also @ TechSpot: Iran targeted by Flame malware in 'most complex' cyber-attack yet

TechSpot

Ewido log.

Discussion in 'Virus and Malware Removal' started by Kickass, Jul 17, 2006.

Thread Status:
Not open for further replies.

  1. Kickass Newcomer, in training

    Hi guys,
    I had the same problem, and here's my Ewido Report for everyone's benefit!
    This is my first post btw ;)

    ---------------------------------------------------------
    ewido anti-malware - Scan report
    ---------------------------------------------------------

    + Created on: 8:48:02 PM, 7/17/2006
    + Report-Checksum: C824D086

    + Scan result:

    HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\explorer\run\\kernel32.dll -> Trojan.Small : Cleaned with backup
    C:\WINDOWS\SYSTEM32\wingzn32.dll -> Trojan.Small : Cleaned with backup
    C:\WINDOWS\SYSTEM32\regperf.exe -> Downloader.Zlob.wg : Cleaned with backup
    C:\WINDOWS\SYSTEM32\vtuvtst.dll -> Adware.Virtumonde : Cleaned with backup
    C:\WINDOWS\SYSTEM32\ld101.tmp -> Downloader.Zlob.wg : Cleaned with backup
    C:\WINDOWS\SYSTEM32\1024 -> Trojan.Small : Cleaned with backup
    C:\WINDOWS\SYSTEM32\1024\ld57BB.tmp -> Trojan.Small : Cleaned with backup
    C:\WINDOWS\SYSTEM32\simpole.tlb -> Downloader.Zlob.wj : Cleaned with backup
    C:\WINDOWS\TEMP\firefox.exe -> Trojan.Pakes : Cleaned with backup
    C:\WINDOWS\TEMP\winF45.tmp.exe -> Downloader.Small.cvw : Cleaned with backup
    C:\Documents and Settings\Charles Chillout\Cookies\charles chillout@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned with backup
    C:\Documents and Settings\Charles Chillout\Cookies\charles chillout@advertising[1].txt -> TrackingCookie.Advertising : Cleaned with backup
    C:\Documents and Settings\Charles Chillout\Cookies\charles chillout@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned with backup
    C:\Documents and Settings\Charles Chillout\Cookies\charles chillout@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned with backup
    C:\Documents and Settings\Charles Chillout\Cookies\charles chillout@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned with backup
    C:\Documents and Settings\Charles Chillout\Cookies\charles chillout@questionmarket[2].txt -> TrackingCookie.Questionmarket : Cleaned with backup


    ::Report End


    Hope this helps. Thanks for YOUR help!

    Ewido Fixed the problem for me!
    I used SpyBlaster, Ad-Aware, Avast,,,nada, diggin that Ewido all of sudden!


    Charles
    Kickass, Jul 17, 2006
    #1

  2. howard_hopkinso Newcomer, in training

    Hello and welcome to Techspot.

    Obviously Ewido has removed quite a lot of crap from your system.

    However, that doesn`t necessarily mean your system is clean.

    Go and read this thread HERE.

    Post a HJT log as a .txt attachment into this thread and I`ll take a look at it for you.

    I have moved your post to it`s own thread. This will save any confusion.

    Regards Howard :wave: :wave:
    howard_hopkinso, Jul 17, 2006
    #2
Thread Status:
Not open for further replies.