hiLogfile of HijackThis v1.99.1
Scan saved at 11:52:49 PM, on 9/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\Xcopy9 2.0.2.0(1).rar.bac_a02080=>(Quarantine-4)=>Setup.exe
Infected with: Backdoor.RBot.EOG
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\Xcopy9 2.0.2.0(1).rar.bac_a02080=>(Quarantine-4)=>Setup.exe
Deleted
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\Xcopy9 2.0.2.0(1).rar.bac_a02080=>(Quarantine-4)
Updated
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\Xcopy9 2.0.2.0(1).rar.bac_a02080
Update failed
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\XCopy9 v2.0.2.0.rar.bac_a02080=>(Quarantine-4)=>Setup.exe
Infected with: Backdoor.RBot.EOG
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\XCopy9 v2.0.2.0.rar.bac_a02080=>(Quarantine-4)=>Setup.exe
Deleted
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\XCopy9 v2.0.2.0.rar.bac_a02080=>(Quarantine-4)
Updated
C:\Documents and Settings\Administrator\.housecall6.6\Quarantine\XCopy9 v2.0.2.0.rar.bac_a02080
Update failed
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Y1SNED0X\sp2-adtegrity-728[1].swf=>[SWF command]
Infected with: Trojan.SwfDL.A
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Y1SNED0X\sp2-adtegrity-728[1].swf=>[SWF command]
Deleted
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\Y1SNED0X\sp2-adtegrity-728[1].swf
Update failed
looks like any probs were quarantined by TREND MICRO: HOUSE CALL
PS is KILL BOX infected or just showing up as a hijacker?
-Do you believe you own your computer and shouldn't be told what you can run and do? Then say *NO* to Microsoft Vista!
-Since half the questions here involve media problems, here ya go: Only use Verbatim or Taiyo-Yuden discs (get your TYs from Rima.com, not Supermediastore or meritline). Forget the rest, no matter what "brand" they sell under. Always burn at 4x speed regardless of the speed rating of this discs or your drive. If you have burn problems with these then you have to update your drive's firmware. For double-layer discs, only use Verbatim DVD+R DL and burn them at 2.4x speed.
Hope everything's back to normal. Looks like you got all the trojans but keep an eye on your system because once a system is compromised, it's never totally trustworthy. Maybe I'm missing something but I don't see killbox.exe running, but it's a legit program that terminates locked processes (like trojans often do to protect themselves). I don't know what "update failed" means and BD doesn't even say on their site. Just let HijackThis! delete the dm.screensavers.com item, but be sure to uninstall any screensavers you got from them.
I also meant to say that, unless you subscribe to Rhapsody, delete anything by Real (as in RealNetworks, RealPlayer, RealJukebox). These guys are the founders of spyware, and their products are still just that. Uninstalling any Real products via Add/Remove Programs and then deleting the O16 key will take care of it.
-Do you believe you own your computer and shouldn't be told what you can run and do? Then say *NO* to Microsoft Vista!
-Since half the questions here involve media problems, here ya go: Only use Verbatim or Taiyo-Yuden discs (get your TYs from Rima.com, not Supermediastore or meritline). Forget the rest, no matter what "brand" they sell under. Always burn at 4x speed regardless of the speed rating of this discs or your drive. If you have burn problems with these then you have to update your drive's firmware. For double-layer discs, only use Verbatim DVD+R DL and burn them at 2.4x speed.
thanks 4 the heads-up. i'll get it handled. "real-anything" is also right behind it.
the kill box msg. must have been from a diff scan, i've noticed some progs don't like it, while others ignore it.
i doubt it a problem.
