Malware.Trace detected

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 223
    Windows 7 Home Premium x64
    Thread Starter
       #11

    Okay, here's RKreport.txt:

    RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
    mail : tigzyRK<at>gmail<dot>com
    Feedback : RogueKiller - Geeks to Go Forums
    Website : Download RogueKiller (Official website)
    Blog : tigzy-RK

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Robert [Admin rights]
    Mode : Scan -- Date : 02/09/2013 09:20:45
    | ARK || FAK || MBR |

    ¤¤¤ Bad processes : 2 ¤¤¤
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

    ¤¤¤ Registry Entries : 3 ¤¤¤
    [HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤
    --> C:\Windows\system32\drivers\etc\hosts



    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
    --- User ---
    [MBR] 4f296a3c0463f45a9444b47540b40911
    [BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
    Partition table:
    0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    +++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
    --- User ---
    [MBR] bfc15a8d640833ded61a0621cdcda871
    [BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    Finished : << RKreport[1]_S_02092013_02d0920.txt >>
    RKreport[1]_S_02092013_02d0920.txt


    I didn't delete anything that it identified, but I removed the virus yesterday with superantispyware since golden had never responded. I apologize if that was a mistake and makes this more difficult.
      My Computer


  2. Posts : 2,470
    Windows 7 Home Premium
       #12

    Once again, right-click RogueKiller, and select: Run as Administrator
    Wait until Prescan finishes

    Click on: Scan
    Wait until the Status box shows: Scan Finished
    Then, press: Delete

    Wait until the Status box shows: Deleting Finished

    Please provide the new RKreport[1].txt (on your Desktop) in your reply.
      My Computer


  3. Posts : 223
    Windows 7 Home Premium x64
    Thread Starter
       #13

    I have three new reports. I'll post them all.

    RKreport[1].txt:

    RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
    mail : tigzyRK<at>gmail<dot>com
    Feedback : RogueKiller - Geeks to Go Forums
    Website : Download RogueKiller (Official website)
    Blog : tigzy-RK

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Robert [Admin rights]
    Mode : Scan -- Date : 02/09/2013 09:20:45
    | ARK || FAK || MBR |

    ¤¤¤ Bad processes : 2 ¤¤¤
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

    ¤¤¤ Registry Entries : 3 ¤¤¤
    [HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤
    --> C:\Windows\system32\drivers\etc\hosts



    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
    --- User ---
    [MBR] 4f296a3c0463f45a9444b47540b40911
    [BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
    Partition table:
    0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    +++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
    --- User ---
    [MBR] bfc15a8d640833ded61a0621cdcda871
    [BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    Finished : << RKreport[1]_S_02092013_02d0920.txt >>
    RKreport[1]_S_02092013_02d0920.txt




    RKreport[2].txt:

    RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
    mail : tigzyRK<at>gmail<dot>com
    Feedback : RogueKiller - Geeks to Go Forums
    Website : Download RogueKiller (Official website)
    Blog : tigzy-RK

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Robert [Admin rights]
    Mode : Scan -- Date : 02/09/2013 17:39:46
    | ARK || FAK || MBR |

    ¤¤¤ Bad processes : 2 ¤¤¤
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

    ¤¤¤ Registry Entries : 3 ¤¤¤
    [HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> FOUND
    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND
    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤
    --> C:\Windows\system32\drivers\etc\hosts



    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
    --- User ---
    [MBR] 4f296a3c0463f45a9444b47540b40911
    [BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
    Partition table:
    0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    +++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
    --- User ---
    [MBR] bfc15a8d640833ded61a0621cdcda871
    [BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    Finished : << RKreport[2]_S_02092013_02d1739.txt >>
    RKreport[1]_S_02092013_02d0920.txt ; RKreport[2]_S_02092013_02d1739.txt




    RKreport[3].txt:

    RogueKiller V8.5.0 _x64_ [Feb 9 2013] by Tigzy
    mail : tigzyRK<at>gmail<dot>com
    Feedback : RogueKiller - Geeks to Go Forums
    Website : Download RogueKiller (Official website)
    Blog : tigzy-RK

    Operating System : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
    Started in : Normal mode
    User : Robert [Admin rights]
    Mode : Remove -- Date : 02/09/2013 17:40:22
    | ARK || FAK || MBR |

    ¤¤¤ Bad processes : 2 ¤¤¤
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\DisplayFusion\AppHookx64_70547190-4ae9-43b8-953a-f8a0c797ac7d.dll -> UNLOADED
    [DLL] explorer.exe -- C:\Windows\explorer.exe : D:\Users\Robert\AppData\Roaming\cubby\cubbyext64.dll -> UNLOADED

    ¤¤¤ Registry Entries : 3 ¤¤¤
    [HJ SMENU] HKCU\[...]\Advanced : Start_TrackProgs (0) -> REPLACED (1)
    [HJ DESK] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED (0)
    [HJ DESK] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED (0)

    ¤¤¤ Particular Files / Folders: ¤¤¤

    ¤¤¤ Driver : [NOT LOADED] ¤¤¤

    ¤¤¤ HOSTS File: ¤¤¤
    --> C:\Windows\system32\drivers\etc\hosts



    ¤¤¤ MBR Check: ¤¤¤

    +++++ PhysicalDrive0: Hitachi HDS723020BLA642 +++++
    --- User ---
    [MBR] 4f296a3c0463f45a9444b47540b40911
    [BSP] ab24fe509dac9c607954340e69f49db4 : Windows 7/8 MBR Code
    Partition table:
    0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 1907727 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    +++++ PhysicalDrive1: Samsung SSD 840 PRO Series ATA Device +++++
    --- User ---
    [MBR] bfc15a8d640833ded61a0621cdcda871
    [BSP] 8ae3e0079353ece8d06f561fcdaf89b6 : Windows 7/8 MBR Code
    Partition table:
    0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 244196 Mo
    User = LL1 ... OK!
    User = LL2 ... OK!

    Finished : << RKreport[3]_D_02092013_02d1740.txt >>
    RKreport[1]_S_02092013_02d0920.txt ; RKreport[2]_S_02092013_02d1739.txt ; RKreport[3]_D_02092013_02d1740.txt
      My Computer


  4. Posts : 2,470
    Windows 7 Home Premium
       #14

    Looks as if you are good to go.

    Have a great day!
      My Computer


  5. Posts : 223
    Windows 7 Home Premium x64
    Thread Starter
       #15

    Thanks. I really appreciate the help. I just have one last question. ink files for my computer and my user folder were generated. I assume that's just the result of running one of those scans?
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #16

    .lnk files are shortcuts...

    Got the name of a couple of them?
      My Computer


  7. Posts : 223
    Windows 7 Home Premium x64
    Thread Starter
       #17

    Yeah, I know that they're shortcuts. They're just the standard one's that you would have. Actually, they're not shortcuts. they are for "My Computer" and my user folder, "Robert"
      My Computer


  8. Posts : 2,470
    Windows 7 Home Premium
       #18

    Not aware that the programs we ran would produce .lnk files for My Computer and your User folder.
      My Computer


  9. Posts : 223
    Windows 7 Home Premium x64
    Thread Starter
       #19

    Well as long as the virus is gone I don't care. Here's a picture of my desktop. It put them in the top right corner, but I moved them so that you could see better.

    Malware.Trace detected-capture2.jpg
      My Computer


  10. Posts : 2,470
    Windows 7 Home Premium
       #20

    Thanks for the image. It shows what you are talking about.

    If you do not want the icons to show on the Desktop, do the following:

    Right-click on the Desktop and select: Personalize

    In the prompt that appears, click on: Change Desktop Icons

    In the Desktop Icons area, you can check or uncheck the icons to show (or not) on the Desktop.

      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 01:40.
Find Us