Search:

rootkill does not show up, tdss killer and malwarebytes come up with nothing.

Sorry I reran it and it did find it, I clicked cure and rebooted. Rescanned and it found nothing, got a little ahead of myself.

Re-ran and it found nothing. Shut down and restarted without hirens boot cd and it booted. Also was able to install Adobe reader which I have not been able to do for months. THANK YOU.

First, I want to thank you shelf life for your time in helping try to resolve this issue.
Second upon reboot I can now open those programs, sorry it was late from a very long day I should have...

First let me say that I can no longer open programs such as internet explorer or anything that is on the taskbar. I get message "Illegal operation attempted on a registry key that has been marked for...

Yes it is an HP. No it does say standard boot code.

It found a file Rootkit.boot.Pihar.b, location Physical drive:\Device\harddisk0\DR0. It is described as malware object, high risk. I try to "cure" it, but I get message "Can't cure MBR. Write...

Yes I am still having issues, as a matter of fact it will not boot. I get the HP splash screen then the screen from bios showing hard drives then all I have is a blinking cursor. I was talking to a...

I have been having issues the last couple days. I keep getting a file on my desktop titles pljtxaetzk.tmp. I keep deleting and it keeps coming back, it says it is 0 kb. My Norton Internet Security...

I dont know what is going on with my computer, but there must be something. Keep getting blue screen of death usually by file win32k.sys. Started happening Monday morning and can not get any progress...

I did see after that Spybot is not for Vista so I removed it. I took it to Best Buy because it is still under warranty. Not knowing what was causing the issue I figured let them have a go at it. It...

I was told by Best Buy I have this issue with my laptop. Installed Norton AV2009 and it found nothing.

Also it is Vista and I tried running the teatimer.bat and it says unsupported version.
...

Logfile of HijackThis v1.99.1
Scan saved at 11:21:29 PM, on 10/27/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at: 10:57:38 PM 10/27/2006

+...

Here is the rapport.txt

SmitFraudFix v2.114

Scan done at 21:53:50.18, Fri 10/27/2006
Run from C:\Documents and Settings\Owner\My Documents\drivers\smtfraudfix\SmitfraudFix
OS: Microsoft...

The following is a Hijackthis log from a computer that has Virusbuster adware on it.

Logfile of HijackThis v1.99.1
Scan saved at 5:28:49 PM, on 10/27/2006
Platform: Windows XP SP2 (WinNT...

In the add/remove there are 2 Java programs. I removed the runtime 5.0 update 6, but there is also a Java 2 Runtime Enviroment, SE v1.4.2_03. I have this one on my other computers also, but not the...

ewido logfile.

---------------------------------------------------------
ewido anti-malware - Scan report
---------------------------------------------------------

+ Created on: 6:14:57...

PS Found a program on there also called python. If I go to remove programs and click on the more information it gives me the website www.python.org. It is a programming laungage. Do you no anything...

Thank you for helping first of all. Some of the files I could not find but see in the Qoofix log it already had. Could not find dilid.exe and ndsmoei.exe. In between my HJT log posting and your reply...

I also get a message from Norton that it has detected a malicious script at c:/program files/folder.js, it recommends stopping script and I do at the file disappears from there. Popups on startup are...

Back in April I had a problem with popup windows on startup, http://forums.spybot.info/showthread.php?p=21655, there has been no problems until a couple of days ago when Norton Anti Virus detected a...

I got now messages and was not asked about any pending file renaming operations.
Here is the HijackThis log.


Logfile of HijackThis v1.99.1
Scan saved at 12:53:37 PM, on 4/23/2006
Platform:...

Report from ActiveScan


Incident Status Location ...

Logfile of HijackThis v1.99.1
Scan saved at 10:30:52 PM, on 4/22/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:...

First I did not delete Vundofix, missed that step will delete after post. Here is the the report.txt file.

---------------------------------------------------------
ewido anti-malware - Scan...

Should I really remove the following as Weatherbug is an actual program. Just want to make sure before I do it.

O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} -...

Here is the contents of vundofix.txt


VundoFix V4.2.71

Running as SYSTEM
from c:\windows\system32\VundoFix.exe

Checking Java version...

On boot up I keep getting numerous popup windows trying to connect to 62.4.84.53. This computer also had a problem with winfixer popup windows, but bot as bad since started running Microsoft...