Search:

...for helping me out. Unfortunately the post got archived before I could post a thanks in there. My world is more safe because of your help!
I m going to create a paypal acnt soon to donate here....

ComboFix 12-05-03.01 - Sanjana 05/03/2012 5:15.6.2 - x86 NETWORK
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3539.2689 [GMT -4:00]
Running from:...

I spoke too soon. My CPU went to 100 requiring a reboot one time today. Is there anything else I can look at ?
Thanks
Sanjupan

Thanks Ken545. Will do. Until now no issues. Let me know if I need to run any other tests to detect hardware issues.
Thanks
Sanjupan

Logs below
Thanks
Sanjupan

-------------------------------------------------------------------
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows 7 Professional

Looks like the issue is resolved. I had my PC on the whole night with perfmon tracking.
Please let me know the next steps.
Thanks for all the help!
sanjupan

Hi I was able to run the ESET Scanner successfully in safe mode.

It identified 4 threats but apparently also quarantined it.
I still have the ESET Window open.

Should I restore back files...

Hi, whenever I try to run the online scan, it takes a long time(its scanning for viruses stage) my CPU goes 100% mid-way and I have to reboot the PC. I retried that 2 times without luck. :confused:
...

Thanks. The aswMBR prompted for virus definition update - i clicked yes.

Posting both the logs below.
Thanks
sanjupan
...

Hi
My systems CPU goes to 100% suddenly / randomly even though I would not be doing something( but browsers open).
After that it would be impossible to bring it down unless I do a hard reboot.
I...

Hi sorry, I logged in the 4th day and fairly enough my post was archived. I am starting this again as indicated with first post. Apologies again and thanks for your help on this.
Earlier post :...

Thanks.

----------------------------------


ComboFix 11-12-06.01 - Sanjana 12/06/2011 13:11:51.5.2 - x86
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3539.2152 [GMT -5:00]...

aswMBR version 0.9.8.986 Copyright(c) 2011 AVAST Software
Run date: 2011-12-04 02:38:46
-----------------------------
02:38:46.738 OS Version: Windows 6.1.7601 Service Pack 1
02:38:46.738 ...

My CPU is going 100% with sometimes WMIPrvSE.exe and sometimes svchost.exe on 100%. Not sure whats happening. Some googling suggested worm / virus may be infecting.

Please help at your...

Completed Step 2. of installing JDK.
Please advise on the next step.
Thanks.

Thanks.
On this update page
There two options with "JDK 6 Update 23" -
JDK 6 Update 23 with Java EE
and
JDK 6 Update 23 with NetBeans 6.9.1

There is also an option "JDK 6 Update 24 with...

For Step 2....The
"Java Runtime Environment (JRE) 6" link is not working.
Any alternate ?

http://virusscan.jotti.org/en/scanresult/c22b8e8e9a9fd237d8b65ed602639a24653d3229


2011-02-19 Found nothing 2011-02-19 Found nothing
2011-02-18 Found nothing 2011-02-18...

Results

http://virusscan.jotti.org/en/scanresult/c22b8e8e9a9fd237d8b65ed602639a24653d3229

2011-02-19 Found nothing 2011-02-19 Found nothing
2011-02-18 Found nothing 2011-02-18...

When I browse and click on "Send File" it does not do anything.
The status bar in IE shows "Error on page" message. I clicked on details i get below message.
...

ESET scan log

C:\Qoobox\Quarantine\C\Users\Sanjana\AppData\Local\ayetaciw.dll.vir a variant of Win32/Cimag.FT trojan
C:\Users\Public\Documents\Server\hlp.dat probably a variant of...

Thanks.
Can I disconnect my internet when its scanning?

Step 4 | Let's perform an ESET Online Scan
============
Hi
How much time does this take ?

Its been 60 mins and its still scanning one of the .iso installation files by Microsoft.

Please...

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5765

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

2/14/2011 8:48:02 PM
mbam-log-2011-02-14 (20-48-02).txt

Step1
-------

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows 7 Professional
Boot Device:...

I dont see the file Attach.txt for last time on desktop.
The one I see is for 30 Jan on my local folder. Do I need to run DDS or anything to get it?

Combofix log

ComboFix 11-02-05.01 - Sanjana 02/06/2011 17:54:24.4.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3539.2467 [GMT -5:00]
Running from:...

SystemLook 04.09.10 by jpshortstuff
Log created at 17:30 on 06/02/2011 by Sanjana
Administrator - Elevation successful

========== dir ==========

c:\users\Sanjana\hob - Parameters: "/s"
...

MBR Log

Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 6.1.7600 Disk: SAMSUNG_ rev.2AC1 -> Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1
...

Combofix.log

ComboFix 11-01-31.02 - Sanjana 02/03/2011 22:55:11.3.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3539.2301 [GMT -5:00]
Running from:...

TDSkiller log

2011/02/03 22:43:39.0815 8016 TDSS rootkit removing tool 2.4.16.0 Feb 1 2011 10:34:03
2011/02/03 22:43:40.0018...

Unfortunately the same result. My laptop crashes when I run the renamed ComboFix.exe. Please advise.

I am getting the Blue Screen when I download and run Gentleman.exe (Combofix.exe).
Do you want me to run this in Safe Mode or something. Not sure if that will resolve it.
:confused:

Thanks

MBRCheck log
MBRCheck, version 1.2.3
(c) 2010, AD

Command-line:
Windows Version: Windows 7 Professional
Windows Information: (build 7600), 32-bit
Base Board Manufacturer: Dell Inc....

Thanks for your response.
GMER Log
----------
GMER 1.0.15.15530 - http://www.gmer.net
Rootkit scan 2011-01-31 20:39:41
Windows 6.1.7600 Harddisk0\DR0 -> \Device\Ide\iaStor0 SAMSUNG_ rev.2AC1...

I think a Malware was introduced on my machine. MY PC crashes everytime I open Firefox now. Chrome gets hung. Only IE runs. The IE browser redirects to sites randomly even when genuine sites are...

When I did Combofix /u it started Combofix and then gave message that new updated Combofix is avaiable. It showed the 50 stages again and then popped up the log file below
...

Can you let me know for my knowledge what kind of malware was it?
thanks

It looks good now.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4673

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

9/22/2010 9:53:46 PM
mbam-log-2010-09-22 (21-53-46).txt

ComboFix Log.
================
ComboFix 10-09-21.01 - Sanjana 09/21/2010 22:21:48.1.2 - x86
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.3539.2493 [GMT -4:00]
Running from:...

HI.
Nothing was found in TDSS scan.

Should I run the Combo Fix now?

The TDSS Log is below-

2010/09/20 22:46:18.0698 TDSS rootkit removing tool 2.4.2.1 Sep 7 2010 14:43:44
2010/09/20...

My browser gets redirected randomly especially from google search results. Not sure how malicious this can be. Also Windows Explorer crashes randomly when I start Internet Explorer - not sure how...

My Firefox browser was auto-redirected and then various windows opened and started installing junk by itself!
When I forced shutdown and rebooted it wouldnt allow me to run System Restore or task...