System Security problems annoying!

View previous topic View next topic Go down

Re: System Security problems annoying!

Post by Belahzur on Mon Aug 03, 2009 8:03 pm

Lets give this a try.

Please download this fix tool from [You must be registered and logged in to see this link.].

Double click it to run it.
Allow it to run if protection programs stop it.
The services should now be back to default value and no longer appear in Hijack This.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by qwerty8520 on Sun Aug 09, 2009 3:28 pm

it ran but that little red shield with an X is still there.

qwerty8520
Novice
Novice

Posts Posts : 22
Joined Joined : 2009-07-31
OS OS : XP
Points Points : 26891
# Likes # Likes : 0

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by qwerty8520 on Sun Aug 09, 2009 3:34 pm

to rephrase the issue: the little red shield is telling me that Automatic Updates are turned off. When I go into the Windows Security Center to turn them on, it wont let me. It says to do it under "system". When i go there, it says they are already on.

qwerty8520
Novice
Novice

Posts Posts : 22
Joined Joined : 2009-07-31
OS OS : XP
Points Points : 26891
# Likes # Likes : 0

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by Belahzur on Mon Aug 10, 2009 12:12 am

Hello.
Please download Combofix again, I want to run a script.

Hello.

Now open a new notepad file.
Input this into the notepad file:

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"lsass"=-
"cmdService"=-
"NetSvc"=-
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=-

RegNull::
[HKEY_USERS\S-1-5-21-3718120316-2962900541-1544400087-1006\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{269ACD91-1918-BD05-1028-476C5D1839CA}*]

Save this as CFScript.txt, save it to your desktop also.
Then drag and drop CFScript.txt into combofix as seen below:


This will open combofix again, agree to it's terms and allow it to run.
It may want to reboot after it's done. (It will warn you if it wants to)
Post the resulting log back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by qwerty8520 on Thu Aug 13, 2009 2:29 am

ComboFix 09-08-10.06 - Randi 08/12/2009 14:21.2.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.510.265 [GMT -5:00]
Running from: c:\documents and settings\Randi\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Randi\Desktop\CFScript.txt
AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7}
AV: McAfee VirusScan *On-access scanning disabled* (Updated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
AV: Norton AntiVirus *On-access scanning disabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: McAfee Personal Firewall *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\Downloaded Program Files\popcaploader.inf

.
((((((((((((((((((((((((( Files Created from 2009-07-12 to 2009-08-12 )))))))))))))))))))))))))))))))
.

2009-08-12 04:01 . 2009-08-12 04:01 459131 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\ave2\win32\int\aescript.dll
2009-08-12 04:01 . 2009-08-12 04:01 356725 ----a-w- c:\documents and settings\All Users\Application Data\Avira\AntiVir Desktop\TEMP\UPDATE\ave2\win32\int\aegen.dll
2009-08-09 15:48 . 2009-07-28 21:33 55656 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-08-09 15:48 . 2009-03-30 15:33 96104 ----a-w- c:\windows\system32\drivers\avipbb.sys
2009-08-09 15:48 . 2009-02-13 17:29 22360 ----a-w- c:\windows\system32\drivers\avgntmgr.sys
2009-08-09 15:48 . 2009-02-13 17:17 45416 ----a-w- c:\windows\system32\drivers\avgntdd.sys
2009-08-09 15:48 . 2009-08-09 15:48 -------- d-----w- c:\program files\Avira
2009-08-09 15:48 . 2009-08-09 15:48 -------- d-----w- c:\documents and settings\All Users\Application Data\Avira
2009-08-06 15:01 . 2009-08-06 15:01 69632 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 4.31.9.1\SetupAdmin.exe
2009-08-03 02:56 . 2009-08-03 02:56 -------- d-----w- c:\documents and settings\Randi\Local Settings\Application Data\PC_Drivers_Headquarters
2009-08-03 02:54 . 2009-08-03 02:54 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
2009-08-03 02:54 . 2009-08-03 02:54 -------- d-----w- c:\program files\PC Drivers HeadQuarters
2009-08-02 19:11 . 2009-08-02 19:11 -------- d-s---w- C:\Combo-Fix
2009-08-01 01:01 . 2009-07-11 19:34 276344 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090730.003\IDSXpx86.sys
2009-08-01 01:01 . 2009-07-11 19:34 293424 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090730.003\IDSvix86.sys
2009-08-01 01:01 . 2009-07-11 19:34 533880 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090730.003\Scxpx86.dll
2009-08-01 01:01 . 2009-07-11 19:34 451960 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090730.003\IDSxpx86.dll
2009-08-01 01:01 . 2009-07-11 19:34 397360 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090730.003\IDSviA64.sys
2009-08-01 00:22 . 2009-07-31 23:59 177520 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\NAVENG32.DLL
2009-08-01 00:22 . 2009-07-31 23:59 1181040 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\NAVEX32A.DLL
2009-08-01 00:22 . 2009-07-31 23:59 371248 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\EECTRL.SYS
2009-08-01 00:22 . 2009-07-31 23:59 101936 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\ERASER.SYS
2009-08-01 00:22 . 2009-07-31 23:59 259368 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\ECMSVR32.DLL
2009-08-01 00:22 . 2009-07-31 23:59 2414128 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\CCERASER.DLL
2009-08-01 00:11 . 2009-08-01 00:11 -------- d-----w- c:\documents and settings\Randi\Local Settings\Application Data\Symantec
2009-08-01 00:00 . 2009-07-31 23:59 36400 ----a-r- c:\windows\system32\drivers\SymIM.sys
2009-07-31 23:59 . 2009-07-31 23:59 60808 ----a-w- c:\windows\system32\S32EVNT1.DLL
2009-07-31 23:59 . 2009-07-31 23:59 124464 ----a-w- c:\windows\system32\drivers\SYMEVENT.SYS
2009-07-31 23:59 . 2009-07-31 23:59 -------- d-----w- c:\program files\Symantec
2009-07-31 23:59 . 2009-07-31 23:59 1290592 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\SyKnAppS.dll
2009-07-31 23:59 . 2009-07-31 23:59 136840 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\SyKnAppS\patch25.dll
2009-07-31 23:59 . 2009-07-31 23:59 796016 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\CLT\cltLMSx.dll
2009-07-31 23:59 . 2009-07-31 23:59 -------- d-----w- c:\windows\system32\drivers\NAV
2009-07-31 23:59 . 2009-07-31 23:59 -------- d-----w- c:\program files\Norton AntiVirus
2009-07-31 23:59 . 2009-07-31 23:59 -------- d-----w- c:\program files\Windows Sidebar
2009-07-31 23:24 . 2009-07-31 23:24 -------- d-----w- c:\documents and settings\LocalService\Application Data\Apple Computer
2009-07-31 23:24 . 2009-07-31 23:24 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\Apple Computer
2009-07-31 08:00 . 2009-07-31 08:00 87888 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\NAVENG.SYS
2009-07-31 08:00 . 2009-07-31 08:00 875728 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\VirusDefs\20090731.025\NAVEX15.SYS
2009-07-30 21:55 . 2009-07-30 21:55 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-07-30 02:18 . 2009-07-30 02:18 444 ----a-w- c:\windows\system32\d3d8caps.dat
2009-07-25 18:20 . 2009-07-25 18:21 -------- d-----w- c:\program files\iTunes
2009-07-25 18:14 . 2009-07-25 18:14 75040 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 8.2.1.6\SetupAdmin.exe
2009-07-25 05:53 . 2009-08-01 00:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Norton
2009-07-25 05:53 . 2009-07-31 23:58 -------- d-----w- c:\documents and settings\All Users\Application Data\NortonInstaller
2009-07-25 03:18 . 2001-08-16 21:19 61440 ----a-w- c:\windows\system32\mjpcodec.dll
2009-07-25 03:18 . 2000-09-15 20:51 372736 ----a-w- c:\windows\system32\ijl15.dll
2009-07-25 02:51 . 2009-07-25 02:51 -------- d-----w- c:\windows\system32\Adobe

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-12 18:33 . 2009-03-05 22:24 -------- d-----w- c:\program files\Safari
2009-08-11 01:36 . 2008-09-19 03:34 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-08-01 02:38 . 2008-11-26 23:52 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-08-01 00:03 . 2008-07-03 23:06 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-08-01 00:01 . 2008-09-17 23:03 -------- d-----w- c:\documents and settings\Randi\Application Data\GetRightToGo
2009-07-31 23:59 . 2008-07-05 01:08 805 ----a-w- c:\windows\system32\drivers\SYMEVENT.INF
2009-07-31 23:59 . 2008-07-05 01:08 7386 ----a-w- c:\windows\system32\drivers\SYMEVENT.CAT
2009-07-31 23:59 . 2008-07-03 23:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-07-26 23:32 . 2008-08-25 22:41 -------- d-----w- c:\documents and settings\Randi\Application Data\U3
2009-07-25 18:21 . 2005-02-26 02:36 -------- d-----w- c:\program files\iPod
2009-07-25 18:21 . 2007-09-03 21:42 -------- d-----w- c:\program files\Common Files\Apple
2009-07-13 18:36 . 2008-11-26 23:52 38160 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-07-13 18:36 . 2008-11-26 23:52 19096 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-07-11 19:34 . 2009-07-11 19:34 276344 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\IDSXpx86.sys
2009-07-11 19:34 . 2009-07-11 19:34 293424 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\IDSvix86.sys
2009-07-11 19:34 . 2009-07-11 19:34 533880 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\Scxpx86.dll
2009-07-11 19:34 . 2009-07-11 19:34 451960 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\IDSxpx86.dll
2009-07-11 19:34 . 2009-07-11 19:34 397360 ----a-w- c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\BinHub\IDSviA64.sys
2009-07-07 18:36 . 2009-07-07 18:32 -------- d-----w- c:\program files\Celtx
2009-07-07 18:33 . 2009-07-07 18:33 -------- d-----w- c:\documents and settings\Randi\Application Data\Greyfirst
2009-07-02 01:17 . 2009-07-02 01:17 69632 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 4.30.19.1\SetupAdmin.exe
2009-06-28 16:18 . 2004-10-28 21:53 -------- d-----w- c:\program files\Yahoo!
2009-06-28 16:16 . 2004-10-22 15:58 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-28 16:15 . 2004-11-13 16:03 -------- d-----w- c:\documents and settings\Randi\Application Data\Atari
2009-06-15 03:54 . 2008-05-20 01:06 -------- d-----w- c:\program files\Common Files\DVDVideoSoft
2009-06-15 03:54 . 2008-05-20 21:18 -------- d-----w- c:\program files\DVDVideoSoft
2009-06-14 19:45 . 2009-06-14 19:45 -------- d-----w- c:\program files\SystemRequirementsLab
2009-06-07 17:53 . 2009-06-07 17:53 784 ----a-w- c:\documents and settings\Randi\Application Data\mpauth.dat
2009-06-05 22:43 . 2009-06-05 22:43 69632 ----a-w- c:\documents and settings\All Users\Application Data\Apple Computer\Installer Cache\Safari 4.30.17.0\SetupAdmin.exe
2009-05-29 18:36 . 2008-09-10 02:22 2060288 ----a-w- c:\windows\system32\usbaaplrc.dll
2009-05-29 18:36 . 2007-10-14 19:21 39424 ----a-w- c:\windows\system32\drivers\usbaapl.sys
2007-05-27 00:27 . 2006-03-30 18:02 288 ---ha-w- c:\program files\hpothb07.dat
2007-05-27 00:27 . 2006-03-30 18:02 17221 ---ha-w- c:\program files\hpothb07.tif
2006-03-30 18:02 . 2006-03-30 18:02 11996604 ----a-w- c:\program files\Scan0001.tif

qwerty8520
Novice
Novice

Posts Posts : 22
Joined Joined : 2009-07-31
OS OS : XP
Points Points : 26891
# Likes # Likes : 0

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by qwerty8520 on Thu Aug 13, 2009 2:29 am

.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-02-04 4363504]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-05-26 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2009-07-13 292128]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2009-07-13 1287440]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcmscsvc]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
@=""

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SymEFA.sys]
@="FSFilter Activity Monitor"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Microsoft Office.lnk
backup=c:\windows\pss\Microsoft Office.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"iPodService"=3 (0x3)
"YPCService"=3 (0x3)
"WMPNetworkSvc"=3 (0x3)
"WANMiniportService"=2 (0x2)
"Symantec Core LC"=3 (0x3)
"SPTISRV"=3 (0x3)
"Pml Driver HPZ12"=3 (0x3)
"PACSPTISVR"=3 (0x3)
"MSCSPTISRV"=3 (0x3)
"MDM"=2 (0x2)
"LVPrcSrv"=2 (0x2)
"LiveUpdate Notice"=2 (0x2)
"LiveUpdate"=3 (0x3)
"iPod Service"=3 (0x3)
"IDriverT"=3 (0x3)
"gusvc"=3 (0x3)
"dsNcService"=2 (0x2)
"comHost"=3 (0x3)
"CLTNetCnService"=2 (0x2)
"ccSetMgr"=2 (0x2)
"ccEvtMgr"=2 (0x2)
"Automatic LiveUpdate Scheduler"=2 (0x2)
"AOL ACS"=2 (0x2)
"MSIServer"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Trillian\\trillian.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Common Files\\McAfee\\MNA\\McNASvc.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:*:Disabled:@xpsp2res.dll,-22009

R0 SymEFA;Symantec Extended File Attributes;c:\windows\SYSTEM32\DRIVERS\NAV\1005000.086\SymEFA.sys [7/31/2009 06:59 PM 310320]
R1 BHDrvx86;Symantec Heuristics Driver;c:\windows\SYSTEM32\DRIVERS\NAV\1005000.086\BHDrvx86.sys [7/31/2009 06:59 PM 258608]
R1 ccHP;Symantec Hash Provider;c:\windows\SYSTEM32\DRIVERS\NAV\1005000.086\cchpx86.sys [7/31/2009 06:59 PM 482352]
R1 IDSxpx86;IDSxpx86;c:\documents and settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\Definitions\IPSDefs\20090730.003\IDSXpx86.sys [7/31/2009 08:01 PM 276344]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [8/9/2009 10:48 AM 108289]
R2 McAfee SiteAdvisor Service;McAfee SiteAdvisor Service;c:\program files\McAfee\SiteAdvisor\McSACore.exe [11/26/2008 07:18 PM 203280]
R2 Norton AntiVirus;Norton AntiVirus;c:\program files\Norton AntiVirus\Engine\16.5.0.134\ccSvcHst.exe [7/31/2009 06:59 PM 115560]
S3 smrtdrv;SMART Technologies Inc. Mirror Driver;c:\windows\system32\DRIVERS\smrtdrv.sys --> c:\windows\system32\DRIVERS\smrtdrv.sys [?]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - SSMDRV
*Deregistered* - IPVNMon
.
Contents of the 'Scheduled Tasks' folder

2009-08-07 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 17:34]

2009-07-15 c:\windows\Tasks\McDefragTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2008-11-27 19:32]

2009-08-01 c:\windows\Tasks\McQcTask.job
- c:\progra~1\mcafee\mqc\QcConsol.exe [2008-11-27 19:32]

2009-08-12 c:\windows\Tasks\User_Feed_Synchronization-{B36647E1-C803-449B-949A-7AEA25C58288}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 17:58]
.
.
------- Supplementary Scan -------
.
uSearchMigratedDefaultURL = [You must be registered and logged in to see this link.]
uStart Page = [You must be registered and logged in to see this link.]
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [You must be registered and logged in to see this link.]
Rootkit scan 2009-08-12 14:33
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet003\Services\Norton AntiVirus]
"ImagePath"="\"c:\program files\Norton AntiVirus\Engine\16.5.0.134\ccSvcHst.exe\" /s \"Norton AntiVirus\" /m \"c:\program files\Norton AntiVirus\Engine\16.5.0.134\diMaster.dll\" /prefetch:1"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(792)
c:\windows\system32\SEGina.dll
.
Completion time: 2009-08-12 14:40
ComboFix-quarantined-files.txt 2009-08-12 19:38
ComboFix2.txt 2009-08-01 05:25

Pre-Run: 24,101,564,416 bytes free
Post-Run: 24,149,221,376 bytes free

224 --- E O F --- 2008-07-08 22:46

qwerty8520
Novice
Novice

Posts Posts : 22
Joined Joined : 2009-07-31
OS OS : XP
Points Points : 26891
# Likes # Likes : 0

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by Belahzur on Thu Aug 13, 2009 4:30 pm

Does updates work now?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by qwerty8520 on Fri Aug 14, 2009 2:43 am

Nope. Still tells me to go to "system" under control panel. But when I go there, it says its already on. Yet the little pop up by my clock tells me it's not. I have a link to some pictures of it.

Security center:
[You must be registered and logged in to see this link.]

System properties:
[You must be registered and logged in to see this link.]

qwerty8520
Novice
Novice

Posts Posts : 22
Joined Joined : 2009-07-31
OS OS : XP
Points Points : 26891
# Likes # Likes : 0

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by Belahzur on Fri Aug 14, 2009 6:09 pm

I wonder if it's a bug.
Turn automatic updates off, then switch them back on again, it should work itself out then.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34916
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : XP SP3 Media Centre
Points Points : 245059
# Likes # Likes : 1

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by qwerty8520 on Sat Aug 22, 2009 6:56 pm

Nope. Still there. No way!

qwerty8520
Novice
Novice

Posts Posts : 22
Joined Joined : 2009-07-31
OS OS : XP
Points Points : 26891
# Likes # Likes : 0

View user profile

Back to top Go down

Re: System Security problems annoying!

Post by Origin on Sat Aug 22, 2009 6:58 pm

Download [You must be registered and logged in to see this link.] by OldTimer to your Desktop.

  • Close all windows and double click OTListIt2.exe
  • Click Run Scan and let the program run uninterrupted
  • It will produce two logs for you, one will pop up - OTListIt2.txt, the other will be saved on your Desktop - Extras.txt. Post both logs in this thread.
  • You may need to use two posts to get it all.


While my help is always free, please consider donating to keep this site alive: [You must be registered and logged in to see this link.]

[You must be registered and logged in to see this link.]

Origin
Master
Master

Posts Posts : 2685
Joined Joined : 2009-05-05
Gender Gender : Male
OS OS : Windows Xp Sp3
Points Points : 31473
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum