Search:

Hi Ken, sorry, my bad. I will carefully read through and follow every tip that you have given me before coming back with any problems. Thanks!

I have now created a new Restore Point following your...

Hi, in the past I lent my laptop to other people and they did create their own profiles but I haven't done this for a year or more. So the only profiles I use is 'Administrator' but I only use this...

Hi Ken, everything was working fine until I logged in under my own user profile and it seemed that Virtumonde was still lurking. I thought that everything would have been removed even under the user...

Thanks for all the help. Hopefully I won't have anything to come back to you on. Will start loading up some of the software you've recommended. Best wishes, Michael :)

Hi, very good morning to you!

Thanks for the SP3 tips but I think I'll stay away from it for a bit!
JRE 6u7 is now installed.
The system seems to be running fine. Absolutely no strange things...

Sorry, I meant that I put Tea-Timer back on and pop-up warnings appear for registry changes.

Hi, thanks for all your help and patience. I ended up uninstalling SP3 and things seem to work much better (using advice from
How to remove Windows XP Service Pack 3 from your computer...

Hi, Windows doesn't seem to let me do the System Restore. I am prepared to just kill everything and reinstall Windows etc. if this is the easiest solution at the moment.

Hi, here is the latest HJT done from safemode. The files that you told me to remove didn't come up after running HJT. The only thing that I've been doing while waiting for your response is to try and...

Hi, the system is really labouring now in Normal mode and I can't seem to get access to the internet (I'm using another computer).

Malware only works in safemode. I cannot connect to check the...

Hi, vondo is back and it seems to be stronger than ever. Can you please help? Should I start a new thread?

I removed Combofix and put TeaTimer back on. Teatimer instantly found registry changes...

Many thanks for your expert skills!! Have a good weekend! :eek:

The system seems fine although I've barely used it (I have been using another computer). But my programs seem to be loading up fast and the weird things have disappeared (e.g. desktop disappearing,...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:13:20, on 01/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode
...

C:\Program Files\Macromedia\FreeHand MXa\_desktop.ini
C:\Program Files\Macromedia\FreeHand MXa\English\_desktop.ini
C:\Program Files\Macromedia\FreeHand MXa\English\First Run\_desktop.ini...

Hi, Combofix worked in safe mode but when it rebooted, I couldn't get a log file. "Access denied" came up. So then I reinstalled Combofix, ran it again, and when it rebooted, I went into Safemode...

Hi, just an update. I've done all the instructions so far with no problems.

Combofix has been running for about 1.5hrs and it's currently stuck on stage 8for the majority of the time that it's...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:10, on 2008-08-01
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
...

Hi, thanks so much for helping.

When I ran HJT I could not find the entries:

O2 - BHO: (no name) - {43A435B7-A429-4287-98B9-BF7323C30AEB} - C:\DOCUME~1\m_tran\LOCALS~1\Temp\cbxUKcdC.dll
O2 -...

Hi, please help. Random IE windows opening and desktop items sometimes disappear. Thanks, Michael

HJT

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:27, on 2008-07-29
Platform:...