Search:

One more quick question...

When doing this - do I need to do this for each user profile?

Thanks Again,

Dane

Make your Internet Explorer more secure

Blade,

You're great! :crowned:

Everything seems to be back to normal.

Mountains of thanks for the help,

Dane

If everything looks clear to you after looking at the last 2 logs I have posted is it now time to reset the System restore?

After I sent the ComboFix Log and the HJT Log I checked and the Control Panel was back and I was able to get into the Set Progam Access and Defaults and I was even able to uninstall a few things.
...

ComboFix Log

ComboFix 08-10-30.09 - Mary 2008-10-30 20:28:21.4 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2109 [GMT -5:00]
Running from: C:\Documents and...

Once the advance tab is up, there is no selection for the "Control Panel". That selection is not available. The "Set Program Access and Defaults " is on the Start Menu but when you click on it this...

ARRGHHH! More problems...My wife was telling me about some pop ups on her side and I looked at it and tried to "x" out and I think I added more malware. She Does not have a Control Panel on the...

First HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:01:10 PM, on 10/28/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)...

========== FILES ==========
File/Folder C:\WINNT\system32\spoolvs.exe not found.

OTMoveIt3 by OldTimer - Version 1.0.5.0 log created on 10282008_051350

I think I figured out the start menu...just too many things pinned to it:oops:

My system seems to be running better. The pop ups have stopped but I am getting a message stating,"Some items cannot be shown..there is not enough room on the start menu...". Is this happening due to...

Combo Fix Log


ComboFix 08-10-24.02 - Owner 2008-10-25 7:17:05.3 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.1925 [GMT -5:00]
Running from: C:\Documents and...

HJT LOG



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:56:48 PM, on 10/25/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1525\snapshot\MFEX-4.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1525\snapshot\MFEX-17.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1524\snapshot\MFEX-2.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1524\A0201089.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1523\A0200990.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1522\snapshot\MFEX-3.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1522\A0200952.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1521\A0200881.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1520\snapshot\MFEX-2.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1520\A0200847.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1519\snapshot\MFEX-3.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1519\A0200797.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1519\snapshot\MFEX-71.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1519\A0200797.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1518\snapshot\MFEX-1.DAT Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1517\A0200704.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1516\A0200664.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

C:\System Volume Information\_restore{7DCA1BE4-D752-48D6-A25E-C722C8FD1BC4}\RP1515\A0200610.dll Infected: Trojan.Win32.Pakes.kqc 1
C:\System Volume...

Kaspersky Log is LARGE...Will post in a few replies


KASPERSKY ONLINE SCANNER 7 REPORT
Saturday, October 25, 2008
Operating System: Microsoft Windows XP Home Edition Service Pack 2 (build...

Forgot Hijack file...



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:24:17 PM, on 10/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2...

Here is the log after running combofix....


ComboFix 08-10-16.08 - Owner 2008-10-17 18:24:28.2 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.2059 [GMT -5:00]
Running...

I read all instuctions and did as instructed, however I ran and fixedSpybot-S&D multiple times and still could not resolve some items in "red".

Here is the HJT log taken directly after.

Thanks...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:53:06 PM, on 10/8/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
...

Now I cannot go to Kaspersky's online virus scanner or McAfee online virus scanner...

when I try to go to either I get...

The page cannot be displayed

The page you are looking for is...

RegUBP2b-Owner.reg;C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Snapshots2;Trojan.StartPage.1505;Deleted.;
Process.exe;C:\Documents and...

Now it's telling me I can't open task manager.....


ComboFix 07-10-02.2 - Owner 2007-10-01 19:04:16.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.134 [GMT -5:00]...

SmitFraudFix v2.231

Scan done at 20:04:04.95, Sun 09/30/2007
Run from C:\Documents and Settings\Owner\Desktop\SmitfraudFix
OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT
The...

Thanks for the help! Here is SmitFraudFix Scan.


SmitFraudFix v2.231

Scan done at 20:37:56.01, Wed 09/26/2007
Run from C:\Documents and Settings\Owner\Desktop\SmitfraudFix
OS: Microsoft...

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, September 22, 2007 8:20:57 AM
Operating System: Microsoft Windows XP...

The only actions I have taken are updating and running Spybot and hijackthis. The two scans are too long to put in one post so I will post second scan in a reply...


Logfile of Trend Micro...