#1
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
[Active] Possible malware preventing downloads
I tried to download Microsoft .NET Framework 3.0 Service Pack 1 and got a page load error. This also happens when I'm trying to download updates for avg anti virus.Log 1 RAM : 1022 MB (31% free)SP2 (WinNT 5.01.2600)SP2 (6.00.2900.2180)vb .ini
Didn't find the information you thought to find?Similar Threads
#2
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
Log 1 Continued wins dhcp Log 2 PCI \VEN_8086&DEV_2562JS ;.JSE;.WSF;.WSH
#3
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Welcome to WindowsBBS DoubleJ How to use ComboFix here , saving the file to your desktop.this link for your applicable programs.Close all open programs and windows Double click ComboFix.exe and follow the prompts.
It may reboot your computer and resume running when you logon. Wait for it to complete. When finished, it will open a log for you. Post that log in your next reply.
Note: Do not mouseclick combofix's window while its running. That may cause it to stall **NOTE - I recommend you allow the Recovery Console to be downloaded and installed if or when prompted. We Need to Verify your DNS Configuration Please download DNSCheck and save it to your desktop
Double click the DNSCheck icon on your desktop.
Follow the on-screen instructions. When done, a log will open, and be saved to the desktop.
Please copy and paste the contents of that log in your next reply.
#5
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Have you already run ComboFix? If still redirected after running it, skip that for now and just post the ComboFix log.
#6
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
ComboFix 08-12-31.01 - Owner 2009-01-01 19:45:10.2 - NTFSx86WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! TCP "= 3389:TCP :@xpsp2res.dll,-22009js : browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=js : browser.search.selectedEngine - Googlehttp://www.gmer.net
#7
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Please post the log from the first ComboFix run. It is located at C:\Qoobox\ComboFix2.txt
#8
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
ComboFix 08-12-26.03 - Owner 2008-12-27 20:28:48.1 - NTFSx86WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! TCP "= 3389:TCP :@xpsp2res.dll,-22009js : browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=js : browser.search.selectedEngine - Googlehttp://www.gmer.net
#9
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
Yes, i'm still getting a 404 error when trying to DNSCheck.
#10
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Thank you. The 404 is being caused by AVG's link scanner. Are any other links being redirected? Can you update AVG now? Lets do an online virus scan. Please do an online scan with Kaspersky Online Scanner Accept , when prompted to download and install the program files and database of malware definitions.Click Run at the Security prompt.
The program will then begin downloading and installing and will also update the database.
Please be patient as this can take several minutes.
Once the update is complete, click on My Computer under the green Scan bar to the left to start the scan.
Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
Click View scan report at the bottom.
Click the Save Report As... button.
Click the Save as Text button to save the file to your desktop so that you may post it in your next reply.
**Note** Close any open programs.
Turn off the real-time scanner of all antivirus or antispyware programs while performing the online scan.
#11
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
Update has failed. Program has failed to start. Close the Kaspersky Online Scanner 7.0 window and open it again to install the program.
#12
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Try shutting down AVG then give it another go.
#13
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
Still getting the same error.
#14
Staff
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,521
Computer Experience:
Lets switch gears then. This tool tends to be quite aggressive, so please be sure to configure it exactly as listed below. I only want to see a Report of what it finds.Dr.Web CureIt to the desktop:ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe drweb-cureit.exe file and click 'Start' to run the express scan. This will scan the files currently running in memory and when something is found, click the yes button when it asks you if you want to cure it. This is only a short scan. Once the short scan has finished, we need to change the default settings.
In the Menu Bar at the top, click 'Setting'>Change Settings.
Click on the Actions tab
Using the drop down menus, change each item under Objects and Malware to Report
Next, 'tick' Complete Scan .
Click the green arrow at the right, and the scan will start.
Click 'No to All' if it asks if you want to cure/move the file.
After the scan has completed, in the Dr.Web CureIt menu on top, click File and choose Save Report List
Save the report to your desktop. The report will be called DrWeb.csv
Close Dr.Web Cureit.
Post the contents of the log from Dr.Web you saved previously in your next reply.
#15
Member
Profile: Join Date: Dec 2008
Posts: 23
Computer Experience:
data002\32788R22FWJFW\psexec.cfexe;C:\Documents and Settings\Owner\Desktop\ComboFix.exe\data002;Program.PsExec.171;;
All times are GMT +1. The time now is 01:06 .
isabled:Bonjour"
