I have done as instructed. My computer is running fine, asides from the media function buttons on my keyboard not working anymore, but I'm sure I...
I fell asleep waiting for Kaspersky to finish. It took 3.5 hours and came back giving the all clear, no malicious objects found at all. When...
Here is TFC result: Getting user folders. Stopping running processes. Emptying Temp folders. User: Administrator ->Temp folder emptied: 0...
Results of screen317's Security Check version 0.99.4 Windows XP Service Pack 3 Internet Explorer 6 Out of date!...
OLT Quick Scan: OTL logfile created on: 30/07/2010 02:40:59 - Run 2 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and...
Used JavaRa to remove old versions. Here is the fix log from OLT All processes killed ========== OTL ========== Starting removal of ActiveX...
OLT.txt OTL logfile created on: 30/07/2010 02:08:52 - Run 1 OTL by OldTimer - Version 3.2.9.1 Folder = C:\Documents and...
Results of fresh GMER: GMER 1.0.15.15281 - http://www.gmer.net Rootkit scan 2010-07-30 02:05:17 Windows 5.1.2600 Service Pack 3 Running:...
New ComboFix from CFScript: ComboFix 10-07-29.01 - Lebictch 30/07/2010 1:25.3.1 - x86 Microsoft Windows XP Professional...
The clicking sound issue is gone and so are the two svchosts that were running it :) I will post back now with the script results
New Combofix log: ComboFix 10-07-29.01 - Lebictch 30/07/2010 1:05.2.1 - x86 Microsoft Windows XP Professional...
I ran Fixmbr from the recovery console, it wrote a new MBR, i reran MBRcheck and the same error occurred :( MBRCheck, version 1.1.1 (c) 2010, AD...
I reran MBRCheck type 'y' and hit enter, and it just closed. No options given. I tried again thinking it was case sensitive with a 'Y' but it...
ahhh damnit, sorry about that, it says it right there in bright blue, I'm blind! Shall I rerun combofix?
Hmm, this is what I get. Do I have to run it from a specific directory / safe mode? MBRCheck, version 1.1.1 (c) 2010, AD \\.\C: -->...
ComboFix Logo Below: I disabled my AV as described in the link above, but ComboFix still said it was running, so I went ahead anyway - Just...
Yay! It's always good to identify culprits. Latest MBAM Log Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4364...
My apologies. I've removed it, but it is still happening.
Thanks for the speedy response: MBAM: Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4364 Windows 5.1.2600...
Definitely those 2 svchosts Using processxp I've managed to suspend the two suspicious svchosts that were running and the clicking has stopped....
Separate names with a comma.
