AUpdate\Channels\ch1\lock.tmp
    C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0004.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0005.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL0831.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL1223.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3131.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3317.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3687.tmp
    C:\Documents and Settings\Nikos\Application Data\Microsoft\Word\~WRL3768.tmp
    C:\Documents and Settings\Nikos\Desktop\recent\EAP\ƒ„Ž10\2006-2007\ANDRIANA\~WRL2974.TMP
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Desktop folders\Draft offers\~WRL2272.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\~WRL0003.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\~WRL1700.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\Outgoing\~WRL1267.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Incoming\Outgoing\~WRL3649.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL2757.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL2759.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\~WRL3838.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\Carnitech\~WRL3043.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\Carnitech\~WRL3317.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\WEBOMATIC\Machinery\~WRL1186.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Iria\WEBOMATIC\Machinery\~WRL2770.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\ƒˆ€”Ž€\~WRL0018.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\ƒˆ€”Ž€\€Ž•„‘\~WRL0003.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\„¥¦¬© ¦›¦«γ©œ \~WRL0001.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\~WRL0563.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\¨˜΅« ΅α\~WRL3112.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\Š¦š ©«γ¨ ¦\¨˜΅« ΅α\~WRL3505.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL0893.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL1499.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \~WRL2943.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0459.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0492.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0526.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0744.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL0817.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL1379.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL1856.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL2057.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL2233.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3741.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3746.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\‹œ«˜*¨α©œ \daskalopoylos\~WRL3959.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\~WRL3194.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\~WRL3621.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\~WRL0350.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\Egyrofarm\~WRL1803.tmp
    C:\Documents and Settings\Nikos\Desktop\뚚¨˜*˜ ‚¨žš¦¨ε˜\¨¦©*¦¨β\¦¬£˜¤ε˜\Egyrofarm\~WRL2256.tmp
    C:\Documents and Settings\Nikos\My Documents\My eBooks\CREM\Crem\„¤«¦Άβ_Άž¨ΰ£γ\„¤«¦Άβ_Άž¨ΰ£γ_PACLINE\~WRL0002.tmp
    C:\Program Files\Messenger\SET116F.tmp
    Finished
    (y) :)
     
As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/593496

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice