Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 23

Thread: Can't Remove Virtumonde and Win32.Small.ddx Good Grief!

  1. #11
    Junior Member
    Join Date
    May 2011
    Posts
    17

    Default

    Hi Ken,

    I did this and it came back with a warning that I was running wow64 and to use systemlook_x64.

    I tracked that down and got the same results (except for the warning)

    -------------
    SystemLook 04.09.10 by jpshortstuff
    Log created at 22:09 on 17/05/2011 by Rex
    Administrator - Elevation successful

    ========== filefind ==========

    Searching for "Win32.Small.ddx"
    No files found.

    ========== regfind ==========

    Searching for "Win32.Small.ddx"
    No data found.

    -= EOF =-

    So I wonder why SS&D find it?

    Thanks very much...

    Rex

  2. #12
    Security Expert ken545's Avatar
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  3. #13
    Junior Member
    Join Date
    May 2011
    Posts
    17

    Default

    That is the one I used Ken.

    Rex

  4. #14
    Security Expert ken545's Avatar
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Hello Rex

    All the problems appear to be Firefox tracking cookies. Sometimes Spybot has trouble removing Firefox tracking cookies. There are suggestions in the following post on how to remove them as well as block them from being stored:

    Read this
    http://forums.spybot.info/showpost.p...81&postcount=4
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  5. #15
    Junior Member
    Join Date
    May 2011
    Posts
    17

    Default

    Hi Ken,

    Are these Cookies or bookmarks? I viewed the cookie list and did not see them.

    Anyway, I cleared ALL cookies and then closed firefox. Then ran SS&D.

    Here is the report

    --- Search result list ---
    Win32.Small.ddx: Bookmark (Firefox: Rex (default)) (Bookmark, nothing done)


    Virtumonde: Bookmark (Firefox: Rex (default)) (Bookmark, nothing done)


    Win32.Small.ddx: Bookmark (Firefox: Rex (default)) (Bookmark, nothing done)



    --- Spybot - Search & Destroy version: 1.6.2 (build: 20090126) ---


    Coool huh? Does SS&D detect Flash cookies? I could delete all those I guess. I just viewed my flash cookies and didn't see any that matched up with the ones that SS&D is complaining about.

    Rex

  6. #16
    Security Expert ken545's Avatar
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    You know what I would do is post in the Spybot forum. They are more familiar with that program than I am , I will keep this tread open for you so post back and let me know how it went.

    http://forums.spybot.info/forumdisplay.php?f=4
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  7. #17
    Junior Member
    Join Date
    May 2011
    Posts
    17

    Default

    Ken I wanted to come back here and let you know what was found. In the Spybot forum it was noted that those were bookmarks it was flagging.

    Then after SS&D runs you can click on the plus sign where it refers to the error and it gives you the address of the website that was bookmarked and flagged as bad.

    I then opened the "organize bookmarks" in firefox and tracked them down and deleted them.

    Problem solved.

    I just wanted to get back with you so that you would know the results and to thank you for your help again. I appreciated it so much.

    Rex

  8. #18
    Security Expert ken545's Avatar
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default

    Thank you Rex for letting me know

    Things running ok now ?
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

  9. #19
    Junior Member
    Join Date
    May 2011
    Posts
    17

    Default

    Yup everything is running fine now.

    Thanks,

    Rex

  10. #20
    Security Expert ken545's Avatar
    Join Date
    Nov 2005
    Location
    Florida's SpaceCoast
    Posts
    15,208

    Default



    Open OTL and click on Clean Up and it will remove programs we used to clean your system along with there backups





    Safe Surfn
    Ken
    Microsoft MVP Consumer Security 2007-2008-2009-2010-2011-2012-2013-2014

    ERROR MESSAGE 386
    No KeyBoard Detected
    Press F1 To Continue

    Just a reminder that threads will be closed if no reply in 3 days.

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •