Windows knows I plugged in a USB device but drive wont show

Hello.
I see that you are running Limewire.
P2P(Peer to peer) applications are designed to help you easily share and distribute files between you and a group of people. But they can also be used to distribute malware, and thus are not considered safe.
The removal of these programs is optional, but highly recommended.

If Limewire is not removed, then I won't help you.

Go to Start > Control Panel > Add/Remove Programs and remove the following programs.

• LimeWire 4.18.3
  
• Viewpoint Media Player
  

Completely Uninstall Norton software using:

• SymNRT.exe
  

Instructions

1. Please download and save SymNRT.exe to your desktop.
   
2. Close all programs and double click on the tool.
   
3. Follow the on-screen instructions.
   
4. Restart the computer if asked.
   
5. Then delete the SymNRT.exe tool from your desktop.
   
6. Open the Program Files folder on your local disk ( normally C: )
   
7. Find and delete the following folders (if present):
   [list]
   
8. Norton AntiVirus
   
9. Norton Internet Security
   
10. Norton SystemWorks
    
11. Norton Personal Firewall
    

Let me know how the machine is running after you have done this.

I did everything you asked, I removed both programs and ran the symnrt.exe and then removed the folders.

I am sure i'll need a little time to play around with it to see how it feels -

I still cant view anything I plug into a usb port though, i never had a problem with it before so my gut tells me perhaps the malware had an effect on it ?

I tried two devices, a flash drive and an SD card reader, when i plug them in the "safely remove hardware" icon comes up in the task bar, acknowledging I plugged it in, but when I got to My Computer I can not see the F drive that used to appear.

Any thoughts?

Thank you so much!

scratch that! it came back! Thanks so much!!

Oh well, I won't ask why. It's not broken, so I won't fix it.

Good work.

We need to make a new restore point.

To turn off System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.
4. Click Yes when you receive the prompt to the turn off System Restore.

Now we need to make a new restore point.
To turn on System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (To turn on System Restore), and then click OK.

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers.

1) Please navigate to http://windowsupdate.microsoft.com and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates , or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

Ad-Aware SE
A tutorial on using Ad-Aware to remove spyware from your computer may be found here.

Spybot-Search & Destroy
A tutorial on using Spybot to remove spyware from your computer may be found here. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

SpywareBlaster
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found here.

SpywareGuard
A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found here.

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:
http://www.mozilla.org/products/firefox/
I also recommand the following add-ons for Firefox, they will help keep you safe from malicious scripts or activeX exploits.
https://addons.mozilla.org/en-US/firefox/addon/722
https://addons.mozilla.org/en-US/firefox/addon/1865
https://addons.mozilla.org/en-US/firefox/addon/433

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.

To help you keep your software updated, please considering using this free software program that will check for program updates.
Update Checker

5) Finally, consider maintaining a firewall. Some good free firewalls are Kerio, or
Outpost
A tutorial on understanding and using firewalls may be found here.

Please also read Tony Klein's excellent article: How I got Infected in the First Place

If you would take a moment to fill out our feedback form, we would appreciate it.
The link can be found here.

Hopefully this should take care of your problems! Good luck.

Thanks! I will do as you recommend. I already was using firefox and installed the add-ons you gave me, but I cant use IE to go to the microsoft update page becase as soon as I open it it just closes right down, but I did turn on automatic updates

Thanks!

1st Half

Avira AntiVir Personal
Report file date: Saturday, May 09, 2009 13:45

Scanning for 1385351 virus strains and unwanted programs.

Licensee : Avira AntiVir Personal - FREE Antivirus
Serial number : 0000149996-ADJIE-0000001
Platform : Windows XP
Windows version : (Service Pack 3) [5.1.2600]
Boot mode : Normally booted
Username : SYSTEM
Computer name : VANDELAY

Version information:
BUILD.DAT : 9.0.0.394 17962 Bytes 4/17/2009 11:20:00
AVSCAN.EXE : 9.0.3.5 466689 Bytes 4/17/2009 13:57:30
AVSCAN.DLL : 9.0.3.0 40705 Bytes 2/27/2009 15:58:24
LUKE.DLL : 9.0.3.2 209665 Bytes 2/20/2009 16:35:49
LUKERES.DLL : 9.0.2.0 12033 Bytes 2/27/2009 15:58:52
ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 10/27/2008 17:30:36
ANTIVIR1.VDF : 7.1.2.12 3336192 Bytes 2/11/2009 01:33:26
ANTIVIR2.VDF : 7.1.3.137 1810944 Bytes 4/30/2009 02:16:20
ANTIVIR3.VDF : 7.1.3.178 195584 Bytes 5/8/2009 02:16:21
Engineversion : 8.2.0.166
AEVDF.DLL : 8.1.1.1 106868 Bytes 5/9/2009 02:16:34
AESCRIPT.DLL : 8.1.1.81 385401 Bytes 5/9/2009 02:16:33
AESCN.DLL : 8.1.1.10 127348 Bytes 5/9/2009 02:16:31
AERDL.DLL : 8.1.1.3 438645 Bytes 10/29/2008 23:24:41
AEPACK.DLL : 8.1.3.16 397686 Bytes 5/9/2009 02:16:31
AEOFFICE.DLL : 8.1.0.36 196987 Bytes 2/27/2009 01:01:56
AEHEUR.DLL : 8.1.0.128 1757559 Bytes 5/9/2009 02:16:28
AEHELP.DLL : 8.1.2.2 119158 Bytes 2/27/2009 01:01:56
AEGEN.DLL : 8.1.1.42 348531 Bytes 5/9/2009 02:16:24
AEEMU.DLL : 8.1.0.9 393588 Bytes 10/9/2008 19:32:40
AECORE.DLL : 8.1.6.9 176500 Bytes 5/9/2009 02:16:22
AEBB.DLL : 8.1.0.3 53618 Bytes 10/9/2008 19:32:40
AVWINLL.DLL : 9.0.0.3 18177 Bytes 12/12/2008 13:47:59
AVPREF.DLL : 9.0.0.1 43777 Bytes 12/5/2008 15:32:15
AVREP.DLL : 8.0.0.3 155905 Bytes 1/20/2009 19:34:28
AVREG.DLL : 9.0.0.0 36609 Bytes 12/5/2008 15:32:09
AVARKT.DLL : 9.0.0.3 292609 Bytes 3/24/2009 20:05:41
AVEVTLOG.DLL : 9.0.0.7 167169 Bytes 1/30/2009 15:37:08
SQLITE3.DLL : 3.6.1.0 326401 Bytes 1/28/2009 20:03:49
SMTPLIB.DLL : 9.2.0.25 28417 Bytes 2/2/2009 13:21:33
NETNT.DLL : 9.0.0.0 11521 Bytes 12/5/2008 15:32:10
RCIMAGE.DLL : 9.0.0.21 2438401 Bytes 2/9/2009 16:45:45
RCTEXT.DLL : 9.0.37.0 86785 Bytes 4/17/2009 15:19:48

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, E:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +SPR,

Start of the scan: Saturday, May 09, 2009 13:45

Starting search for hidden objects.
'42763' objects were checked, '0' hidden objects were found.

The scan of running processes will be started
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned
Scan process 'GoogleToolbarNotifier.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'reader_sl.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'GoogleUpdate.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'LEXPPS.EXE' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'LEXBCES.EXE' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned
29 processes with 29 modules were scanned

Starting master boot sector scan:
Master boot sector HD0
[INFO] No virus was found!
Master boot sector HD1
[INFO] No virus was found!
Master boot sector HD2
[INFO] No virus was found!

Start scanning boot sectors:
Boot sector 'C:\'
[INFO] No virus was found!
Boot sector 'E:\'
[INFO] No virus was found!

Starting to scan executable files (registry).
The registry was scanned ( '48' files ).

2nd half

Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\pagefile.sys
[WARNING] The file could not be opened!
[NOTE] This file is a Windows system file.
[NOTE] This file cannot be opened for scanning.
C:\Program Files\Common Files\InterVideo\DVD6\InterActual\iauninst.exe
[WARNING] The file could not be opened!
C:\Program Files\InstallShield Installation Information\{01083175-01CC-42AA-9090-81DD0F88F28F}\_setup.dll
[WARNING] The file could not be opened!
C:\Program Files\InstallShield Installation Information\{8EF1122E-E90C-4EE9-AB0C-7FDE2BA42C26}\_setup.dll
[WARNING] The file could not be opened!
C:\Program Files\InstallShield Installation Information\{E8569164-0F7D-46E1-8577-0B5820B43135}\_setup.dll
[WARNING] The file could not be opened!
C:\Program Files\InstallShield Installation Information\{E9EEA523-4540-4A23-A0EE-5C21DE90ACA9}\_setup.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\CoverDesigner\CoverDes.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\AudioPluginMgr.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\CDCopy.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\cdr100.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\cdr50s.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\CDROM.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\cdu920.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\cr2200cs.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\Drweb32.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\DVDREALLOC.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\Dws114x.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\Equalize.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\FATImporter.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\GENCUSH.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\Generatr.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\GenFAT.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\geniso.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\GenPCHy.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\GenUDF.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\image.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\ImageGen.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\ims.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\ISOFS.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\KARAOKE.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\MMC.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\MPGEnc.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeHDBlkAccess.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeMP3Dmo.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeMP3Hlp.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\neroAPI.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeroCmd.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeroCom.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\neroDB.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\neroErr.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeroMediaCon.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeroNet.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\neroscsi.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\neRSDB.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NetRecorder.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NeVCDEngine.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\newtrf.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\NRESTORE.EXE
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\READHD16.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\ReadHD32.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\ro1420c.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\UDFImporter.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\VCDMenu.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\VMPEGEnc.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\VMPEGEncNDX.dll
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero\WNASPI32.DLL
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero BackItUp\BackItUp.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero BackItUp\NBJ.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero BackItUp\NBR.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero StartSmart\NeroStartSmart.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero Toolkit\CDSpeed.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero Toolkit\DriveSpeed.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero Toolkit\hwinfo.exe
[WARNING] The file could not be opened!
C:\Program Files\Nero 6.0 Suite\Nero Toolkit\InfoTool.exe
[WARNING] The file could not be opened!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\cd[1].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\cd[1].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\cd[2].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\cd[2].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\pp.06[1].exe
[DETECTION] Contains recognition pattern of the WORM/Koobface.HW.3 worm
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0JY52H4L\cd[1].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0JY52H4L\cd[1].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0JY52H4L\cd[2].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0JY52H4L\cd[2].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\cd[1].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\cd[1].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\cd[2].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\cd[2].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\nfr[1].exe
[DETECTION] Is the TR/Proxy.Agent.bmm Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[1].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[1].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[2].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[2].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[3].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[3].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[4].htm
[0] Archive type: HIDDEN
--> FIL\\\?\C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[4].htm
[DETECTION] Is the TR/Dldr.Agent.bvpv Trojan
Begin scan in 'E:\'

Beginning disinfection:
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\cd[1].htm
[NOTE] The file was moved to '4a60e7c0.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\cd[2].htm
[NOTE] The file was moved to '4a60e7c1.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0D2B89YV\pp.06[1].exe
[DETECTION] Contains recognition pattern of the WORM/Koobface.HW.3 worm
[NOTE] The file was moved to '4a33e7cd.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0JY52H4L\cd[1].htm
[NOTE] The file was moved to '4be1fa52.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\0JY52H4L\cd[2].htm
[NOTE] The file was moved to '4be0f20a.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\cd[1].htm
[NOTE] The file was moved to '4a60e7c2.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\cd[2].htm
[NOTE] The file was moved to '497fa8cb.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\QP8T41UD\nfr[1].exe
[DETECTION] Is the TR/Proxy.Agent.bmm Trojan
[NOTE] The file was moved to '4a77e7c4.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[1].htm
[NOTE] The file was moved to '494281a3.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[2].htm
[NOTE] The file was moved to '494389eb.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[3].htm
[NOTE] The file was moved to '49cca003.qua'!
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\YHWXAVIX\cd[4].htm
[NOTE] The file was moved to '49cda84b.qua'!


End of the scan: Saturday, May 09, 2009 16:28
Used time: 2:42:19 Hour(s)

The scan has been done completely.

7870 Scanned directories
374855 Files were scanned
12 Viruses and/or unwanted programs were found
0 Files were classified as suspicious
0 files were deleted
0 Viruses and unwanted programs were repaired
12 Files were moved to quarantine
0 Files were renamed
65 Files cannot be scanned
374778 Files not concerned
2606 Archives were scanned
65 Warnings
14 Notes
42763 Objects were scanned with rootkit scan
0 Hidden objects were found

Don't worry, just a bunch of temp files.

Download ATF Cleaner

• Double-click ATF-Cleaner.exe to run the program.
  
• Click Select All found at the bottom of the list.
  
• Click the Empty Selected button.
  

If you use Firefox browser, do this also:

• Click Firefox at the top and choose Select All from the list.
  
• Click the Empty Selected button.
  
• NOTE : If you would like to keep your saved passwords, please click No at the prompt.
  

If you use Opera browser, do this also:

• Click Opera at the top and choose Select All from the list.
  
• Click the Empty Selected button.
  
• NOTE : If you would like to keep your saved passwords, please click No at the prompt.
  

Click Exit on the Main menu to close the program.

thanks! When I saw it detected 12 things I started to think I was back to step 1!


Very much appreciated!