Search:

This weekend I was able to update everything, and it looks clean :)

Thanks Again!

Ok thanks.

Glad it's looking clean now, and I'll be sure to finish the updates when I'm there this weekend.

A couple random questions:
If I only use Firefox is it still important to have IE...

Hi km2357,

The situation got much worse when I got back to the computer. Something called "Antivir Pro" was claiming to be antivirus software, opening random webpages, giving pop-up "infection...

Hi km2357,

The PC I'm trying to fix is actually my mother-in-law's and I won't be able to get back there until this weekend. Once I do I'll repost with the gmer scan as well as a fresh DDS. I...

Hi,

My machine has been running slowly and whenever I open firefox, a new tab will open up for random websites.

I have run updated Spybot and Avast scans several times but they are unable to...

After a fresh re-start everything looks good :)

Thanks again, had a minor panic attack when I saw that again this morning. :laugh:

Yay, no more command boxes when I restarted this time. Those really scared me for a min.

How does it look now?

Thanks

Fresh Hijackthis log:
Logfile of Trend Micro HijackThis v2.0.2
Scan...

uh oh...

It was clean yesterday, but when I started this morning I got a string of command boxes and an error looking for one of vitrumonde's old .dll files.

I ran spybot and it found and...

I got the PC tools firewall. Everything is cleaned up and seems to be running smoothly.

I disabled and enabled system restore.

Thanks again for all your help. You've made my computer much...

Great, no issues anymore either. :)

I was really dreading a complete windows reinstall.

What's the best way to uninstall combofix, hijackthis, etc. or do you think I should keep them around?...

Think that did it :D
Here's the spybot log and a fresh hijackthis. Am I clean? Can I safely update to service pack 3?

Thanks :)


Spybot results:
Hint of the Day: Click the bar at the right...

After running combofix spybot found the same entries. I included all the logs for good measure.

Spybot:
Hint of the Day: Click the bar at the right of this to see more information! ()

...

Yup, I did it again and let spybot run at startup and it still can't do anything about those 2 entries yet.

Would the encoding matter when I save the reg file in notepad? I selected the default...

Good morning Shaba

Spybot still sees the same 2 entries that it can't get rid of. I included it's log, and a fresh hijackthis.

Windows updater is prompting me to install service pack 3. I...

That was the whole log. at least the one I produced in advanced mode by going to Tools->view report

I was away for ~15min with the computer running but nothing open and avast caught a worm trying...

unfortunately spybot still see 2 entries for virtumonde.generic even after running it at startup it still can't kill them.

I included a spybot log and a fresh hijackthis.

spybot log:

---...

My last run of spybot before the Kaspersky scan showed only the 2 entries for virtumonde.generic left and I haven't had any popups since the first combofix run :)

Here's the Kaspersky scan log:...

I ran combofix with the script. Here are some new logs.

Thanks again for taking the time to go through this.

Combofix:

ComboFix 09-01-01.02 - Chris 2009-01-03 12:06:17.2 - NTFSx86...

I installed and ran combofix, after getting the recovery console off my xp cd.

Here's that log and a fresh hijackthis log.

Computer is feeling a little better. after running avast spybot was...

Hi Shaba,

Thanks for taking a look at this for me. About a week ago a friend of mine noticed my antivirus was out of date and he joked how dangerous that was with windows. A couple days later...

I am infected with Command Service and a couple flavors of Virtumonde. I'm hoping they can be removed without a complete reinstall. Thanks in advance for your help!

My HJT logfile:
Logfile of...