00001278.js

Unknown

Hi,
i've i big problem.

My computer reboot often,i've installed stinger but it freezes and crash when it reaches 00001278.js while scanning.:(


What can i do?

This is my logfile:

Logfile of HijackThis v1.99.1
Scan saved at 11.00.19, on 15/08/2006
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
C:\Programmi\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\CTsvcCDA.EXE
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Programmi\Java\j2re1.4.2_06\bin\jusched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Programmi\Gigabyte\ET5\GUI.exe
C:\Programmi\File comuni\Real\Update_OB\realsched.exe
C:\Programmi\LifeView TVR\RecSche.exe
C:\Programmi\Activision\Vampire - Bloodlines\daemon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Programmi\QuickTime\qttask.exe
C:\Programmi\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Programmi\Creative\MediaSource\Detector\CTDetect.exe
C:\Programmi\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
C:\Programmi\VIA\RAID\raid_tool.exe
C:\Programmi\Alwil Software\Avast4\ashWebSv.exe
C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe
C:\Programmi\iPod\bin\iPodService.exe
C:\Documents and Settings\Tuc\Desktop\stinger3.exe
C:\Programmi\Mozilla Firefox\firefox.exe
C:\Programmi\Internet Explorer\iexplore.exe
C:\Programmi\Outlook Express\msimn.exe
C:\Documents and Settings\Tuc\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.main-hosting.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programmi\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Collegamento alla pagina delle proprietà di High Definition Audio] HDAudPropShortcut.exe
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [ATIPTA] C:\Programmi\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Programmi\Java\j2re1.4.2_06\bin\jusched.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Programmi\File comuni\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [EasyTuneV] C:\Programmi\Gigabyte\ET5\GUI.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Programmi\File comuni\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Remote] C:\Programmi\LifeView TVR\Remote.exe
O4 - HKLM\..\Run: [RecSche] "C:\Programmi\LifeView TVR\RecSche.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Programmi\Activision\Vampire - Bloodlines\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ScanRegistry] C:\W
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programmi\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Programmi\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Programmi\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Creative Detector] C:\Programmi\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - Startup: Registration-PCTV.lnk = C:\Programmi\Pinnacle\PCTV Stereo\ERegister\RegTool.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Programmi\File comuni\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Pinnacle Scheduler.lnk = ?
O4 - Global Startup: VIA RAID TOOL.lnk = C:\Programmi\VIA\RAID\raid_tool.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programmi\Java\j2re1.4.2_06\bin\npjpi142_06.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programmi\Messenger\MSMSGS.EXE
O12 - Plugin for .spop: C:\Programmi\Internet Explorer\Plugins\NPDocBox.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{753B1E8F-D313-4AAF-B39D-CDDB6B75BD31}: NameServer = 213.205.32.70 213.205.36.70
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Programmi\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Programmi\File comuni\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Programmi\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Programmi\File comuni\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Programmi\iPod\bin\iPodService.exe

Crunchie

I am not seeing anything bad in your log. You can try this if you wish;

Please download and install ewido anti-spyware tool

• Close all other Applications Select language click Ok
• Click I Agree
• Click next
• Click Install
• Click Finish
• Wait and Ewido will open to the main screen automatically.
• Wait again a few minutes and Ewido Should Auto update itself. If it doesn't click update at top of screen.
• This is very important to get updates
• When updating has finished. Close Ewido.

If you have an "always on" connection to the internet, physically disconnect that connection until you are finished with Safe Mode and have rebooted back into normal mode.

• Next, please reboot your computer in Safe Mode by doing the following:
• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
• Instead of Windows loading as normal, a menu should appear use arrow up to highlight
• Select the first option, to run Windows in Safe Mode hit enter.
• For additional help in booting into Safe Mode, see the following site: HERE
  
  You MUST manage to get into Safe Mode for the fix to work.

Make sure to close all open windows/programs/folders. Have nothing else open while ewido performs its scan!

• Open Ewido
• Click on scanner top of Ewido sceen
• Click on Settings
• Under How to Act click on Recommended Action choose Quarantine
• Under How to scan all boxes should be selected
• Under Possibly unwanted software all boxes should be selected
• On right side under Reports: click on Automatically generate report after every scan.
• Under What to scan select scan every file
• Click On scan Tab
• Click on Complete system scan
• Let the program scan the machine It can take awhile give it time.
• When scan has finished At bottom of screen click Apply all Actions
• Click Save report
• Click Save Report as (Save as window's screen should pop up.)
• Click desktop
• Click Save
• Exit ewido

Reboot back to normal mode

Misio

Hi,so I make a scan with ewido and i follow your istructions .
The computer didn't rebot today but stinger have the same problem with the
same file

After the scan with ewido i try a scan with avast and i find bdcore.dll
and libfn.dll with some problems,i put them in the quarantine.

This is the report of ewido spyware
May i unistall firefox?or destroy the two dll files?

---

ewido anti-spyware - Scan Report

---

+ Created at: 18.01.27 15/08/2006

+ Scan result:



:mozilla.61:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.62:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.63:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adbrite : Cleaned with backup (quarantined).
:mozilla.322:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adition : Cleaned with backup (quarantined).
:mozilla.323:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adition : Cleaned with backup (quarantined).
:mozilla.389:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adition : Cleaned with backup (quarantined).
:mozilla.148:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.149:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Adtech : Cleaned with backup (quarantined).
:mozilla.64:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Atdmt : Cleaned with backup (quarantined).
:mozilla.388:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Bfast : Cleaned with backup (quarantined).
:mozilla.314:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.315:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Burstnet : Cleaned with backup (quarantined).
:mozilla.201:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Casalemedia : Cleaned with backup (quarantined).
:mozilla.399:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Centrport : Cleaned with backup (quarantined).
:mozilla.286:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Clickhype : Cleaned with backup (quarantined).
:mozilla.397:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.398:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Com : Cleaned with backup (quarantined).
:mozilla.77:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Doubleclick : Cleaned with backup (quarantined).
:mozilla.391:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Euroclick : Cleaned with backup (quarantined).
:mozilla.113:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Falkag : Cleaned with backup (quarantined).
:mozilla.114:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Falkag : Cleaned with backup (quarantined).
:mozilla.115:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Falkag : Cleaned with backup (quarantined).
:mozilla.116:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Falkag : Cleaned with backup (quarantined).
:mozilla.94:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Falkag : Cleaned with backup (quarantined).
:mozilla.204:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Fastclick : Cleaned with backup (quarantined).
:mozilla.150:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Findwhat : Cleaned with backup (quarantined).
:mozilla.335:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Goclick : Cleaned with backup (quarantined).
:mozilla.336:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Goclick : Cleaned with backup (quarantined).
:mozilla.42:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Mediaplex : Cleaned with backup (quarantined).
:mozilla.28:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Myaffiliateprogram : Cleaned with backup (quarantined).
:mozilla.351:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Questionmarket : Cleaned with backup (quarantined).
:mozilla.281:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Revenue : Cleaned with backup (quarantined).
:mozilla.136:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.137:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.138:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.139:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.140:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Serving-sys : Cleaned with backup (quarantined).
:mozilla.289:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.290:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Sitestat : Cleaned with backup (quarantined).
:mozilla.213:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Spylog : Cleaned with backup (quarantined).
:mozilla.35:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.36:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.39:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.40:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.41:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Statcounter : Cleaned with backup (quarantined).
:mozilla.282:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Targetnet : Cleaned with backup (quarantined).
:mozilla.142:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Tradedoubler : Cleaned with backup (quarantined).
:mozilla.32:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.33:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Tribalfusion : Cleaned with backup (quarantined).
:mozilla.50:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.51:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.52:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.53:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.54:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.55:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.56:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valuead : Cleaned with backup (quarantined).
:mozilla.380:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Valueclick : Cleaned with backup (quarantined).
:mozilla.242:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.76:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Webtrendslive : Cleaned with backup (quarantined).
:mozilla.157:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Yadro : Cleaned with backup (quarantined).
:mozilla.47:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.48:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.49:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Yieldmanager : Cleaned with backup (quarantined).
:mozilla.71:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.72:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Zedo : Cleaned with backup (quarantined).
:mozilla.73:C:\Documents and Settings\Tuc\Dati
applicazioni\Mozilla\Firefox\Profiles\cq6ibn9n.default\cookies.txt ->
TrackingCookie.Zedo : Cleaned with backup (quarantined).


::Report end

Crunchie

Not necessary to uninstall FireFox , they are only cookies that Ewido found.
Try renaming the file that is giving problems, then reboot and run stinger again. Name it old00001278.js or something similar.

Misio

Rename it's impossible because i can't see the file.

Only stinger see it. :banghead:

I know that other person have the same problem,
i see other 3d in this forum like this one

http://forums.thatcomputerguy.us/index.php?showtopic=8918

Crunchie

Can you see it if you uncheck the hidden files option? How to do that; http://www.xtra.co.nz/help/0,,4155-1916458,00.html
Does Stinger tell you where the file is located on your PC? If so, please post the exact path here.

Misio

The program find the file in document and settings but it didn't tell the exactly location.

I try to unhide it but i can't see the file

Crunchie

Without my knowing the exact location makes it quite hard . Only thing I can suggest are either some online virus scans, or a system restore back to before the problem occurred.

Please visit at least two of the following sites for an online virus scan:

BitDefender Free Online Virus Scan
http://www.bitdefender.com/scan/licence.php

Panda ActiveScan
http://www.pandasoftware.com/activescan/com/activescan_principal.htm
Make sure you tick Disinfect automatically under Scan Options.

Housecall at TrendMicro
http://housecall60.trendmicro.com/en/start_corp.asp?id=scan
Make sure you tick Auto Clean.

eTrust Antivirus Web Scanner
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

Also run this online trojan scanner

TrojanScan