Search:

Sorry for the late reply: here is the log you asked me to produce after the last instruction you gave me.

ComboFix 12-09-30.03 - Adam Casey 01/10/2012 19:06:20.6.2 - x64
Microsoft Windows 7...

https://www.virustotal.com/file/a2ffd0bc5e055e519fd3006bfdae422327d8e01310eae528267014c54293bfa4/analysis/1348524689/

Hi there,

I just turned my computer back on this afternoon and ESET Smart Security found a 'potential threat'. 'A variant of Win32/HackKMS', the object "C:\Windows\KMSEmulator.exe".

Does...

System seems to be running very well. Wasn't running terribly initially, but does seem a bit speedier now, particularly on the web. :bigthumb:

ComboFix 12-09-23.02 - Adam Casey 23/09/2012 21:46:07.5.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.6143.4696 [GMT 10:00]
Running from: c:\users\Adam...

C:\Users\Adam Casey\Downloads\winzip155.exe Win32/OpenCandy application
C:\Windows\KMSEmulator.exe a variant of Win32/HackKMS.A application

Malwarebytes Anti-Malware 1.65.0.1400
www.malwarebytes.org

Database version: v2012.09.21.09

Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 9.0.8112.16421
Adam Casey :: ADAMCASEY-PC...

ComboFix 12-09-18.06 - Adam Casey 22/09/2012 9:32.4.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.6143.4365 [GMT 10:00]
Running from: c:\users\Adam Casey\Desktop\ComboFix.exe...

No problem, Jeff! Thanks for letting me know! :thanks:

Hi there,

Yes: I'm using 64 bit Windows 7. Forgot to mention that: apologies. :confused:

Here is the log:

SystemLook 30.07.11 by jpshortstuff
Log created at 07:24 on 20/09/2012 by Adam...

ComboFix 12-09-18.06 - Adam Casey 19/09/2012 8:18.3.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.6143.3667 [GMT 10:00]
Running from: c:\users\Adam Casey\Desktop\ComboFix.exe...

Please find TDSSKiller log attached in a zip file.

Hi there,

Eset Smart Security is continually finding a trojan operating in my memory, but cannot clean it.

It is located in c:\windows\sysWOW64\svchost.exe - and is given the name:...

Hey,

Sorry for the slow reply. Deleted those files and wanted to see how the system run over a couple of days. Not getting the random sounds and Security Essentials is running again. It seems a...

.
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_26
Run by Adam Casey at 10:19:52 on 2011-08-19
Microsoft Windows 7 Ultimate ...

C:\Qoobox\Quarantine\C\Windows\SysWOW64\PSHEDU.dll.vir a variant of Win32/Kryptik.RLE trojan
C:\Windows.old\Documents and Settings\jane\AppData\Local\Application Data\Microsoft\Windows\Temporary...

ComboFix 11-08-18.02 - Adam Casey 19/08/2011 6:48.2.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.6143.4752 [GMT 10:00]
Running from: c:\users\Adam...

.
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_26
Run by Adam Casey at 0:20:31 on 2011-08-19
Microsoft Windows 7 Ultimate ...

ComboFix 11-08-18.02 - Adam Casey 18/08/2011 23:57:12.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.61.1033.18.6143.4493 [GMT 10:00]
Running from: c:\users\Adam...

Sorry, forgot to attach the attach.txt log. Here it is...

.
DDS (Ver_2011-06-23.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_26
Run by Adam Casey at 15:49:48 on 2011-08-18
Microsoft Windows 7 Ultimate ...

Okay: both uninstalled. What's next?

cheers,

Adam

Hi there,

My computer is playing sounds randomly without me opening any programs, it is not allowing me to open websites I choose (and instead directing me to advertising websites), and it won't...