Search:

Hi,

search.conduit.com keeps hijacking my homepage. can you please help.

thanks in advance.

tian

Hi,

search.conduit.com keeps hijacking my homepage. can you please help.

thanks in advance.

tian

Hi Blade :crowned:,

I couldn't thank you enough. You have been awesome :bigthumb:. The computer is running great and no problem at all.

I'll make sure to give back to support you guys.

Thank...

Hi Blade,

Sorry for the delay reply. I have scanned the computer, updated Java and Acrobat Reader as per your instructions.

Please see fresh logs below for your review.



DDS...

Hi Blade,

I did the comboFix scan and DDS scan. After, I was able to install Spybot.

Here are the logs as per your request.



ComboFix 10-10-20.01 - wei 10/20/2010 22:54:15.1.2 - x86...

Hi Blade,

I've uninstalled the P2P program as noted. Please see the fresh DDS logs below.




DDS (Ver_10-10-10.03) - NTFSx86
Run by wei at 20:42:10.66 on Tue 10/19/2010
Internet...

Hi Blade,

Thank you very much for reponding so quickly.

I have scanned the computer and please see the following reports as per your request.


DDS (Ver_10-10-10.03) - NTFSx86
Run by wei...

Hi,

My computer is running on Windows Vista - Home Version. It has a really malicious virus. It is preventing me installing Spybot and locking out the Task Manager to stop the virus' self...

Hi Shaba, no more problems. Everything is running great. Thank you very much for your time and patience. :)

Here is PART 2:

+ 2009-10-16 07:23 . 2009-10-16 07:23 1966080 c:\windows\ASSEMBLY\NativeImages1_v1.1.4322\System\1.0.5000.0__b77a5c561934e089_535b4fbe\System.dll
+ 2009-10-16 07:25 ....

Hi Shaba,

the forum won't let me post more than 64000 characters. I'll split it into two parts.

Here is the ComboFix log PART 1:

ComboFix 09-10-19.01 - Tian Chen 10/19/2009 20:10.7.2 -...

Hi Shaba,

I did a full search in Windows Explorer and in DOS. I used a combination of * and nothing similar to the file in question found. I also ran Kaspersky couple of times. Please let me know...

Hi Shaba,

I don't see that file anymore. I believe Kaspersky resolved it already. Should I do anything else? Everything is running smoothly so far. Thank you very much for your help and time.

Sorry Shaba,

Here is my new HJT log:


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:24:59 PM, on 10/13/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer...

Hi Shaba,

Kaspersky took a long time, but got it done.

Per your directions, below please see the scan log:

--------------------------------------------------------------------------------...

Hi Shaba,

Sorry for the delayed response. Just want to wait for couple days to make sure. Everything seems cleared and running smoothly. Thank you very much for your patience and all your help....

Hi Shaba,

Everything is running smoothly. Did a full Spybot scan.

Here is my report:


--- Report generated: 2009-10-05 20:36 ---

Right Media: Tracking cookie (Internet Explorer: Tian...

Sorry Shaba, I forgot to post my HJT log in my last reply...

Here is my HJT log:



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 5:18:01 PM, on 10/4/2009
Platform: Windows XP SP2...

Hi Shaba,

My latest ComboFix log:




ComboFix 09-10-04.01 - Tian Chen 10/04/2009 14:18.6.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1022.431 [GMT -4:00]...

Hi Shaba,

I ran Gmer.exe as per your directions and it scans for awhile then it gives me a warning, "WARNING!!!....GMER has found system modification caused by ROOTKIT activity" after the message...

Hi Shaba,

Thank you very much for your response. I can finally access the internet after the combofix run.

here is my latest HJT log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at...

Hi,

I have these viruses that just won't go away (Fraud.XPAntivirus, CoolWWWSearch.OleHelp, Win32.TDSS.rtk). I used Spybot and reboot a few times, but they keep coming back. Additionally, It will...

hi shaba,

it is running great, but as soon as i turn tea timer back on the windowsisearch.com comes back even i'd denied its request to make change to my registry. after couple of minutes, the...

hi shaba,

i deleted the above mentioned items. here is the fresh hjt log as requested.

thank you very much.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:40:22 PM, on 10/9/2008...

hi shaba,

here are the norton 360 scan reports that was generated couple of hours apart. i've also included the lastest hjt log in case you want to see it.

first scan report:

Scan Stats:
...

hi shaba,

i ran norton 360 and it just picked up two trojans.

trojan.vundo

trojan.zlob

is there a way we can find out where they were hiding even after clean scans from kaspersky and...

hi shaba,

i deleted the folders that you'd recommended. i ran another round of kaspersky and nothing showed up on the report :). the computer is running great and no pop-ups :). i tuned...

hi shaba,

java is updated. here are the scan reports.

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Sunday, October 5,...

hi shaba,

you are amazing! it is running 100% better than before. thank you very much.

here are the fresh reports after the second combofix run.



ComboFix 08-10-03.05 - Tian Chen...

hi shaba,

here are the fresh reports as you requested.


ComboFix 08-10-03.05 - Tian Chen 2008-10-04 10:54:07.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.488 [GMT...

hi shaba,

here are my fresh reports as per your request.

ComboFix 08-10-03.05 - Tian Chen 2008-10-03 21:40:39.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.244 [GMT...

hi shaba,

thanks fo getting back to me so fast. i've change Hijackthis.exe to timrobins.exe as per your recommendation. here is the fresh HJT log as requested.

Logfile of Trend Micro...

Hi please help!

I use Spybot S&D 1.6.0.30 to scan and virtumode.dll and virtumode.prx would come up every time and they can not be removed. When I press Fixed the Problems, it always requests me...