Search:

sorry to ask.
I don't use IE unless i have to look up something for my car forum.

shouldn't i
errr
how do i, update my firefox?

shouldn't there be a donation link at the bottom of the page?

I think I am good.

But maybe you should leave this thread open for a week and close it if I don't report back again.

I am a little peeved that I had AVG and spybot running and nothing stopped...

ComboFix 10-02-12.01 - buddy 02/14/2010 20:52:40.3.1 - x86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2047.1721 [GMT -6:00]
Running from: c:\documents and...

hey...
that 's not what you said to do before.

I ran combo fix from the old icon on my desktop.
it said that there was a new version and downloaded it.

here's the log from that scan.

and...

18:33:32:328 3948 TDSS rootkit removing tool 2.2.3 Feb 4 2010 14:34:00
18:33:32:328 3948 ================================================================================
18:33:32:328...

DeFogger did not give me any error message.
but it also did NOT ask to reboot.
So I did a normal restart
and I'll post the logs just in case.

defogger_disable by jpshortstuff (29.01.10.1)
Log...

Stealth MBR rootkit/Mebroot/Sinowal detector 0.3.7 by Gmer, http://www.gmer.net

device: opened successfully
user: MBR read successfully
called modules: ntoskrnl.exe CLASSPNP.SYS disk.sys...

Ok I've got 2 small window pop ups in firefox

http://pop.doubleclick.net/popup2.php?r=n]%23_}G%60Q%22g~g]xG5Qe%40%27xe%3B%60]}F%23%60%27Px

and ...

a search for "crew" sent me here
http://8002.1936_2710.local-search-pages.com/jump2/?affiliate=rs4&subid=1936_2710&terms=crew

a search for "nokia" sent me to...

yes, still being redireted.

Update KB977165 seems to have been my BSOD problem.
Whatthetech got me fixed up in no time.

GooredFix by jpshortstuff (08.01.10.1)
Log created at 20:49 on 12/02/2010 (buddy)
Firefox version...

yes.
If I'm going to need it i'll have to unplug the D drive and plug in the CDROM

ok,
i'm in a DOS screen at the C:\WINDOWS prompt.

I chose Last Known Good
that got me to the screen to pick recovery console or XP pro.
I chose xp pro.

when I pressed enter, the screen goes blank
and about 3 seconds later, i get the BSOD

small problem...

I deleted those 3 folders.
Did a bit of surfing on the net.
and there was a bunch of security updates that microsoft forced on me.

and when it restarted, BAM!
BSOD.
...

and I just went to a car forum that I answer questions on.
and a small firefox window popped with this in the address bar...

Something is still going on.
using Firefox 3.0.17

a google search for "obama"
the first link was
www.obamadeception.net
redirected to
www.healthline.com

a google search for "ABC"

I dont think combofix had actually be run before, because I had to install the microsoft recovery console.
Here's tonights exciting log files....

SystemLook v1.0 by jpshortstuff (11.01.10)
Log...

and thank you for your time.

I feel like an idiot
I didn't include the second half of my last message the other night.

so I'm going to start over.
SOME members of the house don't care if there is a problem with the computer...

DAMN
I assumed that I would be able to edit my post to add this log file.
But I have to make a new post to my thread.

Malwarebytes' Anti-Malware 1.44
Database version: 3649
Windows 5.1.2600...

hello ken545.
Thank you for trying to help me.

I had already followed the steps listed in Before you post

About 2 weeks ago I was watching a news video on yahoo. And out of nowhere i got like 7 spybot "access denied" or something like that above the clock. in the lower right corner.

An advertisement...

thank you for your respose.

the complaint is "it's running slow"
although i didn't notice a long boot up time and haven't had a problem with it on the net.

i will perform your recomendations...

i'm trying to help a family friend with her PC that is running slow.

i know it might be a loosing battle if she goes to free poker sites.

do what you can...
...

I need to voice my appreciation to the spybot team and point out Blade81.

I have been negotiating with my employer for 3 months now for a substantial raise. About 18%, although it still isn’t very...

after looking over the scans. i think i can clean most of this up myself.
so help the next guy and i'll make a new thread if i can't clean something up.

everythying seems to be all clear.

thanks so much for the help.
this is a service we users couldn't live without.

thanks for the help so far.
i ran spybot again and found Virtumonde.generic in the reg.
i let spybot remove it and am currently running another complete kaspersky, but it's probably wont be...

i wish it was this hard to get infected in the first place...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:58:18 PM, on 9/25/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE:...

ComboFix 07-09-21.2 - "acraigg" 2007-09-25 8:33:51.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.149 [GMT -5:00]
* Created a new restore point

FILE::...

so after having a problem with web pages opening up on their own last week at work i decided to check my home pc although it seems to be running ok.
and i found some nasties.
...

when the pc booted back up combofix had a message,
"Preparing Log Report.
Do Not Run Any Programs Until ComboFix Has Finished"

but i have 2 printer server programs and Palm desktop set to start...

IE kept opening up and trying to go to web sites while doing this. these people need their fingernails pulled off.
slowly...
******
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:32:00...

:oops:
ok, the time zone is wayyyy off.
my post is on the next page and it says it was yesterday.

i posted my logs from my work computer about 3pm my time and now it's gone.

believe it or not, i read the rules.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:20:37 PM, on 9/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...