Windows 7: Malware.Trace detected

Okay, here's RKreport.txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Scan -- Date : 02/09/2013 09:20:45
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

¤¤¤ Registry Entries : 3 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[1]_S_02092013_02d0920.txt >>
RKreport[1]_S_02092013_02d0920.txt


I didn't delete anything that it identified, but I removed the virus yesterday with superantispyware since golden had never responded. I apologize if that was a mistake and makes this more difficult.

Once again, right-click RogueKiller, and select: Run as Administrator
Wait until Prescan finishes

Click on: Scan
Wait until the Status box shows: Scan Finished
Then, press: Delete

Wait until the Status box shows: Deleting Finished

Please provide the new RKreport[1].txt (on your Desktop) in your reply.

I have three new reports. I'll post them all.

RKreport[1].txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Scan -- Date : 02/09/2013 09:20:45
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

¤¤¤ Registry Entries : 3 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[1]_S_02092013_02d0920.txt >>
RKreport[1]_S_02092013_02d0920.txt




RKreport[2].txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Scan -- Date : 02/09/2013 17:39:46
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

¤¤¤ Registry Entries : 3 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[2]_S_02092013_02d1739.txt >>
RKreport[1]_S_02092013_02d0920.txt ; RKreport[2]_S_02092013_02d1739.txt




RKreport[3].txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Remove -- Date : 02/09/2013 17:40:22
| ARK || FAK || MBR |

¤¤¤ Bad processes : 2 ¤¤¤
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

¤¤¤ Registry Entries : 3 ¤¤¤
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> REPLACED (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver : [NOT LOADED] ¤¤¤

¤¤¤ HOSTS File: ¤¤¤
--> C:\Windows\system32\drivers\etc\hosts



¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[3]_D_02092013_02d1740.txt >>
RKreport[1]_S_02092013_02d0920.txt ; RKreport[2]_S_02092013_02d1739.txt ; RKreport[3]_D_02092013_02d1740.txt

Looks as if you are good to go.

Have a great day!

Thanks. I really appreciate the help. I just have one last question. ink files for my computer and my user folder were generated. I assume that's just the result of running one of those scans?

.lnk files are shortcuts...

Got the name of a couple of them?

Yeah, I know that they're shortcuts. They're just the standard one's that you would have. Actually, they're not shortcuts. they are for "My Computer" and my user folder, "Robert"

Not aware that the programs we ran would produce .lnk files for My Computer and your User folder.

Well as long as the virus is gone I don't care. Here's a picture of my desktop. It put them in the top right corner, but I moved them so that you could see better.

Thanks for the image. It shows what you are talking about.

If you do not want the icons to show on the Desktop, do the following:

Right-click on the Desktop and select: Personalize

In the prompt that appears, click on: Change Desktop Icons

In the Desktop Icons area, you can check or uncheck the icons to show (or not) on the Desktop.