Search:

Type: Posts; User: scotsking; Keyword(s):

Search: Search took 0.01 seconds.

  1. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    malwarebytes found 2 infections...

    malwarebytes found 2 infections
    Spyware.Passwords.XGen & Heuristics.Resevered.Word.Exploit.

    deleted both & rebooted. have now updated Malwarebytes.

    Also used inherit on spybot and this is also...
  2. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Tried to run Spyware doctor setup and get Runtime...

    Tried to run Spyware doctor setup and get Runtime error at 503:633 could not call proc.

    Malwarebytes error with windows cannot access the specified devise,path or file. You may not have the...
  3. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Hi Combfix run in normal ComboFix 11-08-16.02...

    Hi Combfix run in normal

    ComboFix 11-08-16.02 - Shirley King 16/08/2011 18:29:46.7.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.577 [GMT 1:00]
    Running from:...
  4. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Hi Rebooted in safe mode with networking and...

    Hi

    Rebooted in safe mode with networking and combofix started. txt file below

    ComboFix 11-08-15.07 - Shirley King 15/08/2011 22:21:23.6.2 - x86 NETWORK
    Microsoft Windows XP Professional ...
  5. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Hi Loaded combofix and set to run. came up with...

    Hi
    Loaded combofix and set to run. came up with a message about Virgin Media security running which I checked and no sign of it running so continued with the process. Message box "Comboxfix Zero...
  6. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Hi Ran 1at 3rd and 4th links, 2nd would not...

    Hi

    Ran 1at 3rd and 4th links, 2nd would not work, in normal mode and still not ab;e to run malwarebytes.

    Ran the same 3 in safe mode and still not able to run malwarebytes

    What's next?
    ...
  7. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Hi Thanks for getting back to me. I have...

    Hi Thanks for getting back to me.
    I have re-booted in safe mode and unable to run Malwarebytes message "Windows cannot access the specified device path or file You may mot have the appropriate...
  8. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Hi Shelf Life Yes I still need help please ...

    Hi Shelf Life

    Yes I still need help please

    Thanks
  9. Thread: Defender.exe

    by scotsking
    Replies
    16
    Views
    7,031

    Defender.exe

    Anti virus has been compromised. Spybot no longer working and 100ksearches.com when trying to access web site from google search results.
    Tried to remove Defender manually and this did appear to...
  10. Replies
    39
    Views
    8,291

    Thanks Again

    all working fine

    will be away from the PC until the weekend but hopefully all problems now resolved.

    Will make sure that the updates are done a bit more often than the past & hopefully will not...
  11. Replies
    39
    Views
    8,291

    Hi He does not want me to remove the outlook...

    Hi

    He does not want me to remove the outlook deleted items. Can they stay or should I move them to another folder?

    Everything appears to be working fine. What did we have?

    On another note...
  12. Replies
    39
    Views
    8,291

    also to let you know spybot working fine after...

    also to let you know spybot working fine after using inherit.
  13. Replies
    39
    Views
    8,291

    DDS log

    DDS (Ver_09-09-29.01) - NTFSx86
    Run by Shirley King at 22:10:47.93 on 23/11/2009
    Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_17
    Microsoft Windows XP Professional ...
  14. Replies
    39
    Views
    8,291

    Kapersky log

    --------------------------------------------------------------------------------
    KASPERSKY ONLINE SCANNER 7.0: scan report
    Monday, November 23, 2009
    Operating system: Microsoft Windows XP...
  15. Replies
    39
    Views
    8,291

    Combofix log

    Hi again

    ComboFix 09-11-22.08 - Shirley King 23/11/2009 18:43.5.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.605 [GMT 0:00]
    Running from: c:\documents and...
  16. Replies
    39
    Views
    8,291

    I still have a problem with Spybot not running....

    I still have a problem with Spybot not running. It stoped at the same time as the first issue with the "cannot access" error message. I have tried to re-install and the install process has a problem...
  17. Replies
    39
    Views
    8,291

    Combofix log

    ComboFix 09-11-22.02 - Shirley King 22/11/2009 23:15.4.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.604 [GMT 0:00]
    Running from: c:\documents and settings\Shirley...
  18. Replies
    39
    Views
    8,291

    had to run combofix twice. First time hung at...

    had to run combofix twice.
    First time hung at preparing log file - left for 20mins nothing so forced a re-boot & ran again. 2nd time noticed AOL scan loading cancelled program and log file created.
  19. Replies
    39
    Views
    8,291

    hi again [boot loader] timeout=30...

    hi again

    [boot loader]
    timeout=30
    default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
    [operating systems]
    multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Windows XP Media Center Edition"...
  20. Replies
    39
    Views
    8,291

    Log

    OK

    This is the new file

    Volume in drive C has no label.
    Volume Serial Number is 78F1-6AAC

    Directory of c:\

    25/02/2006 14:58 209 boot.ini
  21. Replies
    39
    Views
    8,291

    not working

    Have run twice now & still getting the same text file.

    Did have virtumonde and used combofix then. Also directed from this forum
  22. Replies
    39
    Views
    8,291

    Fixes

    Hi there

    ComboFix 08-08-02.01 - Shirley King 2008-08-03 13:32:48.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.560 [GMT 1:00]
    Running from: C:\Documents and...
  23. Replies
    39
    Views
    8,291

    Hi there Both internet explorer & PCguard are...

    Hi there

    Both internet explorer & PCguard are now working ok.

    The recovery console came up with message about not being able to access/find?? files.

    I can't fully remember the message and...
  24. Replies
    39
    Views
    8,291

    dds

    DDS (Ver_09-09-29.01) - NTFSx86
    Run by Shirley King at 13:50:42.70 on 22/11/2009
    Internet Explorer: 7.0.5730.11
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.485 [GMT 0:00]
    ...
  25. Replies
    39
    Views
    8,291

    Combofix

    ComboFix 09-11-21.03 - Shirley King 22/11/2009 13:19.2.2 - x86
    Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.517 [GMT 0:00]
    Running from: c:\documents and settings\Shirley...
  26. Replies
    39
    Views
    8,291

    Hi again

    had a couple of issues with Combofix.
    PC guard still running unable to stop as I can no longer run the program (same error as with IE at start). Also Combofix could not load the system restore.
    On...
  27. Replies
    39
    Views
    8,291

    the rest

    Removing mount point : C:\WINDOWS\Temp\MCE000e0\MCE000e0
    Found mount point : C:\WINDOWS\Temp\MCE000e1\MCE000e1
    Mount point destination : \Device\__max++>\^
    Removing mount point :...
  28. Replies
    39
    Views
    8,291

    Win32 log

    Hi Blade
    forgot to post this one
    Running from: E:\win32kdiag.exe
    Log file at : C:\Documents and Settings\Shirley King\Desktop\Win32kDiag.txt
    Removing all found mount points.
    Attempting to reset...
  29. Replies
    39
    Views
    8,291

    attach

    UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
    IF REQUESTED, ZIP IT UP & ATTACH IT

    DDS (Ver_09-09-29.01)


    ==== Disk Partitions =========================


    ==== Disabled Device...
  30. Replies
    39
    Views
    8,291

    dds log

    DDS (Ver_09-09-29.01) - NTFSx86
    Run by Shirley King at 0:13:31.37 on 22/11/2009
    Internet Explorer: 7.0.5730.11

    ============== Running Processes ===============


    ============== Pseudo HJT...
  31. Replies
    39
    Views
    8,291

    hi again Logfile of The Avenger Version 2.0,...

    hi again

    Logfile of The Avenger Version 2.0, (c) by Swandog46
    http://swandog46.geekstogo.com

    Platform: Windows XP

    *******************

    Script file opened successfully.
  32. Replies
    39
    Views
    8,291

    and the rest

    Found mount point : C:\WINDOWS\SoftwareDistribution\Download\S-1-5-18\5a0d771158cfd69be5ddd26d8f58c73b\5a0d771158cfd69be5ddd26d8f58c73b
    Mount point destination : \Device\__max++>\^
    Found...
  33. Replies
    39
    Views
    8,291

    Running from: E:\Win32kDiag.exe Log file at :...

    Running from: E:\Win32kDiag.exe
    Log file at : C:\Documents and Settings\Shirley King\Desktop\Win32kDiag.txt
    WARNING: Could not get backup privileges!
    Searching 'C:\WINDOWS'...
    Found mount point ...
  34. Replies
    39
    Views
    8,291

    Need help - infected PC

    Original post in wrong forum - sorry
    I have a pc with a problem. All started when IE stopped working prsented with message "Windows cannot access the specified device, path or file. You may not have...
  35. Replies
    1
    Views
    1,556

    Need help - infected PC

    I have a pc with a problem. All started when IE stopped working prsented with message "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access...
  36. Thread: Virtumonde

    by scotsking
    Replies
    9
    Views
    4,484

    Big Thanks

    Hi Ken
    Thanks for all your help today.

    Now I can download my windows updates.
  37. Thread: Virtumonde

    by scotsking
    Replies
    9
    Views
    4,484

    Hi Ken I disabled TeaTimer and rebooted. Ran...

    Hi Ken

    I disabled TeaTimer and rebooted. Ran HJT and removed the files listed.
    I deleted the files in red (they are still in recyscle bin).

    Not sure if I needed to reboot after doing the above...
  38. Thread: Virtumonde

    by scotsking
    Replies
    9
    Views
    4,484

    Virtumonde

    Hi Ken545

    OK here is the Combox.txt

    ComboFix 08-08-02.01 - Shirley King 2008-08-03 13:32:48.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.560 [GMT 1:00]
    Running...
  39. Thread: Virtumonde

    by scotsking
    Replies
    9
    Views
    4,484

    Hi Ken454

    Hi Ken454

    Done all of the above. Here is the new HJT log;

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 10:53:03, on 03/08/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE:...
  40. Thread: Virtumonde

    by scotsking
    Replies
    9
    Views
    4,484

    Virtumonde

    Hi My PC is infectd with virtumonde which I need help removing.
    I cannot turn on Windows Updates and I think this is the issue

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 18:51:46,...
Results 1 to 40 of 41