Win32 TDSS.rtk

[Nigel Streeter]

Hi

I am a new member and would first like to say thanks this is an excellent bit of software and so reasonably priced. Now down to the nitty gritty. Has anyone had problems with the above, When I try and convert some (not all) Flims from avi to DVD format ie for burning to DVD disk Spybot tells me it has detected this virus and do I want to kill it. I always say yes then the program starts to run very slow untill it virtully stops the program being a full vesion of NCH Express Burn (anougther very good bit of kit) I have run suprerantispyware and it found a Trojan which it fixed and I noticed that it had somting to do with an encoder.

I have not had any other problems with any of my computers anyone got any info or advice as some of these films I would like to watch?

Nigel

[Nigel Streeter]

Thanks very much

Here is the log, hope this helps:

Generated 06/15/2009 at 08:56 AM

Application Version : 4.26.1004

Core Rules Database Version : 3939

Trace Rules Database Version: 1881

Scan type : Complete Scan

Total Scan Time : 00:59:46

Memory items scanned : 997

Memory threats detected : 0

Registry items scanned : 6149

Registry threats detected : 1

File items scanned : 29726

File threats detected : 10

Trojan.DNSChanger-Codec

HKU\S-1-5-21-2079313995-2816322101-2338489543-1000\Software\fcn

Adware.Casino Games (Golden Palace Casino)

C:\CASINO\AMBER COAST CASINO\CASINO.EXE

C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\AMBER COAST CASINO\AMBER COAST CASINO.LNK

C:\USERS\PUBLIC\DESKTOP\AMBER COAST CASINO.LNK

Adware.Tracking Cookie

C:\Users\NIGEL-PC\AppData\Local\Temp\Low\Cookies\nigel-pc@msnportal.112.2o7[1].txt

C:\Users\NIGEL-PC\AppData\Roaming\Microsoft\Windows\Cookies\Low\nigel-pc@adtech[1].txt

C:\Users\NIGEL-PC\AppData\Roaming\Microsoft\Windows\Cookies\Low\nigel-pc@revsci[2].txt

C:\Users\NIGEL-PC\AppData\Roaming\Microsoft\Windows\Cookies\Low\nigel-pc@msnportal.112.2o7[1].txt

C:\Users\Nigel2\AppData\Roaming\Microsoft\Windows\Cookies\Low\nigel2@adtech[1].txt

C:\Users\Nigel2\AppData\Roaming\Microsoft\Windows\Cookies\Low\nigel2@revsci[1].txt

C:\Users\Nigel2\AppData\Roaming\Microsoft\Windows\Cookies\Low\nigel2@atdmt[1].txt

Regards

NigelX

[Nigel Streeter]

Hi

Spybot reports that the process is in file a52dec3.exe, which does not look the same but is a codec I would assume? Dose this help.

Thanks

[Nigel Streeter]

Thank you, I will think about that and get back to you if nessasary, Thanks

Nigel