Search:

Device is working properly.



frustrating.

Hello, this thread may need to be redirected to another forum.

safer-networking forums are the only forums are trust with system help of any kind.

I have recently run into the dread "physical...

Thank you Blade, as always your team is extremely dependable.

take care!

matt

system is running very smoothly now. what was the [76]- file i submitted for analysis?

ComboFix 10-06-03.01 - Matt 1 2010-06-04 17:05:01.8.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.274 [GMT -7:00]
Running from: c:\documents and settings\Matt...

file submitted successfully

"Your file was successfully submitted. Please let the user helping you know that you have submitted the file.Query failed : MySQL server has gone away"

"We apologize for the temporary outage. The...

must i register with this site to submit the file?

this is the message i keep receiving

http://www.bleepingcomputer.com/pf.php

file successfully submitted

ComboFix 10-06-01.03 - Matt 1 2010-06-02 6:37.7.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.291 [GMT -7:00]
Running from: c:\documents and settings\Matt...

DDS (Ver_10-03-17.01) - NTFSx86
Run by Matt 1 at 9:22:17.62 on 2010-06-01
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Home Edition ...

Sorry - Here you go.

ComboFix 10-05-31.03 - Matt 1 2010-06-01 8:16.6.1 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.226 [GMT -7:00]
Running from: c:\documents and...

DDS (Ver_10-03-17.01) - NTFSx86
Run by Matt 1 at 22:41:52.38 on 2010-05-31
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_18
Microsoft Windows XP Home Edition ...

Quieter and faster running PC now...but was my system even infected? Any rate:

ComboFix 09-09-17.04 - Matt 1 2010-05-31 22:19.5.1 - NTFSx86
Microsoft Windows XP Home Edition ...

Should i be posting here/is this the correct thread spot?

i need to apply for jobs online!

Hello,

Computer is running extremely slower than usual although no traces from MB. Thank you in advance for always being so helpful.

DDS LOG


DDS (Ver_10-03-17.01) - NTFSx86
Run by Matt...

Hello, PC is running extremely slower than usual but no traces of malware (quick scan). Hmm...see anything in HJT? thank you in advance for never being wrong.

hijack this log

Logfile of Trend...

Here ya are,

Logfile of random's system information tool 1.06 (written by random/random)
Run by Matt 1 at 2010-04-15 06:27:56
Microsoft Windows XP Home Edition Service Pack 3
System drive C:...

Late response again, sorry Ken

My machine is running smoothly after I fixed the checked items you requested and no more Google re-directs.

Thank you for your time as always - anything else?

Ken,

My system is already configured to display hidden files and folders and was the last time you requested it as well.

The file you asked me to submit for analysis "was not found" and...

Things are running smoothly Ken.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 04:59:40 PM, on 2010-04-08
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Oops, this is the complete HJT log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:48:20 AM, on 2010-04-08
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Alright Ken, looking better

Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org

Database version: 3930

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.13

Here you go,

17:43:20:573 3988 TDSS rootkit removing tool 2.2.8.1 Mar 22 2010 10:43:04
17:43:20:573 3988 ================================================================================...

Here you are Ken,

GMER 1.0.15.15281 - http://www.gmer.net
Rootkit scan 2010-04-07 06:19:37
Windows 5.1.2600 Service Pack 3
Running: gmer.exe; Driver:...

Ken,

Still have them

:sad:

Here ya go Ken,

GooredFix by jpshortstuff (08.01.10.1)
Log created at 15:53 on 05/04/2010 (Matt 1)
Firefox version 3.6.3 (en-US)

========== GooredScan ==========


========== GooredLog...

Sorry for the late response Ken -

With Firefox as my browser, I am re-directed to artificial system-sweeping sties, advertising sites, registry cleaning sites, etc. At times, these sites will...

Hello,

Don't worry about Combofix, I wasn't aware of those possibly negative results - Thanks again.

Computer is running fine aside from re-occuring google re-directs...=(

I removed a...

Hello,

The fixed checked files have been removed by hijack this and Viewpoint has been uninstalled.

The file that you asked me to have looked at, c:\windows\system32\cqcccdb.exe does not...

\Installer\991c515.msp
+ 2009-11-15 20:06 . 2009-08-29 07:36 3598336 c:\windows\ie7updates\KB976749-IE7\mshtml.dll
+ 2009-12-13 20:06 . 2009-08-29 07:36 1168384 ...

\assembly\GAC_MSIL\Microsoft.Build.Engine\2.0.0.0__b03f5f7f11d50a3a\Microsoft.Build.Engine.dll
+ 2009-09-20 19:20 . 2009-09-20 19:20 106496 ...

continued

\system32\iedkcs32.dll
- 2004-02-06 22:08 . 2009-04-29 04:55 385024 c:\windows\system32\iedkcs32.dll
+ 2007-07-11 20:27 . 2009-10-29 07:46 380928 ...

Combo-Fix Logfile

ComboFix 09-09-17.04 - Matt 1 2009-12-15 22:05.4.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.511.288 [GMT -8:00]
Running from: c:\documents and...

Thank you for the advice about Combo-fix and Utorrent.

Now, do you want me to run combofix and post the results? I wasnt clear on your last reply

still have google-redirection but nothing...

Results from RSIT

INFO.TXT

info.txt logfile of random's system information tool 1.06 2010-03-23 22:28:24

======Uninstall list======

-->C:\Program Files\Common...

Hello,

I have acquired the browser re-direct bug in Firefox. I have Malwarebytes and Hijack This installed but have not ran them since the re-direction has been occuring. I'm using WIndows XP...

Thanks a lot for all your help Ken545 - my machine is running great.

i have looked into all of your security recommendations and have installed most of them.

Thank you again, ill know where to...

Things are running very well - really appreciate your time.

in this thread, can you recommend a reliable firewall? do you suggest running ESET from time to time?

hey ken, i believe this is the correct report...thank you!

File naomf.exe received on 2009.08.22 06:43:31 (UTC)
Current status: finished
Result: 4/41 (9.76%)

Antivirus Version Last Update...

i noticed rnamfler is back as well...i believe this file may be connected with the internet filter application naomi.exe i downloaded for the kids over a year ago. this filter has worked extremely...

Hi Ken545, here's the latest malware log...

Malwarebytes' Anti-Malware 1.41
Database version: 2821
Windows 5.1.2600 Service Pack 3

2009-09-18 03:31:59 PM
mbam-log-2009-09-18 (15-31-59).txt
...

hello ken545,

looking better and better i believe....looks like combofix deleted a couple rnamfler files and kbiwkmcyahvkjt associated files....making me wonder if these rootkit backdoor programs...

hello again,

running combofix appears to have successfully removed the rootkit. everything is running normal. could not disable avg 7 before combofix scan. i greatly desire to thoroughly...

Thank you for your quick response....heres the root repeal report.

ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/09/17 18:07
Program...

Hello Staff,

Please help. Safety Center and AntiVirusPro 2010 are both visible viruses on my desktop and have prevented me from using both malwarebytes and hijack this - even after...