And after reboot, a working connection?? (please say yes :p )
Please right click the folder C:\Qoobox and select Send To>Compressed (Zipped) Folder. It will create a C:\Qoobox.zip file. Please upload the zip...
I see a number of suspicious files, so we're going to use ComboFix to gather samples for analysis. First, delete the ComboFix.exe file you...
You're welcome. Glad I could help. :)
Looks much better. Please highlight and copy the first bolded line below, click Start>Run, paste the line in the Run dialog then hit Enter. Then...
It didn't find any ... as in none at all? Did you click Reset Default anyway? You should have. If using default doesn't help (might need a...
Download ATF Cleaner by Atribune and save it to your Desktop. Double click ATF-Cleaner.exe to run the program. Check the boxes to the left...
Click Start>Run and type the following command, then hit Enter. sc stop dnscache Please download HostsFileReader.zip by Option^Explicit,...
I don't see anything suspect in your log. It appears you've made quite a number of changes recently ..... installing programs and such. It's...
Looks like ComboFix did a good job. How's the computer running now?
Great! Lets clean up now. Click Start>Run and type ComboFix /u then hit Enter to uninstall ComboFix and remove the files it has quarantined. This...
Now, click Start>Run and type in each of the following, then hit Enter. http://www.google.com http://www.windowsbbs.com Regardless of...
The Vista nslookup results are what I was hoping for on the XP machine. :p Let's see what we get with this. Run each of the commands in the...
Please run the nslookup command on your other computer as well. I'd like to know if the result is the same. Can you verify there are no IP...
Welcome to WindowsBBS net4profit :) You've still got some nasties lurking about. Download ComboFix by sUBs from here, saving the file to your...
Not sure I follow you here, so I'm making an educated guess. The big monitor you refer to is the following entry in your log....
Please open C:\Qoobox\Quarantine\Registry_backups You should see a file named similar to the following....
You've only posted a portion of the log. It probably is too large for 1 post, so you will need to split it up. The log is located at...
Should be the final run. ;) Please delete the ComboFix.exe file you currently have and download a fresh copy from here, saving it to your desktop....
Registry entries such as that are generally the result of malware. Lets use another tool to get a better look at things. Download Deckard's System...
Separate names with a comma.
