Search:

Hey there dear friends,
My mate's pc is badly mistreated by him and I suspected heavily infected. I've run spybot scan and smitfraud, virtumonde and a bunch of other stuff popped up. Wasn't able to...

No need to apologize, you've given your free time to help me correct my own mistakes several times and it's highly appreciated. Just wanted to check I had the all-clear, so to speak. Profuse thanks...

Just for future reference to future readers: I have uninstalled Norton and have replaced it with Comodo and Nod32 working in glorious fashion. These two fine pieces of software run smoothly without...

Kool and the Gang. Once my current problem is officially diagnosed as sorted I will endeavour to follow your example and install Comodo and Eset Nod32, after getting rid of Norton's foul scourge....

After going through the trouble of cleaning up my PC again with the kind help of pskelley again I've been thoroughly reviewing the advice given on here as to how to avoid malware catastrophe. Amongst...

Here we go sir:

Malwarebytes' Anti-Malware 1.17
Database version: 861

17:19:58 16/06/2008
mbam-log-6-16-2008 (17-19-58).txt

Scan type: Full Scan (C:\|)
Objects scanned: 111748

Well all instructions have been followed and problems seem to have subsided once more. I copied and pasted the error code from the alert itself, so I was also surprised not to find any reference to...

Hi there,

Firstly here's the error that I was first alerted to which has now reoccurred:

BCCode : 1000000a BCP1 : D36F44DC BCP2 : 00000002 BCP3 : 00000000
BCP4 : 8051EC9E OSVer...

I came to my PC today after a few days away from home and found windows telling me it had recovered from a major error(?) Aaaanyway, thought I'd go through the usual procedure of Spybot Search,...

Cheers man. I've followed all your helpful instructions and done my best to turn this pc into a veritable fortress. I will also make sure to reprimand the offending culprit who doesn't follow the...

Everything seems to be running as sweet as a moose. Everything I've tried up to now seems to be running far more smoothly than it has in a long while. I'll make sure to drop another donation via...

Another day, another log for your inspection sir,



Malwarebytes' Anti-Malware 1.12
Database version: 774

Scan type: Full Scan (C:\|)
Objects scanned: 119647
Time elapsed: 1 hour(s), 36...

Nasnavi is my External Hard Drive software...thing...it's cool as far as I know.

I can't do the Kaspersky scan currently via IE or Firefox. When attempting it via IE I'm told my 'Licence Has...

One combofix report sir:

ComboFix 08-05-20.5 - Compaq_Owner 2008-05-21 14:39:08.2 - NTFSx86
Running from: C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
Command switches used ::...

Just as a quick note. Something is now trying to open browser windows to a 'spyware master' which I'm obviously closing and disconnecting from the net while I wait for your reply. My PC is also now...

ComboFix 08-05-20.5 - Compaq_Owner 2008-05-21 13:35:39.1 - NTFSx86
Running from: C:\Documents and Settings\Compaq_Owner\Desktop\ComboFix.exe
* Created a new restore point
.
...

Sorry for the lateness of this reply. I was only able to delete the folder C:\WINDOWS\system32\673351\

All others would not be deleted. I've followed all your other instructions however and here...

I'm having problems with your instruction 5).

C:\WINDOWS\system32\qoMdaArR.dll will not delete either normally (hitting the delete button) or using HJT's delete on reboot method. Help!

Scan done at 16:38:38.90, 20/05/2008
Run from C:\Documents and Settings\Compaq_Owner\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The filesystem type is NTFS
Fix...

SmitFraudFix v2.320

Scan done at 16:07:30.25, 20/05/2008
Run from C:\Documents and Settings\Compaq_Owner\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The...

Hi there,
Your response is very much appreciated and I'll try to be as helpful as possible in passing back information to you.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:51:33,...

Hi, a loooooong while back you guys kindly guided me through a few malware problems my pc was suffering from. I wondered if I might request assistance again? Any help is very much appreciated.

...

Nope. No more problems.

Thanks so much it really is appreciated. Have you guys got a paypal donation thing I can stick a few quid in?


Cheers again. You guys rock.

Dunc :2thumb:

Logfile of HijackThis v1.99.1
Scan saved at 11:36:42, on 04/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

Hey!

My computer works! :D


I think you may have fixed it!


Keep telling me to do stuff if you can see something wrong but I think it's all good now!

12/02/06 17:45:35 [Info]: BlackLight Engine 1.0.47 initialized
12/02/06 17:45:35 [Info]: OS: 5.1 build 2600 (Service Pack 2)
12/02/06 17:45:36 [Note]: 7019 4
12/02/06 17:45:36 [Note]: 7005 0...

Logfile of HijackThis v1.99.1
Scan saved at 16:32:55, on 02/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

My 2 scan things again.

Cheers

Dunc

Scan Settings:
Scan using the following antivirus database: extended
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\
F:\

Logfile of HijackThis v1.99.1
Scan saved at 15:17:11, on 02/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

Cheers that's all my logs and stuff.


Dunc

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\75B34E68.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton Internet Security\Norton...

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\3B1852B5.zip/GetAccess.class Infected: Trojan.Java.ClassLoader.c skipped
C:\Program Files\Norton Internet Security\Norton...

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine\258D1681.zip CryptFF: infected - 4 skipped
C:\Program Files\Norton Internet Security\Norton...

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, December 02, 2006 12:45:43 PM
Operating System: Microsoft Windows XP...

Logfile of HijackThis v1.99.1
Scan saved at 12:46:31, on 02/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

More logs and things for you. The help's appreciated.

Cheers,


Dunc

Logfile of HijackThis v1.99.1
Scan saved at 10:30:04, on 02/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

Fixwareout ver 1.003
Last edited 8/11/2006
Post this report in the forums please

Reg Entries that were deleted
...

Microsoft (R) Windows Script Host Version 5.6
Random Runs removed from...

There's my 3 things.

Thanks alot for your help, tiz appreciated.

I'll be back tomorrow and hopefully you can help.

Cheers

Dunc

Logfile of HijackThis v1.99.1
Scan saved at 19:56:57, on 01/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 19:30:58 01/12/2006

+ Scan...

Fixwareout ver 1.003
Last edited 8/11/2006
Post this report in the forums please

Reg Entries that were deleted ...

Found my vundo text thing now too.


VundoFix V6.2.13

Checking Java version...

Java version is 1.4.2.3

Scan started at 17:01:09 01/12/2006

My hijack log thing is now this btw:


Logfile of HijackThis v1.99.1
Scan saved at 17:15:49, on 01/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2...

I told it to remove those files but my teatimer thing flagged up some changes denied...

Help!


Dunc

Cheers I'll try that now.

You're an absolute legend :D

Thanks


Dunc

Hi,

I need help.



Quite simply, something's hijacking my IE/Firefox so that I can't access common sites like google.com and various similar sites...I jus get sent to a generic website with...

Wrong forum sorry