Search:

Yes sorry, I did forget to mention that I had already tried the repair option and it failed. But, I did finally work up the courage to push through the install process and windows did do a fresh...

Hi Guys, been a while since I posted here but I now have a dilemma and a question.

My desktop just up and died on me last week so I had to replace the MB, CPU and memory. Of course windows will...

Broni,

It's been a few days now and everything appears to be OK. My friend emailed me today and said that the computer is working great now, so I guess you got it.

Thanks a million for all of...

I emailed her exactly what you posted and she re-ran the OTL and below are the results...


All processes killed
Error: Unable to interpret <:OTL:Services:Reg:FilesC:\Documents and Settings\All...

All processes killed
Error: Unable to interpret <:OTL:Services:Reg:FilesC:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WildTangent8.zip > in the current...

C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\WildTangent8.zip Win32/Bagle.gen.zip worm
C:\Program Files\AskSBar\bar\1.bin\A2PLUGIN.DLL a variant of...

Results of screen317's Security Check version 0.99.7
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Disabled! ...

All processes killed
========== OTL ==========
C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll moved successfully.
Registry value...

I believe that she primarily uses firefox. I will ask her to try it with IE and see what happens.

When I just tried to email her your new instructions the email bounced back to me as failure....

OK, I'll pass this info along to her and report back the findings.

I don't know if I mentioned it before but she is also constantly getting redirected to coolchasers.com website. Have you seen any...

OTL Extras logfile created on: 2/6/2011 12:39:50 PM - Run 1
OTL by OldTimer - Version 3.2.20.6 Folder = C:\Documents and Settings\HP_Administrator\Desktop
Windows XP Media Center Edition...

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2008/08/28 15:45:43 | 000,000,150 | ---- | M] () -- C:\AUTOEXEC.BAT
[2008/08/27 00:36:48 |...

Broni, when my friend sent me this file she also told me this:

This morning when I went on the internet I got a unresponsive script message and I have to refresh my pages because they lock up....

Ok, what she sent me was a file called Report.html. Not sure if there was supposed to be a log file, but I copied and pasted what was in the file below.

File name:
regedit.exe
Submission date:...

Here's the result from the regedit scan...

https://mail.google.com/mail/?ui=2&ik=6446a7708b&view=att&th=12df8daaa5ad94ef&attid=0.1&disp=inline&zw

Hmm, good idea. That hadn't occurred to me. It is something that I can surely do prior to posting.

Sure would make it easier. It's not easy guessing where 50K characters is.

Thanks...

2011-02-05 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job

- c:\program files\Google\Update\GoogleUpdate.exe [2010-01-31 20:17]

.

.

------- Supplementary Scan -------

OK, here's the final lg, I hope...

ComboFix 11-01-31.02 - HP_Administrator 02/04/2011 18:04:45.1.2 - x86

Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2046.1484 [GMT -8:00]
...

Broni, my friend is running combofix. It installed the recovery console, then rebooted back into windows. Now, she says that it is just sitting there (about 20 min so far) with a message that it is...

Yup, I knew you'd be asking for that file. She sent it to me but when I opened it it was the mbam log file instead, so I had to wait till today for her to send me the right file. Sorry about...

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install...

DDS (Ver_10-12-12.02) - NTFSx86
Run by HP_Administrator at 19:53:10.79 on Thu 02/03/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Professional ...

C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\WINDOWS\ehome\ehtray.exe[4040] USER32.dll!SetWindowsHookExA ...

C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe[3408] ADVAPI32.dll!SetServiceObjectSecurity ...

C:\Program Files\Alwil Software\Avast5\snxhk.dll (avast! snxhk/AVAST Software)
.text C:\Program Files\Updates from HP\9972322\Program\Updates from HP.exe[2536] ADVAPI32.dll!CreateServiceA ...