Search:

I am back in town..... My thread was locked again. My computer is acting all weird. I had to boot up in safemode, and I do not seem to have access to open the logs (text files) so I have to attach...

I am still here! I might be a couple of days!

Don

------------------------------------------

Edit: http://forums.spybot.info/showthread.php?68842-I-am-back-III

All processes killed
========== OTL ==========
========== FILES ==========
C:\Documents and Settings\Don\Application Data\SearchProtect\bin\ChromeModule.dll moved successfully.
C:\Documents and...

Here is the other log you asked for:

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.06.06.09

Windows XP Service Pack 3 x86 NTFS (Safe Mode/Networking)...

C:\Documents and Settings\Don\Application Data\SearchProtect\bin\ChromeModule.dll a variant of Win32/Conduit.SearchProtect.C application
C:\Documents and Settings\Don\Application...

Thanks. I am just starting the scan. It has been a few days and looks like it will not be finished for a few hours and until I wake up, so I thought I would like you know it will be tomorrow before I...

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Database version: v2013.06.06.09

Windows XP Service Pack 3 x86 NTFS (Safe Mode/Networking)
Internet Explorer 8.0.6001.18702
Don ::...

I did the rkill scan. It seemed to work fine.

I am using the Malwarebytes Anti-Malware I did the scan. It found 8 objects. I clicked on Remove Selected and it asked to reboot. It did into normal...

DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_26
Run by Don at 21:24:22 on 2013-06-05
Microsoft Windows XP Home Edition ...

my previous thread was locked. I was having troubles with the scan as it was constantly freezing. I now have a program called System Doctor 2014. I am not able to use any programs and I have typed...

Here you go!

OTL logfile created on: 5/26/2013 6:05:07 PM - Run 4
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Documents and Settings\Don\Desktop
Windows XP Home Edition Service Pack 3...

OKay I got firefox back. I tried to run the OTL fix you gave me, but it hung up even in safemode!

Don

SUCCESS!!


========== OTL ==========
Error: No service named catchme was found to stop!
Service\Driver key catchme not found.
File C:\DOCUME~1\Don\LOCALS~1\Temp\catchme.sys File not found not...

I will run the scan again.

For firefox. The shortcut on my desktop remained, but as the generic icon. When I clicked on the icon it looked for firefox using the flashlight. To me that suggests...

Okay, I got into safemode using f5, I did the scan/fix. I was surprised at how quick it was before it asked to reboot. The system rebooted. AFter the reboot, the logs did not come up. I did a scan of...

Yeah, so I am trying to boot into safemode with no luck. I have tapped the F8, but I get asked where I want to boot from (floppy, harddisk, etc), but I do not get safemode.

Don

Thanks. I have been away a bit.

I will follow your steps this weekend.

Don

Yes I tried to run the scan again, and the same thing happened. I think it stops at the beginning.

Don

So I ran the scan. I think it stopped part way through. I left it overnight and said something like "killing processes" The task bar and desktop icons were missing when I woke up. I had to do a...

Windows XP Service Pack 3 x86
Internet Explorer 7 Out of date!
``````````````Antivirus/Firewall Check:``````````````
avast! Free Antivirus
AVG 2013
PC Tools Firewall Plus 6.0 ...

I did that, but I do not get the safe mode start up options. The only options that I get are different location options for start up.

Don

I am using windows XP. How do you start in safemode? A website said to hold F8 down, but that only gave me different options on which device to use to boot. It did not offer safemode.

Don

Thanks,

I am not have much luck. AVAST will not uninstall. I do see the entry. When I click on it and click remove, the computer works but the nothing happens.

I do not see an entry for AVG. I...

Thank you. One of your directions does not seem to work for me:
\
Once extracted, open the TDSSKiller folder, right click on TDSSKiller.exe and select Run as Administrator to run the application.
...

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 7.0.6000.17128 BrowserJavaVersion: 1.6.0_26
Run by Don at 20:07:50 on 2013-04-20
Microsoft Windows XP Home Edition ...

I am looking around. It appears that I have "Whitesmoke" Tool bar. I have tried to uninstall it, but the add or remove program will not remove it. I can remove other programs, but not this one...
...

It seems like I have something weird going on. It started when TornTV appeared. I got rid of Torn TV but parts are still kicking around. Now it seems the computer runs okay, but at times web browsers...

Hey things are working well now. Do you have anything else for me to do or any suggestions?

DOn

That is a neat little scanner program.




Antivirus Version Last Update Result
a-squared 4.5.0.43 2009.12.08 -
AhnLab-V3 5.0.0.2 2009.12.08 -
AntiVir 7.9.1.102 2009.12.08 -...

Here is the virus scan...

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Sunday, December 6, 2009
Operating system:...

Hey thanks for everything. My system seems to be running much better. So unless something in my logs suggestion otherwise, I think my system is good!

Don

Reboot went well. Here is the Hijack This. The Fast Web Browser seems to be gone. Wow things are working so much better!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:05:57 PM, on...

Here is the combo fix. I did to reboot as my "Start" bar and desktop did not come back. I will send you the Hijack This is a sec



ComboFix 09-12-01.01 - Don 12/01/2009 19:52.3.4 - x86...

Thanks again. The system seems to be working much better already. I have been trying to get rid of "www.fastbrowsersearch.com" but I have not had any luck doing so.

Thanks!

Don



...

I have not done anything yet. What should I be copy/pasting?

Code:
---------
File::
c:\windows\Rnayak.dat
c:\windows\Xhitah.bin
c:\windows\system32\drivers\etc\hosts
---------

Here you go! Thanks again!


ComboFix 09-11-27.07 - Don 11/28/2009 8:47.1.4 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.3071.2632 [GMT -8:00]
Running from: c:\documents...

Thank yoU!


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:38:50 PM, on 11/27/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16915)
Boot...

Hey,

I just survived a virus attack and a bunch of Malware was put on my computer. Most of it is gone but the following still occurs:

My firefox web browser often goes to the wrong webpage when...