ClamWin Free Antivirus :: View topic

Posted: Mon Nov 27, 2006 2:17 am

I hope somebody here can help me!

I downloaded ClamWin and let it run a scan w/the Quarantine option selected. ClamWin found a number of files suspected to viruses and quarantined these. On a reboot my computer is unable to run the majority of .exe files. I'm on my work laptop right now but my home machine now is stuck with a "Open With" window for the file rundll32.exe. This is also happening with other .exe files such as internet explorer, firefox, even ClamWin will no longer open!

I refereneced the quarantine log and restored the files that were listed. Although there were more files in the quarantine directory that is not listed in the log file.

Going back to the rundll32.exe file, if I choose cancel (as in not choosing any program to OPEN this file type) I'm led to another windows prompt titled "1" that says Windows cannot find '1'. Make sure you typed the name correctly, and then try again. To search for a file, click the Start button, and then click Search.. As I mentioned there were more files quarantined then what was listed below but the closest thing I can find to a '1' is the file "6.exe". I guess with files there's no such thing as close but I never get this message before.

Again my computer is basically rendered useless since I cannot open any browser or outlook or most .exe files. Oddly enough AOL will open up yet I don't have an AOL account even!!!

Somebody please help!!

Code:

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089517.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089517.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089530.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089530.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089531.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089531.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089532.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089532.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089543.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089543.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089556.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089556.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089557.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089557.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089558.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089558.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089568.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089568.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089580.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089580.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089581.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089581.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089582.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089582.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089592.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089592.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089603.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089603.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089604.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089604.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089605.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089605.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089618.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089618.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089631.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089631.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089632.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089632.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089633.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089633.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089646.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089646.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089659.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089659.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089660.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089660.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089661.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089661.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089672.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089672.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089685.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089685.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089686.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089686.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089687.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0089687.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090672.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090672.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090685.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090685.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090686.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090686.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090687.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090687.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090689.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090689.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090698.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090698.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090712.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090712.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090713.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090713.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090714.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090714.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090724.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090724.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090737.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090737.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090738.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090738.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090739.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090739.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090749.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090749.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090760.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090760.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090761.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090761.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090762.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090762.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090764.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090764.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090777.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090777.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090788.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090788.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090789.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090789.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090790.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090790.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090802.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090802.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090814.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090814.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090815.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090815.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090818.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090818.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090829.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090829.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090844.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090844.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090845.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090845.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090856.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090856.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090869.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090869.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090870.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0090870.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091542.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091542.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091554.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091554.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091566.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091566.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091567.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091567.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091569.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091569.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091579.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091579.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091591.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091591.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091592.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091592.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091605.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091605.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091618.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091618.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091619.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0091619.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092605.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092605.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092618.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092618.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092619.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092619.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092628.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092628.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092643.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092643.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092656.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092656.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092657.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0092657.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093646.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093646.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093658.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093658.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093660.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093660.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093686.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093686.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093703.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093703.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093714.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093714.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093716.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093716.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0093754.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0093754.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0094744.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0094744.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095755.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0095755.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095759.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0095759.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095778.dll: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0095778.dll'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095788.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0095788.exe'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0096776.DLL: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0096776.DLL'

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0097786.exe: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0097786.exe'

ERROR: Can't open file C:\hiberfil.sys

D:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP262\A0118729.com: moved to 'C:\Documents and Settings\All Users\.clamwin\quarantine\A0118729.com'

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiSP0000.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\INDEX.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiP10000.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiCL0001.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiP20000.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiPT0000.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiST0000.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiSL0001.000

ERROR: Can't open file D:\System Volume Information\catalog.wci\CiVP0000.000

ERROR: Can't open file D:\pagefile.sys

ume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089517.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089530.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089531.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089532.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089543.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089556.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089557.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089558.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089568.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089580.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089581.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089582.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089592.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089603.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089604.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089605.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089618.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089631.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089632.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089633.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089646.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089659.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089660.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089661.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089672.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089685.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089686.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0089687.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090672.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090685.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090686.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090687.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090689.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090698.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090712.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090713.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090714.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090724.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090737.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090738.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090739.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090749.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090760.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090761.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090762.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090764.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090777.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090788.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090789.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090790.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090802.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090814.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090815.exe: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090818.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090829.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090844.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090845.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090856.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090869.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0090870.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091542.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091554.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091566.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091567.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091569.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091579.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091591.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091592.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091605.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091618.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0091619.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092605.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092618.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092619.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092628.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092643.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092656.exe: Trojan.QQRob-26 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0092657.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093646.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093658.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093660.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093686.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093703.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093714.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP257\A0093716.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0093754.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0094744.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095755.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095759.exe: Trojan.QQPass-53 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095778.dll: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0095788.exe: Trojan.Lineage-129 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0096776.DLL: Trojan.Lineage-138 FOUND

C:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP258\A0097786.exe: Trojan.Lineage-129 FOUND

D:\System Volume Information\_restoreB6387AD4-48E1-4511-AA40-A245D4C401AE\RP262\A0118729.com: Trojan.Spy.WOW-20 FOUND

-- summary --

Known viruses: 78632

Engine version: 0.88.4

Scanned directories: 6148

Scanned files: 78343

Infected files: 453

Not moved: 7

Data scanned: 30497.05 MB

Time: 20889.344 sec (348 m 9 s)

--------------------------------------

Completed

--------------------------------------

Posted: Mon Nov 27, 2006 3:44 am

bump. Anybody please?!

Posted: Mon Nov 27, 2006 11:49 am

why you should have windows unusable none of these process are needed by win32, try to disable system restore (I mean if you can at least do it)

Posted: Mon Nov 27, 2006 12:58 pm

I cannot even open system properties in the control panel to access system restore. Like I said, there were a few other files quarantined but they are not mentioned in the log file. Can you tell me which file would cause the system to prompt me what file to use to open another program and then perhaps I can copy it back in? Or at least in general what the fix can be?!

I copied rundll32.exe back into system32 folder and that didn't solve anything. This really sucks.

Posted: Mon Nov 27, 2006 1:17 pm

Ok, I just went to open Outlook Express (which would not open before either) and IT opened up, along with AIM all on its own. Now just a few minutes ago I went to try to open up AIM by itself and got the "Open With" dialog. This leads me to believe it can hopefully be a quick fix to be able to get at least IE or firefox going. I hope someone can help.

Posted: Thu Nov 30, 2006 7:36 pm

1.exe and 6.exe are either viruses or spyware, from what I remember.

You try and run msconfig and see what is trying to load at startup.

If that doesn't work, what you should do is look in the registry editor.

Start-Run, Regedit

Then drill down to the following locations:

hkey-current user-software-microsoft-windows-current version-run
and look on the right and see what is there.

hkey-local-machine-software-microsoft-windows-current version-run
and look on the right and see what is there.

let us know what you find in the registry, or in msconfig.

good luck!

Posted: Thu Nov 30, 2006 10:52 pm

Sounds to me like you had/have a serious infestation, but as Sherpya says, the quarantined files don't appear to be important to normal Windows operations. Looks like you have two hard drives. Try all previous suggestions. If nothing works, I'd try a Windows reinstall (if possible), then a scan/removal by another antivirus program (if possible) or an online scan/removal by an antivirus vendor (if possible). I would start with drive D.

Regards,