Other > Viruses and worms
multiple problems including keyboard issues & browser hijack attempts
<< < (2/11) > >>
polonus:
Hi Meeme,

Before following oldman's advice further, do the following:
Download Superantispyware (SAS) free home version

http://www.superantispyware.com/superantispywarefreevspro.html

Install it and double-click the icon on your desktop to run it.
· It will ask if you want to update the program definitions, click Yes.
· Under Configuration and Preferences, click the Preferences button.
· Click the Scanning Control tab.
· Under Scanner Options make sure the following are checked:
o Close browsers before scanning
o Scan for tracking cookies
o Terminate memory threats before quarantining.
o Please leave the others unchecked.
o Click the Close button to leave the control center screen.
· On the main screen, under Scan for Harmful Software click Scan your computer.
· On the left check C:\Fixed Drive.
· On the right, under Complete Scan, choose Perform Complete Scan.
· Click Next to start the scan. Please be patient while it scans your computer.
· After the scan is complete a summary box will appear. Click OK.
· Make sure everything in the white box has a check next to it, then click Next.
· It will quarantine what it found and if it asks if you want to reboot, click Yes.
· To retrieve the removal information for me please do the following:
o After reboot, double-click the SUPERAntispyware icon on your desktop.
o Click Preferences. Click the Statistics/Logs tab.
o Under Scanner Logs, double-click SUPERAntiSpyware Scan Log.
o It will open in your default text editor (such as Notepad/Wordpad).
o Please highlight everything in the notepad, then right-click and choose copy.
· Click close and close again to exit the program.
· Please paste that information here for me with a new HijackThis log.

This can take considerable time, but it is worth it,

polonus
Meeme:
Sorry I have not replied sooner
We had our internet knocked out from the strong storms :(

Here is the log from Super Anti Spyware:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 02/09/2008 at 03:10 AM

Application Version : 3.9.1008

Core Rules Database Version : 3399
Trace Rules Database Version: 1391

Scan type       : Complete Scan
Total Scan Time : 00:51:01

Memory items scanned      : 474
Memory threats detected   : 0
Registry items scanned    : 6194
Registry threats detected : 0
File items scanned        : 39600
File threats detected     : 0
oldman:
SAS didn't find anything but it is in your HJT log.

Did you submit the file to virustotal as in my previous post?

How about your antvirus, do you still have both installed?

Download ComboFix from Here or Here to your Desktop.

Double click combofix.exe and follow the prompts.

When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall.

Meeme:
I can't upload it to virustotal.  When I try to browse for it, the folder is hidden and does not show up.  I have tried to make the folder visible, but using this option does nothing.

Also, I am unable to type in the folder location manually, as it contains both numbers and a forward slash.  (Incidentally, I am typing this from my work computer, so I am able to use numbers and punctuation.) 

I also cannot highlight a single word or file name.  When I try, the item I want to highlight plus everything beyond it gets highlighted.  Also, the cut and past commands do not operate correctly every time.  I knew that there was more to the problem, but could not remember in my first post. 

As per your instructions, I removed AVG and the old Microsoft Anti-spyware that was out of date.

Is there another way for me to upload to virustotal?  For instance, can I write the folder to a disk and use my work computer without the fear that it too will be corrupted.

As soon as I get home from work I will download combofix and post the results. 

Thanks so much for your help!  I really appreciate it.
oldman:
Ok, I'd rather not transfer it to another computer as we don't know what it is.

If I can find the batch file we can do it that way. i'll post it as soon as I can locate it. My computer is a mess right now, thing saved all over.

Please set your folder options like this and try to submit the file again.

At the top of windows explorer, click tools, folder options, click the
view tab

 check Show hidden files and folders
 uncheck "Hide extensions for known file types" box
 uncheck "Hide protecting operating system files" box




Given some of the other problems you have going on, I'd like you to download an run this program as well and post the log. Please run it before combofix.

Please download Deckard's System Scanner (DSS) and save it to your Desktop.[*]Close all other windows before proceeding.
[*]Double-click on dss.exe and follow the prompts.
[*]When it has finished, dss will open two Notepads main.txt and extra.txt  -- please copy (CTRL+A and then CTRL+C) and paste (CTRL+V) the contents of main.txt and extra.txt in your next reply.[/list]

Navigation
Message Index
Next page
Previous page

Go to full version