Thread: Virtumonde/Seneka infection please advise
View Single Post
•
•
Join Date: Jan 2009
Posts: 23
Reputation: OneBlueD is an unknown quantity at this point 
Solved Threads: 0
OneBlueD OneBlueD is offline Offline
Newbie Poster

F-Secure results

 
0
  #2
Jan 14th, 2009
F-secure online scan just finished

Scanning Report
Wednesday, January 14, 2009 13:05:20 - 13:56:18
Computer name:
Scanning type: Scan system for malware, rootkits
Target: C:\ D:\ F:\


--------------------------------------------------------------------------------

Result: 9 malware found
TrackingCookie.2o7 (spyware)
System
TrackingCookie.Adinterax (spyware)
System
TrackingCookie.Advertising (spyware)
System
TrackingCookie.Atdmt (spyware)
System
TrackingCookie.Doubleclick (spyware)
System
TrackingCookie.Questionmarket (spyware)
System
TrackingCookie.Webtrends (spyware)
System
TrackingCookie.Xiti (spyware)
System
TrackingCookie.Yieldmanager (spyware)
System

--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 68553
System: 4078
Not scanned: 163
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
None: 9
Submitted: 0
Files not scanned:
X�j 8�k IBERFIL.SYS
C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\DRIVERS\SAFEBOOT.SYS
C:\WINDOWS\SYSTEM32\DRIVERS\SPTD.SYS
C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\COMPONENTS
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SAM
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\REGBACK\SYSTEM
C:\WINDOWS\SYSTEM32\CATROOT2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CATDB
C:\WINDOWS\SYSTEM32\CATROOT2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\CATDB
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\01715423BC948C0C64FB39A63CECD874_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\01750C4091571AAC5C1FFD4B54AE1456_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\0705562A827B28338DEDB3A1A8914C97_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\111234D6FEB36A1C48045AF13000D703_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\127890C304D2B2D372409C0D9BEE8E47_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\16A20D027DDB82FEEE7772023A8F0157_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\18DE10460C1D5D425F6B5861E4600E35_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1D36DA2A95E33B046B2ECCABC87CEE9F_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\1E24A2B3E922150945D2C6964F2CDE12_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2040AE3CACD7719D2FE1532DF32732F7_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2204AD80A309AA7B2665E2DB96EB2D88_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\23BD01D3FBFDF39F663566B82A91675B_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\260C29F55ED83F3881BBA4FCE7247F03_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2BACD15214F2080737737EE42BEF1D37_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\2FD2B173CF3156395EB68458989597D9_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\312D500871F6B491F4CD921696183284_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\31B5B309EFCFC582536F6CC2B673588C_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3287E78CCF9DA8A17EEE1C3C2FF9FE3F_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3698AE7B5C80EB133824F26C973A9949_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3C2A9FD13AC0FB45312E75B5A15E37BD_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3CE46CD6FA1BB722630E6BDB7EFEE8A8_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\3E09A94A97515636B0EB3AA28D6F4DDB_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\41C1670A70B4A43D56A542A10A079469_6498978A-827E-4D3E-AFF6-2E7BF933885F
C:\USERS\ALL USERS\MICROSOFT\CRYPTO\RSA\MACHINEKEYS\43D8060A14511B:��aA
C:\HIBERFIL.SYS
C:\PAGEFILE.SYS
C:\WINDOWS\SYSTEM32\DRIVERS\SAFEBOOT.SYS
C:\WINDOWS\SYSTEM32\DRIVERS\SPTD.SYS
C:\WINDOWS\SYSTEM32\CONFIG\COMPONENTS
C:\WINDOWS\SYSTEM32\CONFIG\DEFAULT
C:\WINDOWS\SYSTEM32\CONFIG\SAM
C:\WINDOWS\SYSTEM32\CONFIG\SECURITY
C:\WINDOWS\SYSTEM32\CONFIG\SOFTWARE
C:\WINDOWS\SYSTEM32\CONFIG\SYSTEM
C:\WINDOWS��1ٲB

--------------------------------------------------------------------------------

Options
Scanning engines:
F-Secure USS: 2.40.0
F-Secure Hydra: 2.8.8110, 2009-01-14
F-Secure Pegasus: 1.20.0, 2008-11-17
F-Secure AVP: 7.0.171, 2009-01-14



It had a disinfect option but I doubt the problem was fixed
Reply With Quote