Weird Firewall Logs [Solved]

Its normal for uninstallers to have "unverified publishers?

Its normal for uninstallers to have "unverified publishers?

If you are referring to the uninstallers that we used to remove our tools, yes that is normal. No problem.

Yes, that and somother programs such as java and sophos. Kinda paranoid o0. But that's kinda good cus how else would I have known I had malware, none of the programs I used detected anything. Oh and my wireless network switching problem was fixed btw. Now I just have to be bale to connect to the intranet but that's a simpler problem. Question: Combfix change the DNS? I saw on my firefox adress bar something relating to the DNS. I check DNS settings for everything maybe I imagined it since its not in the URL history anymore DO you see my info if I paypal u like my name address etc? Not that you would care to have them lol (i hope o0)

Yes, that and somother programs such as java and sophos. Kinda paranoid o0.
But that's kinda good cus how else would I have known I had malware, none of the programs I used detected anything.

That should not be a problem.

Question: Combfix change the DNS?

Yes…that is part of the normal operation.

Any other problems?

Any recommendations on progams that reduce startup time? I see malware bytes has one. It takes me like 2 minutes for my LAN to get connection and stuff. I check the firewall and it showed 122 connections, that seemed excessive. Firefox totals 5 Megabytes of downloaded data compared to 1.60 sent. Anyways i guess I could research the connections just in case or if Online Armor is letting them through its fine based on its definitions? There was funky stuff like connection to Facebook in Ireland, im guessing cookie. An the oaui.exe ( its a legit program but the fact its connecting to german servers seems off) being connected to German servers.

Yes, Malwarebytes program StartupLite is good.

An the oaui.exe ( its a legit program but the fact its connecting to german servers seems off) being connected to German servers.

That is a file from Online Armor and nothing to worry about.

Do you think using a back up to restore my computer would be a good idea? It just slow sometimes when loading and shutting off, do you think this will solve the problem or will it slow down again this much when I install trend micro, Malwarebytes and online Armour. Maybe I can just clean of programs and delete manually registry keys leftover from the programs?

Hi, There are many reasons that a system could be slow and malware is only one of them. You can try to remove programs that you know that you do not use and this may help yes. The logs that you gave me last did not have any malware jumping out at me though so that is a plus. The combination that I use myself for security is Avast, Malwarebytes and the Windows Firewall. That's it.

Glad this topic is not closed, IDK why. But i downloaded the MBytes Rootkit detector and upon initiating it found a registry key that it believed it was caused by a rootkit. I ignored it. Sorry I dont have the name Ill get it and run a scan

Let's give it a run…

Malwarebytes Anti-Rootkit

Please download Malwarebytes Anti-Rootkit and save it to your desktop.

• Be sure to print out and follow the instructions provided on that same page.
• Caution: This is a beta version so please be sure to read the disclaimer and back up all your data before using.
• Scan your system for malware
• If malware is found, please go to the MBAR folder and then copy/paste the contents of the MBAR-log-***.txt file to your next reply.

If no malware is found please let me know.
———-

Nerp, no malware >_> I see that Appinit_Dllls is a erm whats the word. Idk…. Anyways its like a gerneral detection thing that MB uses. and just about any programs can use that. Its all clean C:\Windows\System32\nvinitx.dll C:\PROGRA~2\Sophos\SOPHOS~1\sophos_detoured_x64.dll < that was the data >_> one last question :3 Can i go around manually deleting registry key's for software I deleted that is left behind in the registry and other folders in the computer? SYS:MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS

Lets not discuss money but. DO you see my info if I paypal u like my name address etc? Not that you would care to have them lol (i hope o0) Cus my rebate cards aint workin.

Hi,

Good to hear that your system is running well.

Can i go around manually deleting registry key's for software I deleted that is left behind in the registry and other folders in the computer?

I would not advise you to do that unless you are absolutely certain about it. If you choose to do so be sure to make a backup of your registry prior to doing so in case something goes South. I will give you a good registry backup tool below with its instructions.
———–

In regards to your second question, no…I don't believe that I do see anything. I believe that it is just what you have filled out. Thanks for the thought.
——-

Here are the instructions for backing up your registry if you decide to jump in and try to manually remove some stragglers.

[external image: Posted Image] Tweaking.com Registry Backup

• Download the tool found here to your Desktop so it is easy to find.
• Double click on the file you just downloaded to install it to your system.
  
• Once the tool is installed, double-click on the Tweaking.com Registry Backup icon
  (**Note** The tool should automatically open to the Backup Registry tab).
  
  [external image: Posted Image]
  
• Press Backup Now
• When the back up is complete, the tool will tell you that Successful */* Files Backed Up
• You have now successfully backed up your Registry.

Since this issue appears to be resolved … this Topic has been closed. Glad we could be of assistance.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please follow the instructions here http://forums.whatthetech.com/you_Infected_t106388.html
and start a New Topic.