Possible exploits

Viruses and worms
21

OK,

Re-run OTL.exe.

[*]Copy and paste the following text written inside of the quote box into the Custom Scans/Fixes box.



:OTL
O4 - HKU\S-1-5-21-1260953176-3201969857-2580422920-1001..\Run: [cdloader] C:\Users\PatricK\AppData\Roaming\mjusbsp\cdloader2.exe (magicJack L.P.)

:files
C:\Users\PatricK\Desktop\magicJack.lnk

:commands
[emptytemp]

[*]Then click the Run Fix button at the top.
[*]Let the program run unhindered; it will reboot the system when it is done and open notepad with logreport. Attach here that logreport.

22

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-1260953176-3201969857-2580422920-1001\Software\Microsoft\Windows\CurrentVersion\Run\cdloader deleted successfully.
C:\Users\PatricK\AppData\Roaming\mjusbsp\cdloader2.exe moved successfully.
========== FILES ==========
C:\Users\PatricK\Desktop\magicJack.lnk moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes

User: HomeGroupUser$
->Temp folder emptied: 0 bytes

User: PatricK
->Temp folder emptied: 445261 bytes
->Temporary Internet Files folder emptied: 5467019 bytes
->Google Chrome cache emptied: 242990877 bytes
->Flash cache emptied: 291 bytes

User: Public
->Temp folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 237.00 mb

OTL by OldTimer - Version 3.2.69.0 log created on 08082013_170358

Files\Folders moved on Reboot…
File\Folder C:\Users\PatricK\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat not found!
File move failed. C:\Windows\temp_avast_\Webshlock.txt scheduled to be moved on reboot.

PendingFileRenameOperations files…

Registry entries deleted on Reboot…

23

Any problems?

24

everything ok
but kaspersky scan shows this and i know vlc is up to date

Vulnerabilities (2) Information about applications and operating system components in which vulnerabilities have been detected. C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe C:\Program Files\VideoLAN\VLC\vlc.exe
25

OK here we finished.

Please download DelFix by “Xplode” to your Desktop.

Run the tool and check the following boxes below;

[] Remove disinfection tools
[] Create registry backup
[*] Purge System Restore

Now click on “Run” button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

I don’t need DelFix log report.

26

thanks for the help sir
;D