Norton Internet Security / Norton AntiVirus

[ancp41]

Hey Quads,

Do you need the avenger log for anything?

[Quads]

Yes Please,

Also can you happen to find a file called "skynet.exe"

Also the zipped avenger folder is in "C:\avenger"  could you please upload to  http://rapidshare.com/index.html and PM me the link so I can download

The you can see if the likes of Malwarebytes updated and Norton works

Quads 

[ancp41]

Here's the avenger log:

//////////////////////////////////////////
  Avenger Pre-Processor log
//////////////////////////////////////////

Platform: Windows NT 6.0 (build 6001, Service Pack 1)
Thu Jun 11 11:22:50 2009

11:22:42: Warning: Skipping potentially dangerous line:
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SKYNETrdvvtnic"  (Registry key deletion mode) 
11:22:50: Error: Execution aborted by user!

//////////////////////////////////////////

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform:  Windows Vista

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

Disablement of driver "SKYNETrdvvtnic" failed!
Status: 0xc0000001 (STATUS_UNSUCCESSFUL)

Error:  could not open driver "SKYNETokvviotn.sys"
Disablement of driver "SKYNETokvviotn.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

Driver "SKYNETrdvvtnic" deleted successfully.

Error:  registry key "\Registry\Machine\System\CurrentControlSet\Services\SKYNETokvviotn.sys" not found!
Deletion of driver "SKYNETokvviotn.sys" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

Error:  could not delete file "C:\WINDOWS\system32\drivers\SKYNETokvviotn.sys"
Deletion of file "C:\WINDOWS\system32\drivers\SKYNETokvviotn.sys" failed!
Status: 0xc0000156

Error:  could not delete file "C:\WINDOWS\System32\SKYNETmhxdfufx.dll"
Deletion of file "C:\WINDOWS\System32\SKYNETmhxdfufx.dll" failed!
Status: 0xc0000156

Error:  could not delete file "C:\WINDOWS\System32\SKYNETtqsxqrwn.dll"
Deletion of file "C:\WINDOWS\System32\SKYNETtqsxqrwn.dll" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Windows\System32\SKYNETcodrxpyq.dat"
Deletion of file "C:\Windows\System32\SKYNETcodrxpyq.dat" failed!
Status: 0xc0000156

Error:  file "C:\Windows\System32\SKYNETiuwjpohn.dat" not found!
Deletion of file "C:\Windows\System32\SKYNETiuwjpohn.dat" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETbwqaecrotd.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETbwqaecrotd.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETbxxitndkpv.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETbxxitndkpv.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETcsbrwvbyqb.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETcsbrwvbyqb.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETevfpdxbepw.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETevfpdxbepw.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETfwtmvqnpxt.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETfwtmvqnpxt.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETorqwtfxfej.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETorqwtfxfej.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETovwpwdxdsf.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETovwpwdxdsf.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNEToxbbdapvde.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNEToxbbdapvde.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETqfohupkoof.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETqfohupkoof.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETtmdsvedpuf.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETtmdsvedpuf.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETvcjherlmcr.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETvcjherlmcr.tmp" failed!
Status: 0xc0000156

Error:  could not delete file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETwptqiperbk.tmp"
Deletion of file "C:\Users\ahah\AppData\Local\Temp\Low\SKYNETwptqiperbk.tmp" failed!
Status: 0xc0000156

Registry key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SKYNETrdvvtnic" deleted successfully.
Registry key "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SKYNETrdvvtnic" deleted successfully.

Error:  registry key "HKEY_LOCAL_MACHINE\SOFTWARE\SKYNET" not found!
Deletion of registry key "HKEY_LOCAL_MACHINE\SOFTWARE\SKYNET" failed!
Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
  --> the object does not exist

Completed script processing.

*******************

Finished!  Terminate.

[ancp41]

avenger compressed file link: 

http://rapidshare.com/files/243196563/backup.zip.html

where can I find the skynet.exe file?

[Quads]

Hi

That is strange

---

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SKYNETrdvvtnic"  (Registry key deletion mode) 
11:22:50: Error: Execution aborted by user!

it got it further down anyway

Quads

[Quads]

Use the Windows Search and type in Skynet.exe

Quads 

[Quads]

I am trying to figure out why Avenger is not allowed to get the files.  Did get reg entries and the service, for loading

What Security software do you have installed??

Did you run Avenger as Administrator??

Quads 

[ancp41]

I still can't find the skynet.exe ftle.

[ancp41]

I dont think I used it as an administrator.  What do I have to do now?

[ancp41]

As for the security..  Whatever came with my computer is what I use.  I have Norton Internet Security and my windows defender and firewalls, etc.