#1
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
[Resolved]Super Slow Boot, plus ad windows everywhere! - DSS main log
Hi,ad windows if I ever surf. I've since unplugged my computer. My Norton Firewall block certain packages coming from my computer.HD . I've run HijackThis - log as follows:SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://www.dell4me.com/mywaybiz http://my.netzero.net/s/search?r=minisearch http://www.cnyes.com/ http://my.netzero.net/s/search?r=minisearch http://my.netzero.net/s/search?r=minisearch http://www.dell4me.com/mywaybiz http://my.netzero.net/s/search?r=minisearch http://www.musicnotes.com/download/mnviewer.cab http://www.costcophotocenter.com/CostcoActivia.cab http://cid-68e4741c1554c772.spaces.l...d/MsnPUpld.cab
Didn't find the information you thought to find?Similar Threads
#2
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
Super Slow Boot, plus ad windows everywhere! - DSS main log
This is my DSS main.txt -- Please help!Total Physical Memory: 503 MiB (512 MiB recommended). System Drive C: has 9.26 GiB (less than 15%) free. SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)dss .exehttp://www.dell4me.com/mywaybiz http://my.netzero.net/s/search?r=minisearch http://www.cnyes.com/ http://my.netzero.net/s/search?r=minisearch http://my.netzero.net/s/search?r=minisearch http://www.dell4me.com/mywaybiz http://my.netzero.net/s/search?r=minisearch http://www.musicnotes.com/download/mnviewer.cab http://www.costcophotocenter.com/CostcoActivia.cab http://cid-68e4741c1554c772.spaces.l...d/MsnPUpld.cab .js - JSFile - DefaultIcon - C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe,2 .js - JSFile - shell\open\command - "C:\Program Files\Macromedia\Dreamweaver MX 2004\Dreamweaver.exe" "%1" WAN Miniport (ATW)) - c:\windows\system32\drivers\wanatw4.sys (file missing)UPS "=3 (0x3)
#3
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,547
Computer Experience:
Hi schinOpen HijackThis, click Config, click Misc Tools
Click "Open Uninstall Manager "
Click "Save List" (generates uninstall_list.txt )
Click Save, copy and paste the results in your next post.
#4
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
uninstall_list.txt
Hi Geri,Ad -Aware SE Personal
#5
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,547
Computer Experience:
Hi schin
Quote:
This is a shared computer
All accounts will need to be gone through and cleaned,,,one at a time. Remind me of this after this account is cleaned. thanks.Add/Remove Programs and remove the following (if present): Outerinfo Please note any other programs that you dont recognize in that list and post them in your next response Now this. SDFix SDFix.exe and it will extract the files to %systemdrive%Safe Mode by doing the following :Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
Instead of Windows loading as normal, the Advanced Options Menu should appear;
Select the first option, to run Windows in Safe Mode, then press Enter .
Choose your usual account.
Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished , press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
Finally paste the contents of the Report.txt back on the forum with a new HijackThis log
Now do this. Here this link for any applicable programs you may have.Close all open programs and windows Double click combofix.exe and follow the prompts.
Vista users right click Combofix.exe and select Run As Administrator.When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall
#6
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
Can't remove Outerinfo
Geri,http://www.outerinfo.com/OiUninstaller.exe
Last edited by schin; 7th February 2008 at 07:26 .
#7
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,547
Computer Experience:
Hi
#8
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
Report.txt
SDFix: Version 1.137http://www.gmer.net
#9
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
ComboFix.log
ComboFix 08-02.05.3 - Helen Chiu 2008-02-07 22:02:13.2 - NTFSx86WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! UPS "=3 (0x3)http://www.gmer.net
#10
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
HiJackThis.log
Geri,SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)http://www.cnyes.com/ http://my.netzero.net/s/search?r=minisearch http://my.netzero.net/s/search?r=minisearch http://www.dell4me.com/mywaybiz http://my.netzero.net/s/search?r=minisearch http://www.musicnotes.com/download/mnviewer.cab http://www.costcophotocenter.com/CostcoActivia.cab http://cid-68e4741c1554c772.spaces.l...d/MsnPUpld.cab
#11
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,547
Computer Experience:
Hi schinComboFix2.txt , which I believe is located in c:\qooboxVundoFix.exe Double-click VundoFix.exe to run it.
Click the Scan for Vundo button.
Once it's done scanning, click the Remove Vundo button.
You will receive a prompt asking if you want to remove the files, click YES
Once you click yes, your desktop will go blank as it starts removing Vundo.
When completed, it will prompt that it will reboot your computer, click OK .
Please post the contents of C:\vundofix.txt and a new HiJackThis log in a reply to this thread.
Scan for Vundo button" when VundoFix appears upon rebooting.Jotti File Submission: Please go to Jotti's malware scan
Copy and paste the following file path into *the *"File to upload & scan" box on the top of the page: one at a time.C:\Documents and Settings\Helen Chiu\Application Data\shb.dat
Click on the submit button
Please post the results in your next reply.
#12
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
ComboFix2.txt
I couldn't find the ComboFix file after I ran it last night and reran it.WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! UPS "=3 (0x3)http://www.gmer.net
#13
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
VundoFix.txt
The Jotti came back with "Found Nothing" messages for both files.
#14
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,547
Computer Experience:
Hi schincontents of the code box below and paste it into a blank notepad, then save it to your desktop as;CFScript.txt All Files (*.*) Close all other windows and programs . Now drag the CFScript.txt onto ComboFix.exe and drop it, using the left mouse button.Click here to see how to use CFScript.txtPlease do not click on the ComboFix window while it is running a scan. This can cause it to stall.
Code:
File::
C:\WINDOWS\SYSTEM32\jjkkj.bak2
Folder::
C:\WINDOWS\SYSTEM32\nGpxx01
C:\temp\isgTi19
Registry::
[-HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{062479A8-C6C3-4A5E-9D8E-E5F2D9E02CAB}]
[-HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\cmsCFG] Please post the new combofix log.
#15
Inactive
Profile: Join Date: Feb 2008
Posts: 17
Computer Experience:
ComboFix.txt
ComboFix 08-02.05.3 - Helen Chiu 2008-02-08 20:07:59.3 - NTFSx86WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! UPS "=3 (0x3)http://www.gmer.net
All times are GMT +1. The time now is 05:41 .
