I think I'm infected with a virus!

Money_Grabber13579

In that case all you need to do is put a space in all the links in the log i.e. something like www. XXXXX.co.uk

It won't show up as a link then and you can post the log.

Money_Grabber13579

Jas0n wrote: »

It was a full scan I ran, should I run it again just to make sure?

The log confirms it was a full scan, but after you've finished the superantispyware scan, maybe it would be a good idea to run it again.

aliEnRIK

Jas0n wrote: »

I'm running it now and yeah it's finding stuff, I'm trying to post the combofix log but it's saying

"Sorry as a new user you are not allowed to post with links. This is done to stop spammers clogging up the site. Please edit your message below to continue."

upload it to RAPIDSHARE and post the link to it

Money_Grabber13579

aliEnRIK wrote: »

upload it to RAPIDSHARE and post the link to it

They can't post links!:D

aliEnRIK

Money_Grabber13579 wrote: »

They can't post links!:D

!!!!!!.......:p

Jas0n_2

aliEnRIK wrote: »

upload it to and post the link to it

I managed it

rapidshare . com / files / 248542701 / log.txt.html

aliEnRIK

aliEnRIK wrote: »

upload it to RAPIDSHARE and post the link to it

sorry jason

upload to rapidshare and post the last part of the link (That 'should' work)

so
http://rapidshare.com/files/834589374535/combifix.txt
would become ~
files/834589374535/combifix.txt

aliEnRIK

Jas0n wrote: »

I managed it

rapidshare . com / files / 248542701 / log.txt.html

nice one jase

im goin through it now

Jas0n_2

SUPERAntiSpyware Scan Log
I've put them together, there's 2 logs here



Generated 06/25/2009 at 03:57 PM

Application Version : 4.26.1006

Core Rules Database Version : 3955
Trace Rules Database Version: 1897

Scan type : Quick Scan
Total Scan Time : 00:02:45

Memory items scanned : 380
Memory threats detected : 2
Registry items scanned : 274
Registry threats detected : 4
File items scanned : 2852
File threats detected : 9

Trojan.Unclassified/VCMGCD32
C:\WINDOWS\SYSTEM32\VCMGCD32.DLL
C:\WINDOWS\SYSTEM32\VCMGCD32.DLL

Trojan.Agent/Gen
C:\DOCUME~1\JASON\LOCALS~1\TEMP\WINNVVI.EXE
C:\DOCUME~1\JASON\LOCALS~1\TEMP\WINNVVI.EXE
C:\DOCUMENTS AND SETTINGS\JASON\LOCAL SETTINGS\TEMP\WINNVVI.EXE

Rootkit.Agent/Gen-Rustock
HKLM\System\ControlSet001\Services\amd64si
C:\WINDOWS\SYSTEM32\DRIVERS\AMD64SI.SYS
HKLM\System\ControlSet001\Enum\Root\LEGACY_amd64si
HKLM\System\CurrentControlSet\Services\amd64si
HKLM\System\CurrentControlSet\Enum\Root\LEGACY_amd64si

Adware.Tracking Cookie
C:\Documents and Settings\Jason\Cookies\jason@avgtechnologies.112.2o7[1].txt
C:\Documents and Settings\Jason\Cookies\jason@mmstat[2].txt
C:\Documents and Settings\Jason\Cookies\jason@doubleclick[1].txt

Trojan.MailDrop/Gen
C:\DOCUMENTS AND SETTINGS\JASON\LOCAL SETTINGS\TEMP\ALAFCN.EXE

Trojan.Gen/PackedAgent
C:\DOCUMENTS AND SETTINGS\JASON\LOCAL SETTINGS\TEMP\W470B8.EXE





SUPERAntiSpyware Scan Log


Generated 06/25/2009 at 04:33 PM

Application Version : 4.26.1006

Core Rules Database Version : 3955
Trace Rules Database Version: 1897

Scan type : Complete Scan
Total Scan Time : 00:06:38

Memory items scanned : 349
Memory threats detected : 2
Registry items scanned : 3158
Registry threats detected : 0
File items scanned : 7277
File threats detected : 7

Trojan.Unclassified/VCMGCD32
C:\WINDOWS\SYSTEM32\VCMGCD32.DLL
C:\WINDOWS\SYSTEM32\VCMGCD32.DLL
C:\SYSTEM VOLUME INFORMATION\_RESTORE{BD51A955-C178-472E-A872-0712038D27EC}\RP14\A0000529.DLL

Trojan.Agent/Gen
C:\DOCUME~1\JASON\LOCALS~1\TEMP\WINPKVKQW.EXE
C:\DOCUME~1\JASON\LOCALS~1\TEMP\WINPKVKQW.EXE
C:\DOCUMENTS AND SETTINGS\JASON\LOCAL SETTINGS\TEMP\WINPKVKQW.EXE

Trojan.Gen/PackedAgent
C:\DOCUMENTS AND SETTINGS\JASON\LOCAL SETTINGS\TEMP\W5BCFE.EXE

Trojan.MailDrop/Gen
C:\DOCUMENTS AND SETTINGS\JASON\LOCAL SETTINGS\TEMP\WININRYRP.EXE

Rootkit.Agent/Gen-Rustock
C:\SYSTEM VOLUME INFORMATION\_RESTORE{BD51A955-C178-472E-A872-0712038D27EC}\RP15\A0000572.SYS

Money_Grabber13579

And did you delete all that stuff as well? Those scans were fairly quick as well. Do you not have many files on your computer? There seems to be very few items being scanned.