Reply to thread

Message

<blockquote data-quote="debdon" data-source="post: 118777" data-attributes="member: 7715">ESETSmartInstaller@High as CAB hook log:OnlineScanner.ocx - registred OK# version=8# iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339)# OnlineScanner.ocx=1.0.0.6920# api_version=3.0.2# EOSSerial=410ff6ae77085a42bc3ff96cf9466d3f# engine=13739# end=finished# remove_checked=false# archives_checked=false# unwanted_checked=true# unsafe_checked=true# antistealth_checked=true# utc_time=2013-05-02 01:37:24# local_time=2013-05-02 02:37:24 (+0000, GMT Daylight Time)# country=&quot;United Kingdom&quot;# lang=1033# osver=5.1.2600 NT Service Pack 2# compatibility_mode=6143 16777215 0 0 0 0 0 0# scanned=92884# found=9# cleaned=0# scan_time=2557sh=323FABC0B4B375EFD17102FF1C128D04B681B9D7 ft=1 fh=88fbdd4afbf7156f vn=&quot;a variant of Win32/Injector.AESS trojan&quot; ac=I fn=&quot;C:\Qoobox\Quarantine\C\WINDOWS\Installer\{165BD854-2BF1-B6A8-2B1D-EE950AA8DFF3}\syshost.exe.vir&quot;sh=09D50268FDB8110DD4F39B2373AFA150BDD0E60F ft=1 fh=c29d844616a0d1ed vn=&quot;a variant of Win32/Kryptik.AMWD trojan&quot; ac=I fn=&quot;C:\System Volume Information\_restore{2FE390B6-FB31-48E2-8D14-5A0FEEDEF327}\RP1124\A0111813.exe&quot;sh=EE93D10FB203FE72C629B8318A246F69233DF343 ft=1 fh=c71c0011e92e5206 vn=&quot;Win32/Boaxxe.G trojan&quot; ac=I fn=&quot;C:\System Volume Information\_restore{2FE390B6-FB31-48E2-8D14-5A0FEEDEF327}\RP1139\A0113681.old&quot;sh=323FABC0B4B375EFD17102FF1C128D04B681B9D7 ft=1 fh=88fbdd4afbf7156f vn=&quot;a variant of Win32/Injector.AESS trojan&quot; ac=I fn=&quot;C:\System Volume Information\_restore{2FE390B6-FB31-48E2-8D14-5A0FEEDEF327}\RP1145\A0121213.exe&quot;sh=C6D863CA13669C95F145173D4566FDB97018D3DA ft=1 fh=64bf97dbf0560e68 vn=&quot;Win32/Boaxxe.G trojan&quot; ac=I fn=&quot;C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\7276495.exe&quot;sh=301DEA79D6D75D889F815B0CA6206398C4953B27 ft=1 fh=e3653f4ff856a297 vn=&quot;Win32/LockScreen.APR trojan&quot; ac=I fn=&quot;C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\vhjaopmspkeasxcxioaj.exe&quot;sh=301DEA79D6D75D889F815B0CA6206398C4953B27 ft=1 fh=e3653f4ff856a297 vn=&quot;Win32/LockScreen.APR trojan&quot; ac=I fn=&quot;C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\Application Data\skype.dat&quot;sh=09C18499EFB53D9FF857C38443A42EC0B563D1EC ft=1 fh=18bad95da1dee8c8 vn=&quot;a variant of Win32/Boaxxe.P.Gen trojan&quot; ac=I fn=&quot;C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\Local Settings\Application Data\Yahoo\nlqvmaix.dll&quot;sh=67DA9F91803F43F31DBE0160216A923E1CA1A249 ft=1 fh=e5e6027f30617ee0 vn=&quot;a variant of Win32/Rootkit.Kryptik.TW trojan&quot; ac=I fn=&quot;C:\_OTL\MovedFiles\04262013_105954\C_WINDOWS\system32\drivers\e48c6df33eed4299.sys&quot;</blockquote>

[QUOTE="debdon, post: 118777, member: 7715"] ESETSmartInstaller@High as CAB hook log: OnlineScanner.ocx - registred OK # version=8 # iexplore.exe=8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) # OnlineScanner.ocx=1.0.0.6920 # api_version=3.0.2 # EOSSerial=410ff6ae77085a42bc3ff96cf9466d3f # engine=13739 # end=finished # remove_checked=false # archives_checked=false # unwanted_checked=true # unsafe_checked=true # antistealth_checked=true # utc_time=2013-05-02 01:37:24 # local_time=2013-05-02 02:37:24 (+0000, GMT Daylight Time) # country="United Kingdom" # lang=1033 # osver=5.1.2600 NT Service Pack 2 # compatibility_mode=6143 16777215 0 0 0 0 0 0 # scanned=92884 # found=9 # cleaned=0 # scan_time=2557 sh=323FABC0B4B375EFD17102FF1C128D04B681B9D7 ft=1 fh=88fbdd4afbf7156f vn="a variant of Win32/Injector.AESS trojan" ac=I fn="C:\Qoobox\Quarantine\C\WINDOWS\Installer\{165BD854-2BF1-B6A8-2B1D-EE950AA8DFF3}\syshost.exe.vir" sh=09D50268FDB8110DD4F39B2373AFA150BDD0E60F ft=1 fh=c29d844616a0d1ed vn="a variant of Win32/Kryptik.AMWD trojan" ac=I fn="C:\System Volume Information\_restore{2FE390B6-FB31-48E2-8D14-5A0FEEDEF327}\RP1124\A0111813.exe" sh=EE93D10FB203FE72C629B8318A246F69233DF343 ft=1 fh=c71c0011e92e5206 vn="Win32/Boaxxe.G trojan" ac=I fn="C:\System Volume Information\_restore{2FE390B6-FB31-48E2-8D14-5A0FEEDEF327}\RP1139\A0113681.old" sh=323FABC0B4B375EFD17102FF1C128D04B681B9D7 ft=1 fh=88fbdd4afbf7156f vn="a variant of Win32/Injector.AESS trojan" ac=I fn="C:\System Volume Information\_restore{2FE390B6-FB31-48E2-8D14-5A0FEEDEF327}\RP1145\A0121213.exe" sh=C6D863CA13669C95F145173D4566FDB97018D3DA ft=1 fh=64bf97dbf0560e68 vn="Win32/Boaxxe.G trojan" ac=I fn="C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\7276495.exe" sh=301DEA79D6D75D889F815B0CA6206398C4953B27 ft=1 fh=e3653f4ff856a297 vn="Win32/LockScreen.APR trojan" ac=I fn="C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\vhjaopmspkeasxcxioaj.exe" sh=301DEA79D6D75D889F815B0CA6206398C4953B27 ft=1 fh=e3653f4ff856a297 vn="Win32/LockScreen.APR trojan" ac=I fn="C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\Application Data\skype.dat" sh=09C18499EFB53D9FF857C38443A42EC0B563D1EC ft=1 fh=18bad95da1dee8c8 vn="a variant of Win32/Boaxxe.P.Gen trojan" ac=I fn="C:\_OTL\MovedFiles\04262013_105954\C_Documents and Settings\Donnie\Local Settings\Application Data\Yahoo\nlqvmaix.dll" sh=67DA9F91803F43F31DBE0160216A923E1CA1A249 ft=1 fh=e5e6027f30617ee0 vn="a variant of Win32/Rootkit.Kryptik.TW trojan" ac=I fn="C:\_OTL\MovedFiles\04262013_105954\C_WINDOWS\system32\drivers\e48c6df33eed4299.sys" [/QUOTE]

Verification