|
|
|||||||
|
 |
|
|
Thread Tools |
|
#11
26th Feb 2009, 21:02
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
Delete these files/folders, as follows:
1. Go to Start > Run > type Notepad.exe and click OK to open Notepad. It must be Notepad, not Wordpad. 2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C Code:
KillAll:: Driver:: DMSKSSRh 4. Then click File > Save 5. Name the file CFScript.txt - Save the file to your Desktop 6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!  ComboFix will begin to execute, just follow the prompts. After reboot (in case it asks to reboot), it will produce a log for you. Post that log (Combofix.txt) in your next reply. Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze
__________________
 |
|
#12
27th Feb 2009, 05:29
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
ComboFix 09-02-26.02 - Dimos 2009-02-27 14:18:32.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1253.30.1033.18.1023.635 [GMT 2:00] Running from: c:\documents and settings\Dimos\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Dimos\Desktop\CFScript.txt * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Legacy_DMSKSSRH -------\Service_DMSKSSRh ((((((((((((((((((((((((( Files Created from 2009-01-27 to 2009-02-27 ))))))))))))))))))))))))))))))) . 2009-02-27 04:03 . 2009-02-27 04:03 <DIR> d-------- c:\program files\Malwarebytes' Anti-Malware 2009-02-27 04:03 . 2009-02-27 04:03 <DIR> d-------- c:\documents and settings\Dimos\Application Data\Malwarebytes 2009-02-27 04:03 . 2009-02-27 04:03 <DIR> d-------- c:\documents and settings\All Users\Application Data\Malwarebytes 2009-02-27 04:03 . 2009-02-11 10:19 38,496 --a------ c:\windows\system32\drivers\mbamswissarmy.sys 2009-02-27 04:03 . 2009-02-11 10:19 15,504 --a------ c:\windows\system32\drivers\mbam.sys 2009-02-27 00:10 . 2009-02-27 00:10 <DIR> d-------- C:\rsit 2009-02-27 00:10 . 2009-02-27 03:56 <DIR> d-------- c:\program files\trend micro 2009-02-26 18:46 . 2009-02-26 18:46 <DIR> d-------- c:\program files\SUPERAntiSpyware 2009-02-26 18:46 . 2009-02-26 18:46 <DIR> d-------- c:\documents and settings\Dimos\Application Data\SUPERAntiSpyware.com 2009-02-26 18:46 . 2009-02-26 18:46 <DIR> d-------- c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com 2009-02-26 17:53 . 2009-02-26 17:53 <DIR> d-------- c:\program files\Common Files\Logitech 2009-02-26 17:44 . 2004-08-04 00:56 21,504 --a------ c:\windows\system32\hidserv.dll 2009-02-26 17:44 . 2004-08-04 00:56 21,504 --a--c--- c:\windows\system32\dllcache\hidserv.dll 2009-02-18 14:49 . 2009-02-18 14:49 <DIR> d-------- c:\program files\Kaspersky Lab 2009-02-18 14:27 . 2009-02-18 14:27 <DIR> d-------- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files 2009-02-18 03:16 . 2009-02-18 14:19 131 --a------ c:\windows\CRC.INI 2009-02-18 03:13 . 2009-02-18 03:13 <DIR> d-------- c:\program files\COMODO 2009-02-18 01:58 . 2008-02-07 17:10 <DIR> d--h----- C:\ckis 2009-02-18 01:31 . 2009-02-18 01:31 <DIR> d-------- c:\program files\CCleaner 2009-02-18 00:39 . 2009-02-18 00:39 <DIR> d-------- c:\documents and settings\All Users\Application Data\Trymedia 2009-02-04 17:04 . 2009-02-04 17:04 0 --a------ c:\windows\game.INI 2009-02-04 16:26 . 2009-02-04 16:26 <DIR> d-------- c:\program files\directx 2009-01-27 21:12 . 2009-01-27 21:12 <DIR> d-------- c:\documents and settings\All Users\Application Data\AdventureChronicles1 . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) )) . 2009-02-26 16:46 --------- d-----w c:\documents and settings\Dimos\Application Data\DMCache 2009-02-26 16:45 --------- d-----w c:\program files\Common Files\Wise Installation Wizard 2009-02-26 15:53 --------- d--h--w c:\program files\InstallShield Installation Information 2009-02-23 21:05 --------- d-----w c:\documents and settings\All Users\Application Data\PlayFirst 2009-02-18 12:23 --------- d-----w c:\program files\MoodLogic 2009-02-18 12:22 --------- d-----w c:\program files\MagicISO 2009-01-30 21:26 --------- d-----w c:\program files\temp 2009-01-24 19:19 --------- d-----w c:\documents and settings\All Users\Application Data\Sandlot Games 2009-01-24 19:04 --------- d-----w c:\program files\Google 2009-01-22 14:09 --------- d-----w c:\documents and settings\Dimos\Application Data\PC Suite 2009-01-21 18:07 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite 2009-01-21 18:06 --------- d-----w c:\program files\DIFX 2009-01-21 18:05 --------- d-----w c:\program files\PC Connectivity Solution 2009-01-20 19:26 --------- d-----w c:\documents and settings\All Users\Application Data\Installations 2009-01-16 18:32 --------- d-----w c:\program files\BS.Player ControlBar 2009-01-03 13:53 --------- d-----w c:\program files\Windows Live Safety Center 2006-01-10 16:17 56 --sha-w c:\windows\system32\0E72E4ECA7.sys . ((((((((((((((((((((((((((((( SnapShot@2009-02-27_ 4.42.02.57 ))))))))))))))))))))))))))))))))))))))))) . + 2005-10-20 18:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run] "CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run] "Logitech Hardware Abstraction Layer"="c:\program files\Common Files\Logitech\KhalShared\KHALMNPR.EXE" [2006-05-10 94208] "BluetoothAuthenticationAgent"="bthprops.cpl" [2004-08-04 c:\windows\system32\bthprops.cpl] "nMTaskBarService"="nMtsk.exe" [2003-07-22 c:\windows\nMtsk.exe] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run] "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360] c:\documents and settings\€Άœ¥ε˜\Start Menu\Programs\Startup\ VAIO Launcher.lnk - c:\program files\Sony\VAIO Launcher\Launcher.exe [2005-04-13 778240] [hkey_local_machine\software\microsoft\windows\curr entversion\explorer\ShellExecuteHooks] "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon] 2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon] 2005-01-18 14:48 73728 c:\windows\system32\VESWinlogon.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.dvsd"= c:\progra~1\COMMON~1\SONYSH~1\VideoLib\sonydv.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk] backup=c:\windows\pss\Acrobat Assistant.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk] backup=c:\windows\pss\Adobe Acrobat Speed Launcher.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk] backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Audio Filter.lnk] backup=c:\windows\pss\Audio Filter.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk] backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Service Manager.lnk] backup=c:\windows\pss\Service Manager.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk] backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^Dimos^Start Menu^Programs^Startup^VAIO Launcher.lnk] backup=c:\windows\pss\VAIO Launcher.lnkStartup [HKLM\~\startupfolder\C:^Documents and Settings^Dimos^Start Menu^Programs^Startup^Απόσπασμα οθόνης και Εκκίνηση για το OneNote 2007.lnk] backup=c:\windows\pss\Απόσπασμα οθόνης και Εκκίνηση για το OneNote 2007.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint] --a------ 2003-11-07 10:21 114688 c:\program files\Apoint\Apoint.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] --a------ 2005-02-01 23:05 339968 c:\program files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AzMixerSel] --a------ 2005-02-14 04:18 53248 c:\program files\Realtek\InstallShield\AzMixerSel.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor] --a------ 2007-08-24 06:00 33648 d:\program files\Microsoft Office\Office12\GrooveMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hcontrol] --a------ 2004-07-19 07:05 61440 c:\windows\ATK0100\Hcontrol.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager] --a------ 2003-12-22 08:38 241664 c:\program files\HP\hpcoretech\hpcmpmgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] --a------ 2003-08-04 17:28 49152 c:\program files\HP\HP Software Update\hpwuSchd.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan] --a------ 2008-01-10 22:05 932784 c:\program files\Internet Download Manager\IDMan.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISBMgr.exe] --a------ 2004-02-20 16:12 32768 c:\program files\Sony\ISB Utility\ISBMgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a------ 2005-12-20 20:54 278528 c:\program files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] --a------ 2007-01-19 12:55 5674352 c:\program files\MSN Messenger\msnmsgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a------ 2001-07-09 10:50 155648 c:\windows\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PDService.exe] -ra------ 2004-07-06 16:15 40960 c:\program files\Utimaco\SafeGuard PrivateDisk\pdservice.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Plugin Install] --a------ 2006-01-20 01:55 49152 c:\program files\QuickTime\Plugins\DeleteMe1.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a------ 2007-12-11 10:56 286720 c:\program files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\reminder] --a--c--- 2004-10-12 09:49 315392 c:\windows\Reminder.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SonyPowerCfg] --a------ 2005-01-14 18:18 184320 c:\program files\Sony\VAIO Power Management\SPMgr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Switcher.exe] --a------ 2005-01-20 22:24 167936 c:\program files\Sony\Wireless Switch Setting Utility\Switcher.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VAIO Update 2] --a------ 2005-01-14 15:43 151552 c:\program files\Sony\VAIO Update 2\VAIOUpdt.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] --a------ 2006-10-25 07:37 35328 c:\program files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mouse Suite 98 Daemon] --a------ 2002-03-14 18:46 45056 c:\windows\system32\ico.exe [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusOverride"=dword:00000001 "FirewallOverride"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List] "c:\\Program Files\\iTunes\\iTunes.exe"= "c:\\Program Files\\Mozilla Firefox\\firefox.exe"= "%windir%\\Network Diagnostic\\xpnetdiag.exe"= "d:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "d:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "d:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "c:\\Program Files\\uTorrent\\uTorrent.exe"= "c:\\WINDOWS\\system32\\sessmgr.exe"= "c:\\Program Files\\MSN Messenger\\msnmsgr.exe"= "c:\\Program Files\\MSN Messenger\\livecall.exe"= "c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\English\\setup.exe"= "d:\\Program Files\\Sports Interactive\\Football Manager 2009\\fm.exe"= "c:\\Program Files\\Skype\\Phone\\Skype.exe"= [HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\GloballyOpenPorts\List] "3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009 R1 PrivateDisk;PrivateDisk;c:\windows\system32\driver s\privatediskm.sys [2004-07-06 45627] R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-02-17 8944] R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-02-17 55024] R2 AdobeActiveFileMonitor;Adobe Active File Monitor;c:\program files\Adobe\Photoshop Elements 3.0\PhotoshopElementsFileAgent.exe [2004-10-04 98304] R2 MSSQL$VAIO_VEDB;MSSQL$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB --> c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe -sVAIO_VEDB [?] R2 PhotoshopElementsDeviceConnect;Photoshop Elements Device Connect;c:\program files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe [2004-10-04 118784] R3 SPI;Sony Programmable I/O Control Device;c:\windows\system32\drivers\SonyPI.sys [2005-03-02 71961] S3 netModUSBService;Service for netMod USB CAPI Driver;c:\windows\system32\drivers\nMUSB.sys [2007-12-06 61648] S3 pelmouse;Mouse Suite Driver;c:\windows\system32\drivers\PELMOUSE.SYS [2005-03-02 17251] S3 pelusblf;USB Mouse Low Filter Driver;c:\windows\system32\drivers\PELUSBlf.SYS [2005-03-02 7520] S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-02-17 7408] S3 SQLAgent$VAIO_VEDB;SQLAgent$VAIO_VEDB;c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB --> c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlagent.EXE -i VAIO_VEDB [?] S3 VVBETHERNET;CopperJet Virtual Ethernet driver;c:\windows\system32\drivers\vvbeth.sys [2006-08-14 16534] S3 vvbususb;CopperJet USB VvBus driver;c:\windows\system32\drivers\vvbususb.sys [2006-08-14 51304] . Contents of the 'Scheduled Tasks' folder 2009-02-16 c:\windows\Tasks\AppleSoftwareUpdate.job - c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 11:34] 2009-02-16 c:\windows\Tasks\WebReg 20090216184622.job - c:\program files\HP\Digital Imaging\bin\hpqwrg.exe [2003-07-07 01:43] . . ------- Supplementary Scan ------- . uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8 mStart Page = hxxp://www.forthnet.gr uSearchURL,(Default) = hxxp://www.google.com/search?q=%s IE: &Download with &DAP IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200 IE: Download &all with DAP IE: Download All by FlashGet IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm IE: Download using FlashGet IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm IE: E&?a???? st? Microsoft Excel IE: E&xport to Microsoft Excel IE: E&ξαγωγή στο Microsoft Excel IE: Transfer by Image Converter 2 - c:\program files\Sony\Image Converter 2\menu.htm Trusted Zone: sony-europe.com Trusted Zone: sonystyle-europe.com Trusted Zone: vaio-link.com FF - ProfilePath - c:\documents and settings\Dimos\Application Data\Mozilla\Firefox\Profiles\utensmu9.Default User\ FF - prefs.js: browser.search.selectedEngine - Google FF - prefs.js: browser.startup.homepage - www.in.gr FF - component: c:\documents and settings\Dimos\Application Data\IDM\idmmzcc2\components\idmmzcc.dll FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPJava11.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPJava12.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPJava13.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPJava14.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPJava32.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPJPI150_01.dll FF - plugin: c:\program files\Java\jre1.5.0_01\bin\NPOJI610.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npqtplugin8.dll FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll FF - plugin: c:\program files\QuickTime\Plugins\npqtplugin8.dll FF - plugin: d:\program files\Picasa3\npPicasa3.dll . ************************************************** ************************ catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-02-27 14:24:42 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************** ************************ . --------------------- LOCKED REGISTRY KEYS --------------------- [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED6077 9-4DE2-4E07-B862-974CA4FF2E9C}] @Denied: (Full) (Everyone) "scansk"=hex(0):23,a5,ff,8f,b1,38,b9,56,6e,b2,2a,5 7,03,7b,9e,71,1f,84,07,84,39, ef,55,bd,46,e4,54,98,e3,b3,35,1c,3d,7f,b6,ae,a0,0c ,00,9d,00,00,00,00,00,00,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E916 4-324D-4A2E-A46D-0165FB2000EC}] @Denied: (Full) (Everyone) "scansk"=hex(0):e2,8e,b7,4c,03,92,6f,05,76,f3,5f,8 4,3b,d2,2f,89,2d,20,b4,d6,13, 06,de,eb,a0,11,30,90,f3,c3,21,64,5a,ab,39,2c,21,ea ,6c,06,00,00,00,00,00,00,\ [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{8865463 7-b9f8-44a7-9635-a67a5dc288b4}] @Denied: (Full) (Everyone) "Model"=dword:0000016d "Therad"=dword:00000016 [HKEY_LOCAL_MACHINE\software\Classes\CLSID\{dd90e16 5-8935-4e66-8748-b5718e741f21}] @Denied: (Full) (Everyone) "Model"=dword:00000023 "Therad"=dword:00000016 . --------------------- DLLs Loaded Under Running Processes --------------------- - - - - - - - > 'winlogon.exe'(1064) c:\program files\SUPERAntiSpyware\SASWINLO.dll c:\windows\system32\Ati2evxx.dll c:\windows\system32\VESWinlogon.dll . ------------------------ Other Running Processes ------------------------ . c:\windows\system32\ati2evxx.exe c:\program files\Intel\Wireless\Bin\EvtEng.exe c:\program files\Intel\Wireless\Bin\S24EvMon.exe c:\windows\system32\ati2evxx.exe c:\program files\Microsoft SQL Server\MSSQL$VAIO_VEDB\Binn\sqlservr.exe c:\windows\system32\rundll32.exe c:\program files\Intel\Wireless\Bin\RegSrvc.exe c:\windows\system32\wdfmgr.exe c:\program files\Sony\VAIO Event Service\VESMgr.exe c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe c:\program files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe c:\program files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe . ************************************************** ************************ . Completion time: 2009-02-27 14:28:31 - machine was rebooted [Dimos] ComboFix-quarantined-files.txt 2009-02-27 12:28:29 ComboFix2.txt 2009-02-27 02:43:29 Pre-Run: 1,081,454,592 bytes free Post-Run: 974,618,624 bytes free 288 --- E O F --- 2009-01-22 14:02:35 |
|
#13
27th Feb 2009, 09:04
|
|||
|
|||
Cannot Update Virus and Spyware software on My Pc.
---------- Download ATF Cleaner by Atribune to your Desktop. Alternate download link Note: Vista users must use Run As Administrator
Note that your system will run slower for a reboot or two after having used this tool so don't panic. ---------- Download OTCleanIt.exe and save it to your Desktop.
Important: Restart the computer before continuing. ---------- Use the Kaspersky Lab Online Scanner In Microsoft Windows Vista, you must open the Web browser using the Run as Administrator command. From the Desktop right click the icon to open the browser and choose Run as Administrator.
When the scan is done, in the Scan is complete window, any infection is displayed. There is no option to clean/disinfect, however, we need to analyze the information on the report. To obtain the report: Click on: Save Report As
 Copy and paste the Kaspersky Online Scanner Report in your next reply. Note for Internet Explorer 7 users: If at any time you have trouble viewing the accept button of the license, click on the Zoom tool located at the bottom right of the IE window and set the zoom to 75%. Once the license is accepted, reset to 100%.
__________________
|
|
#14
28th Feb 2009, 00:06
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
I was late because mozilla crashed when i tried open a window when the scan was at 86%,so I started it all over... Here are the results:
-------------------------------------------------------------------------------- KASPERSKY ONLINE SCANNER 7 REPORT Saturday, February 28, 2009 Operating System: Microsoft Windows XP Professional Service Pack 2 (build 2600) Kaspersky Online Scanner 7 version: 7.0.25.0 Program database last update: Saturday, February 28, 2009 01:19:06 Records in database: 1854238 -------------------------------------------------------------------------------- Scan settings: Scan using the following database: extended Scan archives: yes Scan mail databases: yes Scan area - My Computer: C:\ D:\ E:\ F:\ Scan statistics: Files scanned: 115215 Threat name: 3 Infected objects: 3 Suspicious objects: 0 Duration of the scan: 02:54:33 File name / Threat name / Threats count C:\Documents and Settings\Dimos\My Documents\Setups\dap74.exe Infected: not-a-virus:AdWare.Win32.Dap.h 1 C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\Kaspersky Solution.exe Infected: Trojan.Win32.Agent.rzw 1 C:\Program Files\mIRC\mirc.exe Infected: not-a-virus:Client-IRC.Win32.mIRC.621 1 The selected area was scanned. |
|
#15
28th Feb 2009, 09:47
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
Delete this folder C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\
Uninstall Live Update (Symantec) Before we continue download and install a free antivirus. Remember to only install one antivirus! 1) Avast! Home Free Edition 2) AVG Free Edition 3) Avira AntiVir Personal How is the computer running now?
__________________
|
|
#16
28th Feb 2009, 13:33
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
I installed Avast! Home Free Edition. I think it runs normally,and i can also update normally from now on.Anything else i should do?
|
|
#17
28th Feb 2009, 13:44
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
Use the Secunia Software Inspector to check for out of date software.
Out of date software has security vulnerabilities that malware can exploit.
---------- Go to Microsoft Windows Update and get all critical updates. ---------- Make sure all of your security programs are up to date and run scans with them regularly. I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free. SpywareBlaster - Secure your Internet Explorer to make it harder for these ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox. * Using SpywareBlaster to protect your computer from Spyware and Malware * If you don't know what ActiveX controls are, see here Check out Keeping Yourself safe On The Web for tips and free tools to keep you safe in the future. Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.
__________________
|
|
#18
28th Feb 2009, 19:43
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
Thank you for your help mate.I really appreciated it!
|
|
#19
28th Feb 2009, 19:52
|
|||
|
|||
|
Cannot Update Virus and Spyware software on My Pc.
Your welcome.
Safe surfing...
__________________
|
