Malware and virus still on my computer

morpho · Oct 4, 2006

Hi, first of all thank you for a great forum. I was able to remove/fix a lot of problems (I think) by following the superb guide at http://forums.majorgeeks.com/showthread.php?t=35407

Having gone through all that, I still got the message from Panda Activescan that there was spyware, virus and potenially unwanted tools on my computers. I would really appreciate if you could take a look at my logs and tell my what I should do next.

My system is
Computer:
Operating System Microsoft Windows XP Professional
OS Service Pack Service Pack 2
Internet Explorer 6.0.2900.2180

Motherboard:
CPU Type Unknown, 2200 MHz (11 x 200)
Motherboard Name Unknown
Motherboard Chipset nVIDIA nForce3-S, AMD Hammer
System Memory 1024 MB (DDR SDRAM)
BIOS Type Award Modular (08/03/04)
Communication Port Communications Port (COM1)
Communication Port Communications Port (COM2)
Communication Port ECP Printer Port (LPT1)

Display:
Video Adapter RADEON 9700 PRO - Secondary (128 MB)
Video Adapter RADEON 9700 PRO (128 MB)
3D Accelerator ATI Radeon 9700 Pro (R300)
Monitor Plug and Play Monitor [NoDB] (PW7054500387)

Multimedia:
Audio Adapter nVIDIA MCP2 - Audio Codec Interface

morpho · Oct 4, 2006

Here are the rest of the logs

chaslang · Oct 5, 2006

Welcome to Majorgeeks!

You don't have too many issues with malware to fix.

First install the current version of Sun Java from: Sun Java Runtime Environment

Then uninstall the below old versions of software:
J2SE Runtime Environment 5.0 Update 3
J2SE Runtime Environment 5.0 Update 6
Java 2 Runtime Environment Standard Edition v1.3.1_04
Java 2 Runtime Environment, SE v1.4.2_06

Consider uninstall Limewire. Many versions came bundled with malware especially the older versions. You seem to have two versions of Limewire installed.
LimeWire 4.10.9
LimeWire

Use Windows Explorer to delete:
D:\Downloads\kazaa <--- the whole folder
D:\Limewire\tja\[new release] pfconfig 47.zip
c:\program files\common files\Totem Shared <--- the whole folder
c:\program files\IntBar <--- the whole folder
C:\Documents and Settings\Marius\Local Settings\Temporary Internet Files\Content.IE5\0L6BGPQ3\rundlg32[1].chm
C:\Documents and Settings\Marius\Local Settings\Temporary Internet Files\Content.IE5\0L6BGPQ3\tbd1[1].htm
C:\Documents and Settings\Marius\Local Settings\Temporary Internet Files\Content.IE5\8XYNCDER\rundlg32[1].exe
C:\Documents and Settings\old\Local Settings\Temp\p2psetup.exe

morpho · Oct 6, 2006

Thank you, all done.

I must say, I am truly amazed at this level of service. Hard to grasp that you guys are using your own time and expertise to help us...and it's free. Wow.

Have a great weekend chaslang and thanks so much for looking into my case

chaslang · Oct 7, 2006

You're welcome.

If you are not having any other malware problems, you should work thru the below link:

How to Protect yourself from malware!

And you have a nice weekend too!

Log in or Sign up

Malware and virus still on my computer

morpho Private E-2

Attached Files:

bdscan.txt

Activescan.txt

runkeys.txt

morpho Private E-2

Attached Files:

newfiles.txt

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

morpho Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member