Search:

Current version of Java installed and verified.

Thanks for the help Juliet.

DelFix has been run.

Funny, I guess the last time (years ago) that I came for help we didn't do a clean-up at the end because DelFix removed ComboFix, dds and MBRCheck, clean up tool we didn't use...

Yes I am. However, I am traveling at the moment, won't be connecting the computer for a few hours. Advise the next steps and I'll work on it when I get to my destination.

Thanks,
Mike

Juliet,

Here is the report from the EEK scan:

Emsisoft Emergency Kit - Version 12.0
Last update: 2/8/2017 4:49:57 PM
User account: TravellerII-PC\Mike
Computer name: TRAVELLERII-PC
OS...

I may not have been clear earlier, I meant that my computer was acting strange on both my system at home and the system at my daughter's. Her computer is fine (I think).

Downloading the emergency...

Juliet,

Yes I connect through a router. This has been happening at home and at the condo where my daughter lives so I'm not sure it has anything to do with the router but I have shut the computer...

Good morning Juliet, thanks for helping me.

Something I forgot to say in my initial post was that most of the time, once my browser (either FF or IE) would fail to connect the only way I could...

Hello,

It has been a long time since I last had to visit but something is happening and I can't figure it out. Quite often lately both Firefox and IE will fail to connect, such as when changing...

Blade,

Thanks for walking me through this. The only thing I have left to do now is download the Secunia program (I have been running that on my laptop since we cleaned that in December) on this...

Things are looking much better on this end. All of the hyper-linked ads have disappeared early on, leaving only double underlined dead links. Now all of the double underlined links are gone!...

Blade,

Here are the logs from the OTL run/fix and the regular OTL scan after reboot.

All processes killed
========== OTL ==========
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet...

A screen shot of the Firefox extensions is attached.

Since I have never had AVG anti virus I don't think I need the AVG start pages, so I would like to remove them.

The folder has been deleted and OTL run again. Here is the log:

OTL logfile created on: 8/5/2012 10:06:33 PM - Run 4
OTL by OldTimer - Version 3.2.43.0 Folder = C:\Users\Viki\Desktop
Windows...

Another thing I just remembered while reading through the OTL log, maybe related or not. Not too long ago something (or someone) changed the homepage in both Firefox and IE from Google search to...

Hi Blase,

I failed to answer an earlier question about ESET finding bad objects. ESET did find 4 BFLIX files, which had backed up on the Mimeo terrabyte drive. I was able to delete those file and...

Results log from OTL extras:

OTL Extras logfile created on: 8/4/2012 6:12:44 AM - Run 1
OTL by OldTimer - Version 3.2.43.0 Folder = C:\Users\Viki\Desktop
Windows Vista Home Premium Edition...

Results of OTL:

OTL.txt

OTL logfile created on: 8/4/2012 6:12:43 AM - Run 1
OTL by OldTimer - Version 3.2.43.0 Folder = C:\Users\Viki\Desktop
Windows Vista Home Premium Edition Service...

ESET has completed for the second time. The fresh download is also not updating the log with scan results, here is the extent of the current log:

ESETSmartInstaller@High as CAB hook log:...

I am rerunning ESET now. The first run did not update the ESET log, it was still the log from 2011 when we last had a problem. I uninstalled and reinstalled ESET and we're now halfway through.

I...

I checked the daughter's account and did not have any incidents of the Windows Live Platinum. Everything looks right and seems to be running fine. I might add that about the same time all of the...

Here is the ComboFix log:

ComboFix 12-07-31.03 - Viki 08/01/2012 22:58:13.4.2 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.2045.985 [GMT -7:00]
Running from:...

ComboFix is downloaded and I will run it while I sleep. Will post the log tomorrow.

Here are fresh DDS and MBR logs:

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_31
Run by Viki at 22:05:27 on 2012-08-01
Microsoft® Windows...

I'll post a fresh DDS log and a aswMBR log as well. The first download of MBR must have been flawed but the second download ran fine.

Be back with logs in a few.

Mike

Daughter, on her account, picked up this Windows Live Platinum, which prevents opening Firefox or IE. Fortunately she does not have Admin Rights or the password to continue when Windows Live asks. I...

I think we've got it beat.

All logs and tools have been removed. I always have MBAM and SBS&D, those and my AV generally keep me free of problems but this one snuck in on two computers. The TFC...

Interesting.

I wanted to double check the list of blocked programs on the affected computer and the icon was not there. I rebooted the system, which usually brought the list up for viewing, and...

Oldman,

I believe the blocked start up list is a result of the malware as that icon/message was not present prior to the attack. I'll look through the list at the link you provided and see what I...

Good evening Oldman,

ESET took forever to run, compliments of the quarantine folder, but it finished earlier this evening. Here is the log:

ESETSmartInstaller@High as CAB hook log:...

Oldman,

I tried to see which programs are being blocked but I no longer see the icon in the systray. I'll try to get a full list when I reboot, but I thought it was system security that was...

Good afternoon Oldman,

I uninstalled the Java program and ran the TFC when I got home from work. That cleaned up a lot of temp files from all user accounts. After running that cleaner, nearly 8GB...

Well, ComboFix ran fairly quickly this morning, at just under an hour.

Here is the log.
__________________________________

ComboFix 11-12-29.01 - Viki 12/29/2011 10:33:47.3.2 - x86...

Good Day Oldman,

I got home from work at about 0400, transferred ComboFix to the affected computer and started running it, I waited until Stage 1 completed to be sure it was running. I went to bed...

Oldman,

Here is the aswMBR log and attached MBR.zip as requested.

aswMBR version 0.9.9.1116 Copyright(c) 2011 AVAST Software
Run date: 2011-12-28 03:48:40
-----------------------------...

Oldman,

I just got home from work and have moved a copy of aswMBR.exe to the infected computer via flash drive. I'll start the scan, hit the rack and post the logs after I wake up.

The affected...

Just want to say a quick Thanks to Blade for helping me clean my laptop.

Thanks Blade!

Mike

Hi,

The family desk top computer was hit with the Vista Secirty 2012 Alert while Blade and I were cleaning my laptop. Besides the security warnings and McAfee anti-virus and firewall shutting off,...

Thanks Blade. I'll look into the simple adblock program for IE. The blocker ad-on I got for Mozilla (as the computer became functional again) is working perfectly. I went to my main website a little...

Merry Christmas Blade (given the 10 hours time difference you have already hit the 25th)!

Ran through the list, everything was taken care of except finding the security patch for my no longer...

Blade,

Thanks for the help, I will work on the list later today after I run a few errands. In looking over the Internet settings you suggested I only had to change the last one as I had that one...

Blade,

After reading a bit I see that the anti-stealth part of the ESET scan is for root kits so I re-ran EST with the anti-stealth box checked.

Here is the log of that scan, it still resembles...

Oh, what I posted for the ESET log was cut and pasted directly from the log in the ESET folder.

ESET did not find anything. Your earlier post about ESET said to uncheck "remove threats" and be sure that Scan unwanted applications" was checked. I did that but ESET defaulted to checking the...

Here is the ComboFix log.

ComboFix 11-12-21.02 - Mike 12/23/2011 10:56:23.2.2 - x64
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4056.2740 [GMT -8:00]
Running from:...

Hi Blade,

The computer is functioning perfectly (to my eyes) and I am posting my reply from that computer. Have no had any issued of McAfee or the McAfee Firewall shutting down for the last couple...

Figured it out. I had to go down to mid page to find the JRE downloads. The file I was trying to run was the wrong one.

Blade,

I am up to the uninstall/install Java but have hit a snag. I uninstalled 2 Java versions, there were only the two and upon trying to install the update I get an error massage that the...

DDS files
_______________________

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Mike at 1:24:21 on 2011-12-23
Microsoft Windows 7 Home Premium ...

Blade,

Hope the ComboFix was run correctly. I am running McAfee AV Plus and found it impossible to completely disable. I was able to shut down virus scan and the firewall but McAfee processes...

will do, and will report back as soon as the tools runs.