That method didn’t work, but this looks like it is all here — if there is a Trojan, would there have been a virus warning on the boottime scan as there was on the regular scan? Because there wasn’t one, I don’t know if that means it is a clear scan?
CmdLine - quick
aswBoot.exe /A:“" /L:“English” /KBD:2
CmdLine end
CreateKbThread
new CKbBuffer
CKbBuffer::Init
CKbBuffer::Init end
NtCreateEvent(g_hStopEvent)
NtAllocateVirtualMemory - stack
NtGetContextThread - NtCurrentThread
NtCreateThread - KbThread
CreateKbThread end
NtInitializeRegistry
KbThread start
ReadRegistry
DATA=C:\Program Files\Alwil Software\Avast4\DATA
PROG=C:\Program Files\Alwil Software\Avast4
BUILD=1098
Microsoft Windows XP Service Pack 2
SystemRoot=C:\WINDOWS
TEMP=C:\WINDOWS\TEMP
TMP=C:\WINDOWS\TEMP
ReadRegistry end
CreateTemp
CreateTemp end
cmnbInit
SetFolders
SetFolders end
aswEnginDllMain(DLL_PROCESS_ATTACH)
InitLog
InitLog end
CmdLine - full
aswBoot.exe /A:"” /L:“English” /KBD:2
CmdLine end
Unschedule
61,00,75,00,74,00,6F,00,63,00,68,00,65,00,63,00,
6B,00,20,00,61,00,75,00,74,00,6F,00,63,00,68,00,
6B,00,20,00,2A,00,00,00,73,00,6D,00,72,00,67,00,
64,00,66,00,20,00,43,00,3A,00,5C,00,50,00,72,00,
6F,00,67,00,72,00,61,00,6D,00,20,00,46,00,69,00,
6C,00,65,00,73,00,5C,00,69,00,6F,00,6C,00,6F,00,
5C,00,53,00,79,00,73,00,74,00,65,00,6D,00,20,00,
4D,00,65,00,63,00,68,00,61,00,6E,00,69,00,63,00,
20,00,50,00,72,00,6F,00,66,00,65,00,73,00,73,00,
69,00,6F,00,6E,00,61,00,6C,00,20,00,36,00,5C,00,
00,00,61,00,73,00,77,00,42,00,6F,00,6F,00,74,00,
2E,00,65,00,78,00,65,00,20,00,2F,00,41,00,3A,00,
22,00,2A,00,22,00,20,00,2F,00,4C,00,3A,00,22,00,
45,00,6E,00,67,00,6C,00,69,00,73,00,68,00,22,00,
20,00,2F,00,4B,00,42,00,44,00,3A,00,32,00,00,00,
00,00,
Unschedule end
LoadResources
LoadResources end
InitReport
InitReport end
NtSetEvent(g_hInitEvent) - 1
FreeMemory: 433369088
aswintegInitialize
InitKeyboard
g_dwKbdNum: 2
s_dwKbdClassCnt: 2
InitKeyboard end
NtSetEvent(g_hInitEvent) - 2
GetKey
avworkInitialize
FreeMemory: 395882496
CKbBuffer::Wait
CKbBuffer::Get
CKbBuffer::Get end
CKbBuffer::Wait end
ProcessArea
avfilesScanReal(MBR0)
avfilesScanReal C:
avfilesScanReal E:
avworkClose
aswintegClose
TerminateKbThread
GetKey end
CloseKeyboard
CloseKeyboard end
KbThread stop
CKbBuffer::~CKbBuffer
CKbBuffer::~CKbBuffer end
aswEnginDllMain(DLL_PROCESS_DETACH)
cmnbFree
FreeResources
CloseReport
CloseLog
OK, David, here is the long list ! Thanks for an answer so quick it beat my question by a few seconds! ![]()
Your looking at the wrong file, it is aswboot.txt I gave the path to it in my post, C:\Program Files\Alwil Software\Avast4\DATA\Report\aswboot.txt, that one will give info on what was scanned.
OK,how’s this? Sorry for the mess; so many new things for me!!! Thanks to you both for so much help!!! Is there anything else I need to do?
03/15/2008 10:22
Scan of all local drives
Number of searched folders: 3159
Number of tested files: 40405
Number of infected files: 0
I don’t think so ![]()
You’re clean and answered your own question.
Your welcome, no I don’t think you have anything more to do.
Uninstall anything that says Sun Java, Java JRE, or similar.[b]I didn't have any matches, but uninstalled J25E Runtime Environment 5 update 10, 11, and 9, and I guess I should uninstall Java (TM) SE Runtime Environment 6 update 1, but I will wait for a confirmation before doing it, since I'm not sure what I'm supposed to be doing here, just removing outdated updates, or certain versions, or something else?[/b]
Remove all Sun Java old versions, without exception. Keep only the latest one.
Also don’t forget to check for and remove the folders after the uninstall, they may not have been removed. Just follow the instructions. If there is an option to install the google toolbar and you don’t want it, uncheck it before you install the java.
All right, I did that, and I just need to know if there is anything that Search came up with that needs to be deleted. If it works, I am attaching the screenshot —
Files aren’t from Java specifically… (ok, Prefetch ones could be deleted…).
The files into C:\Program files\Java\ are the important ones.
It is done! I have a “why?” question to finish off this topic — Why did I need to reboot before and again after installing the new updated Java?
Reboot after uninstall, will clear the memory and sometimes a componnt will only be removed on reboot. Windows should warn you if this is the case.
Reboot after install, components will load to the correct place if needed.
All right, then, everything should be in it’s proper place and with plenty of elbow room since the house cleaning was done! You have been very helpful and patient, guys — thank you!!!