PCTech Forums

My mom said her computer was messed up ... and Hijack this didn't give me anything, I cleaned up a lot with Ad-aware / Spybot (as usual) and cleaned out temps...

my question relates to the Panda Active Scan that I ran...so here it is:


Virus:Trj/Zerolin.D Not disinfected C:\Documents and Settings\hmm\Local Settings\Temporary Internet Files\Content.IE5\M3LOVHMF\main[1].chm[main.htm] Adware:Adware/Gator Not disinfected C:\Program Files\Common Files\GMT\GInstaller.dll
Adware:Adware/Gator Not disinfected C:\Program Files\Common Files\GMT\gtrawbm.fil
Adware:Adware/Gator Not disinfected C:\Program Files\Magic Waterfall Screensaver\MagicWaterfall.exe
Adware:Adware/Gator Not disinfected C:\Program Files\Magic Waterfall Screensaver\MW1Helper.exe
Adware:Adware/Gator Not disinfected C:\Program Files\Magic Waterfall Screensaver\MW1Uninstaller.exe
Adware:Adware/DropSpam Not disinfected C:\WINDOWS\dslife.exe
Virus:Trj/Bancos.EG Not disinfected C:\WINDOWS\dvpd.dll
Virus:Trj/Qhost.gen Not disinfected C:\WINDOWS\HOSTS.SAM
Virus:Trj/Delf.PR Not disinfected C:\WINDOWS\inet20099\alg.exe
Adware:Adware/SweetBar Not disinfected C:\WINDOWS\inet20099\mm4.exe
Adware:Adware/CWS.Yexe Not disinfected C:\WINDOWS\inet20099\services.exe
Adware:Adware/CWS.Yexe Not disinfected C:\WINDOWS\inet20099\winlogon.exe
Adware:Adware/SearchExe Not disinfected C:\WINDOWS\n_bmuvha.log
Adware:Adware/SearchExe Not disinfected C:\WINDOWS\n_lbelvj.log
Adware:Adware/SearchExe Not disinfected C:\WINDOWS\n_ttlapc.txt
Virus:Trj/Downloader.BNW Not disinfected C:\WINDOWS\prntsvra.dll
Possible Virus. Not disinfected C:\WINDOWS\sysldr32.exe
Adware:Adware/CWS.Aboutblank Not disinfected C:\WINDOWS\system32\addmq32.exe
Adware:Adware/CWS.Aboutblank Not disinfected C:\WINDOWS\system32\atljw32.exe
Adware:Adware/CWS.Aboutblank Not disinfected C:\WINDOWS\system32\atlmq32.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\cmd32.exe
Dialer:Dialer.EXV Not disinfected C:\WINDOWS\system32\dial32.exe
Adware:Adware/Startpage.AHK Not disinfected C:\WINDOWS\system32\efsdfgxg.exe
Adware:Adware/Startpage.AHK Not disinfected C:\WINDOWS\system32\exeha2.exe
Adware:Adware/CWS.Yexe Not disinfected C:\WINDOWS\system32\exeha3.exe
Adware:Adware/SearchExe Not disinfected C:\WINDOWS\system32\mfcxe32.dll
Dialer:Dialer.ECD Not disinfected C:\WINDOWS\system32\mspostsp.exe
Virus:Trj/PWSteal.B Not disinfected C:\WINDOWS\system32\nvdsvc32.exe
Virus:Trj/Agent.KO Not disinfected C:\WINDOWS\system32\okpq.dll
Virus:Bck/Galapoper.IE Not disinfected C:\WINDOWS\system32\paradise.raw.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\sachostc.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\sachosts.exe
Dialer:dialer.bew Not disinfected C:\WINDOWS\system32\search.html
Virus:Trj/Multidropper.WE Not disinfected C:\WINDOWS\system32\winldra.exe
Adware:Adware/SpySheriff Not disinfected C:\WINDOWS\system32\z11.exe
Adware:adware/beehappyy Not disinfected C:\WINDOWS\system32\z12.exe
Adware:Adware/Miamore Not disinfected C:\WINDOWS\system32\z13.exe
Possible Virus. Not disinfected C:\WINDOWS\system32\z14.exe
Virus:Bck/Galapoper.IA Not disinfected C:\WINDOWS\system32\z15.exe
Adware:Adware/Startpage.AHK Not disinfected C:\WINDOWS\system32\z16.exe
Adware:Adware/WebHancer Not disinfected C:\WINDOWS\wh.exe
Adware:Adware/WebHancer Not disinfected C:\WINDOWS\wh.exe[whAgent.exe]
Adware:Adware/WebHancer Not disinfected C:\WINDOWS\wh.exe[whInstaller.exe]
Adware:Adware/WebHancer Not disinfected C:\WINDOWS\wh.exe[whSurvey.exe]
Adware:Adware/WebHancer Not disinfected C:\WINDOWS\wh.exe[webhdll.dll]
Adware:Adware/WebHancer Not disinfected C:\WINDOWS\wh.exe[whiehlpr.dll]
I thought most of these files were windows files .. and so far nothing can clean this up for me... computer seems to run fine, but I haven't tried all of my moms programs / games that she has bought from yahoo and shockwave...

ugh, i just dont know what to do...

What we need to do is harvest more information, I recommend that you go to



and download the file and run it. Then you need to post the results to the hijack forum

They can help you better there.