Search:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, February 24, 2008 3:17:14 PM
Operating System: Microsoft Windows XP...

Note: A number of objects were locked - I will try again and disable the trial kapersky AV that was running when I ran the kaspersky online scanner
...

Dear SN Forum Experts,

I have a home network with three computers. I cleaned one recently with the help of Ken545 on this forum (see http://forums.spybot.info/showthread.php?t=24343). I thought...

Ken,

You've been a great help and you taught me a lot! I would like to make a donation. Where should I send it?

Kind regards,

Peter:euro:

Hi Ken and thanks.

Question about the grc scan: It gave me a warning about my IP machine name, which seems to be unique. (I don't want to publish it here.) Is there an easy way to hide this?
...

Hi Ken,

I hope you stay safe in the snow. My son enjoyed your cowboy smilie. And thanks for the tips. I decided to go with the COMODO firewall (also recommended by Consumer Reports). However, on...

Hi Ken,

Thanks for all the great help. I think we have them beat for now. I've pasted a final HJT log for you to confirm that I'm clean. A few final questions:

1) You suggest I use Spyware...

I found the tea timer log that shows the registry changes that I mentioned from this morning - 2/22/2008 7:50:24 AM onward. I've left the earlier ones for your reference.

2/14/2008 9:19:57 AM...

Hi Ken,

Sorry I didn't reply yesterday. It was 2 am here local time by the end of your last post. I do think I'm in the clear thanks to you, but I just want to confirm a few things before we close...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:53:35 AM, on 2/23/2008
Platform: Windows XP SP3, v.3264 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode:...

------- Sigcheck -------

"C:\WINDOWS\system32\wininet.dll"
----a-w 656,896 2004-09-29 18:27:41 C:\WINDOWS\$hf_mig$\KB834707\SP2QFE\wininet.dll
----a-w 657,920 2005-01-27...

Hi Ken,

Here come the new logs per your instructions:

ComboFix 08-02-22 - Majsan 2008-02-23 0:43:19.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.46.1033.18.186 [GMT 1:00]...

A.) in the process of trying to delete the virus this file was deleted and I'm still getting a dll error message at startup - unable to find c:\windows\system32\cavcuseo.dll

B.) I think I might...

------- Sigcheck -------

"C:\WINDOWS\system32\wininet.dll"
----a-w 656,896 2004-09-29 18:27:41 C:\WINDOWS\$hf_mig$\KB834707\SP2QFE\wininet.dll
----a-w 657,920 2005-01-27...

Hi Ken, the first 1/2 of the ComboFix log is below. The 2nd 1/2 will follow, along with the last hijackthis log (too long).

ComboFix 08-02-22 - Majsan 2008-02-21 22:13:22.1 - NTFSx86
Microsoft...

Hi Ken,

Here are the Malwarebytes/Hijackthis logs: (Combofix log will follow shortly)

Malwarebytes' Anti-Malware 1.04
Database version: 385

Scan type: Quick Scan
Objects scanned: 29687...

Hi Ken - thank you for your help!

VundoFix seems to have found 2 files (see log), but on reboot Kaspersky AV found a these - is VundoFix doing what it should?...

deleted: adware...

Virtumonde fix request (logs are ready) - please help!!!

I have since run Kaspersky anti-virus trial and wonder if I can consider my PC problem-free?

Here are the Kaspersky On-line Scanner...

My previous post: ttp://forums.spybot.info/showthread.php?t=24309

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:56:02 PM, on 2/14/2008
Platform: Windows XP SP3, v.3264 (WinNT...

RE: http://forums.spybot.info/showthread.php?t=24289&highlight=virtumonde

I have the report per "md usa spybot fan" instructions but it doesn't fit here. I'm proceeding to the safe mode & HJT...

Dear S&D Forum,

I consider myself moderately computer literate, but probably a newbie in this crowd. I have a WinXP PC and I’ve used the personal version of Spybot S&D over the past year or so...