Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Malware.Trace detected


09 Feb 2013   #11

Windows 7 Home Premium x64
 
 

Okay, here's RKreport.txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Scan -- Date : 02/09/2013 09:20:45
| ARK || FAK || MBR |

Bad processes : 2
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

Registry Entries : 3
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

Particular Files / Folders:

Driver : [NOT LOADED]

HOSTS File:
--> C:\Windows\system32\drivers\etc\hosts



MBR Check:

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[1]_S_02092013_02d0920.txt >>
RKreport[1]_S_02092013_02d0920.txt


I didn't delete anything that it identified, but I removed the virus yesterday with superantispyware since golden had never responded. I apologize if that was a mistake and makes this more difficult.

My System SpecsSystem Spec
.

09 Feb 2013   #12

Windows 7 Home Premium
 
 

Once again, right-click RogueKiller, and select: Run as Administrator
Wait until Prescan finishes

Click on: Scan
Wait until the Status box shows: Scan Finished
Then, press: Delete

Wait until the Status box shows: Deleting Finished

Please provide the new RKreport[1].txt (on your Desktop) in your reply.
My System SpecsSystem Spec
09 Feb 2013   #13

Windows 7 Home Premium x64
 
 

I have three new reports. I'll post them all.

RKreport[1].txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Scan -- Date : 02/09/2013 09:20:45
| ARK || FAK || MBR |

Bad processes : 2
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

Registry Entries : 3
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

Particular Files / Folders:

Driver : [NOT LOADED]

HOSTS File:
--> C:\Windows\system32\drivers\etc\hosts



MBR Check:

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[1]_S_02092013_02d0920.txt >>
RKreport[1]_S_02092013_02d0920.txt




RKreport[2].txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Scan -- Date : 02/09/2013 17:39:46
| ARK || FAK || MBR |

Bad processes : 2
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

Registry Entries : 3
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

Particular Files / Folders:

Driver : [NOT LOADED]

HOSTS File:
--> C:\Windows\system32\drivers\etc\hosts



MBR Check:

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[2]_S_02092013_02d1739.txt >>
RKreport[1]_S_02092013_02d0920.txt ; RKreport[2]_S_02092013_02d1739.txt




RKreport[3].txt:

RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
mail : tigzyRK<at>gmail<dot>com
Feedback : RogueKiller - Geeks to Go Forums
Website : Download RogueKiller (Official website)
Blog : tigzy-RK

Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Started in : Normal mode
User : Robert [Admin rights]
Mode : Remove -- Date : 02/09/2013 17:40:22
| ARK || FAK || MBR |

Bad processes : 2
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
[DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

Registry Entries : 3
[HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> REPLACED (1)
[HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
[HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

Particular Files / Folders:

Driver : [NOT LOADED]

HOSTS File:
--> C:\Windows\system32\drivers\etc\hosts



MBR Check:

+++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
--- User ---
[MBR] 4f296a3c0463f45a9444b47540b40911
[BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
Partition table:
0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
User = LL1 ... OK!
User = LL2 ... OK!

+++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
--- User ---
[MBR] bfc15a8d640833ded61a0621cdcda871
[BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
User = LL1 ... OK!
User = LL2 ... OK!

Finished : << RKreport[3]_D_02092013_02d1740.txt >>
RKreport[1]_S_02092013_02d0920.txt ; RKreport[2]_S_02092013_02d1739.txt ; RKreport[3]_D_02092013_02d1740.txt
My System SpecsSystem Spec
.


09 Feb 2013   #14

Windows 7 Home Premium
 
 

Looks as if you are good to go.

Have a great day!
My System SpecsSystem Spec
09 Feb 2013   #15

Windows 7 Home Premium x64
 
 

Thanks. I really appreciate the help. I just have one last question. ink files for my computer and my user folder were generated. I assume that's just the result of running one of those scans?
My System SpecsSystem Spec
09 Feb 2013   #16

Windows 7 Home Premium
 
 

.lnk files are shortcuts...

Got the name of a couple of them?
My System SpecsSystem Spec
09 Feb 2013   #17

Windows 7 Home Premium x64
 
 

Yeah, I know that they're shortcuts. They're just the standard one's that you would have. Actually, they're not shortcuts. they are for "My Computer" and my user folder, "Robert"
My System SpecsSystem Spec
09 Feb 2013   #18

Windows 7 Home Premium
 
 

Not aware that the programs we ran would produce .lnk files for My Computer and your User folder.
My System SpecsSystem Spec
10 Feb 2013   #19

Windows 7 Home Premium x64
 
 

Well as long as the virus is gone I don't care. Here's a picture of my desktop. It put them in the top right corner, but I moved them so that you could see better.

Malware.Trace detected-capture2.jpg


My System SpecsSystem Spec
10 Feb 2013   #20

Windows 7 Home Premium
 
 

Thanks for the image. It shows what you are talking about.

If you do not want the icons to show on the Desktop, do the following:

Right-click on the Desktop and select: Personalize

In the prompt that appears, click on: Change Desktop Icons

In the Desktop Icons area, you can check or uncheck the icons to show (or not) on the Desktop.

My System SpecsSystem Spec
Reply

 Malware.Trace detected




Thread Tools



Similar help and support threads for2: Malware.Trace detected
Thread Forum
Computer trace Hardware & Devices
PC trace on domian ? Network & Sharing
Circular Kernel Context Logger trace - calling any trace experts..... BSOD Help and Support
Malware.Trace infection System Security
boot trace Performance & Maintenance

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:13 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33