Search:

Can someone pls check this log, coz i have noticed that there is something wrong in my computer. THank you

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:38:41 AM, on 12/29/2008...

(((((((((((((((((((((((((((((((((((((((((((( Look )))))))))))))))))))))))))))))))))))))))))))))))))))))))))
.

---- Directory of C:\Documents and Settings\á ----



------- Sigcheck...

Combofix Log.

ComboFix 08-09-10.04 - Pen 2008-09-12 13:47:26.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.483 [GMT -12:00]
Running from: C:\Documents and...

And here's the previous HJT log from the attachment and the Combofix.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:39:51 PM, on 9/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)...

Oh i forgot the HJT log. Here it is.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:57:43 PM, on 9/14/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Hello,

The Dirlook.txt is empty after i run the fixes.bat. Anyway heres the OTmoveit2 result.

D:\Musics\far behinf candle box.mp3 moved successfully.
File/Folder C:\Documents and...

Hello,

I have a little problem deleting the Limewire Folder. I can't seem find the folder in the specific area. I do believe that i already deleted the Limewire folder as instructed. I also did a...

Hello,

Here are the requested logs and The other logs are attached below.

Wuauclt.exe Log

Antivirus Version Last Update Result
AhnLab-V3 2008.9.13.0 2008.09.12 -...

Hello,

Here's the logs you'd requested. Combofix log, is attached below.

Malwarebytes' Anti-Malware 1.28
Database version: 1141
Windows 5.1.2600 Service Pack 3

9/12/2008 12:04:44 AM...

Hello, I have a problem posting the combofix log, it always exceeds the limit, if i will the log it will be divided into 4 parts. I will just attached the log here.

Here's the other one.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net...

I guess i have to divide the Combofix Log, it always exceeds to limit on this forum to post. Anyway here it is.

ComboFix 08-09-10.04 - Pen 2008-09-11 15:44:18.1 - NTFSx86
Microsoft Windows XP...

Hello,

Here's the HJT Log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:00:53 PM, on 9/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Hello,

Here's the Log requested.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:19:08 PM, on 9/10/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Hello,

I need some help here, my task manager and regedit was disabled. Here is the HJT Log.


Deckard's System Scanner v20071014.68
Run by Pen on 2007-08-10 09:15:51
Computer is in Normal...

Hello again,

I have a new problem now on my pc, i cant use both regedit and taskmanager, it seems my old problem have back again. I just gone for 2 days in our house then this is what surprises...

Hello,

Sorry for not elaborating well, yes i mean the AVG updates, it always rolled back after the updates but after the reboot or shut down and turning on again, same update will be update again....

Hello,

Done following all the steps. May i ask one more thing? Is there something wrong with my AVG? Because it always rolled back after restarting my PC, so i have to update it again after the...

Hello,

Sorry for the late reply, i tried to use the disinfector but it still it shuts down my computer, so i tried to scan the computer online, and it detect this C:\WINDOWS\password_viewer.exe,...

Hello,

Ok i will make a new thread since my last thread here is closed due to bumping and since my last response here of my last last thread was already more than 5 days, so ill make a new thread...

Bump Please

Hello,

My computer automatically shuts down everytime i run the cmd, and there is something error pops up just for a second and gone then shutdown. So i run DSS to make a HJT Log, but suddenly it...

Hi,

My computer now is better and clean. I can now use regedit and taskmanager both account.

Hello

Here it is,

Deckard's System Scanner v20071014.68
Run by * on 2007-07-28 22:14:39
Computer is in Normal Mode....

Hello,

Here is the HJT Log from the account I am talking about.

Deckard's System Scanner v20071014.68
Run by * on 2007-07-28 21:46:45
Computer is in Normal Mode....

Hi,

My computer looks better now, i can now use task manager and regedit in my usual account but when i chose another one, both task manager and regedit was still disabled. Well i guess it doesn't...

Hi,

Here it is.

Malwarebytes' Anti-Malware 1.23
Database version: 998
Windows 5.1.2600 Service Pack 2

11:41:32 PM 7/27/2007
mbam-log-7-27-2007 (23-41-32).txt

Hello again,

Here it is

Deckard's System Scanner v20071014.68
Run by Pen on 2007-07-27 23:01:38
Computer is in Normal Mode....

Hello,

I did not see this files, SOWAR.VBS, AUTORUN.INF in every partition and this file as well as SysRes.vbs at Windows even i rebooted my pc and checked if the files and folder are visible. So...

Hello,

I did not see this files, SOWAR.VBS, AUTORUN.INF in every partition and this file as well as SysRes.vbs at Windows even i rebooted my pc and checked if the files and folder are visible. So...

Ok here is the Log.

Deckard's System Scanner v20071014.68
Run by Pen on 2007-07-27 21:10:14
Computer is in Normal Mode....

Ok here the avenger.txt and HJT Log.

//////////////////////////////////////////
Avenger Pre-Processor log
//////////////////////////////////////////

Platform: Windows XP (build 2600,...

Hi

This is what im trying to execute but still it gives me the same errror.


Files to delete:
C:\Cool USEP Scandal.vbs
C:\sowar.vbs
C:\WINDOWS\SysRes.vbs
C:\Autorun.inf

Hello,

There is something error pops up when i try to execute the script. See the SS Here

Hi,

I observed that this Autorun.inf cant be moved coz, when i tried to move this Autorun.inf again and again, it always shows up C:\Autorun.inf moved successfully.. Anyway here is the HJT Log and...

Hi

Sorry, i did not think of that. The reason why i used USB its because the USB i used 2 hours ago was different with the USB that was infected. Sorry wont do it again. Ok lets now go back to our...

Hello

I haven't use USB on that particular time after i posted the HJT Log, but I used USB 2 hours ago. Just base the time of my response.

Hi

Here's the requested HJT Log and for the OTMoveIt2.

C:\Cool USEP Scandal.vbs moved successfully.
C:\sowar.vbs moved successfully.
C:\WINDOWS\SysRes.vbs moved successfully.

OTMoveIt2 by...

Ok Shaba,

Here is the Log.

Deckard's System Scanner v20071014.68
Run by Pen on 2007-07-27 01:33:49
Computer is in Normal Mode....

Hello

I cant set the folder and files to visible, it always rolled back to default, even safe mode wont do.

Hi again,

By the way, how to delete this SysRes.vbs? this file doesnt existed in my C:\Windows.

Yes i do the REG thing in a safe mode. But after i restarted and set my pc into normal mode still cant use regedit so i tried again the REG thing on a safe mode and try run the regedit and it works....

Hello,

I can only use regedit when im in a safe mode. Is it ok if i follow the Post #37 in a safe mode? coz i really cant use regedit when i am in a normal mode.

Hi,

Still no luck, after i followed the guide of the link you've given and fix this line
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1 using HJT and...

Hi,

The line you wanted to delete is cannot be deleted by using HJT. After I do a system scan only, and check this line O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System,...

Hi,

My Regedit was still disabled and cannot be use. I can't follow the guidelines you've posted above.

Hi

here is the content of export.reg.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2]
...

Hi

Here's the HJT Log as requested.

Deckard's System Scanner v20071014.68
Run by Pen on 2007-07-26 20:53:14
Computer is in Normal Mode....

Yes I'd downloaded the ComboFix from the links you've given. I tried every link but still the same, it gives me Date Error.

Hello,

I have a problem when running the ComboFix, it says Date Error and check my setting, so i change it to US current time and date but nothings happen, still getting Date error.