Search:

Hi IndiGenus :)

The ESET Scan found no threats. :bigthumb:
Here is the log:

Thanks from Dorothy :)

ESETSmartInstaller@High as CAB hook log:
OnlineScanner.ocx - registred OK
# version=6

Hi IndiGenus :)

Wasnt sure if you still wanted to see a DDS log but here is.

:thanks: from Dorothy :)

DDS Log


DDS (Ver_09-10-13.01) - NTFSx86

Hi IndiGenus: :)



I was unable to do this scan.
A message came up saying the scan version was being updated & improved.

At the other link, data seemed to down load, but then an error...

Hi IndiGenus:)

Sorry...forgot to answer your question re: Browser

I'm using Internet Explorer8.

My son & I occasionally use Yahoo when checking e-mail. Mostly, though, we use Internet...

Hi IndiGenus:)



Since I had the Free version of AVG8.5 I went to that site to get the removal tool.
I followed the sticky instructions at the AVG Free Forums-a sticky titled AVG8x...

Hi IndiGenus:)



Here are the logs you requested.
Thanks from Dorothy:thanks: Awaiting your reply :)

Malwarebytes' Anti-Malware log

Malwarebytes' Anti-Malware 1.41

Hi IndiGenus:)

After doing the exehelper and posting the log, I
still wasnt able to download/save the Malwarebytes Anti-Malware.

Seemed like it had saved to desktop-even said there was...

Hi IndiGenus:)



Here is the exehelperlog requested
Thanks from Dorothy

exeHelper by Raktor
Build 20091021
Run at 15:46:50 on 10/24/09

Hi IndiGenus:)




Here is the exehelperlog requested
Thanks from Dorothy :)

exeHelper by Raktor
Build 20091021

Hi IndiGenus:)



I used TFC as requested. Something like 85Mb was deleted.
Seemed to go ok. :)

I was unable to uninstall AVGFree 8.5. :sad:

Message came up "Uninstall failed. 1 warning, 1...

Hi IndiGenus:)



Will do that. Thanks :)



Will try just completely removing AVG and will let you know the results :)
Will then try to download exeHelperand

Hi IndiGenus:)

Please ignore post #30. It was posted in error.
Post#31 is the correct one.

from post#29



Computer wont let download/save ATF Cleaner.

Hi Indigenus:)



Same as before really...no noticeable changes in speed etc. That wasn't a problem though much.

My computer still wont let me save .exe files anywhere on it...even to a CD.
...

Hi Indigenus:)



Same as before really...no noticeable changes in speed etc. That wasn't a problem though much.

My computer still wont let me save .exe files anywhere on it...even to a CD.
...

Hi IndiGenus :)



I did as instructed
although I forgot to deactivate any security programs running :(

I tried to run another ComboFix after deactivating but I goofed & forgot to save to...

Hi IndiGenus :)

Here are the 2 DDS logs as requested.

DDS


DDS (Ver_09-10-13.01) - NTFSx86
Run by JeffandMom at 11:58:53.26 on 22/10/2009
Internet Explorer: 8.0.6001.18828...

Hi IndiGenus: :)

I got your reply.
I did download & save DDS to disk as you asked.
I will run that and post the logs.

Also, I will Uninstall & Install of AVG8 and let you know what happens....

Hi IndiGenus: :)




I followed instructions for showing hidden files.
I clicked on Jotti link and clicked browse and tried to upload file
Sys7CC0.exe
for analysis.
This is the message that...

Hi IndiGenus:

Below the info notes is the ComboFix log you requested.

I didnt notice any prompts to allow install of "Micrsoft Windows Recovery Console", so I'm thinking it's already on my...

Hi IndiGenus:
Got your reply & will do the "ComboFix.exe" instructions/scan.
and post a log.

As for "HijackThis" log, I'll give that a try after the above. I wasn't able to do that when I first...

Hi IndiGenus:

Thanks very much. Will await your reply.:)
from Dorothy

Hi IndiGenus: :)

I just noticed your reply re: attachment.
That's what I'll do since I goofed up and lost my place doing copy/paste in sections. :oops:

Here's goes with the...

Found mount point : C:\Windows\SoftwareDistribution\AuthCabs\Downloaded\Downloaded

Mount point destination : \Device\__max++>\^

Found mount point :...

Found mount point : C:\Windows\PCHEALTH\ERRORREP\QHEADLES\QHEADLES

Mount point destination : \Device\__max++>\^

Found mount point : C:\Windows\PCHEALTH\ERRORREP\QSIGNOFF\QSIGNOFF
...

Hi IndiGenus:

[QUOTE=IndiGenus;341460]Okay normally I would post the download link when I advise the tool, but here I'll advise the tools I would expect we may use here. At least to get to the...

Hi IndiGenous:
Im back and at a friend's computer.
I will try to save to CD the tools you mentioned and then run them on my computer.
Hope this works. I will let you know.
I apologize for the...

Hi from Dorothy: Sorry so long replying. Was away from home a few days.

I've found a neighbour who will let me use their computer to download onto CD. They said their computer is clean. (Thought...

Hi IndiGenus
:red: Do you mean ...can I save the files onto a CD/DVD drive or USB stick on this computer & run from there? Sorry...not too much of a techie? :scratch:

I don't presently have...

Hi IndiGenus:)
Thank you for your reply. I was out of town until today; thus my late reply.

I wasn't able to save the Win32Diag.exe application to my desktop or to anywhere. The "save" seemed to...

Hi: I've been reading the threads & I think I may be infected with Rootkit malware?:confused:

I followed the steps in "Before you post". and did what I could.

I WASNT able to save anything...

Hi illukka::)

Hope you got the 2 parts of my final HJT log.

I have a few questions re: the log.

Is there anything I can do about [files missing] items? Is this a problem?

For [Logitech...

HJT part 2from Dorothy

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF:...

HJT final log part 1 from Dorothy

Logfile of HijackThis v1.99.1
Scan saved at 12:35:59 PM, on 02/03/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2...

:) Hi illukka: :)

Thanks for your reply.



Done & posted log in next replies(2 parts)

As for [Logitech Desktop Messenger]:

part 2 of hijackThis log from Dorothy


O18 - Protocol: bw+0 - {D43DB7B0-7C43-45A4-BD6C-49B296EF3045} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18...

:) Hi illukka: :)

Here is the [HijackThis] log dated today. [in 2 parts cause too many characters).
Please let me know what to do next, if anything. Computer is running GREAT!!!!Thanks.:) ...

:) Hi illukka::)

I have deleted [dx2003103.exe] as you requested.

All the programs that were affected before by the & [Unexpected Error] messages are 'Message Free" now. Thanks very much.
...

Hi illukka: :)

Here is a link to spykiller site for the file C:Windows/system32/dx2003103

I think it was something to do with a desktop or screensaver image called [Halloween Rider] back in...

:) Hi illukka:)

Thanks for your reply. I have appointments all day so I won't be able to do the things you suggested until later tonight.
Hope that's ok:o

By the way, my IBM computer was new...

:) Hi illukka and bitman::crowned:

SUCCESS!!!!:bigthumb: thanks to you two and your patience & perseverance.

bitman...your suggestion re: [msdmo.dll] worked. MSN Messenger NO LONGER comes up...

Hi illukka: :)

I've done as you suggested in your last 2 posts.


disk cleanup

deleted by Add/Remove programs & fresh download & safe mode install re: Spyware Blaster-"Unexpected Error"...

Hi illukka: :crowned:

Just read your post from yesterday.(Feb.20/06)

I've already done some of what you suggested(defrag,clean up Temp files & recycle bin for each user); but I will create a...

:) Hi illukka::)

As I previously said, I downloaded the new files...vdmdbg.dll & srclient.dll (saved in Program files) from your links in Feb.19 post.

I replaced the corrupted ones in...

Hi illukka::)

I got your reply about this morning. Thanks...I'll do what you suggested & get back to you with the results.

Thanks from Dorothy...here's hoping:)

Hi illukka::)

I got your reply of Feb.19 (today.)

I downloaded the vdmdbg.dll and srclient.dll files from the links you provided. I saved them in [Program files](not sure where I was supposed...

Hi illukka::) re: your Feb.16 post-final section

Hijackthis is still not available. I can unzip program & see [icon of dynamite], but i get the following message[Hijackthis] when I double click.
...

BALANCE OF SYSCLEAN LOG from Dorothy:) Hope this is ok.

Could not set file for reading on "C:\WINDOWS\Prefetch\NTOSBOOT-B00DFAAD.pf": Access is denied.
2006-02-18, 14:24:05, Could not set file...

Sysclean logfrom Dorothy:) 2 posts required for the complete log

/--------------------------------------------------------------\
| Trend Micro Sysclean Package |...

Hi illukka::)

This post refers to Sysclean. (Log is posted in separate post because I could only put in 20000 characters).

I followed instructions & links.
The Official Pattern Release file...

Hi illukka:

Below is the log for the MWAV antivirus tool. I clicked on [view log] and copied from MWAV Notepad. Hope this is what you wanted.

By the way, a [Bad Image] message came up when I...