Search:

That seemed to have worked - I ran a spybot scan after the steps in your last post and it said that no immediate threats were found. So, are you thinking that this was a false positive? It seemed...

I tried uninstalling AIM and then ran Spybot again and Virtumonde still showed up.

I guess I'm not entirely positive what you mean. Do you want me to install AIM, or do you mean that I should uninstall it?

Actually, no, I don't recall installing it. I assumed my wife had installed it at some point, but I asked her and she doesn't recall installing it either. It could have been something that was...

Sorry it's been a while since I last replied, I've been away from home.

Here are the results from scanning the addressBook.exe file -- I'm not sure why it showed up in the first scan as a.x...

I'm not exactly sure which file you mean --

C:\Program Files\AIM6\addressBook.exe

or

Filename: a.x

I guess I don't really recognize either. I know that we have AOL instant messenger 6,...

I'm not sure what results from the scan you need, but here is the information displayed on the page

Filename: a.x
Status:
Scan finished. 4 out of 19 scanners reported malware.
Scan taken...

Here's the Kaspersky scan report:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Thursday, September 2, 2010
...

Hi Shaba, I ran a Spybot scan again. Here's the report:

--- Search result list ---
Virtumonde: [SBI $0B04958D] User settings (Registry key, nothing done)
...

Hello, I recently ran a Spybot scan this morning and it says that I have a Virtumonde infection. My computer hasn't shown any signs of infection other than running a bit slower than normal. I ran...

Hi,

Sorry to bother you with this, but when I run a Spybot scan, "CouponBar" is still showing up as a problem. I understand that it isn't showing up in any of the other logs, but it is still...

Hi -- it doesn't look like it found anything. Do you think it would go away if after running a scan using Spybot, I click on "Fix Selected Problems" ?

Here's the systemlook log:

SystemLook v1.0...

Here's the OTS log:



OTS logfile created on: 3/22/2010 5:31:18 PM - Run 1
OTS by OldTimer - Version 3.1.27.1 Folder = C:\Documents and Settings\ron\My Documents\Downloads
Windows XP...

Hi,

At this point I don't have any logs from Fixes done for this scan. When I performed the first Spybot scan and the latest scan, I didn't "Fix Selected Problems" within Spybot. I only went...

Here's the SystemLook log:

SystemLook v1.0 by jpshortstuff (11.01.10)
Log created at 17:25 on 16/03/2010 by ron (Administrator - Elevation successful)

========== regfind ==========
...

Well, I updated to the newest versions of Java and Spybot, and restarted my computer. I did another Spybot scan after that and the CouponBar Adware issue is still showing up. It really doesn't seem...

Here's the Security Check log ---

Results of screen317's Security Check version 0.99.1
Windows XP Service Pack 3
``````````````````````````````
Antivirus/Firewall Check:
Windows...

Here's the Hijackthis log ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:55:59 PM, on 3/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00...

Hi There, thank you for your help.

Here is my Malwarebytes' Anti-Malware Log:

Malwarebytes' Anti-Malware 1.44
Database version: 3839
Windows 5.1.2600 Service Pack 3
Internet Explorer...

Hello,

I just ran a scan using Spybot this morning and it resulted in 7 instances of an Adware called CouponBar. I'm not sure how it happened or the severity of this threat, but I wanted to...

Hello,

I just ran a scan this morning and it resulted in 7 instances of an Adware called CouponBar. I'm not sure how it happened or the severity of this threat, but I wanted to inquire regarding...

I re installed combofix and got it to uninstall running the prompt by turning off my antivirus and firewall. I think everything should be squared away with that.

Thank you again for all your...

I ran a Spybot S&D early this morning and it reported that everything was clean. I ran a scan again this afternoon after completing all of the steps in the tutorial and it reported 3 new problems:
...

Hi Shaba,

Thank you for all of your assistance, you were a great help.

Just a couple things that I wanted to run by you to get your opinion.

1.) I have run a couple Anti-Virus scans, one...

I believe so....

The Spybot S&D scan came back clean. I then ran an eTrust EZ Antivirus scan, and it came back with just one result of an infected/cleaned item. I believe it just deleted Combofix....

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:34:16 AM, on 2/28/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
...

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Saturday, February 28, 2009
Operating System: Microsoft Windows XP Professional...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:48:09 AM, on 2/27/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
...

ComboFix 09-02-26.02 - ron 2009-02-27 7:38:50.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.683 [GMT -6:00]
Running from: c:\documents and...

As a precaution, can I turn my Anti-Virus back on? Should I also remain disconnected from the internet besides for trouble-shooting?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:18:43 PM, on 2/26/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
...

ComboFix 09-02-26.01 - ron 2009-02-26 18:53:02.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1014.677 [GMT -6:00]
Running from: c:\documents and...

Hi Shaba,

I just wanted to be sure that I have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

I have an AVG Anti Virus program that...

Logfile of random's system information tool 1.05 (written by random/random)
Run by ron at 2009-02-26 07:36:39
Microsoft Windows XP Professional Service Pack 3
System drive C: has 62 GB (81%) free...

info.txt logfile of random's system information tool 1.05 2009-02-26 07:36:54

======Uninstall list======

-->C:\Program Files\Common Files\Real\Update_OB\r1puninst.exe...

When I open HijackThis and go through the process and click save, it isn't populating a notepad, and isn't prompting me to save the contents anywhere. Sometimes the program closes.

Is there...

Hi,

I recently have been having some issues with my computer and Virtumonde.dll, Smitfraud, TinyBar, and Virtumonde are the infections sited.

Prior to downloading Spybot I used the EZ Antivirus...