Unsolved
This post is more than 5 years old
3 Posts
0
319
November 17th, 2005 00:00
Here is the VBG log file
[11/15/2005, 22:28:59] - Starting Process...
[11/15/2005, 22:28:59] - Looking for Browser Helper Object [MSEvents Object]
[11/15/2005, 22:28:59] - 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - AcroIEHlprObj Class
[11/15/2005, 22:28:59] - 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} -
[11/15/2005, 22:28:59] - WARNING: 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - BHO Name is blank.
[11/15/2005, 22:28:59] - Checking for WinLogon Notify reference. (File: C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll)
[11/15/2005, 22:28:59] - Couldn't find deSrcAs in Winlogon Notify. Ignoring {4D25F921-B9FE-4682-BF72-8AB8210D6D75}.
[11/15/2005, 22:28:59] - 3: {5CA3D70E-1895-11CF-8E15-001234567890} - DriveLetterAccess
[11/15/2005, 22:28:59] - 4: {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - AOL Toolbar Launcher
[11/15/2005, 22:28:59] - 5: {827DC836-DD9F-4A68-A602-5812EB50A834} - MSEvents Object
[11/15/2005, 22:28:59] - Found MSEvents Object!
[11/15/2005, 22:28:59] - File location: C:\WINDOWS\system32\awtqo.dll
[11/15/2005, 22:28:59] - Attempting to kill C:\WINDOWS\system32\awtqo.dll
[11/15/2005, 22:28:59] - Terminating Process: RUNDLL32.EXE
[11/15/2005, 22:28:59] - Terminating Process: IEXPLORE.EXE
[11/15/2005, 22:28:59] - Disabling Automatic Shell Restart
[11/15/2005, 22:29:00] - Terminating Process: EXPLORER.EXE
[11/15/2005, 22:29:00] - Suspending the NT Session Manager System Service
[11/15/2005, 22:29:00] - Terminating Windows NT Logon/Logoff Manager
[11/15/2005, 22:29:00] - Re-enabling Automatic Shell Restart
[11/15/2005, 22:29:01] - Renaming C:\WINDOWS\system32\awtqo.dll -> C:\WINDOWS\system32\awtqo.dll.vir
[11/15/2005, 22:29:01] - File rename was unsucessful. Rename operation sent to SMSS for next reboot.
[11/15/2005, 22:29:01] - Removing Registry references to {827DC836-DD9F-4A68-A602-5812EB50A834}
[11/15/2005, 22:29:01] - Adding Internet Explorer Protection (Kill ActiveX) for {827DC836-DD9F-4A68-A602-5812EB50A834}
[11/15/2005, 22:29:01] - Removing Winlogon Notify Entry: awtqo
[11/15/2005, 22:29:01] - BHO list has been changed! Starting over...
[11/15/2005, 22:29:01] - 1: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - AcroIEHlprObj Class
[11/15/2005, 22:29:01] - 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} -
[11/15/2005, 22:29:01] - WARNING: 2: {4D25F921-B9FE-4682-BF72-8AB8210D6D75} - BHO Name is blank.
[11/15/2005, 22:29:01] - Checking for WinLogon Notify reference. (File: C:\Program Files\MyWaySA\SrchAsDe\1.bin\deSrcAs.dll)
[11/15/2005, 22:29:01] - Couldn't find deSrcAs in Winlogon Notify. Ignoring {4D25F921-B9FE-4682-BF72-8AB8210D6D75}.
[11/15/2005, 22:29:01] - 3: {5CA3D70E-1895-11CF-8E15-001234567890} - DriveLetterAccess
[11/15/2005, 22:29:01] - 4: {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - AOL Toolbar Launcher
[11/15/2005, 22:29:01] - 5: {AE7CD045-E861-484f-8273-0445EE161910} - AcroIEToolbarHelper Class
[11/15/2005, 22:29:01] - Finished searching for [MSEvents Object]
[11/15/2005, 22:29:01] - Finishing up...
[11/15/2005, 22:29:01] - Enabling Automatic Reboot on STOP Error.
[11/15/2005, 22:29:01] - Attempting to Restart via STOP error (Blue Screen!)
No Events found!


ky331
5 Journeyman
•
15.6K Posts
•
45K Points
0
November 17th, 2005 12:00