Cannot access internet

Beaver · May 14, 2008

I used SAS to get rid of the "wmsdkns" trojan and now I can't access any of my links in "my favorites", or search for anything on the internet. When I try to search, the progress bar at the bottom of the page goes about 1/3 of the way and just stops. Did this program quarantine something it shouldn't have? Everything was fine, (with the search) until I ran this. By the way, this is an EXCELLENT program! I'm afraid I'll have to reformat my HD, and am upset about this! :cry: Thank you for any help on this matter.

SUPERAntiSpy · May 15, 2008

I used SAS to get rid of the "wmsdkns" trojan and now I can't access any of my links in "my favorites", or search for anything on the internet. When I try to search, the progress bar at the bottom of the page goes about 1/3 of the way and just stops. Did this program quarantine something it shouldn't have? Everything was fine, (with the search) until I ran this. By the way, this is an EXCELLENT program! I'm afraid I'll have to reformat my HD, and am upset about this! Thank you for any help on this matter.

Well, be upset at the infection, not SAS - the infection is the one that does the damage. Can you post your SUPERAntiSpyware scan log here so we can see exactly what was detected and removed?

Beaver · May 15, 2008

Do I have to restore them and rescan to post the log? I'm not upset with SAS, it was the only thing I found that would get rid of this nasty virus! Keep up the good work! You rock!!

EliteKiller · May 15, 2008

Do I have to restore them and rescan to post the log?

No. Open SAS, click on Preferences > Statistics/Logs > select the proper log > View Log > copy/paste in this thread or an email to SAS support.

I'm not upset with SAS, it was the only thing I found that would get rid of this nasty virus! Keep up the good work! You rock!!

Please see this thread for more info: https://forums.superantispyware.com/viewtopic.php?t=1393

Beaver · May 15, 2008

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 05/14/2008 at 06:15 PM

Application Version : 4.0.1154

Core Rules Database Version : 3460

Trace Rules Database Version: 1451

Scan type : Complete Scan

Total Scan Time : 00:15:27

Memory items scanned : 416

Memory threats detected : 0SUPERAntiSpyware Scan LogSUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 05/12/2008 at 11:52 PM

Application Version : 4.0.1154

Core Rules Database Version : 3459

Trace Rules Database Version: 1450

Scan type : Complete Scan

Total Scan Time : 00:25:55

Memory items scanned : 157

Memory threats detected : 0

Registry items scanned : 3436

Registry threats detected : 4

File items scanned : 10457

File threats detected : 1

Adware.Vundo-Variant

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{588C38CD-39FD-4F58-9FB1-6DA477C57D20}

HKCR\CLSID\{588C38CD-39FD-4F58-9FB1-6DA477C57D20}

HKCR\CLSID\{588C38CD-39FD-4F58-9FB1-6DA477C57D20}\InprocServer32

HKCR\CLSID\{588C38CD-39FD-4F58-9FB1-6DA477C57D20}\InprocServer32#ThreadingModel

C:\WINDOWS\SYSTEM32\BYXNECVS.DLL

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 05/12/2008 at 10:45 PM

Application Version : 4.0.1154

Core Rules Database Version : 3459

Trace Rules Database Version: 1450

Scan type : Complete Scan

Total Scan Time : 00:13:49

Memory items scanned : 410

Memory threats detected : 2

Registry items scanned : 3421

Registry threats detected : 4

File items scanned : 10463

File threats detected : 11

Adware.Vundo Variant/Resident

C:\WINDOWS\SYSTEM32\OPNLJBQI.DLL

Trojan.Downloader-NewJuan/VM

C:\WINDOWS\SYSTEM32\BKQRNFDO.DLL

Adware.Vundo-Variant

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{09D694AD-3139-4F97-A6E9-BFD097CADFDC}

HKCR\CLSID\{09D694AD-3139-4F97-A6E9-BFD097CADFDC}

HKCR\CLSID\{09D694AD-3139-4F97-A6E9-BFD097CADFDC}\InprocServer32

HKCR\CLSID\{09D694AD-3139-4F97-A6E9-BFD097CADFDC}\InprocServer32#ThreadingModel

Adware.Tracking Cookie

C:\Documents and Settings\Owner\Cookies\owner@www.optimum[2].txt

C:\Documents and Settings\Owner\Cookies\owner@clickbank[2].txt

C:\Documents and Settings\Owner\Cookies\owner@antispywaresuite[1].txt

C:\Documents and Settings\Owner\Cookies\owner@ad.yieldmanager[2].txt

Trojan.Unknown Origin

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP244\A0050217.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP244\A0050218.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP244\A0050219.EXE

Rogue.Multi-Dropper/Installer

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP244\A0050246.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP244\A0050247.EXE

SUPERAntiSpyware Scan Log

https://www.superantispyware.com

Generated 05/12/2008 at 09:58 PM

Application Version : 4.0.1154

Core Rules Database Version : 3459

Trace Rules Database Version: 1450

Scan type : Complete Scan

Total Scan Time : 00:17:39

Memory items scanned : 446

Memory threats detected : 2

Registry items scanned : 3434

Registry threats detected : 9

File items scanned : 10466

File threats detected : 72

Adware.Vundo Variant/Resident

C:\WINDOWS\SYSTEM32\AWTUVTKJ.DLL

Trojan.Downloader-NewJuan/VM

C:\WINDOWS\SYSTEM32\JESEMTBA.DLL

Transponder Variant BHO

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000250-0320-4dd4-be4f-7566d2314352}

Unclassified.Unknown Origin

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13197ace-6851-45c3-a7ff-c281324d5489}

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15651c7c-e812-44a2-a9ac-b467a2233e7d}

Adware.2020Search

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4e1075f4-eec4-4a86-add7-cd5f52858c31}

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4e7bd74f-2b8d-469e-92c6-ce7eb590a94d}

Adware.180solutions/SurfAssistant

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}

Adware.Second Thought

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{965a592f-8efa-4250-8630-7960230792f1}

Adware.Tracking Cookie

C:\Documents and Settings\Owner\Cookies\owner@advertising[1].txt

C:\Documents and Settings\Owner\Cookies\owner@enhance[2].txt

C:\Documents and Settings\Owner\Cookies\owner@questionmarket[2].txt

C:\Documents and Settings\Owner\Cookies\owner@directtrack[1].txt

C:\Documents and Settings\Owner\Cookies\owner@sale.antispywaremaster[2].txt

C:\Documents and Settings\Owner\Cookies\owner@tacoda[1].txt

C:\Documents and Settings\Owner\Cookies\owner@antispywaremaster[2].txt

C:\Documents and Settings\Owner\Cookies\owner@sale.trustedantivirus[1].txt

C:\Documents and Settings\Owner\Cookies\owner@specificclick[2].txt

C:\Documents and Settings\Owner\Cookies\owner@angleinteractive.directtrack[2].txt

C:\Documents and Settings\Owner\Cookies\owner@www.burstbeacon[1].txt

C:\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt

C:\Documents and Settings\Owner\Cookies\owner@adnetserver[2].txt

C:\Documents and Settings\Owner\Cookies\owner@adopt.specificclick[2].txt

C:\Documents and Settings\Owner\Cookies\owner@trustedantivirus[1].txt

C:\Documents and Settings\Owner\Cookies\owner@burstnet[2].txt

C:\Documents and Settings\Owner\Cookies\owner@mediaplex[1].txt

C:\Documents and Settings\Owner\Cookies\owner@casalemedia[2].txt

C:\Documents and Settings\Owner\Cookies\owner@www.burstnet[1].txt

C:\Documents and Settings\Owner\Cookies\owner@doubleclick[1].txt

C:\Documents and Settings\Owner\Cookies\owner@anad.tacoda[1].txt

Trojan.DNSChanger-Codec

HKCR\VAC.Video

HKCR\VAC.Video\CLSID

Trojan.Unclassified/Helper-Fake

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP226\A0042390.DLL

Adware.webHancer

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP238\A0045793.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP238\A0045794.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP238\A0045803.DLL

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP238\A0045804.DLL

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP241\A0046068.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP241\A0046072.DLL

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP241\A0046073.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP241\A0046074.DLL

Trojan.Unknown Origin

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP240\A0045977.EXE

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP240\A0045982.EXE

C:\WINDOWS\SYSTEM32\CEAMTVJA.EXE

C:\WINDOWS\SYSTEM32\CSRUNIFQ.EXE

C:\WINDOWS\SYSTEM32\KNPADVWQ.EXE

C:\WINDOWS\SYSTEM32\TWWDYBTO.EXE

Trojan.FakeDrop-2020Search

C:\WINDOWS\2020SEARCH.DLL

C:\WINDOWS\2020SEARCH2.DLL

Trojan.Fake-Drop/Gen

C:\WINDOWS\APPHELP32.DLL

C:\WINDOWS\AVISYNTHEX32.DLL

C:\WINDOWS\ASFERROR32.DLL

C:\WINDOWS\ASYCFILT32.DLL

C:\WINDOWS\ATHPRXY32.DLL

C:\WINDOWS\ATI2DVAA32.DLL

C:\WINDOWS\ATI2DVAG32.DLL

C:\WINDOWS\AUDIOSRV32.DLL

C:\WINDOWS\AUTODISC32.DLL

C:\WINDOWS\AVIFILE32.DLL

C:\WINDOWS\AVIWRAP32.DLL

C:\WINDOWS\BOKJA.EXE

C:\WINDOWS\CHANGEURL_30.DLL

C:\WINDOWS\MSA64CHK.DLL

C:\WINDOWS\MSAPASRC.DLL

C:\WINDOWS\MSSVR.EXE

C:\WINDOWS\NTNUT.EXE

C:\WINDOWS\SHDOCPE.DLL

C:\WINDOWS\SHDOCPL.DLL

C:\WINDOWS\STCLOADER.EXE

C:\WINDOWS\SWIN32.DLL

C:\WINDOWS\WINSB.DLL

Trojan.FakeDrop-BJam

C:\WINDOWS\BJAM.DLL

Trojan.FakeDrop-CDSM32

C:\WINDOWS\CDSM32.DLL

Rogue.Multi-Dropper/Installer

C:\WINDOWS\LFN.EXE

C:\WINDOWS\SYSTEM32\WMSDKNS.EXE

C:\WINDOWS\Prefetch\LFN.EXE-156A228F.pf

C:\WINDOWS\Prefetch\WMSDKNS.EXE-044B3CDC.pf

Trojan.FakeDrop-MSPPHE

C:\WINDOWS\MSPPHE.DLL

Trojan.FakeDrop-SAIEMod

C:\WINDOWS\SAIEMOD.DLL

Trojan.Downloader-Gen

C:\WINDOWS\SYSTEM32\SFT.RES

Trojan.FakeDrop-VoiceIP

C:\WINDOWS\VOICEIP.DLL

https://www.superantispyware.com

Generated 05/13/2008 at 05:34 PM

Application Version : 4.0.1154

Core Rules Database Version : 3459

Trace Rules Database Version: 1450

Scan type : Complete Scan

Total Scan Time : 00:15:22

Memory items scanned : 450

Memory threats detected : 1

Registry items scanned : 3423

Registry threats detected : 6

File items scanned : 10471

File threats detected : 2

Adware.Vundo Variant/Resident

C:\WINDOWS\SYSTEM32\NNNLMKBU.DLL

Unclassified.Unknown Origin

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{13197ace-6851-45c3-a7ff-c281324d5489}

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{15651c7c-e812-44a2-a9ac-b467a2233e7d}

Adware.Vundo-Variant

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{74675312-D074-4634-A039-0A141837F6B9}

HKCR\CLSID\{74675312-D074-4634-A039-0A141837F6B9}

HKCR\CLSID\{74675312-D074-4634-A039-0A141837F6B9}\InprocServer32

HKCR\CLSID\{74675312-D074-4634-A039-0A141837F6B9}\InprocServer32#ThreadingModel

C:\SYSTEM VOLUME INFORMATION\_RESTORE{E83A4A51-F34B-48B3-8D8A-6D5B7B9E5852}\RP244\A0050311.DLL

Registry items scanned : 3424

Registry threats detected : 7

File items scanned : 10005

File threats detected : 46

Transponder Variant BHO

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00000250-0320-4dd4-be4f-7566d2314352}

Adware.2020Search

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4e1075f4-eec4-4a86-add7-cd5f52858c31}

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4e7bd74f-2b8d-469e-92c6-ce7eb590a94d}

Adware.180solutions/SurfAssistant

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5dafd089-24b1-4c5e-bd42-8ca72550717b}

Adware.Second Thought

HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{965a592f-8efa-4250-8630-7960230792f1}

Adware.Tracking Cookie

C:\Documents and Settings\Owner\Cookies\owner@specificclick[1].txt

C:\Documents and Settings\Owner\Cookies\owner@www.easycounter[1].txt

C:\Documents and Settings\Owner\Cookies\owner@atdmt[2].txt

C:\Documents and Settings\Owner\Cookies\owner@insightexpressai[2].txt

C:\Documents and Settings\Owner\Cookies\owner@adopt.specificclick[1].txt

C:\Documents and Settings\Owner\Cookies\owner@ads.pointroll[1].txt