Page 1 of 1

Microtrend scan brings me worms?

PostPosted: Tue Feb 01, 2005 5:31 am
by hue_jass
Hmm...... so im running Housecall from Microtrend and uh...... it says i have these viruses and they cant be deleted:

Image


but my computer is running perfectly fine.....and those files dont appear in system32 folder in Windows even after "SHOWING HIDDEN FILES" ... so Im guessing they are files that Micro$oft is uhh trying to hide????

~hue

PostPosted: Tue Feb 01, 2005 7:52 am
by liljim

PostPosted: Tue Feb 01, 2005 7:20 pm
by hue_jass
ALRIGHTY LILJIM

.... u want HJT log that looks clean you got it ^_^
thanks :)


Logfile of HijackThis v1.99.0
Scan saved at 1:18:35 PM, on 2/1/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Documents and Settings\scot\Desktop\hijack\HijackThis.exe
C:\WINDOWS\system32\wuauclt.exe

O4 - HKLM\..\Run: [Pop-Up Stopper] "C:\Documents and Settings\scot\Desktop\everything i need\Panicware\Pop-Up Stopper\dpps2.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exe
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004 ... scan53.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} (iTunesDetector Class) - http://ax.phobos.apple.com.edgesuite.ne ... tector.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe

PostPosted: Tue Feb 01, 2005 10:06 pm
by liljim
Now isnt that just mind boggling...The good news is yes, its clean and if they are indeed there, there not running.

Are you using any antivirus protection?You should consider downloading AVG and see if it finds anything.