Is my computer still infected?

Question

dkewl16 0 Newbie Poster

20 Years Ago

I had the cachecachekit trojan, tried to remove it and not sure if it's actually gone. I also found several other worms and spyware doing searches. This is the sysclean file after using ewido.

/--------------------------------------------------------------\
| Trend Micro Sysclean Package |
| Copyright 2002, Trend Micro, Inc. |
| http://www.trendmicro.com |
\--------------------------------------------------------------/

2005-09-22, 18:02:34, Auto-clean mode specified.
2005-09-22, 18:02:34, Running scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\TSC.BIN"...
2005-09-22, 18:03:00, Scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\TSC.BIN" has finished running.
2005-09-22, 18:03:00, TSC Log:

Damage Cleanup Engine (DCE) 3.9(Build 1020)
Windows XP(Build 2600: Service Pack 2)

Start time : Thu Sep 22 2005 18:02:36

Load Damage Cleanup Template (DCT) "C:\Documents and Settings\Owner\Desktop\Sysclean\tsc.ptn" (version 653) [success]

Complete time : Thu Sep 22 2005 18:03:00
Execute pattern count(4357), Virus found count(0), Virus clean count(0), Clean failed count(0)

2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\LocalService\NTUSER.DAT": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\LocalService\ntuser.dat.LOG": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\NetworkService\NTUSER.DAT": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\NetworkService\ntuser.dat.LOG": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\Owner\NTUSER.DAT": Access is denied.
2005-09-22, 18:03:58, An error occurred while scanning file "C:\Documents and Settings\Owner\ntuser.dat.LOG": Access is denied.
2005-09-22, 18:06:42, An error occurred while scanning file "C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat": Access is denied.
2005-09-22, 18:06:42, An error occurred while scanning file "C:\Documents and Settings\Owner\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG": Access is denied.
2005-09-22, 18:29:49, An error occurred while scanning file "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll": Access is denied.
2005-09-22, 18:29:49, An error occurred while scanning file "C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsys.dll": Access is denied.
2005-09-22, 18:40:24, An error was detected on "C:\System Volume Information\*.*": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\catsrv.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\catsrvut.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\clbcatex.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\clbcatq.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\colbact.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\comadmin.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\comrepl.exe": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\comsvcs.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\comuid.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\es.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\migregdb.exe": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\msdtcprx.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\msdtctm.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\msdtcuiu.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\mtxclu.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\mtxoci.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\ole32.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\rpcrt4.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\rpcss.dll": Access is denied.
2005-09-22, 18:42:13, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB828741$\txflog.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\callcont.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\gdi32.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\h323.tsp": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\h323msp.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\helpctr.exe": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\ipnathlp.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\lsasrv.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\mf3216.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\msasn1.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\msgina.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\mst120.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\netapi32.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\nmcom.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\rtcdll.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\schannel.dll": Access is denied.
2005-09-22, 18:42:14, Could not set file for reading on "C:\WINDOWS\$NtUninstallKB835732$\xpsp2res.dll": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\Layout.ini": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\LUCOMS~1.": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\NIS_": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:04, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:45:05, Could not set file for reading on "C:\WINDOWS\Prefetch\": Access is denied.
2005-09-22, 18:47:09, An error occurred while scanning file "C:\WINDOWS\system32\config\default": Access is denied.
2005-09-22, 18:47:09, An error occurred while scanning file "C:\WINDOWS\system32\config\default.LOG": Access is denied.
2005-09-22, 18:47:09, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM": Access is denied.
2005-09-22, 18:47:09, An error occurred while scanning file "C:\WINDOWS\system32\config\SAM.LOG": Access is denied.
2005-09-22, 18:47:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY": Access is denied.
2005-09-22, 18:47:10, An error occurred while scanning file "C:\WINDOWS\system32\config\SECURITY.LOG": Access is denied.
2005-09-22, 18:47:10, An error occurred while scanning file "C:\WINDOWS\system32\config\software": Access is denied.
2005-09-22, 18:47:10, An error occurred while scanning file "C:\WINDOWS\system32\config\software.LOG": Access is denied.
2005-09-22, 18:47:10, An error occurred while scanning file "C:\WINDOWS\system32\config\system": Access is denied.
2005-09-22, 18:47:10, An error occurred while scanning file "C:\WINDOWS\system32\config\system.LOG": Access is denied.
2005-09-22, 18:48:42, Running scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN"...
2005-09-22, 19:28:16, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 9/22/2005 18:48:45
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 853 (108467 Patterns) (2005/09/21) (285300)
Command Line: C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\Owner\Desktop\Sysclean

97801 files have been read.
97801 files have been checked.
65752 files have been scanned.
112532 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/22/2005 19:28:16
---------*---------*---------*---------*---------*---------*---------*---------*
2005-09-22, 19:28:16, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 9/22/2005 18:48:45
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 853 (108467 Patterns) (2005/09/21) (285300)
Command Line: C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\Owner\Desktop\Sysclean

97801 files have been read.
97801 files have been checked.
65752 files have been scanned.
112532 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/22/2005 19:28:16 39 minutes 29 seconds (2368.55 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2005-09-22, 19:28:16, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 9/22/2005 18:48:45
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 853 (108467 Patterns) (2005/09/21) (285300)
Command Line: C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 C:\*.* /P=C:\Documents and Settings\Owner\Desktop\Sysclean

97801 files have been read.
97801 files have been checked.
65752 files have been scanned.
112532 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/22/2005 19:28:16 39 minutes 29 seconds (2368.55 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2005-09-22, 19:28:16, Scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN" has finished running.
2005-09-22, 19:28:46, Running scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN"...
2005-09-22, 19:33:24, Files Detected:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 9/22/2005 19:28:47
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 853 (108467 Patterns) (2005/09/21) (285300)
Command Line: C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 D:\*.* /P=C:\Documents and Settings\Owner\Desktop\Sysclean

9268 files have been read.
9268 files have been checked.
8338 files have been scanned.
16521 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/22/2005 19:33:24
---------*---------*---------*---------*---------*---------*---------*---------*
2005-09-22, 19:33:24, Files Clean:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 9/22/2005 19:28:47
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 853 (108467 Patterns) (2005/09/21) (285300)
Command Line: C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 D:\*.* /P=C:\Documents and Settings\Owner\Desktop\Sysclean

9268 files have been read.
9268 files have been checked.
8338 files have been scanned.
16521 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/22/2005 19:33:24 4 minutes 36 seconds (276.30 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2005-09-22, 19:33:24, Clean Fail:
Copyright (c) 1990 - 2004 Trend Micro Inc.
Report Date : 9/22/2005 19:28:47
VSAPI Engine Version : 7.510-1002
VSCANTM Version : 1.1-1001
Virus Pattern Version : 853 (108467 Patterns) (2005/09/21) (285300)
Command Line: C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN /NBPM /S /CLEANALL /LAPPEND /LD /LC /LCF /NM /NB /C /ACTIVEACTION=5 D:\*.* /P=C:\Documents and Settings\Owner\Desktop\Sysclean

9268 files have been read.
9268 files have been checked.
8338 files have been scanned.
16521 files have been scanned. (including files in archived)
0 files containing viruses.
Found 0 viruses totally.
Maybe 0 viruses totally.
Stop At : 9/22/2005 19:33:24 4 minutes 36 seconds (276.30 seconds) has elapsed.

---------*---------*---------*---------*---------*---------*---------*---------*
2005-09-22, 19:33:24, Scanner "C:\Documents and Settings\Owner\Desktop\Sysclean\VSCANTM.BIN" has finished running.

and this is the hijack this after sysclean

Logfile of HijackThis v1.99.1
Scan saved at 7:46:36 PM, on 9/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\ISSVC.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\ewido\security suite\ewidoguard.exe
C:\WINDOWS\System32\gearsec.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\System32\hphmon04.exe
C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\HPHipm11.exe
C:\Program Files\Norton Password Manager\AcctMgr.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\PROGRA~1\HPINST~1\Pavilion\XPHNABS4EN\plugin\bin\pchbutton.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
C:\Program Files\InterMute\IMStart.exe
C:\PROGRA~1\SECRET~1\run.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\Program Files\Messenger\msmsgs.exe

R3 - URLSearchHook: AOLTBSearch Class - {EA756889-2338-43DB-8F07-D1CA6FB9C90D} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Norton Internet Security - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\hpdtlk02.dll
O3 - Toolbar: Norton Internet Security - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Common Files\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb07.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINDOWS\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\HP\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [UpdateManager] "c:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [ViewMgr] C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [OpenGL Drivers] C:\WINDOWS\system32\0penGLD.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\HP\Digital Imaging\bin\backupnotify.exe
O4 - HKCU\..\Run: [Acme.PCHButton] C:\PROGRA~1\HPINST~1\Pavilion\XPHNABS4EN\plugin\bin\pchbutton.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SecretSmileys] C:\PROGRA~1\SECRET~1\ss.exe
O4 - HKCU\..\Run: [OpenGL Drivers] C:\WINDOWS\system32\0penGLD.exe
O4 - Startup: IMStart.lnk = C:\Program Files\InterMute\IMStart.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Microtek Scanner Finder.lnk = C:\Program Files\Microtek\ScanWizard 5\ScannerFinder.exe
O4 - Global Startup: Quicken Scheduled Updates.lnk = C:\Program Files\Quicken\bagent.exe
O4 - Global Startup: Updates from HP.lnk = C:\Program Files\Updates from HP\137903\Program\BackWeb-137903.exe
O8 - Extra context menu item: &AIM Search - res://C:\Program Files\AIM Toolbar\AIMBar.dll/aimsearch.htm
O8 - Extra context menu item: &AOL Toolbar Search - res://c:\program files\aol\aol toolbar 2.0\aoltbhtml.dll/search.html
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Add To HP Organize... - C:\PROGRA~1\HEWLET~1\HPORGA~1\bin\core.hp.main\SendTo.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MI1933~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll (file missing)
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MI1933~1\OFFICE11\REFIEBAR.DLL
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {28294A7C-FC4D-43FB-B6FB-E6BDEBE3C43B} (CALoader Control) - http://ca.nexon.com/CALauncher.cab
O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) -
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) -
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
O23 - Service: Gear Security Service (GEARSecurity) - GEAR Software - C:\WINDOWS\System32\gearsec.exe
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ISSvc (ISSVC) - Symantec Corporation - C:\Program Files\Norton Internet Security\ISSVC.exe
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\System32\HPHipm11.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\Security Center\SymWSC.exe

If anyone could tell me if i'm clean that would be much appreciated! Thanks

cybersecurity microsoft:windows-nt-2000-xp virus-malware

1 Contributor
2 Replies
203 Views
1 Week Discussion Span
Latest Post 20 Years Ago Latest Post by dkewl16

Dani AI

Generated 6 Months Ago

Note for : the scans you ran are a good start, but the outputs you posted are inconclusive. Automated scanners can report "no infections" while skipping protected or in-use system areas; that leaves room for hidden or persistent components. The HijackThis output you posted shows several non-standard autostarts and unfamiliar executables, which is why a clean bill of health can’t be given yet.

Practical next steps (in this order):

Disconnect the PC from the network to limit data loss or further compromise.
Run an offline/bootable antivirus rescue environment (boot from CD/USB) so the scanner can access locked system files and registry hives.
From a running Windows session, use a current autorun/startup inspector (Sysinternals Autoruns) to list every automatic start point and verify publishers before disabling items. Export that list before making changes.
Run a dedicated rootkit check (bootable if possible). Rootkits often hide processes, files and registry entries from ordinary scanners.
If you find items you don’t recognize, disable them first rather than immediate deletion. Quarantine suspect files and reboot to see whether behavior changes.

Recovery and cautions:

Do not change online account passwords from the possibly infected PC; use a known-clean machine to do that.
Back up personal data (documents, photos) to an external disk that you do not reconnect to other machines until it’s scanned.
If suspicious components persist after offline scans and manual cleanup, the safest route is a full wipe and OS reinstall from trusted media. Half-measures often leave a system unreliable.

When posting follow-ups here, include: what rescue tool you used, whether signatures were updated immediately before scanning, the fresh Autoruns export, and a new HijackThis or equivalent log. That lets volunteers give specific, verifiable guidance.

Reply to this topic

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.

dkewl16 0 Newbie Poster · Answer 1 · 2005-09-23T16:50:20+00:00

Ah, :eek: the last part got cut off. What it should say is any help is much appreciated

dkewl16 0 Newbie Poster · Answer 2 · 2005-10-03T16:45:33+00:00

Before this floats off into oblivion, could someone possibly look this over and (hopefully) give me a clean bill of health?