braviax.exe--Something's gone wrong again

Viruses and worms
41

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
Note empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“avast!”=“C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe” [2007-12-04 14:00 79224]
“CnxDslTaskBar”=“C:\Program Files\Trust\CnxDslTb.exe” [2003-05-28 18:52 397312]
“D-Link Wireless G WUA-1340”=“C:\Program Files\D-Link\Wireless G WUA-1340\AirGCFG.exe” [2005-12-15 12:19 2715648]
“ANIWZCS2Service”=“C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe” [2006-06-29 17:34 49152]
“LogitechCommunicationsManager”=“C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe” [2007-10-25 16:33 563984]
“LogitechQuickCamRibbon”=“C:\Program Files\Logitech\QuickCam\Quickcam.exe” [2007-10-25 16:37 2178832]
“ZoneAlarm Client”=“C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe” [2007-11-14 16:05 919016]
“D-Link AirPlus G”=“C:\Program Files\D-Link\AirPlus G\AirGCFG.exe” [2006-11-17 16:54 1552384]
“THGuard”=“C:\Program Files\TrojanHunter 3.8\THGuard.exe” [2004-01-26 01:17 1067520]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office10\OSA.EXE [2001-02-13 01:01:04 83360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
“Veoh”=“C:\Program Files\Veoh Networks\Veoh\VeohClient.exe” /VeohHide

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
“QuickTime Task”=“C:\Program Files\QuickTime\qttask.exe” -atboottime
“WinampAgent”=C:\Program Files\Winamp\winampa.exe
“PWRISOVM.EXE”=C:\Program Files\PowerISO\PWRISOVM.EXE
“Registry Crawler”=C:\PROGRA~1\RCrawler\RCrawler.exe -TRAYONLY
“NBKeyScan”=“C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe”
“NeroFilterCheck”=C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
“iTunesHelper”=“C:\Program Files\iTunes\iTunesHelper.exe”

R3 CnxTgN;TRUST 215A SPEEDLINK ADSL PCI WEB MODEM WAN Adapter Driver;C:\WINDOWS\system32\DRIVERS\CnxTgN.sys [2003-05-28 18:52]
R3 CnxTgP;TRUST 215A SPEEDLINK ADSL PCI WEB MODEM WAN Adapter Filter Driver;C:\WINDOWS\system32\DRIVERS\CnxTgP.sys [2003-05-28 18:52]
R3 CnxTgR;TRUST 215A SPEEDLINK ADSL PCI WEB MODEM Interface Device Driver;C:\WINDOWS\system32\DRIVERS\CnxTgR.sys [2003-05-28 18:52]

.

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-21 21:48:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

.

42

OK you now have a legitimate boot

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\WINDOWS\system32\basekwgb32.dll

.
((((((((((((((((((((((((( Files Created from 2008-01-21 to 2008-02-21 )))))))))))))))))))))))))))))))

Are you still getting the warnings now ?

43

no more warnings,
hope that does it
thanks very much for your help and patience

44

No problems, I was learning as well sUBs has a variant of that file so he does not require it Thankee

Now the best part of the day ----- Your log now appears clean :thumbsup:

Double click OTMoveIt once again and you should see a CleanUp! button, press that button, you may get prompted by your firewall that OTMoveIt wants to contact the internet, allow this, a cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will delete all the tools you have downloaded plus itself

Now to get you off to a good start we will re-set your restore points so that all the bad stuff is gone for good. Then if you need to restore at some stage you will be clean. There are several ways to reset your your restore point but this is my method:

  1. Select Start > All Programs > Accessories > System tools > System Restore.
  2. On the dialogue box that appears select Create a Restore Point
  3. Click NEXT
  4. Enter a name e.g. Clean
  5. Click CREATE

You now have a clean restore point, to get rid of the bad ones:

  1. Select Start > All Programs > Accessories > System tools > Disk Cleanup.
  2. In the Drop down box that appears select your main drive e.g. C
  3. Click OK
  4. The System will do some calculation and the display a dialogue box with TABS
  5. Select the More Options Tab.
  6. At the bottom will be a system restore box with a CLEANUP button click this
  7. Accept the Warning and select OK again, the program will close and you are done

Now that you are clean, to help protect your computer in the future I recommend that you get the following free program:
[*]SpywareBlaster to help prevent spyware from installing in the first place.
It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To keep your operating system up to date visit
[*]Microsoft Windows Update

To learn more about how to protect yourself while on the internet read this article by Tony Klien: So how did I get infected in the first place?

Keep safe :wave:

If you right click my computer and select properties
Then select the advanced tab
Remove the tick from the time to display list of operating systems that will remove the quick flash at start