August 21st, 2010, 12:48 AM
#31
Part 5 of Extras.txt log:========== HKEY_LOCAL_MACHINE Uninstall List ==========
August 21st, 2010, 01:21 AM
#32
Run OTLUnder the Custom Scans/Fixes
Code:
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\NSDriver.sys -- (Ad-Watch Connect Filter)
:Commands
[emptyflash]
[emptytemp]
[resethosts]
[Reboot]
Then click the Run Fix Let the program run unhindered, reboot the PC when it is done. Post log from this run. Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
August 21st, 2010, 01:29 AM
#33
There's a last part 6 of the Extras.txt log remaining, can't seem to post it since the website keeps crashing saying it is too busy.
August 21st, 2010, 03:00 AM
#34
If you need to attach the log because of it's length, then please do so.
August 21st, 2010, 05:49 AM
#35
OTL (Run Fix) scan log:
August 21st, 2010, 06:03 AM
#36
Attaching OTL Quick Scan log, too big to copy contents here.
August 21st, 2010, 06:04 AM
#37
Originally Posted by
crunchie
Run OTL
Under the Custom Scans/Fixes
Code:
:OTL
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\vmnetadapter.sys -- (VMnetAdapter)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\usbser_lowerflt.sys -- (upperdev)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\DRIVERS\ewusbmdm.sys -- (hwdatacard)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\drivers\NSDriver.sys -- (Ad-Watch Connect Filter)
:Commands
[emptyflash]
[emptytemp]
[resethosts]
[Reboot]
Then click the Run Fix Let the program run unhindered, reboot the PC when it is done. Post log from this run. Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
==
Are you using the latest firefox? Try disabling extensions to see if the problem persists.
August 21st, 2010, 06:54 AM
#38
Not seeing anything else there. Have you tried disabling FF extensions to see if the problem goes?
August 21st, 2010, 09:34 AM
#39
Originally Posted by
crunchie
Not seeing anything else there. Have you tried disabling FF extensions to see if the problem goes?
There's extensions for Java (versions 6.0.04 thru 6.0.21), Java Quickstarter, WOT, RealPlayer, PC Sync, MS .Net, and Firefox Sync. Not sure which ones to disable.
August 21st, 2010, 09:42 AM
#40
Try disabling all of them and see if the problem goes. If it does go, you then need to re-enable them one at a time to see if the problem reappears.
August 22nd, 2010, 02:55 AM
#41
Originally Posted by
crunchie
Try disabling all of them and see if the problem goes. If it does go, you then need to re-enable them one at a time to see if the problem reappears.
Bad news. Its still the same. Disabled all extensions earlier today and left FF open for a few hours while I did something else. Came back to find another random website (http://78.140.143.83/go.php ) opened itself in a new tab in FF.
August 22nd, 2010, 03:22 AM
#42
Please read carefully and follow these steps. Download TDSSKiller Extract its contents to your desktop. Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan. If an infected file is detected, the default action will be Cure , click on Continue. If a suspicious file is detected, the default action will be Skip , click on Continue. It may ask you to reboot the computer to complete the process. Click on Reboot Now . If no reboot is require, click on Report . A log file should appear. Please copy and paste the contents of that file here. If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt ". Please copy and paste the contents of that file here.
August 22nd, 2010, 04:46 AM
#43
Nice one. TDSSKiller found a Rootkit. Part 1 of Log as below:
August 22nd, 2010, 04:47 AM
#44
And part 2 as below:
August 22nd, 2010, 04:52 AM
#45
Once rebooted, let me know how things are.
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Rules
Reply With Quote
Originally Posted by crunchie
