Search:

Thanks, Ken. That's set my mind at rest.

I'll follow your instructions to uninstall Combofix. I think I'll also uninstall RootRepeal now.

Once again, Thank you. I'm very grateful for all...

Thanks Ken

Here it is:

ROOTREPEAL (c) AD, 2007-2009
==================================================
Scan Start Time: 2009/08/20 02:20
Program Version: Version 1.3.5.0
Windows...

Hello Ken

Once again thank you for all your help.

Before we close the thread, should I uninstall Combofix?

Finally, I managed to run RootRepeal and it has found a number of Stealth Objects. ...

Thank you, Ken.

I've posted on the other site and Doug is helping me again.

Take care,

Rosie :thanks:

Ken to the rescue once again!:bigthumb:

Thank you. That uninstaller worked. Security Centre says only one firewall now.

I won't worry about the stray files any more.

My next query is about...

It's me again, Ken.

I'm just tidying up my nephew's laptop after the disinfection.

I'm wondering if there's a handy utility for removing remnants of F-Secure as MS Security Centre is still...

Done it.

Thank you for all your help.

Regards,

Rosie

Hi Ken

Latest HJT Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:18:15, on 16/08/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00...

Brilliant, Ken!!

It worked!

I'm now using my nephew's laptop to reply.

I'm so grateful for all your help and patience.

Rosie

Hi Ken,

I've just noticed this in the HJT log:

O10 - Broken Internet access because of LSP provider 'c:\program files\f-secure internet security\fsps\program\fslsp.dll' missing

Could it be...

Hi Ken

My laptop, which I'm using to reply to you, is connecting fine through the cable modem, so I don't think there's a problem with the ISP.

New HJT log:

Logfile of Trend Micro HijackThis...

Hi Ken

In reply to your post,
I've got 4 green lights:

Power, enet, sync and ready which is normal for this modem

and 2 other lights: send and receive which are not flashing because I'm...

Hi Ken,

Here's the HJT Log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:53:39, on 15/08/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00...

Hello Ken

I use a cable modem. I do not have a router.

I'll post a new HJT log later tonight or tomorrow.

Thanks for your help,

Rosie

Hi Ken

Here's the link to the other forum (I think!):
http://forums.whatthetech.com/LAN_connected_but_unable_access_web_pages_t106157.html

Rosie

Thanks for the advice, Ken. Once I can get him on-line again I'll download your suggestions.

The Symantic, like the F-secure were time-limited programs that came with his laptop. He usually uses...

I'm very grateful for all your help, Ken. Thank you! :thanks:

I'll do as you advise re: posting on the other site and let you know the outcome.

What security protection would you advise my...

Apart from the Internet, it seems to be fine, Ken.

Rosie

Hi Ken

Here's the Rooter log:

Rooter_2
Rooter.exe (v1.0.2) by Eric_71
.
seDebugprivilege granted successfully ...
.
windows vista. (6.0.6000)

Hello Ken

When I try to run RootRepeal, I get an error: FOPS - DeviceIoControl Error! Error Code = 0xc0000024 Extended Info (0x000000d8)

Should I try a different download?

Rosie

Hello Ken
I tried the IE resets you suggested - to no avail. The lap top connects to the LAN but I cannot access any web pages. Could it be something to do with the F-secure firewall? I thought...

Hi Ken. The TFC is still going on the infected laptop. That's over an hour so far. Has it hung up, do you think? It seems stuck on the Recycle Bin.
How long should I let it run?

Rosie

Thanks for your help, Ken.

I've used the TFC but I can't connect to the internet on the infected laptop and I can't work out why not - so I can't download MBAM. I could burn it to a CD on a clean...

It worked! I'm still unable to connect to the internet, though, so I'll have to investigate that tomorrow.

Here is the Combofix log:

ComboFix 09-08-10.06 - Kie 12/08/2009 22:22.1.2 - NTFSx86 ...

Further to my last post, I reinstalled it and it seems to be working! Yippee!!

Well, I tried to load Combofix from a cd but all I get is a small white rectangle with Combofix in black print and a green loading line flashing across the bottom of the rectangle.
I assume it...

Thanks, Phil. I tried all you said about resetting the internet connection and the advice from the MS link. The laptop seems to be connected but all the web addresses I enter give the same message...

I've tried to connect to the links in the above post with my nephew's laptop but something is blocking all connections and I get the message "Internet Explorer cannot display the webpage".

Could I...

Tried Run as Administrator but again nothing happens.
When I right click the MBAM icon & select Run as Administrator, I get a Windows message box saying "MBAM has stopped working" and i have 2...

Thanks, Phil.
I'll follow the MS link steps and see if it does the trick, then I'll post the logs tomorrow as it's getting late now.

Rosie

That hasn't worked, either.
Is there another way?

I've installed MBAM but nothing happens after I click Finish. It doesn't appear to update and it won't open when I click the shortcut or from Programs.

What next? Should i try to do it unupdated...

Sorry about the delay, Phil. I've tried to remove F-secure, but to no avail.
I'm using my laptop to talk to you and leaving my nephew's off-line.

I've printed out and scanned the Uninstall log. ...

Thank you for your help.
I realise it would be better to reformat Vista but, unfortunately, my nephew cannot find his recovery disks (scatter-brained student!) so I only have the eradication...

My nephew's laptop seems infected. He cannot download any security updates and keeps being misdirected when searching. How can I help him fix it, please?

Logfile of Trend Micro HijackThis v2.0.2...