Laptop has 2 viruses Please help

View previous topic View next topic Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 8:45 pm

Hello.
Open the MBAM interface again. You can find it in All Programs via the start menu.

Click the "logs" tab, double click the log that is there from your scan, then copy and paste it back here.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 8:48 pm

Malwarebytes' Anti-Malware 1.34
Database version: 1903
Windows 5.1.2600 Service Pack 3

3/26/2009 3:47:21 PM
mbam-log-2009-03-26 (15-47-21).txt

Scan type: Quick Scan
Objects scanned: 75921
Time elapsed: 7 minute(s), 24 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 12
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\main.bho (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\main.bho.1 (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{986a8ac1-ab4d-4f41-9068-4b01c0197867} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{afd4ad01-58c1-47db-a404-fbe00a6c5486} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Typelib\{8e3c68cd-f500-4a2a-8cb9-132bb38c3573} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\AppID\{a0e1054b-01ee-4d57-a059-4d99f339709f} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{afd4ad01-58c1-47db-a404-fbe00a6c5486} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{7370f91f-6994-4595-9949-601fa2261c8d} (Adware.BHO) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{df780f87-ff2b-4df8-92d0-73db16a1543a} (Adware.PopCap) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{6fd31ed6-7c94-4bbc-8e95-f927f4d3a949} (Adware.180Solutions) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{afd4ad01-58c1-47db-a404-fbe00a6c5486} (Trojan.BHO) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{3a767e22-57b0-4cb1-bbc3-bb52332ce17e} (Trojan.Agent) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\system32\mst123.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\Common\helper.sig (Trojan.Agent) -> Quarantined and deleted successfully.

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 8:52 pm

No mention of a rootkit, but we'll see.
I want to see what's installed for now, there is one or two things we can remove.
.
Please install Hijack This via the setup executable.

  • Double click and run the installer.
  • It will install to C:\Program Files\Trend Micro\HijackThis\hijackthis.exe
  • After installing, you should get the user agreement, press accept and Hijack This will run.
  • Select "Open the Misc Tools section"
  • Click on "Open Uninstall Manager"
  • Click the "Save List..." (generates uninstall_list.txt)
  • Then click Save, copy and paste the results in your next post.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 8:54 pm

dobe Flash Player ActiveX
Adobe Reader 7.0
Adobe Shockwave Player
AOL Coach Version 2.0(Build:20041026.5 en)
AOL You've Got Pictures Screensaver
Apple Mobile Device Support
Apple Software Update
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
AVG Free 8.0
BigFix
Blackhawk Striker 2
Blasterball 2 Revolution
Bonjour
Broadcom 802.11 Network Adapter
CA Yahoo! Anti-Spy (remove only)
Compatibility Pack for the 2007 Office system
Creative Video Blaster WebCam 3 USB/WebCam Plus Driver
Critical Update for Windows Media Player 11 (KB959772)
DVD Solution
FATE
Gateway Game Console
Gateway Games
Google Earth
Google Toolbar for Internet Explorer
Google Updater
gtw_logo
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 10 (KB910393)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
iTunes
J2SE Runtime Environment 5.0 Update 2
Java(TM) 6 Update 3
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Starter Edition 2006
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2006
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Motorola SM56 Data Fax Modem
Mozilla Firefox (3.0.7)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Napster
Napster Burn Engine
Penguins!
Polar Bowler
Polar Golfer
Power2Go 4.0
PowerDVD
QuickTime
RealPlayer Basic
SCRABBLE
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
SigmaTel Audio
Sonic Encoders
Synaptics Pointing Device Driver
Texas Instruments PCIxx21/x515/xx12 drivers.
Tradewinds
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update Rollup 2 for Windows XP Media Center Edition 2005
Viewpoint Media Player
WildTangent Web Driver
Windows Backup Utility
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
Windows Live installer
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Player 11
Windows Media Player 11
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
World of Warcraft
Yahoo! Messenger
Yahoo! Toolbar

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 9:02 pm

Hello.

Go to Start > Control Panel > Add/Remove Programs and remove the following programs if present.

  • J2SE Runtime Environment 5.0 Update 2
  • Java(TM) 6 Update 3
  • Viewpoint Media Player
  • WildTangent Web Driver
Then please find and delete this folder in bold (if present):
C:\Program Files\Viewpoint

Lets see if a rootkit is indeed present or not.

1. Now, start The Avenger program by clicking on its icon on your desktop.

  • Leave the script box EMPTY.
  • Leave the ticked box "Scan for rootkit" ticked.
  • Then tick "Disable any rootkits found"
  • Now click on the Execute to begin execution of the script.
  • Answer "Yes" twice when prompted.

    The Avenger will automatically do the following:

  • It will Restart your computer.
  • On reboot, it will briefly open a black command window on your desktop, this is normal.
  • After the restart, it creates a log file that should open with the results of Avengerís actions. This log file will be located at C:\avenger.txt
  • The Avenger will also have backed up all the files, etc., that you asked it to delete, and will have zipped them and moved the zip archives to C:\avenger\backup.zip.
2. Please copy/paste the content of c:\avenger.txt into your reply.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:14 pm

Logfile of The Avenger Version 2.0, (c) by Swandog46
[You must be registered and logged in to see this link.]

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!


Completed script processing.

*******************

Finished! Terminate.

I do have something on the desktop called InstallRoot3.0, but it's from november of last year

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 9:17 pm

Hello.
Delete Installroot if you don't use it. No rootkits either.

From your uninstall log.

Napster
Napster Burn Engine


Do you use the burn engine?

P2P(Peer to peer) applications are designed to help you easily share and distribute files between you and a group of people. But they can also be used to distribute malware, and thus are not considered safe.
The removal of these programs is optional, but highly recommended.

How is the machine now? Looks malware free to me.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:21 pm

IE is still not working, and crashes upon trying to open it

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:22 pm

no i don't use the burn engine

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 9:24 pm

Hello.
Do you have attach,txt from DDS?

Can you post that please, it has the event viewer so I can see recent errors.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:25 pm

running it again, is that the second log file that opens? I will post it shorly

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 9:27 pm

It might be first or second, can't remember which DDS does first, but anyway, attach.txt says this as the top line:

"UNLESS ASKED TO POST THIS, ZIP IT AND ATTACH IT"

It will be written in capitals, so it should be easy to stop.


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:28 pm

NLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-03-16.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 12/14/2007 11:39:27 AM
System Uptime: 3/26/2009 5:10:38 PM (0 hours ago)

Motherboard: Gateway | |
Processor: AMD Turion(tm) 64 X2 Mobile Technology TL-50 | Socket M2/S1G1 | 1595/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 105 GiB total, 68.009 GiB free.
D: is FIXED (FAT32) - 7 GiB total, 2.846 GiB free.
E: is CDROM ()
F: is CDROM (CDFS)
G: is Removable

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP173: 12/27/2008 4:00:31 PM - System Checkpoint
RP174: 12/29/2008 10:10:37 AM - System Checkpoint
RP175: 12/31/2008 3:21:38 PM - System Checkpoint
RP176: 1/7/2009 8:21:38 AM - System Checkpoint
RP177: 1/9/2009 12:02:38 PM - System Checkpoint
RP178: 1/11/2009 4:31:12 PM - System Checkpoint
RP179: 1/13/2009 4:26:44 PM - System Checkpoint
RP180: 1/15/2009 8:13:26 AM - Software Distribution Service 3.0
RP181: 1/16/2009 4:49:25 PM - System Checkpoint
RP182: 1/18/2009 11:33:49 AM - System Checkpoint
RP183: 1/19/2009 1:11:11 PM - System Checkpoint
RP184: 1/20/2009 5:18:02 PM - System Checkpoint
RP185: 1/21/2009 10:21:02 PM - System Checkpoint
RP186: 1/22/2009 10:27:14 PM - System Checkpoint
RP187: 1/23/2009 10:45:15 PM - System Checkpoint
RP188: 1/25/2009 1:11:14 AM - System Checkpoint
RP189: 1/26/2009 9:18:06 PM - System Checkpoint
RP190: 1/30/2009 8:42:28 AM - Avg8 Update
RP191: 1/30/2009 8:44:16 AM - Avg8 Update
RP192: 1/31/2009 3:42:39 PM - System Checkpoint
RP193: 2/2/2009 7:21:08 PM - System Checkpoint
RP194: 2/4/2009 8:25:21 AM - System Checkpoint
RP195: 2/5/2009 3:21:44 PM - System Checkpoint
RP196: 2/6/2009 5:28:04 PM - System Checkpoint
RP197: 2/9/2009 9:07:36 AM - System Checkpoint
RP198: 2/10/2009 3:34:52 PM - System Checkpoint
RP199: 2/10/2009 7:55:12 PM - Avg8 Update
RP200: 2/11/2009 10:24:32 AM - Software Distribution Service 3.0
RP201: 2/12/2009 6:44:50 PM - System Checkpoint
RP202: 2/15/2009 8:56:39 AM - Avg8 Update
RP203: 2/17/2009 8:56:49 PM - System Checkpoint
RP204: 2/19/2009 2:25:16 PM - System Checkpoint
RP205: 2/21/2009 10:20:44 AM - System Checkpoint
RP206: 2/24/2009 11:21:38 PM - Installed Compatibility Pack for the 2007 Office system
RP207: 2/25/2009 9:40:52 PM - Software Distribution Service 3.0
RP208: 2/27/2009 8:18:06 AM - Software Distribution Service 3.0
RP209: 3/2/2009 10:18:56 PM - System Checkpoint
RP210: 3/4/2009 1:54:23 PM - Avg8 Update
RP211: 3/6/2009 8:34:06 AM - System Checkpoint
RP212: 3/9/2009 11:36:12 AM - System Checkpoint
RP213: 3/12/2009 7:10:24 AM - Software Distribution Service 3.0
RP214: 3/16/2009 6:04:59 PM - Software Distribution Service 3.0
RP215: 3/18/2009 2:18:40 PM - Avg8 Update
RP216: 3/20/2009 12:13:16 PM - System Checkpoint
RP217: 3/22/2009 9:39:50 AM - System Checkpoint
RP218: 3/23/2009 4:50:45 PM - System Checkpoint
RP219: 3/24/2009 5:41:03 PM - System Checkpoint
RP220: 3/24/2009 8:27:53 PM - Installed Windows Internet Explorer 8.
RP221: 3/24/2009 8:29:44 PM - Software Distribution Service 3.0
RP222: 3/25/2009 3:08:00 PM - Restore Operation
RP223: 3/25/2009 3:22:39 PM - Restore Operation
RP224: 3/25/2009 4:45:28 PM - Avg8 Update
RP225: 3/25/2009 4:46:46 PM - Avg8 Update
RP226: 3/25/2009 4:47:23 PM - Avg8 Update
RP227: 3/25/2009 4:56:37 PM - Software Distribution Service 3.0
RP228: 3/25/2009 5:25:48 PM - Restore Operation
RP229: 3/25/2009 8:52:40 PM - Restore Operation
RP230: 3/25/2009 8:56:16 PM - Restore Operation
RP231: 3/25/2009 8:59:49 PM - Restore Operation
RP232: 3/25/2009 10:43:27 PM - Restore Operation
RP233: 3/26/2009 1:04:57 PM - Avg8 Update
RP234: 3/26/2009 5:04:09 PM - Removed J2SE Runtime Environment 5.0 Update 2
RP235: 3/26/2009 5:04:59 PM - Removed Java(TM) 6 Update 3
RP236: 3/26/2009 5:22:26 PM - Removed Napster

==== Installed Programs ======================

Adobe Flash Player ActiveX
Adobe Reader 7.0
Adobe Shockwave Player
AOL Coach Version 2.0(Build:20041026.5 en)
AOL You've Got Pictures Screensaver
Apple Mobile Device Support
Apple Software Update
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
AVG Free 8.0
BigFix
Blackhawk Striker 2
Blasterball 2 Revolution
Bonjour
Broadcom 802.11 Network Adapter
CA Yahoo! Anti-Spy (remove only)
Compatibility Pack for the 2007 Office system
Creative Video Blaster WebCam 3 USB/WebCam Plus Driver
Critical Update for Windows Media Player 11 (KB959772)
DVD Solution
FATE
Gateway Game Console
Gateway Games
Google Earth
Google Toolbar for Internet Explorer
Google Updater
gtw_logo
High Definition Audio Driver Package - KB888111
HijackThis 2.0.2
Hotfix for Windows Internet Explorer 7 (KB947864)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows Media Player 10 (KB903157)
Hotfix for Windows Media Player 10 (KB910393)
Hotfix for Windows Media Player 11 (KB939683)
Hotfix for Windows XP (KB952287)
iTunes
Malwarebytes' Anti-Malware
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Digital Image Library 9 - Blocker
Microsoft Digital Image Starter Edition 2006
Microsoft Digital Image Starter Edition 2006 Editor
Microsoft Digital Image Starter Edition 2006 Library
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft Money 2006
Microsoft National Language Support Downlevel APIs
Microsoft Office Standard Edition 2003
Microsoft User-Mode Driver Framework Feature Pack 1.0
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Motorola SM56 Data Fax Modem
Move Networks Media Player for Internet Explorer
Mozilla Firefox (3.0.7)
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB954430)
Napster Burn Engine
Penguins!
Polar Bowler
Polar Golfer
Power2Go 4.0
PowerDVD
QuickTime
RealPlayer Basic
Recovery Software Suite Gateway
SCRABBLE
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Internet Explorer 7 (KB944533)
Security Update for Windows Internet Explorer 7 (KB950759)
Security Update for Windows Internet Explorer 7 (KB953838)
Security Update for Windows Internet Explorer 7 (KB956390)
Security Update for Windows Internet Explorer 7 (KB958215)
Security Update for Windows Internet Explorer 7 (KB960714)
Security Update for Windows Internet Explorer 7 (KB961260)
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 11 (KB936782)
Security Update for Windows Media Player 11 (KB954154)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950760)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951376)
Security Update for Windows XP (KB951698)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB953839)
Security Update for Windows XP (KB954211)
Security Update for Windows XP (KB954459)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956391)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956841)
Security Update for Windows XP (KB957095)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB958690)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960715)
SigmaTel Audio
Sonic Encoders
Synaptics Pointing Device Driver
Texas Instruments PCIxx21/x515/xx12 drivers.
TIPCI
Tradewinds
Update for Windows Media Player 10 (KB913800)
Update for Windows Media Player 10 (KB926251)
Update for Windows XP (KB951072-v2)
Update for Windows XP (KB951978)
Update for Windows XP (KB953356)
Update for Windows XP (KB955839)
Update for Windows XP (KB967715)
Update Rollup 2 for Windows XP Media Center Edition 2005
WebFldrs XP
WildTangent Web Driver
Windows Backup Utility
Windows Driver Package - Advanced Micro Devices (AmdK8) Processor (05/27/2006 1.3.2.0)
Windows Internet Explorer 7
Windows Live installer
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Player 11
Windows XP Media Center Edition 2005 KB925766
Windows XP Service Pack 3
World of Warcraft
Yahoo! Messenger
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

3/22/2009 9:05:10 AM, error: Print [19] - Sharing printer failed + 1722, Printer HP DeskJet 930C/932C/935C share name HPDeskJe.
3/25/2009 3:37:36 PM, error: Service Control Manager [7034] - The Viewpoint Manager Service service terminated unexpectedly. It has done this 1 time(s).
3/25/2009 4:40:26 PM, error: Service Control Manager [7034] - The iPod Service service terminated unexpectedly. It has done this 1 time(s).
3/26/2009 2:16:27 PM, error: DCOM [10005] - DCOM got error "%1084" attempting to start the service EventSystem with arguments "" in order to run the server: {1BE1F766-5536-11D1-B726-00C04FB926AF}
3/26/2009 2:17:41 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: AmdK8 AvgLdx86 AvgMfx86 Fips
3/26/2009 3:53:37 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: abp480n5 adpu160m agp440 agpCPQ Aha154x aic78u2 aic78xx AliIde alim1541 amdagp amsint asc asc3350p asc3550 cbidf cd20xrnt CmdIde Cpqarray dac2w2k dac960nt dpti2o hpn i2omp iaStor ini910u IntelIde mraid35x perc2 perc2hib ql1080 Ql10wnt ql12160 ql1240 ql1280 sisagp Sparrow symc810 symc8xx sym_hi sym_u3 TosIde ultra viaagp ViaIde

==== End Of File ===========================

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:30 pm

now I got a DrWatson Postmortem debugger has encountered an error when I try to open IE

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 9:32 pm

Hello.
I'm gonna ask my colleagues to drop by here. Hold tight.

For now, is it possible to use another browser?


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:33 pm

yeah mozilla seems to be working for now, is it possible I could uninstall IE and reinstall it to fix this? thanks so much for all your help

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 9:40 pm

doesn't look like there is an unistall option for IE

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 10:00 pm

Ok, I was able to dl'd IE 8 and get it working. Thank you for all your help. I hope I can avoid this in the future.

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Belahzur on 26th March 2009, 10:03 pm

Good work.

We need to make a new restore point.

To turn off System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (or the Turn off System Restore on all drives check box), and then click OK.
4. Click Yes when you receive the prompt to the turn off System Restore.

Now we need to make a new restore point.
To turn on System Restore, follow these steps:
1. Click Start, right-click My Computer, and then click Properties.
2. Click the System Restore tab.
3. Click the Turn off System Restore check box (To turn on System Restore), and then click OK.

Below I have included a number of recommendations for how to protect your computer in order to prevent future malware infections. Please take these recommendations seriously; these few simple steps can stave off the vast majority of spyware problems. As happy as we are to help you, for your sake we would rather not have repeat customers. Goofy

1) Please navigate to [You must be registered and logged in to see this link.] and download all the "critical updates" for Windows. This can patch many of the security holes through which attackers can gain access to your computer.

Please either enable Automatic Updates under Start -> Control Panel -> Automatic Updates , or get into the habit of checking for Windows updates regularly. I cannot stress enough how important this is.

2) In order to protect yourself against spyware, you should consider installing and running the following free programs:

[You must be registered and logged in to see this link.]
A tutorial on using Ad-Aware to remove spyware from your computer may be found [You must be registered and logged in to see this link.].

[You must be registered and logged in to see this link.]
A tutorial on using Spybot to remove spyware from your computer may be found [You must be registered and logged in to see this link.]. Please also remember to enable Spybot's "Immunize" and "TeaTimer" features.

[You must be registered and logged in to see this link.]
A tutorial on using SpywareBlaster to prevent spyware from ever installing on your computer may be found [You must be registered and logged in to see this link.].

[You must be registered and logged in to see this link.]
A tutorial on using SpywareGuard for realtime protection against spyware and hijackers may be found [You must be registered and logged in to see this link.].

Make sure to keep these programs up-to-date and to run them regularly, as this can prevent a great deal of spyware hassle.

3) Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in popup blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from here:
[You must be registered and logged in to see this link.]
I also recommand the following add-ons for Firefox, they will help keep you safe from malicious scripts or activeX exploits.
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]
[You must be registered and logged in to see this link.]

4) Also make sure to run your antivirus software regularly, and to keep it up-to-date.

To help you keep your software updated, please considering using this free software program that will check for program updates.
[You must be registered and logged in to see this link.]

5) Finally, consider maintaining a firewall. Some good free firewalls are [You must be registered and logged in to see this link.], or
[You must be registered and logged in to see this link.]
A tutorial on understanding and using firewalls may be found [You must be registered and logged in to see this link.].

Please also read Tony Klein's excellent article: [You must be registered and logged in to see this link.]

If you would take a moment to fill out our feedback form, we would appreciate it.
The link can be found [You must be registered and logged in to see this link.].

Hopefully this should take care of your problems! Good luck. Big Grin


[You must be registered and logged in to see this link.] - [You must be registered and logged in to see this link.] - Please PM me if I fail to respond within 24hrs.


Belahzur
Administrator
Administrator

Posts Posts : 34918
Joined Joined : 2008-08-03
Gender Gender : Male
OS OS : 7 Home Premium x64
Points Points : 245091
# Likes # Likes : 1

View user profile

Back to top Go down

Re: Laptop has 2 viruses Please help

Post by Jpoland on 26th March 2009, 10:08 pm

thanks again for all your help, I was pleasantly surprised to find a service like this.

Jpoland
Novice
Novice

Posts Posts : 27
Joined Joined : 2009-03-26
OS OS : xp
Points Points : 28169
# Likes # Likes : 0

View user profile

Back to top Go down

View previous topic View next topic Back to top

- Similar topics

 
Permissions in this forum:
You cannot reply to topics in this forum