Search:

Blade,

Everything back to normal, followed all securty/update steps.... Thanks a million!

FOr what it's worth, I've been meaning to donate to spybot for years, this incidenct finally got me...

Hi,

I've run the Kaspersky scan and another DDS, all three logs are attached below. The system is running much better, it starts up much faster and does not bog down occasionally like before. ...

Hi,

This didn't go quite according to script....

Combofix says Forefront is running. I uninstalled forefront (we're required to have it) and rebooted. Even so, combofix said it was still...

Hi,

Here are the Win32kdiag.txt contents


Log file is located at: C:\Documents and Settings\mmauk\Desktop\Win32kDiag.txt

Removing all found mount points.

Attempting to reset file...

Hi,

Here is the avenger.txt log...

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Hi,

Thanks again for your time....


Here's the checking.txt contents

Volume in drive C is Preload
Volume Serial Number is E406-9CFA

File C:\Program Files\Common Files\Adobe\Help\pl_PL\ExtensionManager\1.8\images\SoundboothLinkIndicator.png 29036 bytes
File...

File C:\Program Files\Common Files\Adobe\Help\pl_PL\Bridge\2.0\WS0D78142E-6028-4ec1-9BBF-6837F1DE3CD5.html 5436 bytes
File ...

---- Files - GMER 1.0.15 ----

File C:\Program Files\Common Files\Adobe\Help\nl_NL\Flash\CS3\index\deletable ...

GMER 1.0.15.15077 [9hxt8ng4.exe] - http://www.gmer.net
Rootkit scan 2009-09-04 09:44:29
Windows 5.1.2600 Service Pack 3


---- Kernel code sections - GMER 1.0.15 ----

? ...

Just after I sent previous post gmer flagged something bad and I was able to copy report before it crashed. The gmer report is too big to post in one reply. So here is the win32kDiag report. Then...

thanks for your patience....

Here is an interim report from gmer. It is still running but has not added a new entry in a while....

GMER 1.0.15.15077 [9hxt8ng4.exe] - http://www.gmer.net...

GMER was running when I left work last night. This morning it I find that it had crashed and the permissions on the executable had been changed. I added myself back and have launched it again. I...

Thanks for helping!

The three "here" links downloaded dds.com, dds.scr and dds.pif respectively

dds.scr wouldn't run with double click as windows didn't recognize association type. Launching...

This bug disables all monitoring programs including spybot, symantec antivirus etc. Spybot closes after clicking start scan. It it thereafter unavailable due to altered permissions on the .exe. ...