Possible rootkit infection

[Blade81]

Hi,

Check email messages in the following email box and delete suspicious looking messages if found
C:\Documents and Settings\Jen\Application Data\Mozilla\Profiles\default\s60pv2ul.slt\Mail\pop1.sympatico.ca\Inbox

Any issues left?

[brewnw]

Hi,
Everything seems all clear on the malware front but suddenly iTunes can't get network access and Windows Explorer is sending files to a Spybot scan rather than opening them when they are double clicked. Is there possibly still something in place blocking ports for legitimate software? If so, how do I enable iTunes (or other network apps) in a safe, legit way?

Also, thanks again for the help.

[Blade81]

Hi,

but suddenly iTunes can't get network access

When did this begin to happen? What firewall are you using?

Windows Explorer is sending files to a Spybot scan rather than opening them when they are double clicked.

Does this happen with all type of files or just with some specific ones? Please see what happens when you uninstall Spybot. Does double click still behave oddly?

[brewnw]

The iTunes problem surfaced only after eliminating the malware (I didn't try to use it at all during the time I noticed the infection).

I tracked to problem to the proxy server settings on Win XP using diagnostic instructions from iTunes. My LAN settings are set to use a proxy server even though on my home network my machines connect via a router to the DSL modem directly. Is it OK to turn off the proxy server setting? That seems to resolve the conflict/barrier.

[Blade81]

I tracked to problem to the proxy server settings on Win XP using diagnostic instructions from iTunes. My LAN settings are set to use a proxy server even though on my home network my machines connect via a router to the DSL modem directly. Is it OK to turn off the proxy server setting? That seems to resolve the conflict/barrier.

Should be ok.

How about that other issue of yours? Did you check what happens if Spybot is uninstalled?

[Blade81]

Still there?

[Blade81]

Due to inactivity, this thread will now be closed.

Note:If it has been three days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh DDS log and a link to your previous thread. Please do not add any logs that might have been requested in the closed topic, you would be starting fresh.

If it has been less than three days since your last response and you need the thread re-opened, please send me or other MOD a private message (pm). A valid, working link to the closed topic is required.