tenga virus - Page 2
Page 2 of 2 FirstFirst 12
Results 16 to 23 of 23

Thread: tenga virus

  1. May 1st, 2009, 02:05 PM #16
    foe2839
    foe2839 is offline Virtual Med Student
    Join Date
    Apr 2009
    Posts
    2
    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 04/30/2009 at 03:04 PM

    Application Version : 4.25.1014

    Core Rules Database Version : 3872
    Trace Rules Database Version: 1820

    Scan type : Complete Scan
    Total Scan Time : 00:48:44

    Memory items scanned : 232
    Memory threats detected : 0
    Registry items scanned : 5781
    Registry threats detected : 0
    File items scanned : 102359
    File threats detected : 0
    Reply With Quote Reply With Quote
  2. May 1st, 2009, 02:17 PM #17
    eddds40's Avatar
    eddds40
    eddds40 is offline Virtual Resident
    Join Date
    Oct 2002
    Location
    central USA
    Posts
    758
    Friend foe2839 can't seem to get permission to post reply
    Reply With Quote Reply With Quote
  3. May 1st, 2009, 02:30 PM #18
    eddds40's Avatar
    eddds40
    eddds40 is offline Virtual Resident
    Join Date
    Oct 2002
    Location
    central USA
    Posts
    758
    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 04/30/2009 at 03:04 PM

    Application Version : 4.25.1014

    Core Rules Database Version : 3872
    Trace Rules Database Version: 1820

    Scan type : Complete Scan
    Total Scan Time : 00:48:44

    Memory items scanned : 232
    Memory threats detected : 0
    Registry items scanned : 5781
    Registry threats detected : 0
    File items scanned : 102359
    File threats detected : 0
    Reply With Quote Reply With Quote
  4. May 1st, 2009, 02:32 PM #19
    eddds40's Avatar
    eddds40
    eddds40 is offline Virtual Resident
    Join Date
    Oct 2002
    Location
    central USA
    Posts
    758
    Malwarebytes' Anti-Malware 1.36
    Database version: 2062
    Windows 5.1.2600 Service Pack 3

    4/30/2009 4:16:17 PM
    mbam-log-2009-04-30 (16-16-17).txt

    Scan type: Full Scan (C:\|D:\|G:\|)
    Objects scanned: 195207
    Time elapsed: 39 minute(s), 47 second(s)

    Memory Processes Infected: 0
    Memory Modules Infected: 0
    Registry Keys Infected: 0
    Registry Values Infected: 0
    Registry Data Items Infected: 0
    Folders Infected: 0
    Files Infected: 0

    Memory Processes Infected:
    (No malicious items detected)

    Memory Modules Infected:
    (No malicious items detected)

    Registry Keys Infected:
    (No malicious items detected)

    Registry Values Infected:
    (No malicious items detected)

    Registry Data Items Infected:
    (No malicious items detected)

    Folders Infected:
    (No malicious items detected)

    Files Infected:
    (No malicious items detected)
    Reply With Quote Reply With Quote
  6. May 1st, 2009, 02:58 PM #20
    Train
    Train is offline Friend of Site Staff
    Join Date
    Apr 2000
    Location
    Sheboygan, WI
    Posts
    53,391
    Quote Originally Posted by eddds40 View Post
    Friend foe2839 can't seem to get permission to post reply
    He is posting, just getting hung up.
    Plus he can not post in your thread, so he needs to start his own.
    Reply With Quote Reply With Quote
  7. May 1st, 2009, 03:38 PM #21
    eddds40's Avatar
    eddds40
    eddds40 is offline Virtual Resident
    Join Date
    Oct 2002
    Location
    central USA
    Posts
    758
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 1:46:24 PM, on 5/1/2009
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18372)
    Boot mode: Normal

    Running processes:
    G:\WINDOWS\System32\smss.exe
    G:\WINDOWS\system32\winlogon.exe
    G:\WINDOWS\system32\services.exe
    G:\WINDOWS\system32\lsass.exe
    G:\WINDOWS\system32\svchost.exe
    G:\WINDOWS\System32\svchost.exe
    G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    G:\Program Files\Alwil Software\Avast4\ashServ.exe
    G:\WINDOWS\system32\spoolsv.exe
    G:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    G:\WINDOWS\system32\cisvc.exe
    G:\Program Files\COMODO\Firewall\cmdagent.exe
    G:\WINDOWS\system32\inetsrv\inetinfo.exe
    G:\Program Files\Java\jre6\bin\jqs.exe
    G:\WINDOWS\system32\CAPM2RSK.EXE
    G:\Program Files\Macrium\Reflect\ReflectService.exe
    G:\WINDOWS\System32\snmp.exe
    G:\WINDOWS\system32\svchost.exe
    G:\WINDOWS\system32\mqsvc.exe
    G:\WINDOWS\system32\mqtgsvc.exe
    G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    G:\WINDOWS\system32\cidaemon.exe
    G:\WINDOWS\system32\cidaemon.exe
    G:\WINDOWS\Explorer.EXE
    G:\WINDOWS\AGRSMMSG.exe
    G:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
    G:\Program Files\Java\jre6\bin\jusched.exe
    G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    G:\Program Files\Comodo\Firewall\CPF.exe
    G:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
    G:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
    G:\WINDOWS\system32\ctfmon.exe
    G:\Program Files\WinZip\WZQKPICK.EXE
    G:\WINDOWS\system32\spool\drivers\w32x86\3\CAPM2LAK.EXE
    G:\WINDOWS\system32\spool\drivers\w32x86\3\CAPM2SWK.EXE
    G:\WINDOWS\system32\spool\drivers\w32x86\3\CAPM2SWK.EXE
    G:\WINDOWS\System32\dllhost.exe
    G:\WINDOWS\system32\inetsrv\DavCData.exe
    G:\Program Files\Quicken\qw.exe
    G:\Program Files\MSN Messenger\msnmsgr.exe
    G:\Program Files\MSN Messenger\usnsvc.exe
    G:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    G:\Program Files\Mozilla Firefox\firefox.exe
    G:\WINDOWS\system32\NOTEPAD.EXE
    G:\Program Files\Mozilla Thunderbird\thunderbird.exe
    G:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
    G:\WINDOWS\system32\NOTEPAD.EXE
    G:\WINDOWS\system32\NOTEPAD.EXE
    G:\WINDOWS\system32\NOTEPAD.EXE
    G:\Documents and Settings\2839\Desktop\3lyhq1is.exe
    G:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://g.msn.com/0SEENUS/SAOS01?FORM=TOOLBR
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - G:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - G:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - G:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - G:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - G:\Program Files\Windows Live Toolbar\msntb.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - G:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - G:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - G:\Program Files\Yahoo!\Companion\Installs\cpn1\YTSingleInstance.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - G:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - G:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
    O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll
    O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "G:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "G:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKLM\..\Run: [avast!] G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "G:\Program Files\Comodo\Firewall\CPF.exe" /background
    O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "G:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe"
    O4 - HKLM\..\Run: [OrderReminder] G:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
    O4 - HKCU\..\Run: [msnmsgr] "G:\Program Files\MSN Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Canon iR1200-1300 Status Window.LNK = G:\WINDOWS\system32\spool\drivers\w32x86\3\CAPM2LAK.EXE
    O4 - Global Startup: WinZip Quick Pick.lnk = G:\Program Files\WinZip\WZQKPICK.EXE
    O8 - Extra context menu item: &Windows Live Search - res://G:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
    O10 - Unknown file in Winsock LSP: g:\windows\system32\nwprovau.dll
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - G:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
    O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/res...scbase6662.cab
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1166148432437
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsof...?1166152067369
    O16 - DPF: {975F9329-0F5F-48D2-ADF8-AEFB19DEFB5F} (ZohoMeeting Control) - http://meeting.zoho.com/login/Agent.jsp
    O16 - DPF: {A9F8D9EC-3D0A-4A60-BD82-FBD64BAD370D} - http://h20264.www2.hp.com/ediags/dd/...osticsxp2k.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...nt/swflash.cab
    O20 - Winlogon Notify: !SASWinLogon - G:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - G:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: Comodo Application Agent (CmdAgent) - COMODO - G:\Program Files\COMODO\Firewall\cmdagent.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - G:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: Macrium Reflect Image Mounting Service (ReflectService) - Unknown owner - G:\Program Files\Macrium\Reflect\ReflectService.exe
    O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - G:\Program Files\Spyware Doctor\pctsAuxs.exe
    O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - G:\Program Files\Spyware Doctor\pctsSvc.exe
    Reply With Quote Reply With Quote
  8. May 1st, 2009, 04:15 PM #22
    crunchie's Avatar
    crunchie
    crunchie is offline Single dad
    Join Date
    Feb 2004
    Location
    Mandurah, Western Australia
    Posts
    10,157
    His logs are clean, but as Train said, have him start his own thread so that he can post .
    Reply With Quote Reply With Quote
  9. May 4th, 2009, 11:52 AM #23
    eddds40's Avatar
    eddds40
    eddds40 is offline Virtual Resident
    Join Date
    Oct 2002
    Location
    central USA
    Posts
    758
    http://discussions.virtualdr.com/sho...d.php?t=238751
    New post by foe2839 is the gmer log
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules