Hi blueskygal OCD . I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following: I will be working on your Malware issues, this may or may not, solve other issues you have with your machine. The fixes are specific to your problem and should only be used for the issues on this machine. Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear. It's often worth reading through these instructions and printing them for ease of reference. If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry. Please reply to this thread. Do not start a new topic. Copy and Paste logs directly into the reply window. DO NOT attach the logs IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so. DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.All Clear "Important: All tools MUST be run from the Desktop .========================= The logs you provided appear to be incomplete. Please run the following scans and post the logs requested. ========================= Security Check Security Check here here Save it to your Desktop.Windows XP Double click on the icon to run it Windows Vista, Windows 7 & 8 Right click and select "Run as Administrator" A Notepad document should open automatically called checkup.txt ; please post the contents of that document. ========================= aswMBR aswMBR.exe Windows XP Double click on the icon to run it Windows Vista, Windows 7 & 8 Right click and select "Run as Administrator" When asked if you want to download Avast's virus definitions please select Yes Click Scan Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet. You will also notice another file created on the desktop named MBR.dat . Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well. ========================= Farbar Recovery Scan Tool Note : You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Right click and select "Run as Administrator Yes to disclaimer. Press Scan button. It will make a log (FRST.txt ) in the same directory the tool is run. Please copy and paste it to your reply. The first time the tool is run, it makes also another log (Addition.txt ). Please attach it to your reply ========================= In your next post please provide the following checkup.txt aswMBR.txt attach MBR.zipFRST.txt Addition.txt
OCD
----------
Graduate of WTT Classroom Member of UNITE Threads will be closed if no response after 5 days
Hi OCD,
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:10-07-2014http://www.bleepingcomputer.com/down...an-tool/dl/81/ http://www.bleepingcomputer.com/down...an-tool/dl/82/ http://www.geekstogo.com/forum/topic...ery-scan-tool/ http://www.musicnotes.com/download/mnviewer.cab http://download.microsoft.com/downlo...eckControl.cab http://java.sun.com/update/1.7.0/jin...ndows-i586.cab http://fpdownload.macromedia.com/get.../ultrashim.cab http://java.sun.com/update/1.7.0/jin...ndows-i586.cab http://java.sun.com/update/1.7.0/jin...ndows-i586.cab http://fpdownload2.macromedia.com/ge...sh/swflash.cab https://toolbox.webex.com/client/T26...rt/ieatgpc.cab http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Hi blueskygal Multiple Anti-Virus Programs Installed AVG AntiVirus Free Edition 2014 Spybot - Search and Destroy (which ever you prefer) (for Vista and Win 7 users to go to Programs and Features in the Control Panel) AVG AntiVirus Free Edition 2014 Spybot - Search and Destroy ========================= ========================= TDSSKiller TDSSKiller.zip TDSSKiller.exe Windows XP Double click on the icon to run it Windows Vista, Windows 7 & 8 Right click and select "Run as Administrator" After program loads, click on Change parameters . Put a check-mark beside Loaded modules . A reboot will be needed to apply the changes. Do it. TDSSKiller will launch automatically after the reboot. Also your computer may seem very slow and unusable. This is normal. Give it enough time to load your background programs. Then click on Change parameters in TDSSKiller. Check all boxes then click OK .Press Start Scan The scan should take no longer than 2 minutes. If a suspicious object is detected, the default action will be Skip , click on Continue Any entries like this: \Device\Harddisk0\DR0 ( TDSS File System ) - please choose Skip If in doubt about an entry....please ask or choose Skip If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options. Ensure Cure (default) Continue > Reboot now to finish the cleaning process .IMPORTANT: Cure Skip do not choose Delete Copy and paste the log in your next replyA copy of the log will be saved automatically to the root of the drive (typically C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt . ========================= In your next post please provide the following
OCD
----------
Graduate of WTT Classroom Member of UNITE Threads will be closed if no response after 5 days
OCD,
15:59:07.0222 0x0c70 [ 0C8E8E61AD1EB0B250B846712C917506, 8F23657B90BFFCD7273B93EDA2D3768F35C1C5A313F22AE33452BE3B2A550649 ] PNRPsvc C:\Windows\system32\p2psvc.dll
16:00:52.0027 0x0c70 ================ Scan MBR ==================================
16:01:02.0777 0x0c70 [ 5DE7D67E49B88F5F07F3E53C4B92A352, 6930A598C35646646ED0E91633797EFE139AE6CDD0012335BD1340754A22F997 ] C:\Windows\System32\wiaservc.dll
16:01:05.0807 0x0c70 C:\Program Files\Spybot - Search & Destroy 2\rtl150.bpl - ok
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Rules
iexplorer keeps replicating creating large files
