O23 - Service: Capture Device Service - InterVideo Inc.
O23 - Service: avast! Web Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Mail Scanner - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O2 - BHO: AcroIEHelperStub - C:\Windows\system32\browseui.dll R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Here's my Hijack this file now after the Trojans have been removed (if they are really removed):Ĭ:\Program Files\Windows Defender\MSASCui.exeĬ:\Program Files\LeapFrog\LeapFrog Connect\Monitor.exeĬ:\Program Files\Alwil Software\Avast5\AvastUI.exeĬ:\Program Files\SharpSoft\Vista Battery Saver\VistaBatterySaver.exeĬ:\Program Files\Stardock\Object Desktop\ObjectDock\ObjectDock.exeĬ:\Program Files\Windows Media Player\wmpnscfg.exeĬ:\Program Files\Mozilla Firefox\firefox.exeĬ:\Program Files\Mozilla Firefox\plugin-container.exe I've got:ĭell Wireless WLAN Card Wireless Network Tray Applet When I open the icon (Vista), the programs don't look suspicious. The only thing that's happening now that is out of the ordinary is I'm getting a popup in my toolbar that says there are some blocked startup programs. I had MBAM remove those trojans and on reboot, had it do another scan.
I then downloaded and ran MBAM and it found Trojan.Alureon and Trojan.FakeAlert. I rebooted and deleted the files from the chest.
It looks like the virus kept trying to restart itself because I was getting so many alerts until I finally just shut down. Hoping you can give me some insight on if I'm clean now.Īvast sent me about 20 alerts of eapp32hst.dll being found and moved to the chest.