Another Win32:BHO-KD Infection

[system]

There you go…

20/10/2007 16:57:00 1192895820 SYSTEM 120 Sign of “Win32:Renos-AF [trj]” has been found in “http://scanner.malware-scan.com/aswp/Install-YmV0dGVybXk-a2V5aW5fYW9fNDI1MV8xOTIyXzIzNTlfYW9fX2FvXzM5NThfMF8zNTY4X2FvXw-MQ.cab\unp50272185\setup.exe” file.
26/10/2007 00:53:27 1193356407 SYSTEM 2032 Sign of “Win32:Renos-AF [trj]” has been found in “http://scanner.malware-scan.com/aswp/Install-MnJhcGlkbHk-a2V5aW5fYW9fNDUxNF8yNTA2XzIzNThfYW9fX2FvXzM5NThfMF8zNTY5X2FvXw-MQ.cab\unp40352252\setup.exe” file.
26/10/2007 00:54:11 1193356451 SYSTEM 2032 Sign of “Win32:Renos-AF [trj]” has been found in “http://scanner.malware-scan.com/aswp/Install-MnJhcGlkbHk-a2V5aW5fYW9fNDUxNF8yNTA2XzIzNThfYW9fX2FvXzM5NThfMF8zNTY5X2FvXw-MQ.exe” file.
26/10/2007 00:54:12 1193356452 SYSTEM 2032 Sign of “Win32:Renos-AF [trj]” has been found in “http://scanner.malware-scan.com/aswp/Install-MnJhcGlkbHk-a2V5aW5fYW9fNDUxNF8yNTA2XzIzNThfYW9fX2FvXzM5NThfMF8zNTY5X2FvXw-MQ.exe” file.
26/10/2007 00:54:43 1193356483 SYSTEM 2032 Sign of “Win32:Renos-AF [trj]” has been found in “http://scanner.malware-scan.com/aswp/Install-MnJhcGlkbHk-a2V5aW5fYW9fNDUxNF8yNTA2XzIzNThfYW9fX2FvXzM5NThfMF8zNTY5X2FvXw-MQ.exe” file.
02/11/2007 17:17:11 1194023831 SYSTEM 2028 Sign of “Win32:Adware-gen [Adw]” has been found in “http://files-pl.starware.com/installs/links/recipes.exe\$INSTDIR\bin\$PLUGINSDIR\NSISdl.dll” file.
10/12/2007 10:35:55 1197282955 Dave Witcher 124 AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\WINDOWS\system32\Drivers\jdmaqxoi.dat (C:\WINDOWS\system32\Drivers\jdmaqxoi.dat) returning error, 00000005.
10/12/2007 10:35:55 1197282955 Dave Witcher 124 AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\DOCUME~1\DAVEWI~1\LOCALS~1\Temp\mlvtgmlv.dat (C:\DOCUME~1\DAVEWI~1\LOCALS~1\Temp\mlvtgmlv.dat) returning error, 00000005.
10/12/2007 10:35:55 1197282955 Dave Witcher 124 AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\DOCUME~1\DAVEWI~1\LOCALS~1\Temp\mlvtgmlv.dat (C:\DOCUME~1\DAVEWI~1\LOCALS~1\Temp\mlvtgmlv.dat) returning error, 00000005.
10/12/2007 10:35:55 1197282955 Dave Witcher 124 AAVM - scanning warning: x_AavmCheckFileDirectEx [UNI]: C:\WINDOWS\system32\drivers\jdmaqxoi.dat (C:\WINDOWS\system32\drivers\jdmaqxoi.dat) returning error, 00000005.
31/12/2007 19:43:48 1199130228 SYSTEM 2040 Sign of “Win32:BHO-KD [trj]” has been found in “C:\WINDOWS\SYSTEM32\HCGUJWCW.DLL[UPX]” file.
31/12/2007 19:45:25 1199130325 SYSTEM 2040 Sign of “Win32:BHO-KD [trj]” has been found in “C:\windows\system32\hcgujwcw.dll[UPX]” file.
02/01/2008 10:38:39 1199270319 SYSTEM 2040 Sign of “Win32:BHO-KD [trj]” has been found in “C:\windows\system32\hcgujwcw.dll[UPX]” file.
03/01/2008 12:08:33 1199362113 SYSTEM 168 Sign of “Win32:BHO-KD [trj]” has been found in “C:\WINDOWS\SYSTEM32\HCGUJWCW.DLL[UPX]” file.
03/01/2008 13:04:55 1199365495 Dave Witcher 1456 Sign of “Win32:BHO-KD [trj]” has been found in “c:\windows\system32\hcgujwcw.dll[UPX]” file.
03/01/2008 13:48:00 1199368080 SYSTEM 340 Sign of “Win32:BHO-KD [trj]” has been found in “C:\windows\system32\hcgujwcw.dll[UPX]” file.
03/01/2008 13:50:06 1199368206 SYSTEM 340 Sign of “Win32:Delf-GKK [trj]” has been found in “C:\WINDOWS\temp\nmmdwqvp.dll[Morphine][UPX]” file.
03/01/2008 14:07:07 1199369227 Dave Witcher 3004 Sign of “Win32:BHO-KD [trj]” has been found in “c:\windows\system32\hcgujwcw.dll[UPX]” file.