[Closed] ntde1ect.com

Dear Sirs, Our desktop computer which is in other home has given the warning entitled "ntde1ect.com" from my for about 1 week. I checked it with avast antivirus free program. The antivirus program could not find any virus. Spybot - Search & Destroy could not find any spyware and malware. This computer also has given "dns error". the internet explorer is not running now. What should I do? Please help me…. Thanks in advance.

http://forums.whatthetech.com/How_remove_n…361#entry513361

Post your results here. Don't start a new topic.

Dear LDTate, After I follow and undergo your instructions you demonstrate, I will reply on Saturday 3rd of January. Because my workload and aforementioned desktop computer is in other home at a district of our city, I will reply late. May be I send detail information about computer and HJT analysis and antivirus program reports. Therefore, we can solve the problem together in a short time. Thanks your instructions. Also, may be I will communicate at about 16.00 o'clock on Saturday (Turkish local time: GMT+2 local time) [Now is 19:21 Turkish local time] Sincerely.

Dear LDTate, Also here is the Antivir reports. Report dated 28 Dec 2008 Avira AntiVir Personal Report file date: 28 Aralık 2008 Pazar 17:25 Scanning for 1125477 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 3) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: HUSEYINT Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18.11.2008 13:05:00 AVSCAN.EXE : [removed] 315649 Bytes 18.11.2008 07:21:26 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26.05.2008 06:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12.06.2008 11:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26.05.2008 06:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27.10.2008 10:30:36 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24.12.2008 15:24:33 ANTIVIR2.VDF : 7.1.1.34 2048 Bytes 24.12.2008 15:24:33 ANTIVIR3.VDF : 7.1.1.41 116736 Bytes 28.12.2008 15:24:35 Engineversion : 8.2.0.45 AEVDF.DLL : 8.1.0.6 102772 Bytes 14.10.2008 09:05:56 AESCRIPT.DLL : [removed] 336252 Bytes 28.12.2008 15:24:48 AESCN.DLL : [removed] 123251 Bytes 07.11.2008 14:06:41 AERDL.DLL : [removed] 438645 Bytes 04.11.2008 12:58:38 AEPACK.DLL : [removed] 393591 Bytes 11.11.2008 08:41:39 AEOFFICE.DLL : [removed] 196987 Bytes 28.12.2008 15:24:46 AEHEUR.DLL : [removed] 1524087 Bytes 28.12.2008 15:24:45 AEHELP.DLL : [removed] 119159 Bytes 28.12.2008 15:24:39 AEGEN.DLL : [removed] 323956 Bytes 28.12.2008 15:24:38 AEEMU.DLL : 8.1.0.9 393588 Bytes 14.10.2008 09:05:56 AECORE.DLL : [removed] 172405 Bytes 28.12.2008 15:24:36 AEBB.DLL : 8.1.0.3 53618 Bytes 14.10.2008 09:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09.07.2008 07:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16.05.2008 08:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 31.07.2008 11:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 09.05.2008 10:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12.02.2008 07:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12.06.2008 11:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22.01.2008 16:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12.06.2008 11:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25.01.2008 11:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12.06.2008 12:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27.06.2008 12:34:37 Configuration settings for the scan: Jobname……………………..: Complete system scan Configuration file……………: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging……………………..: low Primary action……………….: interactive Secondary action……………..: ignore Scan master boot sector……….: on Scan boot sector……………..: on Boot sectors…………………: C:, Process scan…………………: on Scan registry………………..: on Search for rootkits…………..: off Scan all files……………….: Intelligent file selection Scan archives………………..: on Recursion depth………………: 20 Smart extensions……………..: on Macro heuristic………………: on File heuristic……………….: medium Start of the scan: 28 Aralık 2008 Pazar 17:25 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'iPodService.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'jqs.exe' - '1' Module(s) have been scanned Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'ashServ.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 32 processes with 32 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '49' files ). Starting the file scan: Begin scan in 'C:\' C:\ntde1ect.com [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was deleted! C:\pagefile.sys [WARNING] The file could not be opened! C:\System Volume Information\_restore{841A00E9-3A8F-41D3-9BCE-9181973EF378}\RP4\A0001181.com [DETECTION] Is the TR/Trash.Gen Trojan [NOTE] The file was deleted! End of the scan: 28 Aralık 2008 Pazar 18:33 Used time: 1:07:28 Hour(s) The scan has been done completely. 5494 Scanning directories 302838 Files were scanned 2 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 2 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 302835 Files not concerned 2314 Archives were scanned 1 Warnings 2 Notes I think I removed the virus from the computer. Thanks….

Dear LDTate Additionally, here is the last Antivir report dated 3 Jan 2009: Avira AntiVir Personal Report file date: 03 Ocak 2009 Cumartesi 19:56 Scanning for 1143372 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 3) [5.1.2600] Boot mode: Normally booted Username: SYSTEM Computer name: HUSEYINT Version information: BUILD.DAT : 8.2.0.337 16934 Bytes 18.11.2008 13:05:00 AVSCAN.EXE : [removed] 315649 Bytes 18.11.2008 07:21:26 AVSCAN.DLL : 8.1.4.0 40705 Bytes 26.05.2008 06:56:40 LUKE.DLL : 8.1.4.5 164097 Bytes 12.06.2008 11:44:19 LUKERES.DLL : 8.1.4.0 12033 Bytes 26.05.2008 06:58:52 ANTIVIR0.VDF : 7.1.0.0 15603712 Bytes 27.10.2008 10:30:36 ANTIVIR1.VDF : 7.1.1.33 1705984 Bytes 24.12.2008 15:24:33 ANTIVIR2.VDF : 7.1.1.60 318976 Bytes 02.01.2009 17:53:53 ANTIVIR3.VDF : 7.1.1.65 20480 Bytes 02.01.2009 17:53:54 Engineversion : 8.2.0.45 AEVDF.DLL : 8.1.0.6 102772 Bytes 14.10.2008 09:05:56 AESCRIPT.DLL : [removed] 336252 Bytes 28.12.2008 15:24:48 AESCN.DLL : [removed] 123251 Bytes 07.11.2008 14:06:41 AERDL.DLL : [removed] 438645 Bytes 04.11.2008 12:58:38 AEPACK.DLL : [removed] 393591 Bytes 11.11.2008 08:41:39 AEOFFICE.DLL : [removed] 196987 Bytes 28.12.2008 15:24:46 AEHEUR.DLL : [removed] 1524087 Bytes 28.12.2008 15:24:45 AEHELP.DLL : [removed] 119159 Bytes 28.12.2008 15:24:39 AEGEN.DLL : [removed] 323956 Bytes 28.12.2008 15:24:38 AEEMU.DLL : 8.1.0.9 393588 Bytes 14.10.2008 09:05:56 AECORE.DLL : [removed] 172405 Bytes 28.12.2008 15:24:36 AEBB.DLL : 8.1.0.3 53618 Bytes 14.10.2008 09:05:56 AVWINLL.DLL : 1.0.0.12 15105 Bytes 09.07.2008 07:40:05 AVPREF.DLL : 8.0.2.0 38657 Bytes 16.05.2008 08:28:01 AVREP.DLL : 8.0.0.2 98344 Bytes 31.07.2008 11:02:15 AVREG.DLL : 8.0.0.1 33537 Bytes 09.05.2008 10:26:40 AVARKT.DLL : 1.0.0.23 307457 Bytes 12.02.2008 07:29:23 AVEVTLOG.DLL : 8.0.0.16 119041 Bytes 12.06.2008 11:27:49 SQLITE3.DLL : 3.3.17.1 339968 Bytes 22.01.2008 16:28:02 SMTPLIB.DLL : 1.2.0.23 28929 Bytes 12.06.2008 11:49:40 NETNT.DLL : 8.0.0.1 7937 Bytes 25.01.2008 11:05:10 RCIMAGE.DLL : 8.0.0.51 2371841 Bytes 12.06.2008 12:48:07 RCTEXT.DLL : 8.0.52.0 86273 Bytes 27.06.2008 12:34:37 Configuration settings for the scan: Jobname……………………..: Complete system scan Configuration file……………: C:\Program Files\Avira\AntiVir PersonalEdition Classic\sysscan.avp Logging……………………..: low Primary action……………….: interactive Secondary action……………..: ignore Scan master boot sector……….: on Scan boot sector……………..: on Boot sectors…………………: C:, Process scan…………………: on Scan registry………………..: on Search for rootkits…………..: off Scan all files……………….: Intelligent file selection Scan archives………………..: on Recursion depth………………: 20 Smart extensions……………..: on Macro heuristic………………: on File heuristic……………….: medium Start of the scan: 03 Ocak 2009 Cumartesi 19:56 The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'wuauclt.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'iPodService.exe' - '1' Module(s) have been scanned Scan process 'reader_sl.exe' - '1' Module(s) have been scanned Scan process 'TeaTimer.exe' - '1' Module(s) have been scanned Scan process 'rundll32.exe' - '1' Module(s) have been scanned Scan process 'msmsgs.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'jusched.exe' - '1' Module(s) have been scanned Scan process 'iTunesHelper.exe' - '1' Module(s) have been scanned Scan process 'QTTask.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned Scan process 'wmiapsrv.exe' - '1' Module(s) have been scanned Scan process 'alg.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'nvsvc32.exe' - '1' Module(s) have been scanned Scan process 'jqs.exe' - '1' Module(s) have been scanned Scan process 'AppleMobileDeviceService.exe' - '1' Module(s) have been scanned Scan process 'avguard.exe' - '1' Module(s) have been scanned Scan process 'sched.exe' - '1' Module(s) have been scanned Scan process 'spoolsv.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 34 processes with 34 modules were scanned Starting master boot sector scan: Master boot sector HD0 [INFO] No virus was found! Start scanning boot sectors: Boot sector 'C:\' [INFO] No virus was found! Starting to scan the registry. The registry was scanned ( '49' files ). Starting the file scan: Begin scan in 'C:\' C:\pagefile.sys [WARNING] The file could not be opened! End of the scan: 03 Ocak 2009 Cumartesi 20:35 Used time: 39:23 Minute(s) The scan has been done completely. 5486 Scanning directories 302881 Files were scanned 0 viruses and/or unwanted programs were found 0 Files were classified as suspicious: 0 files were deleted 0 files were repaired 0 files were moved to quarantine 0 files were renamed 1 Files cannot be scanned 302880 Files not concerned 2314 Archives were scanned 1 Warnings 0 Notes Please send me your thoughts about HJT log and Antivir reports…

Anti-virus scan looks like it did the job. Did you save the MBAM scan? Can you post that please?

Due to inactivity this topic will be closed. If you need help please start a new thread and post a new HJT log