Search:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.4 (09.28.2015:1)
OS: Windows 7 Ultimate x86
Ran by user on Sun 10/18/2015 at...

no threats!

it finally let me run the mbam.exe
Malwarebytes ran and it found no threats.

heres the log you asked for:Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/18/2015
Scan Time: 2:31...

The computer rebooted after this last farbar run. Upon reboot, for the first time in a long time, windows opened without the extra popup windows. Should I try to run the programs that it wouldnt run...

Fix result of Farbar Recovery Scan Tool (x86) Version:17-10-2015
Ran by user (2015-10-17 15:12:35) Run:2
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available Profiles: user)
Boot...

No threats found

ComboFix 15-10-15.01 - user 10/16/2015 22:04:37.2.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2038.1271 [GMT -5:00]
Running from: c:\users\user\Desktop\ComboFix.exe
Command...

thank you im working on it now

I believe the restore files you mentioned are malicious. Every time I reboot screens popup mentioning them. Windows repair did not find any issues. The log for VEW follows:

Vino's Event Viewer...

ComboFix 15-10-15.01 - user 10/16/2015 19:26:03.1.2 - x86
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2038.1323 [GMT -5:00]
Running from: c:\users\user\Desktop\ComboFix.exe
SP:...

oops sorry. i didnt realize you had in fact replied

it has been three days... did I lose you?

the instructions were for a zip file but the hyperlink lead me to an exe download. I ran the exe and was given the popup that says will i allow program to make changes and i say allow and it does...

I downloaded MBAR from the hyperlink, and again, when prompted it does not open or run.

Fix result of Farbar Recovery Scan Tool (x86) Version:12-10-2015
Ran by user (2015-10-13 12:50:24) Run:1
Running from C:\Users\user\Desktop
Loaded Profiles: user (Available Profiles: user)
Boot...

I open in safe mode and malwarebytes and JRT wont run and spybot wont do a scan. also windows defender will not allow me to select tools. it wont highlight as an option. It also wont update. Here is...

I could not run the JRT file, even as administrator. It says nothing; it just doesn'topen or run.

Utorrent had already been uninstalled by the time I had started this thread, but to be sure, I followed the instructions for removing Utorrent, and it did not appear as an option for uninstall. I...

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:08-10-2015
Ran by user (administrator) on USER-PC (09-10-2015 19:14:21)
Running from C:\Users\user\Downloads
Loaded Profiles: user...

my computer is not allowing me to use my programs.
i am familiar with spybot forum rules, however i cannot download and run programs. my computer gives me an icon that lets me know it does not...

This has become a real problem. I got mini tool partition recover to scan and allow me to copy some important files over to another drive. I then formatted both partitions of the Terabyte drive. I...

Okay, I have a better understanding of raid and sata now. I found the issue I am having in the troubleshooter you suggested. It said if you are having error message "stop 0x0000007B" then I am to...

I believe you are right about the raid because it says so in my bios. I did the CMOS jumper moves, and it did not change anything. I looked hard and could not find a bios default settings restore. I...

I believe something called Striping was done to my drive because when I try to boot from disk in bios it says "stripe" in the description of My c drive. I am not sure exactly what that is or does.

I did remove the drive and try again, but it seems to not understand how to boot from the c drive anymore. He did something like trying to remap the sata ports, or something about making all the...

I have an hp pavilion elite running win7. I ran out of space on my C drive and I wanted to add a 300 Gig Seagate. I couldnt get my computer to recognize the drive. My friend came over to fix it. He...

thank you
I have run through the last of your instructions
the system is running smoothly

tyty

congrats no immediate threats were found!

However I watched the running bot check at the bottom right corner of my 162 spybot.

It starts out with (1/1,191,926) By the time it gets to...

while i was waiting for a reply i did a spybot search, because when my machine was badly infected it showed some million plus items of virtumonde in several forms (.sdn, .).

in running the check...

it seems to be running smoothly.
could we be done???

It produced no log.
It seems to have found nothing.
It ran about 20 minutes.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install...

DDS (Ver_10-03-17.01) - NTFSx86
Run by Chuck Hanabarger at 10:42:58.67 on Sun 06/20/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional ...

ComboFix 10-06-18.03 - Chuck Hanabarger 06/19/2010 15:19:11.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.199 [GMT -4:00]
Running from: c:\documents and settings\Chuck...

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-03-17.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install...

DDS (Ver_10-03-17.01) - NTFSx86
Run by Chuck Hanabarger at 10:22:25.50 on Sat 06/19/2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_20
Microsoft Windows XP Professional ...

ComboFix 10-06-18.03 - Chuck Hanabarger 06/19/2010 9:43.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.237 [GMT -4:00]
Running from: c:\documents and settings\Chuck...

I was battling virtumonde before on a different machine.
I am having problems with my laptop now.
I fear I may have accidentally passed the virus to my laptop prior to fixing the infected PC.

...

Thank you so much, Dave.
You were amazing.
What a great service you have provided me.

My computer seems to be running just fine.
Results of screen317's Security Check version 0.99.1
Windows XP Service Pack 2
Out of date service pack!!
`````````````````````````````` ...

I uninstalled avast.
I will reinstall after we are through or if we need it again.
I do not know what I am supposed to do.
I can only access ComboFix by clicking the icon on my desktop.
There is...

when I try to launch combofix it asks me to disable avast and I dont know how

will do

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:36:15 PM, on 3/4/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
...

Autoscan: completed 17 hours ago (events: 18, objects: 506489, time: 03:15:07)
Autoscan: completed 13 hours ago (events: 2, objects: 504374, time: 03:25:06)
3/3/2010 6:33:08 PM Task...

Autoscan: completed 11 minutes ago (events: 18, objects: 506489, time: 03:15:07)
3/3/2010 3:03:15 PM Task started
3/3/2010 3:10:19 PM Detected:...

when I shut my computer down to check to see if they were on my desktop in safe mode, Windows automatically updated itself. Is that normal?

I saved them while I was still in Safe Mode.
When I turn on my computer in safe mode I can see them on the desktop.
Not on normal boot though.
I search for them in Search function; they show up as...

my Kas logs in notepad seem to have disappeared upon restart.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:37:49 AM, on 3/4/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE:...

I got kas to run by locating it in C: and dragging it onto my desktop.
I ran it once and it took 3 hours; I thought I did it incorrectly because I hadnt set it to "deep" scan. I ran it again and it...