1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Active Mal/Generic-a and Mal/Emogen-r

Discussion in 'Malware and Virus Removal Archive' started by NehaN1992, 2009/05/31.

  1. 2009/05/31
    NehaN1992

    NehaN1992 Inactive Thread Starter

    Joined:
    2009/05/31
    Messages:
    4
    Likes Received:
    0
    [Active] Mal/Generic-a and Mal/Emogen-r

    My laptop started acting up a few days ago. My desktop completely changed, I lost all of my ituns music, and many of my filed were gone. I took it in to my local best buy geek squad to have them run a free diagnostic test, and they discovered that my laptop is infected with Mal/Generic-a and Mal/Emogen-r. Can you please help me get rid of these?

    Thank you so much!

    ** I have tried running Norton antivirus and Malwarebytes, but neither program picked up the viruses.
     
    NehaN1992,
    #1
  2. 2009/06/01
    PeteC

    PeteC SuperGeek Staff

    Joined:
    2002/05/10
    Messages:
    28,896
    Likes Received:
    389
    Welcome to WindowsBBS :)

    Please read this as clearly indicated at the head of the forum and post the logs requested in this thread.
     
    PeteC,
    #2


  3. to hide this advert.

  4. 2009/06/04
    NehaN1992

    NehaN1992 Inactive Thread Starter

    Joined:
    2009/05/31
    Messages:
    4
    Likes Received:
    0
    DDS (Ver_09-05-14.01) - NTFSx86
    Run by Katlin at 22:50:50.14 on Thu 06/04/2009
    Internet Explorer: 7.0.5730.13
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.758.351 [GMT -4:00]


    ============== Running Processes ===============

    C:\WINNT\system32\svchost -k DcomLaunch
    svchost.exe
    C:\WINNT\System32\svchost.exe -k netsvcs
    svchost.exe
    svchost.exe
    C:\WINNT\system32\spoolsv.exe
    svchost.exe
    C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
    C:\Program Files\AskBarDis\bar\bin\AskService.exe
    C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
    C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe
    C:\Program Files\Bonjour\mDNSResponder.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
    C:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe
    c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
    C:\WINNT\Explorer.EXE
    C:\WINNT\System32\svchost.exe -k imgsvc
    C:\Program Files\Viewpoint\Common\ViewpointService.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\WkUFind.exe
    C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
    C:\Program Files\iTunes\iTunesHelper.exe
    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
    C:\Program Files\Logitech\QuickCam\Quickcam.exe
    C:\WINNT\system32\ctfmon.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\iPod\bin\iPodService.exe
    C:\Program Files\Norton 360\Engine\3.0.0.135\ccSvcHst.exe
    c:\program files\aol\aim toolbar 5.0\AolTbServer.exe
    C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
    C:\Documents and Settings\TEMP\Desktop\dds.scr

    ============== Pseudo HJT Report ===============

    uStart Page = hxxp://www.google.com/
    uURLSearchHooks: AOLSearchHook Class: {54eb34ea-e6be-4cfd-9f4f-c4a0c2eafa22} - c:\program files\aim search\AOLSearch.dll
    mURLSearchHooks: AOLTBSearch Class: {ea756889-2338-43db-8f07-d1ca6fb9c90d} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
    BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
    BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
    BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
    BHO: AOLSearchHook Class: {54eb34ea-e6be-4cfd-9f4f-c4a0c2eafa22} - c:\program files\aim search\AOLSearch.dll
    BHO: Symantec NCO BHO: {602adb0e-4aff-4217-8aa1-95dac4dfa408} - c:\program files\norton 360\engine\3.0.0.135\coIEPlg.dll
    BHO: Symantec Intrusion Prevention: {6d53ec84-6aae-4787-aeee-f4628f01010c} - c:\program files\norton 360\engine\3.0.0.135\IPSBHO.DLL
    BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre1.5.0_08\bin\ssv.dll
    BHO: AOL Toolbar Launcher: {7c554162-8cb7-45a4-b8f4-8ea1c75885f9} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
    BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\progra~1\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
    TB: Easy-WebPrint: {327c2873-e90d-4c37-aa9d-10ac9baba46c} - c:\program files\canon\easy-webprint\Toolband.dll
    TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\progra~1\yahoo!\companion\installs\cpn0\yt.dll
    TB: AIM Toolbar: {de9c389f-3316-41a7-809b-aa305ed9d922} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
    TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
    TB: Norton Toolbar: {7febefe3-6b19-4349-98d2-ffb09d4b49ca} - c:\program files\norton 360\engine\3.0.0.135\coIEPlg.dll
    EB: Real.com: {fe54fa40-d68c-11d2-98fa-00c0f0318afe} - c:\winnt\system32\Shdocvw.dll
    EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
    uRun: [ctfmon.exe] c:\winnt\system32\ctfmon.exe
    uRun: [Aim6] "c:\program files\aim6\aim6.exe" /d locale=en-US ee://aol/imApp
    mRun: [SynTPLpr] c:\program files\synaptics\syntp\SynTPLpr.exe
    mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
    mRun: [IgfxTray] c:\winnt\system32\igfxtray.exe
    mRun: [HotKeysCmds] c:\winnt\system32\hkcmd.exe
    mRun: [Microsoft Works Update Detection] c:\program files\common files\microsoft shared\works shared\WkUFind.exe
    mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
    mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe "
    mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe "
    mRun: [LogitechQuickCamRibbon] "c:\program files\logitech\quickcam\Quickcam.exe" /hide
    mRun: [AVG8_TRAY] c:\progra~1\avg\avg8\avgtray.exe
    StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
    IE: &AIM Search - c:\program files\aol\aim toolbar 5.0\resources\en-us\local\search.html
    IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
    IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
    IE: {3369AF0D-62E9-4bda-8103-B4C75499B578} - {DE9C389F-3316-41A7-809B-AA305ED9D922} - c:\program files\aol\aim toolbar 5.0\aoltb.dll
    IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
    DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://www.apple.com/qtactivex/qtplugin.cab
    DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} - hxxp://upload.facebook.com/controls/2008.10.10_v5.5.8/FacebookPhotoUploader5.cab
    DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} - hxxp://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
    DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
    DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1179665420749
    DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab
    DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
    DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} - hxxp://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    DPF: {CAFEEFAC-0015-0000-0008-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab
    DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.5.0/jinstall-1_5_0_08-windows-i586.cab
    DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
    Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
    Handler: symres - {AA1061FE-6C41-421f-9344-69640C9732AB} - c:\program files\norton 360\engine\3.0.0.135\CoIEPlg.dll
    Notify: avgrsstarter - avgrsstx.dll
    Notify: igfxcui - igfxsrvc.dll
    SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\winnt\system32\WPDShServiceObj.dll

    ============= SERVICES / DRIVERS ===============

    R0 SymEFA;Symantec Extended File Attributes;c:\winnt\system32\drivers\n360\0300000.087\SymEFA.sys [2009-5-31 310320]
    R1 BHDrvx86;Symantec Heuristics Driver;c:\winnt\system32\drivers\n360\0300000.087\BHDrvx86.sys [2009-5-31 258608]
    R1 ccHP;Symantec Hash Provider;c:\winnt\system32\drivers\n360\0300000.087\cchpx86.sys [2009-5-31 482352]
    R1 IDSxpx86;IDSxpx86;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\ipsdefs\20090528.001\IDSXpx86.sys [2009-5-31 276344]
    R2 ASKService;ASKService;c:\program files\askbardis\bar\bin\AskService.exe [2009-1-27 464264]
    R2 ASKUpgrade;ASKUpgrade;c:\program files\askbardis\bar\bin\ASKUpgrade.exe [2009-1-27 234888]
    R2 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service;c:\program files\microsoft small business\business contact manager\BcmSqlStartupSvc.exe [2008-1-11 30312]
    R2 N360;Norton 360;c:\program files\norton 360\engine\3.0.0.135\ccSvcHst.exe [2009-5-31 115560]
    R2 Viewpoint Manager Service;Viewpoint Manager Service;c:\program files\viewpoint\common\ViewpointService.exe [2007-1-13 24652]
    R3 EraserUtilRebootDrv;EraserUtilRebootDrv;c:\program files\common files\symantec shared\eengine\EraserUtilRebootDrv.sys [2009-5-31 101936]
    R3 MSSQL$MSSMLBIZ;SQL Server (MSSMLBIZ);c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe [2008-11-24 29263712]
    R3 NAVENG;NAVENG;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20090531.018\NAVENG.SYS [2009-5-31 89104]
    R3 NAVEX15;NAVEX15;c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\norton\definitions\virusdefs\20090531.018\NAVEX15.SYS [2009-5-31 876144]
    R3 rtl8180;Realtek RTL8180 Wireless LAN (Mini-)PCI NIC NT Driver;c:\winnt\system32\drivers\RTL8180.sys [1980-1-1 171392]
    S2 Avg7Alrt;AVG7 Alert Manager Server;c:\progra~1\grisoft\avgfre~1\avgamsvr.exe [2006-1-9 336896]
    S2 Avg7UpdSvc;AVG7 Update Service;c:\progra~1\grisoft\avgfre~1\avgupsvc.exe [2006-1-9 84480]
    S3 HPZs2k12;Storage Class Driver for IEEE-1284.4 (HPZ12);c:\winnt\system32\drivers\HPZs2k12.sys [2004-4-14 49944]
    S3 SDVC05;USB SDVC05;c:\winnt\system32\drivers\sdvc05.sys --> c:\winnt\system32\drivers\SDVC05.sys [?]

    =============== Created Last 30 ================

    2009-05-31 19:36 <DIR> --d----- c:\docume~1\alluse~1\applic~1\{7B6BA59A-FB0E-4499-8536-A7420338BF3B}
    2009-05-31 19:34 36,400 a----r-- c:\winnt\system32\drivers\SymIM.sys
    2009-05-31 19:33 60,808 a------- c:\winnt\system32\S32EVNT1.DLL
    2009-05-31 19:33 7,386 a------- c:\winnt\system32\drivers\SYMEVENT.CAT
    2009-05-31 19:33 124,464 a------- c:\winnt\system32\drivers\SYMEVENT.SYS
    2009-05-31 19:33 805 a------- c:\winnt\system32\drivers\SYMEVENT.INF
    2009-05-31 19:33 <DIR> --d----- c:\program files\Symantec
    2009-05-31 19:33 <DIR> --d----- c:\program files\common files\Symantec Shared
    2009-05-31 19:30 <DIR> --d----- c:\winnt\system32\drivers\N360
    2009-05-31 19:30 <DIR> --d----- c:\program files\Norton 360
    2009-05-31 19:30 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Norton
    2009-05-31 19:30 <DIR> --d----- c:\program files\NortonInstaller
    2009-05-31 19:30 <DIR> --d----- c:\docume~1\alluse~1\applic~1\NortonInstaller
    2009-05-31 19:23 <DIR> --d----- c:\docume~1\temp\applic~1\GetRightToGo
    2009-05-30 14:38 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Kaspersky Lab Setup Files
    2009-05-30 09:07 <DIR> --d----- c:\docume~1\temp\applic~1\Malwarebytes
    2009-05-29 15:41 <DIR> --d----- c:\docume~1\temp\applic~1\Webroot
    2009-05-27 12:24 <DIR> --d----- c:\documents and settings\TEMP
    2009-05-14 08:21 56 a---h--- c:\winnt\system32\ezsidmv.dat
    2009-05-14 08:14 <DIR> --d--r-- c:\program files\Skype

    ==================== Find3M ====================

    2009-05-26 13:20 40,160 a------- c:\winnt\system32\drivers\mbamswissarmy.sys
    2009-05-26 13:19 19,096 a------- c:\winnt\system32\drivers\mbam.sys
    2009-04-23 07:24 47,104 a--sh--- c:\winnt\system32\jepenahi.exe
    2009-03-21 10:18 986,112 -------- c:\winnt\system32\dllcache\kernel32.dll
    2009-02-26 12:21 13,748,250 a------- c:\program files\PROCESSLIST.DB
    2009-02-26 12:21 1,126,486 a------- c:\program files\PROCESSLISTRELATED.DB

    ============= FINISH: 22:52:50.45 ===============








    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-05-14.01)

    Microsoft Windows XP Home Edition
    Boot Device: \Device\HarddiskVolume1
    Install Date: 4/14/2004 8:24:19 AM
    System Uptime: 6/4/2009 10:36:42 PM (0 hours ago)

    Motherboard: Gateway | | Gateway M305CRV
    Processor: Mobile Intel(R) Celeron(R) CPU 2.40GHz | uFCPGA2 | 2390/400mhz

    ==== Disk Partitions =========================

    C: is FIXED (NTFS) - 37 GiB total, 6.556 GiB free.
    D: is CDROM ()

    ==== Disabled Device Manager Items =============

    ==== System Restore Points ===================

    RP1158: 4/8/2009 5:35:36 AM - System Checkpoint
    RP1159: 4/9/2009 5:45:34 AM - System Checkpoint
    RP1160: 4/10/2009 6:31:01 AM - System Checkpoint
    RP1161: 4/11/2009 7:32:00 AM - System Checkpoint
    RP1162: 4/12/2009 12:47:32 PM - System Checkpoint
    RP1163: 4/13/2009 1:20:16 PM - System Checkpoint
    RP1164: 4/14/2009 3:17:59 PM - System Checkpoint
    RP1165: 4/15/2009 3:21:18 PM - System Checkpoint
    RP1166: 4/16/2009 3:41:22 PM - System Checkpoint
    RP1167: 4/17/2009 3:11:17 AM - Software Distribution Service 3.0
    RP1168: 4/18/2009 5:25:09 AM - System Checkpoint
    RP1169: 4/19/2009 1:46:36 PM - System Checkpoint
    RP1170: 4/20/2009 1:58:03 PM - System Checkpoint
    RP1171: 4/21/2009 3:11:44 PM - System Checkpoint
    RP1172: 4/22/2009 3:18:30 PM - System Checkpoint
    RP1173: 4/23/2009 7:09:46 PM - System Checkpoint
    RP1174: 4/24/2009 8:07:20 PM - System Checkpoint
    RP1175: 4/25/2009 8:24:27 PM - System Checkpoint
    RP1176: 4/26/2009 8:39:46 PM - System Checkpoint
    RP1177: 4/27/2009 10:20:23 PM - System Checkpoint
    RP1178: 4/28/2009 10:38:34 PM - System Checkpoint
    RP1179: 4/29/2009 10:39:55 PM - System Checkpoint
    RP1180: 4/30/2009 11:38:50 PM - System Checkpoint
    RP1181: 5/2/2009 6:15:19 AM - System Checkpoint
    RP1182: 5/3/2009 6:39:07 AM - System Checkpoint
    RP1183: 5/4/2009 6:54:56 AM - System Checkpoint
    RP1184: 5/5/2009 7:39:36 AM - System Checkpoint
    RP1185: 5/6/2009 1:15:38 PM - System Checkpoint
    RP1186: 5/7/2009 2:05:57 PM - System Checkpoint
    RP1187: 5/8/2009 2:43:54 PM - System Checkpoint
    RP1188: 5/9/2009 2:57:02 PM - System Checkpoint
    RP1189: 5/10/2009 5:06:08 PM - System Checkpoint
    RP1190: 5/11/2009 5:39:51 PM - System Checkpoint
    RP1191: 5/12/2009 5:50:50 PM - System Checkpoint
    RP1192: 5/13/2009 6:23:47 PM - System Checkpoint
    RP1193: 5/14/2009 7:55:33 PM - System Checkpoint
    RP1194: 5/15/2009 9:19:32 PM - System Checkpoint
    RP1195: 5/17/2009 3:35:51 PM - System Checkpoint
    RP1196: 5/18/2009 5:18:06 PM - System Checkpoint
    RP1197: 5/19/2009 5:38:02 PM - System Checkpoint
    RP1198: 5/20/2009 6:23:16 PM - System Checkpoint
    RP1199: 5/21/2009 7:11:51 PM - System Checkpoint
    RP1200: 5/22/2009 7:14:31 PM - System Checkpoint
    RP1201: 5/23/2009 8:03:21 PM - System Checkpoint
    RP1202: 5/24/2009 9:13:23 PM - System Checkpoint
    RP1203: 5/27/2009 1:07:45 PM - System Checkpoint
    RP1204: 5/28/2009 1:20:53 PM - System Checkpoint
    RP1205: 5/30/2009 9:21:40 AM - Installed AVG 8.5

    ==== Installed Programs ======================

    2007 Microsoft Office Suite Service Pack 1 (SP1)
    303 Game Collection
    Ad-Aware SE Personal
    Adobe Atmosphere Player for Acrobat and Adobe Reader
    Adobe Download Manager 2.2 (Remove Only)
    Adobe Flash Player 10 ActiveX
    Adobe Reader 7.0
    AIM 6
    AIM Search
    AIM Toolbar 5.0
    AIMTunes
    Apple Mobile Device Support
    Apple Software Update
    ArcSoft Software Suite
    Ares Tube 3.0
    Audacity 1.2.6
    Bonjour
    Business Contact Manager for Outlook 2007 SP1
    Camera Support Core Library
    Camera Window
    Canon Camera Support Core Library
    Canon Camera Window for ZoomBrowser EX
    Canon i80
    Canon MovieEdit Task for ZoomBrowser EX
    Canon PhotoRecord
    Canon RAW Image Task for ZoomBrowser EX
    Canon RemoteCapture Task for ZoomBrowser EX
    Canon Utilities Easy-PhotoPrint
    Canon Utilities Easy-PhotoPrint Plus
    Canon Utilities PhotoStitch 3.1
    Canon Utilities ZoomBrowser EX
    Critical Update for Windows Media Player 11 (KB959772)
    DVD
    Easy-WebPrint
    Easy CD Creator 5 Basic
    Gateway Rhapsody
    GEAR driver installer for x86 and x64
    GTW V.92 Voicemodem
    HijackThis 2.0.2
    Hotfix for Windows Media Format 11 SDK (KB929399)
    Hotfix for Windows Media Player 11 (KB939683)
    Hotfix for Windows XP (KB914440)
    Hotfix for Windows XP (KB915865)
    Hotfix for Windows XP (KB926239)
    Hotfix for Windows XP (KB952287)
    hp deskjet 450 printer Uninstaller
    i80 Setup Utility
    Intel(R) Extreme Graphics Driver
    Intel(R) PRO Ethernet Adapter and Software
    iPod for Windows 2006-03-23
    iPod for Windows 2006-06-28
    iTunes
    J2SE Runtime Environment 5.0 Update 8
    Java 2 Runtime Environment, SE v1.4.2
    LimeWire 4.18.8
    Logitech QuickCam
    Logitech QuickCam Driver Package
    Malwarebytes' Anti-Malware
    Microsoft .NET Framework 1.1
    Microsoft .NET Framework 1.1 Hotfix (KB928366)
    Microsoft .NET Framework 2.0
    Microsoft Application Error Reporting
    Microsoft Compression Client Pack 1.0 for Windows XP
    Microsoft Data Access Components KB870669
    Microsoft Excel 97
    Microsoft Internationalized Domain Names Mitigation APIs
    Microsoft Learning and Research Plus Support Files
    Microsoft National Language Support Downlevel APIs
    Microsoft Office 2003 Web Components
    Microsoft Office 2007 Primary Interop Assemblies
    Microsoft Office Access MUI (English) 2007
    Microsoft Office Access Setup Metadata MUI (English) 2007
    Microsoft Office Accounting 2008
    Microsoft Office Accounting 2008 Equifax Addin
    Microsoft Office Accounting 2008 Fixed Asset Manager
    Microsoft Office Accounting 2008 PayPal Addin
    Microsoft Office Accounting ADP Payroll Addin
    Microsoft Office Excel MUI (English) 2007
    Microsoft Office Outlook MUI (English) 2007
    Microsoft Office PowerPoint MUI (English) 2007
    Microsoft Office Professional 2007
    Microsoft Office Proof (English) 2007
    Microsoft Office Proof (French) 2007
    Microsoft Office Proof (Spanish) 2007
    Microsoft Office Proofing (English) 2007
    Microsoft Office Publisher MUI (English) 2007
    Microsoft Office Shared MUI (English) 2007
    Microsoft Office Shared Setup Metadata MUI (English) 2007
    Microsoft Office Small Business Connectivity Components
    Microsoft Office Word MUI (English) 2007
    Microsoft Picture It! Express 7.0
    Microsoft Software Update for Web Folders (English) 12
    Microsoft SQL Server 2005
    Microsoft SQL Server 2005 Express Edition (MSSMLBIZ)
    Microsoft SQL Server 2005 Tools Express Edition
    Microsoft SQL Server Native Client
    Microsoft SQL Server Setup Support Files (English)
    Microsoft SQL Server VSS Writer
    Microsoft Text-to-Speech Engine 4.0 (English)
    Microsoft User-Mode Driver Framework Feature Pack 1.0
    Microsoft Visual C++ 2005 Redistributable
    Microsoft Word 97
    Microsoft Works 7.0
    MovieEdit Task
    MSN Internet Software
    MSXML 6 Service Pack 2 (KB954459)
    Norton 360
    PhotoStitch
    QuickTime
    RAW Image Task
    RAW Image Task 1.1
    RealPlayer Basic
    RemoteCapture Task
    RemoteCapture Task 1.0.3
    Security Update for 2007 Microsoft Office System (KB951550)
    Security Update for 2007 Microsoft Office System (KB951944)
    Security Update for 2007 Microsoft Office System (KB960003)
    Security Update for CAPICOM (KB931906)
    Security Update for Microsoft Office Excel 2007 (KB959997)
    Security Update for Microsoft Office PowerPoint 2007 (KB951338)
    Security Update for Microsoft Office Publisher 2007 (KB950114)
    Security Update for Microsoft Office system 2007 (KB954326)
    Security Update for Microsoft Office system 2007 (KB956828)
    Security Update for Microsoft Office Word 2007 (KB956358)
    Security Update for Step By Step Interactive Training (KB898458)
    Security Update for Step By Step Interactive Training (KB923723)
    Security Update for Windows Internet Explorer 7 (KB938127-v2)
    Security Update for Windows Internet Explorer 7 (KB938127)
    Security Update for Windows Internet Explorer 7 (KB956390)
    Security Update for Windows Internet Explorer 7 (KB958215)
    Security Update for Windows Internet Explorer 7 (KB960714)
    Security Update for Windows Internet Explorer 7 (KB961260)
    Security Update for Windows Internet Explorer 7 (KB963027)
    Security Update for Windows Media Player (KB911564)
    Security Update for Windows Media Player (KB952069)
    Security Update for Windows Media Player 10 (KB911565)
    Security Update for Windows Media Player 10 (KB917734)
    Security Update for Windows Media Player 10 (KB936782)
    Security Update for Windows Media Player 11 (KB936782)
    Security Update for Windows Media Player 11 (KB954154)
    Security Update for Windows Media Player 6.4 (KB925398)
    Security Update for Windows XP (KB890046)
    Security Update for Windows XP (KB893066)
    Security Update for Windows XP (KB893756)
    Security Update for Windows XP (KB896358)
    Security Update for Windows XP (KB896422)
    Security Update for Windows XP (KB896423)
    Security Update for Windows XP (KB896424)
    Security Update for Windows XP (KB896428)
    Security Update for Windows XP (KB899587)
    Security Update for Windows XP (KB899588)
    Security Update for Windows XP (KB899591)
    Security Update for Windows XP (KB900725)
    Security Update for Windows XP (KB901017)
    Security Update for Windows XP (KB901214)
    Security Update for Windows XP (KB902400)
    Security Update for Windows XP (KB904706)
    Security Update for Windows XP (KB905414)
    Security Update for Windows XP (KB905749)
    Security Update for Windows XP (KB908519)
    Security Update for Windows XP (KB911562)
    Security Update for Windows XP (KB911927)
    Security Update for Windows XP (KB912919)
    Security Update for Windows XP (KB913446)
    Security Update for Windows XP (KB913580)
    Security Update for Windows XP (KB914388)
    Security Update for Windows XP (KB914389)
    Security Update for Windows XP (KB917344)
    Security Update for Windows XP (KB917422)
    Security Update for Windows XP (KB917953)
    Security Update for Windows XP (KB918118)
    Security Update for Windows XP (KB919007)
    Security Update for Windows XP (KB920213)
    Security Update for Windows XP (KB920670)
    Security Update for Windows XP (KB920683)
    Security Update for Windows XP (KB920685)
    Security Update for Windows XP (KB921398)
    Security Update for Windows XP (KB921503)
    Security Update for Windows XP (KB921883)
    Security Update for Windows XP (KB922616)
    Security Update for Windows XP (KB922819)
    Security Update for Windows XP (KB923191)
    Security Update for Windows XP (KB923414)
    Security Update for Windows XP (KB923561)
    Security Update for Windows XP (KB923689)
    Security Update for Windows XP (KB923980)
    Security Update for Windows XP (KB924191)
    Security Update for Windows XP (KB924270)
    Security Update for Windows XP (KB924496)
    Security Update for Windows XP (KB924667)
    Security Update for Windows XP (KB925902)
    Security Update for Windows XP (KB926255)
    Security Update for Windows XP (KB926436)
    Security Update for Windows XP (KB927779)
    Security Update for Windows XP (KB927802)
    Security Update for Windows XP (KB928255)
    Security Update for Windows XP (KB928843)
    Security Update for Windows XP (KB929123)
    Security Update for Windows XP (KB929969)
    Security Update for Windows XP (KB930178)
    Security Update for Windows XP (KB931261)
    Security Update for Windows XP (KB931784)
    Security Update for Windows XP (KB932168)
    Security Update for Windows XP (KB933566)
    Security Update for Windows XP (KB933729)
    Security Update for Windows XP (KB935839)
    Security Update for Windows XP (KB935840)
    Security Update for Windows XP (KB936021)
    Security Update for Windows XP (KB937143)
    Security Update for Windows XP (KB938127)
    Security Update for Windows XP (KB938464)
    Security Update for Windows XP (KB938829)
    Security Update for Windows XP (KB939653)
    Security Update for Windows XP (KB941202)
    Security Update for Windows XP (KB941568)
    Security Update for Windows XP (KB941569)
    Security Update for Windows XP (KB941644)
    Security Update for Windows XP (KB941693)
    Security Update for Windows XP (KB942615)
    Security Update for Windows XP (KB943055)
    Security Update for Windows XP (KB943460)
    Security Update for Windows XP (KB943485)
    Security Update for Windows XP (KB944338)
    Security Update for Windows XP (KB944533)
    Security Update for Windows XP (KB944653)
    Security Update for Windows XP (KB945553)
    Security Update for Windows XP (KB946026)
    Security Update for Windows XP (KB946648)
    Security Update for Windows XP (KB947864)
    Security Update for Windows XP (KB948590)
    Security Update for Windows XP (KB948881)
    Security Update for Windows XP (KB950749)
    Security Update for Windows XP (KB950759)
    Security Update for Windows XP (KB950760)
    Security Update for Windows XP (KB950762)
    Security Update for Windows XP (KB950974)
    Security Update for Windows XP (KB951066)
    Security Update for Windows XP (KB951376-v2)
    Security Update for Windows XP (KB951376)
    Security Update for Windows XP (KB951698)
    Security Update for Windows XP (KB951748)
    Security Update for Windows XP (KB952004)
    Security Update for Windows XP (KB952954)
    Security Update for Windows XP (KB953838)
    Security Update for Windows XP (KB953839)
    Security Update for Windows XP (KB954211)
    Security Update for Windows XP (KB954600)
    Security Update for Windows XP (KB955069)
    Security Update for Windows XP (KB956390)
    Security Update for Windows XP (KB956391)
    Security Update for Windows XP (KB956572)
    Security Update for Windows XP (KB956802)
    Security Update for Windows XP (KB956803)
    Security Update for Windows XP (KB956841)
    Security Update for Windows XP (KB957095)
    Security Update for Windows XP (KB957097)
    Security Update for Windows XP (KB958215)
    Security Update for Windows XP (KB958644)
    Security Update for Windows XP (KB958687)
    Security Update for Windows XP (KB958690)
    Security Update for Windows XP (KB959426)
    Security Update for Windows XP (KB960225)
    Security Update for Windows XP (KB960714)
    Security Update for Windows XP (KB960715)
    Security Update for Windows XP (KB960803)
    Security Update for Windows XP (KB961373)
    Shockwave
    Skype™ 4.0
    Spybot - Search & Destroy 1.4
    Synaptics TouchPad
    Update for Microsoft Office Outlook 2007 (KB952142)
    Update for Office 2007 (KB946691)
    Update for Outlook 2007 Junk Email Filter (kb962871)
    Update for Windows XP (KB894391)
    Update for Windows XP (KB898461)
    Update for Windows XP (KB900485)
    Update for Windows XP (KB904942)
    Update for Windows XP (KB908531)
    Update for Windows XP (KB910437)
    Update for Windows XP (KB911280)
    Update for Windows XP (KB916595)
    Update for Windows XP (KB920872)
    Update for Windows XP (KB922582)
    Update for Windows XP (KB927891)
    Update for Windows XP (KB930916)
    Update for Windows XP (KB931836)
    Update for Windows XP (KB933360)
    Update for Windows XP (KB936357)
    Update for Windows XP (KB938828)
    Update for Windows XP (KB942763)
    Update for Windows XP (KB942840)
    Update for Windows XP (KB946627)
    Update for Windows XP (KB951072-v2)
    Update for Windows XP (KB955839)
    Update for Windows XP (KB967715)
    Viewpoint Manager (Remove Only)
    Viewpoint Media Player
    Vuze
    Vuze Toolbar
    WebFldrs XP
    Windows Genuine Advantage Notifications (KB905474)
    Windows Genuine Advantage Validation Tool (KB892130)
    Windows Installer 3.1 (KB893803)
    Windows Internet Explorer 7
    Windows Media Format 11 runtime
    Windows Media Player 11
    Windows Media Player 9 Hotfix [See KB885492 for more information]
    Windows XP Hotfix - KB873333
    Windows XP Hotfix - KB873339
    Windows XP Hotfix - KB885835
    Windows XP Hotfix - KB885836
    Windows XP Hotfix - KB886185
    Windows XP Hotfix - KB887472
    Windows XP Hotfix - KB888113
    Windows XP Hotfix - KB888302
    Windows XP Hotfix - KB890175
    Windows XP Hotfix - KB890859
    Windows XP Hotfix - KB891781
    Windows XP Hotfix - KB893086
    Windows XP Service Pack 2
    Yahoo! Install Manager
    Yahoo! Messenger
    Yahoo! Toolbar

    ==== Event Viewer Messages From Past Week ========

    5/31/2009 10:07:43 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service netman with arguments " " in order to run the server: {BA126AE5-2166-11D1-B1D0-00805FC1270E}
    5/31/2009 10:05:06 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments " " in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
    5/30/2009 8:53:07 AM, error: Dhcp [1002] - The IP address lease 192.168.1.100 for the Network Card with network address 000DF0125EAC has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
    5/29/2009 3:42:50 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service wuauserv with arguments " " in order to run the server: {E60687F7-01A1-40AA-86AC-DB1CBF673334}

    ==== End Of File ===========================
     
    NehaN1992,
    #3
  5. 2009/06/04
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Print these instructions out.

    NOTE. If any of the programs listed below refuse to run, try renaming executive file to something else; for instance, rename hijackthis.exe to scanner.exe

    ***VERY IMPORTANT! Make sure, you update Superantispyware, and Malwarebytes before running the scans.***

    STEP 1. Download SUPERAntiSpyware Free for Home Users:
    http://www.superantispyware.com/

    * Double-click SUPERAntiSpyware.exe and use the default settings for installation.
    * An icon will be created on your desktop. Double-click that icon to launch the program.
    * If asked to update the program definitions, click "Yes ". If not, update the definitions before scanning by selecting "Check for Updates ". (If you encounter any problems while downloading the updates, manually download and unzip them from here: http://www.superantispyware.com/definitions.html.)
    * Close SUPERAntiSpyware.

    PHYSICALLY DISCONNECT FROM THE INTERNET

    Restart computer in Safe Mode.
    To enter Safe Mode, restart computer, and keep tapping F8 key, until menu appears; select Safe Mode; you'll see "Safe Mode" in all four corners of your screen

    * Open SUPERAntiSpyware.
    * Click Scan your Computer... button.
    * Click Scanning Preferences/Control Center... button.
    * Under General and Startup tab, make sure, Start SUPERAntiSpyware when Windows starts option is UN-checked.
    * Click the Scanning Control tab.
    * Under Scanner Options make sure the following are checked (leave all others unchecked):
    - Close browsers before scanning.
    - Terminate memory threats before quarantining.
    * Click the Close button to leave the control center screen.
    * On the left, make sure you check C:\Fixed Drive.
    * On the right, choose Perform Complete Scan.
    * Click Next to start the scan. Please be patient while it scans your computer.
    * After the scan is complete, a Scan Summary box will appear with potentially harmful items that were detected. Click OK.
    * Make sure everything has a checkmark next to it and click Next.
    * A notification will appear that Quarantine and Removal is Complete. Click OK and then click the Finish button to return to the main menu.
    * If asked if you want to reboot, click Yes.
    * To retrieve the removal information after reboot, launch SUPERAntispyware again.
    - Click Preferences, then click the Statistics/Logs tab.
    - Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
    - If there are several logs, click the current dated log and press View log. A text file will open in your default text editor.
    - Please copy and paste the Scan Log results in your next reply.
    * Click Close to exit the program.
    Post SUPERAntiSpyware log.

    RECONNECT TO THE INTERNET

    RESTART COMPUTER!

    STEP 2. Download Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php to your desktop.
    (Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)

    * Double-click mbam-setup.exe and follow the prompts to install the program.
    * At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
    * If an update is found, it will download and install the latest version.
    * Once the program has loaded, select Perform full scan, then click Scan.
    * When the scan is complete, click OK, then Show Results to view the results.
    * Be sure that everything is checked, and click Remove Selected.
    * When completed, a log will open in Notepad.
    * Post the log back here.

    The log can also be found here:
    C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
    Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

    RESTART COMPUTER!

    STEP 3. Download GMER: http://www.gmer.net/files.php, by clicking on Download EXE button.
    Alternative downloads:
    - http://majorgeeks.com/GMER_d5198.html
    - http://www.softpedia.com/get/Interne...ers/GMER.shtml
    Double click on downloaded .exe file, select Rootkit tab and click the Scan button.
    When scan is completed, click Save button, and save the results as gmer.log
    Warning ! Please, do not select the "Show all" checkbox during the scan.
    Post the log to your next reply.

    RESTART COMPUTER

    STEP 4. Download HijackThis:
    http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download
    by clicking on Download HijackThis Installer
    Install, and run it.
    Post HijackThis log.
    Do NOT attempt to "fix" anything!


    DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!
     
    broni,
    #4
  6. 2009/06/05
    NehaN1992

    NehaN1992 Inactive Thread Starter

    Joined:
    2009/05/31
    Messages:
    4
    Likes Received:
    0
    SUPERAntiSpyware Scan Log
    http://www.superantispyware.com

    Generated 06/05/2009 at 04:06 PM

    Application Version : 4.26.1004

    Core Rules Database Version : 3925
    Trace Rules Database Version: 1869

    Scan type : Complete Scan
    Total Scan Time : 06:54:19

    Memory items scanned : 226
    Memory threats detected : 0
    Registry items scanned : 6748
    Registry threats detected : 65
    File items scanned : 107680
    File threats detected : 2

    Rootkit.Agent/Gen
    HKLM\SOFTWARE\UAC
    HKLM\SOFTWARE\UAC#build
    HKLM\SOFTWARE\UAC#type
    HKLM\SOFTWARE\UAC#affid
    HKLM\SOFTWARE\UAC#subid
    HKLM\SOFTWARE\UAC#EPROCESS_LEOffset
    HKLM\SOFTWARE\UAC#EPROCESS_NameOffset
    HKLM\SOFTWARE\UAC#uncc
    HKLM\SOFTWARE\UAC#cmddelay
    HKLM\SOFTWARE\UAC#ecaab67d-7d92-4ec1-ac32-3087345120a3
    HKLM\SOFTWARE\UAC#val
    HKLM\SOFTWARE\UAC#sval
    HKLM\SOFTWARE\UAC#LastBSOD
    HKLM\SOFTWARE\UAC#pval
    HKLM\SOFTWARE\UAC\connections
    HKLM\SOFTWARE\UAC\connections#905b3008
    HKLM\SOFTWARE\UAC\connections#20d04c0a
    HKLM\SOFTWARE\UAC\connections#fe8cd514
    HKLM\SOFTWARE\UAC\disallowed
    HKLM\SOFTWARE\UAC\disallowed#trsetup.exe
    HKLM\SOFTWARE\UAC\disallowed#ViewpointService.exe
    HKLM\SOFTWARE\UAC\disallowed#ViewMgr.exe
    HKLM\SOFTWARE\UAC\disallowed#SpySweeper.exe
    HKLM\SOFTWARE\UAC\disallowed#SUPERAntiSpyware.exe
    HKLM\SOFTWARE\UAC\disallowed#SpySub.exe
    HKLM\SOFTWARE\UAC\disallowed#SpywareTerminatorShield.exe
    HKLM\SOFTWARE\UAC\disallowed#SpyHunter3.exe
    HKLM\SOFTWARE\UAC\disallowed#XoftSpy.exe
    HKLM\SOFTWARE\UAC\disallowed#SpyEraser.exe
    HKLM\SOFTWARE\UAC\disallowed#combofix.exe
    HKLM\SOFTWARE\UAC\disallowed#otscanit.exe
    HKLM\SOFTWARE\UAC\disallowed#mbam.exe
    HKLM\SOFTWARE\UAC\disallowed#mbam-setup.exe
    HKLM\SOFTWARE\UAC\disallowed#flash_disinfector.exe
    HKLM\SOFTWARE\UAC\disallowed#otmoveit2.exe
    HKLM\SOFTWARE\UAC\disallowed#smitfraudfix.exe
    HKLM\SOFTWARE\UAC\disallowed#prevxcsifree.exe
    HKLM\SOFTWARE\UAC\disallowed#download_mbam-setup.exe
    HKLM\SOFTWARE\UAC\disallowed#cbo_setup.exe
    HKLM\SOFTWARE\UAC\disallowed#spywareblastersetup.exe
    HKLM\SOFTWARE\UAC\disallowed#rminstall.exe
    HKLM\SOFTWARE\UAC\disallowed#sdsetup.exe
    HKLM\SOFTWARE\UAC\disallowed#vundofixsvc.exe
    HKLM\SOFTWARE\UAC\disallowed#daft.exe
    HKLM\SOFTWARE\UAC\disallowed#gmer.exe
    HKLM\SOFTWARE\UAC\disallowed#catchme.exe
    HKLM\SOFTWARE\UAC\disallowed#mcpr.exe
    HKLM\SOFTWARE\UAC\disallowed#sdfix.exe
    HKLM\SOFTWARE\UAC\disallowed#hjtinstall.exe
    HKLM\SOFTWARE\UAC\disallowed#fixpolicies.exe
    HKLM\SOFTWARE\UAC\disallowed#emergencyutil.exe
    HKLM\SOFTWARE\UAC\disallowed#techweb.exe
    HKLM\SOFTWARE\UAC\disallowed#GoogleUpdate.exe
    HKLM\SOFTWARE\UAC\disallowed#windowsdefender.exe
    HKLM\SOFTWARE\UAC\disallowed#spybotsd.exe
    HKLM\SOFTWARE\UAC\disallowed#winlognn.exe
    HKLM\SOFTWARE\UAC\disallowed#csrssc.exe
    HKLM\SOFTWARE\UAC\injector
    HKLM\SOFTWARE\UAC\injector#*
    HKLM\SOFTWARE\UAC\mask
    HKLM\SOFTWARE\UAC\mask#1ff574de
    HKLM\SOFTWARE\UAC\mask#f5d692d5
    HKLM\SOFTWARE\UAC\mask#a3d50932
    HKLM\SOFTWARE\UAC\versions
    HKLM\SOFTWARE\UAC\versions#/banner/crcmds/init

    Adware.Vundo/Variant-Helper
    C:\SYSTEM VOLUME INFORMATION\_RESTORE{8002FAC4-987A-423F-A02F-FD2F3B3F135B}\RP1192\A0244467.DLL

    Application.PowerReg Scheduler
    C:\WINNT\PSS\POWERREG SCHEDULER V3.EXESTARTUP
     
    NehaN1992,
    #5
  7. 2009/06/08
    NehaN1992

    NehaN1992 Inactive Thread Starter

    Joined:
    2009/05/31
    Messages:
    4
    Likes Received:
    0
    I ran the superantivurs spyware, and I posted those results. I ran malwarebytes as well, but it did not pick anything up. I have tried numerous times to run the next program, but my laptop shuts off after the program has been running for about 5-6 hours, so I haven't been able to run that scan. From looking at what I have done so far, can you tell what is wrong? Or, can you give me some other suggestions of what I should do?

    Thanks
     
    NehaN1992,
    #6
  8. 2009/06/08
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    That's fine.
    Yes, you have a rootkit, and some vundo, so far, but don't worry about.
    We'll kill'em all :)

    Please download ComboFix from [color= "Red"]Here[/color] or [color= "#FF0000"]Here[/color] to your Desktop.

    **Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**
    1. Please, never rename Combofix unless instructed.
    2. Close any open browsers.
    3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
      • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results ".
      • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
      • Close any open browsers.
      • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
      • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
      • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
    4. Double click on combofix.exe & follow the prompts.
    5. When finished, it will produce a report for you.
    6. Please post the "C:\ComboFix.txt" along with a new HijackThis log for further review.
    **Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

    Make sure, you re-enable your security programs, when you're done with Combofix.
     
    broni,
    #7

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...