What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] Fake Alert

3 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Sorry I wasnt so fast in posting my combo fix log file. I had a new topic running on this , just finished running combo fix and went to post it only to find out my topics has been discontinued. so with that. here is my combo fix log, LDtate was the one assigned to my topic. computer seems to be doing fine, just at various times the scan page comes up and scans my system only to show the following 3 pics of pages I have uploaded. I always let it finish its scan then close out of the three pages by clicking the red X top right corner. after closing out of the three pages one last pages comes up that is all white, close out of it and go about my biz.

Attachments:

Post #3
ComboFix 10-02-02.04 - Ric 02/10/2010 8:27.1.4 - x86
Microsoft® Windows Vista™ Home Premium 6.0.6002.2.1252.1.1033.18.3069.1943 [GMT -5:00]
Running from: c:\users\[removed]\Desktop\ComboFix.exe
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\$recycle.bin\S-1-5-21-2452813874-13610982-754306487-500
c:\$recycle.bin\S-1-5-21-2773397201-2855733099-4214572315-500
c:\windows\COUPON~1.OCX
c:\windows\CouponPrinter.ocx

.
((((((((((((((((((((((((( Files Created from 2010-01-10 to 2010-02-10 )))))))))))))))))))))))))))))))
.

2010-02-10 13:31 . 2010-02-10 13:31 ——– d—–w- c:\users\Ric\AppData\Local\temp
2010-02-10 13:31 . 2010-02-10 13:31 ——– d—–w- c:\users\Default\AppData\Local\temp
2010-02-10 13:25 . 2010-02-10 13:26 ——– d—–w- C:\32788R22FWJFW
2010-02-01 13:36 . 2010-02-01 13:47 ——– d—–w- c:\users\Ric\AppData\Roaming\ImgBurn
2010-02-01 13:32 . 2010-02-01 13:32 ——– d—–w- c:\program files\ImgBurn
2010-01-31 15:13 . 2010-01-31 15:13 ——– d—–w- c:\users\Ric\Movies
2010-01-30 18:42 . 2010-01-27 05:08 85504 —-a-w- c:\windows\system32\ff_vfw.dll
2010-01-30 18:42 . 2010-01-30 18:42 ——– d—–w- c:\program files\ffdshow
2010-01-30 18:42 . 2010-01-30 18:42 ——– d—–w- c:\users\Ric\AppData\Roaming\Yahoo!
2010-01-30 18:42 . 2010-01-30 18:42 ——– d—–w- c:\programdata\Yahoo! Companion
2010-01-30 18:42 . 2010-01-30 18:42 ——– d—–w- c:\program files\Yahoo!
2010-01-30 03:58 . 2010-01-30 03:58 509552 —-a-w- c:\programdata\Google\Google Toolbar\Update\gtbA1C9.tmp.exe
2010-01-29 15:37 . 2010-02-10 00:20 ——– d—–w- c:\users\Ric\AppData\Local\Adobe
2010-01-29 14:51 . 2010-01-29 14:51 ——– d—–w- c:\program files\ERUNT
2010-01-29 03:37 . 2010-01-29 03:37 388096 —-a-r- c:\users\Ric\AppData\Roaming\Microsoft\Installer\{0761C9A8-8F3A-4216-B4A7-B7AFBF24A24A}\HiJackThis.exe
2010-01-29 03:37 . 2010-01-29 03:37 ——– d—–w- c:\program files\TrendMicro
2010-01-28 15:07 . 2010-01-07 21:07 38224 —-a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-01-28 15:07 . 2010-01-28 15:07 ——– d—–w- c:\program files\Malwarebytes' Anti-Malware
2010-01-28 15:07 . 2010-01-07 21:07 19160 —-a-w- c:\windows\system32\drivers\mbam.sys
2010-01-28 02:28 . 2010-01-28 02:28 3 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\delfile.sys
2010-01-28 02:18 . 2010-01-28 02:18 52 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\runddlkey.dll
2010-01-27 23:55 . 2010-01-27 23:55 80 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\eb.exe
2010-01-27 22:41 . 2010-01-27 22:41 71 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\PE.exe
2010-01-27 22:19 . 2010-01-27 22:19 9 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\cb.sys
2010-01-27 22:19 . 2010-01-27 22:19 76 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\ANTIGEN.drv
2010-01-27 22:19 . 2010-01-27 22:19 57 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\ppal.drv
2010-01-27 22:19 . 2010-01-27 22:19 57 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\PE.dll
2010-01-27 22:19 . 2010-01-27 22:19 3 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\exec.drv
2010-01-27 22:19 . 2010-01-27 22:19 44 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\tjd.exe
2010-01-27 22:19 . 2010-01-27 22:19 14 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\hymt.dll
2010-01-27 22:18 . 2010-01-27 23:55 31 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\exec.dll
2010-01-27 22:18 . 2010-01-27 22:18 16 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\gid.drv
2010-01-27 22:18 . 2010-01-27 22:18 60 —-a-w- c:\users\Ric\AppData\Roaming\Microsoft\Windows\Recent\FW.exe
2010-01-27 22:18 . 2010-01-27 22:18 ——– d-sh–w- c:\programdata\LPCBCG
2010-01-27 22:18 . 2010-01-28 04:05 ——– d-sh–w- c:\programdata\95a6f49
2010-01-26 17:09 . 2010-01-26 17:09 ——– d—–w- c:\users\Ric\AppData\Roaming\Malwarebytes
2010-01-26 17:09 . 2010-01-26 17:09 ——– d—–w- c:\programdata\Malwarebytes
2010-01-26 12:54 . 2010-01-26 12:54 ——– d—–w- c:\users\Ric\AppData\Local\Threat Expert
2010-01-24 14:57 . 2010-01-24 14:57 ——– d—–w- c:\programdata\SUPERAntiSpyware.com
2010-01-24 14:57 . 2010-01-27 14:58 ——– d—–w- c:\users\Ric\AppData\Roaming\SUPERAntiSpyware.com
2010-01-24 14:57 . 2010-01-27 14:57 ——– d—–w- c:\program files\SUPERAntiSpyware
2010-01-20 12:56 . 2010-01-22 12:14 ——– d—–w- c:\program files\Common Files\Adobe
2010-01-17 22:49 . 2010-01-17 22:49 ——– d—–w- c:\program files\Common Files\Symantec Shared
2010-01-17 19:03 . 2010-01-19 21:44 ——– d—–w- c:\programdata\Norton
2010-01-17 19:03 . 2010-01-19 21:44 ——– d—–w- c:\programdata\Symantec
2010-01-17 19:03 . 2010-01-17 19:03 ——– d—–w- c:\programdata\NortonInstaller
2010-01-15 13:50 . 2010-01-15 13:50 23456 —-a-w- c:\windows\system32\drivers\DrvAgent32.sys
2010-01-15 13:50 . 2010-01-27 15:02 ——– d—–w- c:\users\Ric\AppData\Local\eSupport.com
2010-01-15 13:43 . 2010-01-15 13:43 ——– d—–w- c:\windows\system32\vmm32
2010-01-15 01:38 . 2010-01-15 01:37 411368 —-a-w- c:\windows\system32\deploytk.dll
2010-01-14 14:19 . 2010-01-14 14:19 ——– d—–w- c:\users\Ric\AppData\Local\DNA
2010-01-14 14:19 . 2010-02-10 13:30 ——– d—–w- c:\users\Ric\AppData\Roaming\DNA
2010-01-14 14:19 . 2010-01-14 14:19 ——– d—–w- c:\users\Ric\Program Files
2010-01-13 12:01 . 2009-10-19 13:38 156672 —-a-w- c:\windows\system32\t2embed.dll
2010-01-13 12:01 . 2009-10-19 13:35 72704 —-a-w- c:\windows\system32\fontsub.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2010-02-10 08:18 . 2006-11-02 11:18 ——– d—–w- c:\program files\Windows Mail
2010-02-08 17:00 . 2008-07-07 16:17 ——– d—–w- c:\programdata\Dl_cats
2010-02-05 02:21 . 2008-06-29 15:44 ——– d—–w- c:\programdata\Roxio
2010-01-29 13:59 . 2010-01-07 18:40 ——– d—–w- c:\users\Ric\AppData\Roaming\AVS4YOU
2010-01-22 08:17 . 2009-10-28 22:28 ——– d—–w- c:\program files\Microsoft Silverlight
2010-01-22 00:56 . 2009-10-17 01:44 143976 —-a-w- c:\users\Ric\AppData\Roaming\Move Networks\uninstall.exe
2010-01-22 00:56 . 2009-10-17 01:44 ——– d—–w- c:\users\Ric\AppData\Roaming\Move Networks
2010-01-22 00:56 . 2009-10-15 00:50 5642688 —-a-w- c:\users\Ric\AppData\Roaming\Move Networks\plugins\npqmp071701000002.dll
2010-01-17 16:03 . 2009-10-28 22:07 ——– d—–w- c:\program files\DivX
2010-01-17 14:08 . 2008-12-19 16:47 ——– d—–w- c:\program files\Jasc Software Inc
2010-01-15 13:43 . 2008-06-22 21:34 ——– d—–w- c:\program files\Dell
2010-01-15 01:37 . 2008-06-22 21:26 ——– d—–w- c:\program files\Java
2010-01-14 16:12 . 2009-10-04 16:29 181120 ——w- c:\windows\system32\MpSigStub.exe
2010-01-09 01:12 . 2008-06-22 21:34 ——– d—–w- c:\program files\Google
2010-01-09 01:11 . 2010-01-09 01:11 ——– d—–w- c:\program files\Common Files\DivX Shared
2010-01-07 21:45 . 2008-06-29 15:44 ——– d—–w- c:\users\Ric\AppData\Roaming\Roxio
2010-01-07 18:52 . 2010-01-07 18:39 ——– d—–w- c:\program files\AVS4YOU
2010-01-07 18:47 . 2010-01-07 18:47 18816 —-a-w- c:\windows\system32\drivers\dvd43llh.sys
2010-01-07 18:47 . 2010-01-07 18:47 ——– d—–w- c:\program files\dvd43
2010-01-07 18:40 . 2010-01-07 18:40 ——– d—–w- c:\programdata\AVS4YOU
2010-01-07 18:40 . 2010-01-07 18:40 ——– d—–w- c:\program files\Common Files\AVSMedia
2010-01-07 18:32 . 2009-11-09 23:08 ——– d—–w- c:\program files\SlySoft
2010-01-07 17:59 . 2009-11-09 23:18 ——– d—–w- c:\program files\Elaborate Bytes
2010-01-02 14:13 . 2009-12-24 21:21 680 —-a-w- c:\users\Ric\AppData\Local\d3d9caps.dat
2010-01-02 06:38 . 2010-01-22 03:30 916480 —-a-w- c:\windows\system32\wininet.dll
2010-01-02 06:32 . 2010-01-22 03:30 71680 —-a-w- c:\windows\system32\iesetup.dll
2010-01-02 06:32 . 2010-01-22 03:30 109056 —-a-w- c:\windows\system32\iesysprep.dll
2010-01-02 04:57 . 2010-01-22 03:30 133632 —-a-w- c:\windows\system32\ieUnatt.exe
2009-12-24 20:08 . 2009-12-24 20:08 690952 —-a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2009-12-24 13:40 . 2009-12-24 13:40 0 —-a-w- c:\windows\ativpsrm.bin
2009-12-18 11:42 . 2009-12-03 21:50 ——– d—–w- c:\program files\Common Files\Adobe AIR
2009-12-18 11:42 . 2009-12-03 21:50 38784 —-a-w- c:\users\Ric\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-12-18 11:42 . 2009-12-03 21:50 38784 —-a-w- c:\users\Default\AppData\Roaming\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-12-14 19:15 . 2009-12-14 19:15 2146304 —-a-w- c:\windows\system32\GPhotos.scr
2009-12-14 15:42 . 2009-12-14 15:42 ——– d—–w- c:\program files\SimulationExams
2009-12-14 15:42 . 2009-12-14 15:42 73216 —-a-w- c:\windows\ST6UNST.EXE
2009-12-14 15:42 . 2009-12-14 15:42 249856 ——w- c:\windows\Setup1.exe
2009-12-13 11:54 . 2009-12-13 11:54 ——– d—–w- c:\program files\CCleaner
2009-12-11 11:43 . 2010-02-10 05:06 302080 —-a-w- c:\windows\system32\drivers\srv.sys
2009-12-11 11:43 . 2010-02-10 05:06 98816 —-a-w- c:\windows\system32\drivers\srvnet.sys
2009-12-08 20:01 . 2010-02-10 05:06 904776 —-a-w- c:\windows\system32\drivers\tcpip.sys
2009-12-08 20:01 . 2010-02-10 05:06 3600456 —-a-w- c:\windows\system32\ntkrnlpa.exe
2009-12-08 20:01 . 2010-02-10 05:06 3548216 —-a-w- c:\windows\system32\ntoskrnl.exe
2009-12-08 17:26 . 2010-02-10 05:06 30720 —-a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-12-04 18:30 . 2010-02-10 05:06 12288 —-a-w- c:\windows\system32\tsbyuv.dll
2009-12-04 18:29 . 2010-02-10 05:06 1314816 —-a-w- c:\windows\system32\quartz.dll
2009-12-04 18:28 . 2010-02-10 05:06 22528 —-a-w- c:\windows\system32\msyuv.dll
2009-12-04 18:28 . 2010-02-10 05:06 31744 —-a-w- c:\windows\system32\msvidc32.dll
2009-12-04 18:28 . 2010-02-10 05:06 123904 —-a-w- c:\windows\system32\msvfw32.dll
2009-12-04 18:28 . 2010-02-10 05:06 13312 —-a-w- c:\windows\system32\msrle32.dll
2009-12-04 18:28 . 2010-02-10 05:06 82944 —-a-w- c:\windows\system32\mciavi32.dll
2009-12-04 18:28 . 2010-02-10 05:06 50176 —-a-w- c:\windows\system32\iyuv_32.dll
2009-12-04 18:27 . 2010-02-10 05:06 91136 —-a-w- c:\windows\system32\avifil32.dll
2009-12-04 15:56 . 2010-02-10 05:06 212992 —-a-w- c:\windows\system32\drivers\mrxsmb10.sys
2009-12-04 15:56 . 2010-02-10 05:06 105984 —-a-w- c:\windows\system32\drivers\mrxsmb.sys
2009-11-29 00:26 . 2009-11-29 00:26 484976 —-a-w- c:\programdata\Google\Google Toolbar\Update\gtb8AFB.tmp.exe
2009-11-28 03:45 . 2009-11-28 03:45 484976 —-a-w- c:\programdata\Google\Google Toolbar\Update\gtb5D7.tmp.exe
2009-11-17 08:18 . 2006-11-02 10:25 665600 —-a-w- c:\windows\inf\drvindex.dat
2008-07-19 21:42 . 2008-07-07 16:24 168 –sha-r- c:\windows\System32\B4AADF26EE.sys
2008-06-23 01:11 . 2008-06-23 01:11 8192 –sha-w- c:\windows\Users\Default\NTUSER.DAT
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ehTray.exe"="c:\windows\ehome\ehTray.exe" [2008-01-21 125952]
"ISUSPM"="c:\program files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-03-20 213936]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-06-22 68856]
"BitTorrent DNA"="c:\users\Ric\Program Files\DNA\btdna.exe" [2010-01-14 323392]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-21 202240]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-21 1008184]
"ECenter"="c:\dell\E-Center\EULALauncher.exe" [2008-02-29 17920]
"RtHDVCpl"="RtHDVCpl.exe" [2007-05-11 4452352]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"Google Desktop Search"="c:\program files\Google\Google Desktop Search\GoogleDesktop.exe" [2008-06-22 29744]
"dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe" [2008-03-11 16384]
"dldomon.exe"="c:\program files\Dell 968 AIO Printer\dldomon.exe" [2007-10-05 455920]
"MemoryCardManager"="c:\program files\Dell 968 AIO Printer\memcard.exe" [2007-10-05 410864]
"Dell 968 AIO Printer Fax Server"="c:\program files\Dell 968 AIO Printer\fm3032.exe" [2007-10-05 312560]
"RoxWatchTray"="c:\program files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2006-08-10 221184]
"DMXLauncher"="c:\program files\Roxio\Media Experience\DMXLauncher.exe" [2006-08-14 102400]
"RoxioDragToDisc"="c:\program files\Roxio\Drag-to-Disc\DrgToDsc.exe" [2006-07-31 1116920]
"dvd43"="c:\program files\dvd43\dvd43_tray.exe" [2009-10-24 827904]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2010-01-15 149280]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-12-22 35760]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-12-11 948672]
"Malwarebytes Anti-Malware (reboot)"="c:\program files\Malwarebytes' Anti-Malware\mbam.exe" [2010-01-07 1394000]

c:\users\Ric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
easy gadget.lnk - c:\program files\easy gadget\easy gadget.exe [2009-12-11 95232]

c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2008-6-22 50688]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorUser"= 2 (0x2)
"EnableUIADesktopToggle"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
2008-06-22 21:38 10536 —-a-w- c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GoogleDesktopNetwork3.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"VistaSp2"=hex(B):95,f3,00,ee,e3,54,ca,01

R2 AMD External Events Utility;AMD External Events Utility;c:\windows\System32\atiesrxx.exe [4/29/2009 2:07 AM 176128]
R2 dldo_device;dldo_device;c:\windows\system32\dldocoms.exe -service –> c:\windows\system32\dldocoms.exe -service [?]
R3 HCW85BDA;Hauppauge WinTV 885 Video Capture;c:\windows\System32\drivers\HCW85BDA.sys [6/22/2008 8:12 PM 1034496]
S2 dldoCATSCustConnectService;dldoCATSCustConnectService;c:\windows\System32\spool\drivers\w32x86\3\dldoserv.exe [10/5/2007 8:30 AM 99568]
S2 gupdate1ca90c8b96bc860;Google Update Service (gupdate1ca90c8b96bc860);c:\program files\Google\Update\GoogleUpdate.exe [1/8/2010 8:11 PM 133104]
S3 DrvAgent32;DrvAgent32;c:\windows\System32\drivers\DrvAgent32.sys [1/15/2010 8:50 AM 23456]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [1/20/2008 9:23 PM 21504]
S4 AutoSyncService;Memeo AutoSync ;c:\program files\Memeo\AutoSync\MemeoService.exe [7/6/2007 4:28 PM 31768]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
LocalServiceAndNoImpersonation REG_MULTI_SZ FontCache
.
Contents of the 'Scheduled Tasks' folder

2010-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-09 01:11]

2010-02-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-09 01:11]
.
.
——- Supplementary Scan ——-
.
uStart Page = https://login.yahoo.com/config/login_verify…src=ym&rl;=1
IE: Add to Google Photos Screensa&ver; - c:\windows\system32\GPhotos.scr/200
IE: Google Sidewiki… - c:\program files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_96D6FF0C6D236BF8.dll/cmsidewiki.html
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2010-02-10 08:31
Windows 6.0.6002 Service Pack 2 NTFS

scanning hidden processes …

scanning hidden autostart entries …

scanning hidden files …

scan completed successfully
hidden files: 0

**************************************************************************
.
——————— LOCKED REGISTRY KEYS ———————

[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2010-02-10 08:33:45
ComboFix-quarantined-files.txt 2010-02-10 13:33

Pre-Run: 331,522,523,136 bytes free
Post-Run: 330,411,073,536 bytes free

- - End Of File - - FF89DD097E3EBD1C83CE824CEA392DA4
Post #6
Please download Malwarebytes' Anti-Malware to your desktop.

  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform quick scan, then click Scan.
    [external image: Posted Image]
  • When the scan is complete, click OK, then Show Results to view the results.
  • [external image: Posted Image]
  • Then click Remove Selected .
  • When completed, a log will open in Notepad. Please save it to a convenient location and post the results.
  • Note: If you receive a notice that some of the items couldn't be removed, that they have been added to the delete on reboot list, please reboot.


Also please describe how your computer behaves at the moment.


Please don't attach the scans / logs, use "copy/paste". .
Post #7
Malwarebytes' Anti-Malware 1.44 Database version: 3729 Windows 6.0.6002 Service Pack 2 Internet Explorer 8.0.6001.18882 2/12/2010 7:52:04 AM mbam-log-2010-02-12 (07-52-04).txt Scan type: Quick Scan Objects scanned: 106753 Time elapsed: 3 minute(s), 51 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected) system runs fine, just at times comes up with the fake scan screen and scans system, I close out of the screens as the 3 pics before and go about my business
Post #8
I'm not seeing bad yet.

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Click Yes at the next prompt for Optional Scan.
  • Save both reports to your desktop.
—————————————————

Please include the contents of the following in your next reply:

DDS.txt

Please attach the second file; Attach.txt. To attach a file, do the following:
  • Under the reply panel is the Attachments Panel
  • Browse for the attachment file you want to upload, then click the green Upload button
  • Once it has uploaded, click the Manage Current Attachments drop down box
  • Click on [external image: Posted Image] to insert the attachment into your post

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI