Search:

Thanks Blade!
Thanks to all the different program manufactures!

LOL, yeah that is what I ment.

Thanks again for the help!!

Everything seems to be working like it should. I had to uninstall McAfee then reinstall it to get it to work. The .dat file still hasn't changed, so that is good. I don't see any errors when I...

The file was replace and I rebooted. The file has not changed since the reboot about 6 hours ago. So I think the rename has stuck.

Here you go


Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows Vista

*******************

Thanks!!

Not sure, maybe this is the page you need. This is after a rescan

http://www.virustotal.com/analisis/3b07243970cab4e93a858bea6e31f56ad0157c42d624f3feb469e68eeef65669-1253567284

This is for Beep.SYS

http://www.virustotal.com/reanalisis.html?3b07243970cab4e93a858bea6e31f56ad0157c42d624f3feb469e68eeef65669-1253567284

The other file is not on my machine.

Hi,

Reg search log:

Windows Registry Editor Version 5.00

; Registry Search 2.0 by Bobbi Flekman © 2005
; Version: 2.0.6.0

; Results at 9/21/2009 1:15:34 PM for strings:

Hi,

Here you go, again :)

Hi,
Here are the logs

Hi,

Here is the log

Malwarebytes' Anti-Malware 1.41
Database version: 2831
Windows 6.0.6001 Service Pack 1

9/20/2009 4:13:41 PM
mbam-log-2009-09-20 (16-13-37).txt

Hi,

Submitted

But once I connected to the net it downloaded it within 5 mins. :confused:

Hi

I disconected from the internet and the file did not reappear

Not sure if you wanted it posted or attached, but here it is.

ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/09/20 06:54
Program...

Hi,

It won't run there either. Crashed to blue screen memory error

GMER vanishes before it finishes, so I can't copy to clipboard

Hi,
I could not find catchme.dll, but I go the other one.

It seems to be running much better. There are a few files like qhj8nnlk.exe and z4q4sbsr.exe that are on my desktop that I can't delete,...

Hi and here you go

I ran it again and this is more managable.

ComboFix 09-09-17.04 - Jim's Laptop 09/18/2009 10:48.5.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.3581.2193 [GMT...

The file is quite large for some reason. I had to zip it

certstore.dat seems to be reproducing itself

Malwarebytes' Anti-Malware 1.41
Database version: 2819
Windows 6.0.6001 Service Pack 1

9/18/2009 6:59:40 AM
mbam-log-2009-09-18 (06-59-40).txt
...

yes it was deleted and everything seems to be working now.

Attach File


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft® Windows Vista™ Home Premium
Boot Device:...

DDS File


DDS (Ver_09-07-30.01) - NTFSx86
Run by Jim's Laptop at 13:06:13.26 on Thu 09/17/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium ...

New log after deletion

Malwarebytes' Anti-Malware 1.41
Database version: 2815
Windows 6.0.6001 Service Pack 1

9/17/2009 12:57:02 PM
mbam-log-2009-09-17 (12-56-55).txt

Scan type: Full Scan...

Here is the log. Malwarebytes is asking to remove files, should I?

Malwarebytes' Anti-Malware 1.41
Database version: 2815
Windows 6.0.6001 Service Pack 1

9/17/2009 10:42:22 AM...

Attach File


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft® Windows Vista™ Home Premium
Boot Device:...

DDS File


DDS (Ver_09-07-30.01) - NTFSx86
Run by Jim's Laptop at 20:57:55.72 on Wed 09/16/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium ...

KAS File

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Wednesday, September 16, 2009
Operating system: Microsoft...

Hi,

Here is the log file, and I am doing everything else now

ComboFix 09-09-14.02 - Jim's Laptop 09/16/2009 11:41.3.2 - NTFSx86
Microsoft® Windows Vista™ Home Premium ...

And the Attach File


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft® Windows Vista™ Home Premium
Boot Device:...

Here is the First


DDS (Ver_09-07-30.01) - NTFSx86
Run by Jim's Laptop at 10:44:23.08 on Wed 09/16/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows Vista™ Home Premium ...

Hi,

I think you are getting close. I am in normal mode right now. YAY

Here is the log

ComboFix 09-09-14.02 - Jim's Laptop 09/16/2009 9:27.2.2 - NTFSx86
Microsoft® Windows Vista™ Home...

Hi Blade, sorry about the "z" above

Ran program in safe mode, I still can't boot normally. Here is the log

GMER 1.0.15.15087 - http://www.gmer.net
Rootkit scan 2009-09-16 07:00:35
Windows...

Hi Blaze,

Ok I ran Combofix the first time and got an error "The instruction at 0x00c4cdfb referenced memory at 0x0000000. The memory could not be read. I had to click to terminate. ComboFix...

Just FYI
I'm in safe mode and I can't launch Spybot or Super AntiSpyware. I get the path error that was in my original post. That is why I disabled them in msconfig

Thanks

ComboFix is claiming that I still have Spybot and Super Antispyware still running. I have disabled them in msconfig and rebooted.
Should I uninstall the prorgams or ignore the ComboFix warning that...

and the Attach file


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-07-30.01)

Microsoft® Windows Vista™ Home Premium
Boot Device:...

Hi Blade,

Thanks again for the help.


DDS (Ver_09-07-30.01) - NTFSx86 NETWORK
Run by Jim's Laptop at 10:15:38.19 on Tue 09/15/2009
Internet Explorer: 7.0.6001.18000
Microsoft® Windows...

Hi,

I ran the program and let it restart the machine in normal mode. the log file opened and a Windows box popped up and stated that I was infected by malware. Something started to download that...

Hi and thanks

Just so I don't mess things up. Usually when I reboot normally I get and error that the PC will reboot in a minute and then it will.

In order to do everything I am doing now I...

Hi,
Here is the LogIt.txt

Volume in drive C is OS
Volume Serial Number is 66B3-F6AE

Directory of C:\WINDOWS\System32

01/19/2008 02:36 AM 177,152 scecli.dll

Hi,

Sure here it is.
I am in Safe Mode FYI, since I can't log in normally. If I try and start Vista normally I get an errer that my machine will restart in 1 min. Sometimes I just get a blue...

Hi blade,

Here is the log

Log file is located at: C:\Users\Jim's Laptop\Desktop\Win32kDiag.txt

WARNING: Could not get backup privileges!

Searching 'C:\Windows'...

Hi and thanks for taking my problem.

I have read the stickies and cannot include a HJT scan as the program does not work. I was able to install it but when I go to run it I get a Windows Error...