AV: COMODO Antivirus *Enabled /Updated* {A7500527-8708-6548-7035-7F679C5FCEA5}
From the first run of combofix it shows that comodo was not disabled and is obviously interfeering with combofix,if you cannot disable it properly you will have to uninstall it temporarily until we are finished here.
Then do the following
Click Start …select Run from the menu. Copy and paste the following into the text entry box:Combofix /Uninstall Click the OK button. (See image below as reference.) 🖼 Click to load external image (Posted Image)
Then download a new copy of combofix and post the new log.
Link 1
Link 2
Is it safe to uninstall COMODO? i've just logged in and again it's popped up twice to ask to allow or block.
If you can't disable it properly you will have to uninstall it or else we can't get combofix to run,just stay off the internet apart from coming here.
I uninstalled COMODO, the computer restarted, i logged in, Internet explorer came on instantly and then the screen was covered with a message from
cyber-metropolitan-police.co.uk saying my pc has been locked untill i pay £100.
I went on my sisters laptop to see what this was (obviously scared out of my mind) and found out it's a trojon scam are something.
My pc has 3 user accounts and this is only happening to mine. should i install COMODO, do a scan?
Update malwarebytes and run a quick scan.
Update malwarebytes and run a quick scan.
On my user account or one of the others
One that works,malwarebytes scans all accounts.
Did the scan on another account.
Log
Malwarebytes Anti-Malware 1.60.0.1800
www.malwarebytes.org
Database version: v2012.01.21.01
Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 8.0.6001.19170
VJones :: HOME-PC [administrator]
21/01/2012 14:15:40
mbam-log-2012-01-21 (14-15-40).txt
Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 238659
Time elapsed: 4 minute(s), 57 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 2
C:\Users\Ultimo Lee\AppData\Local\temp\0.7549995866781165.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Users\Ultimo Lee\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\0.7549995866781165.exe.lnk (Backdoor.Agent) -> Quarantined and deleted successfully.
(end)
Ok that got rid of the threat that comodo was flagging,can you now follow the instructions for combofix in post 29.
On this account or the problem account? and after uninstalling Combofix and reinstalling and doing the scan should i reinstall COMODO?
Any working account,do not reinstall comodo until i tell you to.
I got
"windows cannot find 'Combofix.' Make Sure you typed the name correctly, and then try again."
Right click on combofix.,select rename,rename it to uninstall,doble click on it and it should uninstal.
