Search:

Thanks for the help.......

1) I do not have TeaTimer enabled. But, I only unchecked the box for TeaTimer, not the other one...does this make a difference..

2) Spywareguard is turned off.
...

Phil,
I'm Back! Now, I have a RUNDLL error message when I startup -
"specified module could not be found"
C:\Windows\System32\notdgyH.dll

Do you know what this is - the Desktop seems to load...

Well, I did follow directions, but it found 1 infection...........but I cannot tell what it is......

-------------------------------------------------------------------------------
KASPERSKY...

-------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Monday, December 17, 2007 9:59:33 PM
Operating System: Microsoft Windows XP...

A new Kaspersky scan, below:

KASPERSKY ONLINE SCANNER REPORT
Monday, December 17, 2007 9:59:33 PM
Operating System: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
...

The Vundofix file is below...

AND -

The following file did not appear on HJT -
O21 - SSODL: E404Helper - {0c3866ff-54a3-4e0e-b60f-71316ee441ca} - (no file)

Removed:
Combofix,
...

Don't know why I did not do it before I started, but I counted files - there are 10 listed in your directions, however vundo removed 7 - Shall I run through this set of directions again as though I...

Viewpoint is uninstalled. Thanks for that information. It is indeed spyware!

I followed the next directions.......

1) Downloaded ATF Cleaner by Atribune
2) Opened a new window and saved...

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:31:03 PM, on 12/15/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Boot mode: Normal
...

Sorry,
I was so wrapped up in the ComboFix log that I forgot to re-run it as it was the next thing on the list.

Thanks so much for your patience with me. This is the worst time of the year...

I again removed ComboFix via Windows Explorer and clicked on your links to re-install it on the Desktop. It is so ingrained in me on my work computer - DO NOT SAVE - RUN ONLY, that I automatically...

I removed ComboFix via Windows Explorer and clicked on your links to re-install it.

The first link did the same as it did yesterday - gave me an error message that said: "C:\Documents and...

I am so glad you are walking me through this. Now that it is Friday, I can repond much quicker than waiting thru my 7am-6pm days!

Ran the VundoFix and the log is attached.

The ComboFix...

I followed the new set of directions:

1.) Turned off Tea Timer
2.) Removed infected Java cache
3.) Performed the Smitfraud.exe clean you listed.

New rapport log is attached next - Note...

I just realized that I ran the SmitfraudFix BEFORE I re-booted so I ran it again and it is at the bottom, just in case it makes a difference in the information it gives you.

NEW HJT LOG:
...

OK, I do not want to make a mistake

I installed Norton 360 4 days before finally begging for help - did not realize that PC-Cillin had to be removed and not just shut off - that has now been...

Kapersky - Part Deux

C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked skipped

C:\System Volume...

Here is the Kapersky Log - it did not fit on one post....Part deux to come.

KASPERSKY ONLINE SCANNER REPORT
Friday, December 07, 2007 2:12:00 AM
Operating System: Microsoft Windows XP...

Here I am, another newbie with the Smifraud & Virtumondo and who knows what else sort of problems, desperate for your help. I have read the "Before you Post" information 8 or 10 times and have...