XP Antivirus

[hunt3rshadow]

Ok so I know theres another thread about it but I don't whats the case with mine. Earlier I downloaded something and somehow something popped up with Antivirus XP. I didn't install it and then my background automatically changed to this: 

(I cant seem to upload pics rite now because it says network error. NOTE: My internet is seriously acting like *censored* right now)

Description:
It a box in the background that says adware detected. Install blah blah to get rid of it. ( Im pretty sure its the work of Antivirus XP)



Then when I'm on google and do a search, and click on any result, it redirects me to some other website, most likely a strange search engine.

I've scanned with Super(didn't find any trojans just adware etc.) and Im currently scanning with malwarebytes.

Super Log:

[hunt3rshadow]

Okay gog this dam virus is not letting me attach,upload,post or even search. This is my 7th time posting if by god this gets through then someone help me

[sodbuster2x]

I had same problem if you to sodbuster2x forum and do as they had me it possibly may work for you too.  Good luck

[Carbon Dudeoxide]

Start here.
http://www.computerhope.com/forum/index.php/topic,46313.0.html

[hunt3rshadow]

Carbon I would do those and I have the logs  BUT I can't seem to copy and paste or email or attach. Anybody know what I should do?

[Carbon Dudeoxide]

If you cannot upload the logs, attach the logs, copy and paste the logs, I would try doing this in Safe Mode With Networking.

More info here:
http://www.computerhope.com/issues/chsafe.htm
(Instead of choosing Safe Mode, choose the next option down)

Hopefully this will allow you to post the logs. 

[hunt3rshadow]

Thanks Ill try this now

[hunt3rshadow]

I still can't post my logs attach etc. with my logs even in safe mode with networking.

[kpac]

What exactly can't you do?

Can you view the forum in your browser? Or can you not go online at all?

[hunt3rshadow]

I can't post my logs or attach them. So how is anyone supppose to help me?

[evilfantasy]

Try uploading them online. http://savefile.com/ You don't have to sign up to use the service, just post the links to them back here.

[hunt3rshadow]

I tried. It just freezes when it says uploading. I've tried it twice. Should I just try to type the logs. I can proabbly type out the MBAM log but not the hijack or super log

[hunt3rshadow]

 Malwarebytes' Anti-Malware 1.17
Database version: 856

7:00:29 PM 8/21/2008
mbam-log-8-21-2008 (19-00-29).txt

Scan type: Full Scan (C:\|J:\|)
Objects scanned: 141750
Time elapsed: 1 hour(s), 46 minute(s), 53 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 1
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
C:\WINDOWS\system32\drivers\svchost.exe (Trojan.Agent) -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\run\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispBackgroundPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispScrSavPage (Hijack.DisplayProperties) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\drivers\svchost.exe (Trojan.Agent) -> Delete on reboot.
C:\Documents and Settings\Richard\Local Settings\Temp\.ttC.tmp (Trojan.Downloader) -> Quarantined and deleted successfully.

[hunt3rshadow]

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 08/21/2008 at 01:14 AM

Application Version : 4.15.1000

Core Rules Database Version : 3448
Trace Rules Database Version: 1440

Scan type       : Complete Scan
Total Scan Time : 02:34:34

Memory items scanned      : 431
Memory threats detected   : 0
Registry items scanned    : 6708
Registry threats detected : 0
File items scanned        : 102720
File threats detected     : 229

Adware.Tracking Cookie
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@insightexpressai[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@casalemedia[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@serving-sys[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@adserver[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@247realmedia[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@doubleclick[1].txt
C:\Documents and Settings\Richard\Cookies\richard@advertising[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@bluestreak[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@cgi-bin[6].txt
    C:\Documents and Settings\Richard\Cookies\richard@tribalfusion[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@revsci[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@2o7[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@specificclick[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@atdmt[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@clicksense[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@tradedoubler[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@toplist[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@pcstats[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@adcentriconline[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@adultfriendfinder[1].txt

BTW Im posting these logs in seperate posts cuz thats the only way they'll let me do it. Again I'm sorry about that. The Super log posts will be coming in the rest of the posts. Also ignore the adult content lol

[hunt3rshadow]

C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@kontera[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@dealtime[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@chitika[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@zedo[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@AdRotator[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@4[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@hornyjo[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][3].txt
    C:\Documents and Settings\Richard\Cookies\richard@freexxxpornosex[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@virus-detection-scanner[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@sex-superstore[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@gigxteen[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@14[3].txt
    C:\Documents and Settings\Richard\Cookies\richard@14[4].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@pcprivacytool[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@14[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@14[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@media6degrees[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@epochstats[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@sexxyclub[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@st[44].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@porngoto[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@screwingporn[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@naked-collegegirls[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@afrotits.*censored*-private[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@cgi-bin[9].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@list[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@gall85teen[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@*censored*-galleries[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@freesex99[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@st[33].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@*censored*-girls-sex.com[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@2steen[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@homegirl-sex[2].txt
    C:\Documents and Settings\Richard\Cookies\richard@fuckteenpussy[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@malepornxxx[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@stats[3].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@amateursex[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\richard@videospornolargos[1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][2].txt
    C:\Documents and Settings\Richard\Cookies\richard@youpornztube[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@cgi-bin[1].txt
    C:\Documents and Settings\Richard\Cookies\richard@sexpicsfree[2].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt
    C:\Documents and Settings\Richard\Cookies\[email protected][1].txt