Home » Spyware Protection » Hijacked Browser Analysis » Re: HijackThisLog Analysis - Nancy » 

Review Mcafee Scan Log:

9/4/2003 3:03:59 PM 

C:\WINXP\system32\wins\DLLHOST.EXE W32/Nachi.worm
C:\System Volume Information\_restore{51AA6DBF-81DD-4C9D-A65D-E26C6DD1D3D5}\RP138\A0034475.EXE W32/Nachi.worm

6/8/2004 11:02:21 AM

Move failed (Delete failed)  

C:\Documents and Settings\SGNLW\Local Settings\Temp\ps_install-mt.exe Adware-PurityScan
C:\WINXP\system32\wintsu.exe Adware-PurityScan
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m
C:\WINXP\system32\NAVSCAN32.exe W32/Sdbot.worm.gen.m

6/14/2004 2:57:41 PM

C:\Documents and Settings\SGNLW\Local Settings\Temp\VVSN_CLIC0404Inst.exe Adware-SaveNow
C:\WINXP\system32\wintsu.exe Adware-PurityScan
C:\Program Files\VVSN\URL1\SAVE-SYNCm-WHSE_sb.min.g2Inst.exe Adware-SaveNow
C:\Documents and Settings\SGNLW\Local Settings\Temp\B7C.WUT\WUSearch.cab\Search.exe Adware-SaveNow
6/14/2004 2:58:51 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET15.tmp Adware-SaveNow
6/14/2004 2:58:53 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET16.tmp Adware-SaveNow
6/14/2004 2:59:41 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET17.tmp Adware-WhenUSearch
6/14/2004 2:59:43 PM No Action Taken (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET16.tmp Adware-SaveNow
6/14/2004 2:59:45 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET18.tmp Adware-WhenUSearch
6/14/2004 2:59:47 PM No Action Taken (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET16.tmp Adware-SaveNow
6/14/2004 2:59:49 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET18.tmp Adware-WhenUSearch
6/14/2004 2:59:51 PM No Action Taken (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\SET16.tmp Adware-SaveNow
6/14/2004 2:59:52 PM Move failed (Delete failed)  HAGGLUNDS\SGNLW C:\Program Files\WhenUSearch\search.dll Adware-WhenUSearch
6/14/2004 3:51:14 PM Deleted  NT AUTHORITY\SYSTEM C:\System Volume Information\_restore{51AA6DBF-81DD-4C9D-A65D-E26C6DD1D3D5}\RP301\A0076874.exe W32/Sdbot.worm.gen.m

 


Mail this pageMail this page