Search:

Thank you very much for you help Juliet :thanks::yahoo::friend::flowers:


# DelFix v1.010 - Logfile created 28/04/2016 at 21:55:05
# Updated 26/04/2015 by Xplode
# Username : Rick - 26NC-PC
#...

Slapped wrist accepted :red: Garmin keygen was old and never used.

PC is running much better. Anything more to do?



Fix result of Farbar Recovery Scan Tool (x64) Version:25-04-2016
Ran by...

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 27/04/2016
Scan Time: 21:44
Logfile: anti malware log.txt
Administrator: Yes

Version: 2.2.1.1043
Malware Database: v2016.04.27.07

IObit Advanced SystemCare & 2 x Java versions removed



Fix result of Farbar Recovery Scan Tool (x64) Version:25-04-2016
Ran by Rick (2016-04-27 16:34:26) Run:1
Running from...

***Addition.txt was too large to attach so i have added to this post***


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:25-04-2016
Ran by Rick (administrator) on 26NC-PC...

Thank you.

---------------------

# AdwCleaner v3.309 - Report created 04/09/2014 at 21:15:13
# Updated 02/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32...

Hi

laptop running very slow, high cpu activity, suspicious looking 'ads' appearing in chrome sessions. Would appreciate some assistance. Logs attached below

Thanks.

Scan result of Farbar...

thank you SO much fbfbfb!!

My computer is running like new again. Will try my best to keep it this way, which will include 'educating' my kids as to what they do and don't download. I will also be...

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Home Premium
Boot Device: \Device\HarddiskVolume3...

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16470
Run by Rick at 19:21:13 on 2013-04-03
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4095.2738 [GMT 1:00]
....

ComboFix 13-04-01.01 - Rick 01/04/2013 21:07:02.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.44.1033.18.4095.2241 [GMT 1:00]
Running from: c:\users\Rick\Desktop\ComboFix.exe...

Ok fbfbfb thats a lot to concentrate on but hopefully we have everything here...

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version:...

Hi fbfbfb

computer is running much better at this stage thank you.

Below are requested logs from combofix after running with your script as input.

-------------------------------
...

I managed to repair the network issue. Here is the FSS log.




Farbar Service Scanner Version: 03-03-2013
Ran by Rick (administrator) on 25-03-2013 at 21:47:53
Running from...

Hi thanks for the response. I am using Windows 7 not XP and don't see the option to 'repair' a network connection. I have tried the 'Troubleshoot problems' button but it is suggesting the issue is...

I have run combofix but it has not left my computrer in a good state. It now keeps hanging completely and the network connection has been lost so i am unable to connect to the internet!

The log...

08:33:09.0590 6668 NDIS - ok
08:33:09.0606 6668 [ 9F9A1F53AAD7DA4D6FEF5BB73AB811AC ] NdisCap C:\Windows\system32\DRIVERS\ndiscap.sys
08:33:09.0607 6668 NdisCap - ok
08:33:09.0631 6668 ...

Make that three posts :red:


08:32:25.0451 5612 TDSS rootkit removing tool 2.8.16.0 Feb 11 2013 18:50:42
08:32:25.0579 5612 ============================================================...

Hello fbfbfb, yes I still require help. Please find logs requested below. I have put in two posts as the character count was too long for a single post.

Thanks.

aswMBR version 0.9.9.1771...

My children have been downloading stuff which has changed search engine and possibly infected my PC with spyware/malware. Would like to request assistance please.


DDS (Ver_2012-11-20.01) -...

Many thanks.

--------------------------------------------------------------------------
Malwarebytes' Anti-Malware 1.37
Database version: 2274
Windows 5.1.2600 Service Pack 3

14/06/2009...

Running IE8. my wife clicked on some 'addictive game' on facebook which started downloading stuff that she then cancelled by obviously not fast enough. Getting eronious pop-up windows despite pop-up...

many thanks for your help shelf life :2thumb:

in future i will be much more vigilant opening msn's

cheers :bigthumb:

ok done all of the above (services.exe successfully deleted). new hjt scan as follows

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:22:32, on 01/04/2008
Platform: Windows XP SP2...

contents of results.txt after running sdfix in safe mode.


SDFix: Version 1.162

Run by ONeillR2 on 31/03/2008 at 18:24

Microsoft Windows XP [Version 5.1.2600]
Running From: C:\SDFix

# version=4
# OnlineScanner.ocx=1.0.0.635
# OnlineScannerDLLA.dll=1, 0, 0, 79
# OnlineScannerDLLW.dll=1, 0, 0, 78
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=2980...

Thanks shelf life. Contents of

SAS Scanner log as follows

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 03/27/2008 at 01:02 AM

Application Version : 4.0.1154

one other thing i forgot to mention. earlier today i noticed a process called 17pholmes1423.exe running on the machine. not running at the moment....

Ok donas as requested. only problem is i cannot logon in safe mode under my own account as it is a domain account (albeit a local one). Contents of report.txt as follows


SDFix: Version 1.162
...

Thanks shelf life.

I have located and deleted zriqhj.exe

I have also found services.exe in the temp folder under my profile but when i try and send this to virustotal.com i receive the...

Hi yes this is a workplace computer although I am expected to support the machine myself as I work remotely. Still require assistance please :)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:25:42, on 19/03/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal
...

Hi. my laptop seems to have become infected with a virus. This was received via MSN when i clicked on a link from a known friend saying 'your photos have been placed on facebook'.

I am running CA...