This is a read-only archive of malwareremoval.com. No new posts or registrations. Privacy Page
Malware Removal Forums

not sure

2 min read

This thread's last reply is from October 11, 2009, 7:46 AM UTC. Software, malware, and removal-tool advice below may be out of date — treat specific steps and download links with caution.

mickey2sweet
October 10, 2009, 5:49 PM UTC
this thing keeps showing up verizon said they don't know how to get it off .i have rolled back to earlyier date deleted the file ,restated and it's right back . please help Verizon Internet Security Suite Anti-Virus
10/10/2009 1:37:13 PM
File Name Virus Action Date
C:\Documents and Settings\Juanita\Application Data\FileSubmit\halloweendisneyth\install\5791DA6\halloweendisneyth.msi Trojan-Downloader.JS.gen Quarantined 9/22/2009 2:58:31 AM
C:\Documents and Settings\Juanita\Local Settings\Temp\1a24dd0.msi Trojan-Downloader.JS.gen Delete at restart 9/22/2009 2:58:39 AM
C:\Program Files\New Folder\1a24dd0.msi Trojan-Downloader.JS.gen Quarantined 9/22/2009 3:02:05 AM
C:\Program Files\New Folder\halloweendisneyth.msi Trojan-Downloader.JS.gen Quarantined 9/22/2009 3:02:26 AM
C:\System Volume Information\_restore{04B20ACC-AE7D-4F34-B547-573C2828457F}\RP17\A0004422.msi Trojan-Downloader.JS.gen Quarantined 9/23/2009 12:36:47 PM
C:\System Volume Information\_restore{04B20ACC-AE7D-4F34-B547-573C2828457F}\RP17\A0004423.msi Trojan-Downloader.JS.gen Quarantined 9/23/2009 12:36:49 PM
C:\System Volume Information\_restore{04B20ACC-AE7D-4F34-B547-573C2828457F}\RP17\A0004425.msi Trojan-Downloader.JS.gen Quarantined 9/23/2009 12:36:50 PM
C:\System Volume Information\_restore{04B20ACC-AE7D-4F34-B547-573C2828457F}\RP18\A0004485.msi Trojan-Downloader.JS.gen Quarantined 9/24/2009 3:49:55 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 9/29/2009 9:28:36 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 9/30/2009 7:41:01 AM
C:\System Volume Information\_restore{04B20ACC-AE7D-4F34-B547-573C2828457F}\RP24\A0008943.exe Trojan.Win32.FraudPack.unc Quarantined 9/30/2009 10:59:26 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/1/2009 1:43:42 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/2/2009 1:15:14 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/5/2009 8:43:27 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/6/2009 2:10:06 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/6/2009 7:03:40 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/7/2009 11:27:48 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/7/2009 2:14:30 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/7/2009 2:26:22 PM
C:\Documents and Settings\Juanita\My Documents\services Trojan.Win32.FraudPack.rdo Quarantined 10/7/2009 2:36:09 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/7/2009 3:39:15 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/7/2009 11:06:23 PM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/9/2009 8:00:13 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/9/2009 9:22:15 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/10/2009 10:13:21 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/10/2009 11:13:50 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/10/2009 11:16:01 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/10/2009 11:38:30 AM
C:\WINDOWS\system32\drivers\etc\hosts Trojan.Win32.FraudPack.rdo Delete at restart 10/10/2009 1:22:14 PM



File generated by Verizon Internet Security Suite Anti-Virus
NonSuch
October 11, 2009, 7:46 AM UTC
In order for us to help you it is necessary that you provide us with a HijackThis log. Please follow the guideline at the link below to start a new topic and post your HijackThis log by pasting it into your post. Do not utilize attachments.

This topic is now closed. Please start a new topic by following the HijackThis Guideline posted here: >Guideline for posting your HijackThis log<