Buffer Overrun Detected when starting Internet Explorer

Yes exactly just hang in there!

Mike

Okay, it's done listing viruses. Quit and reboot in Normal Mode?
Or anything else first? Save a log or anything?
Please advise.
-Shawn

Yes save log and attach it after rebooting to normal mode!

Also a status report of how computer is working now.

Mike

It looked like it had stopped; suddenly, it started again.
It had just been sitting there, I didn't touch anything and actually came upstairs to use another comp to contact you!
I'm guessing just leave it alone until it stops doing anything?
-Shawn

It's up to you I know it is a long time, but I didn't think it would be this long!

I'll say if you do complete it you will be clean.

Mike

Very well. I'm gonna leave it alone and see what it's doing in the morning.
I'm not sure how to save a log though. There's only five or so buttons. Should I just copy all the data and paste into a blank .txt file?
And by status report do you simply mean how I feel the computer is behaving, or specific reports?
Thanks,
-Shawn

Yes how computer is working. But of course after this finishes and you check it!

There should be a log file but do your best.

The bad thing here is I believe you are clean but based of what you had that we cleaned I just wanted to be sure!

Mike

Mike,
Whew.
Laptop runs LIKE A DREAM. I'm not kidding, super-duper fast and responsive.
Wow. I don't know how I ever could have cleaned so much crap off this machine as you helped me to. Thank you, thank you, THANK YOU!!
Attached please find log file.
Again, whew. Thanks ever so much for your help. Of course, if more needs to be done with this, let me know. I know we're not over the finish line just yet.
-Shawn

Thank you for the updates. I, for one, would not have believed that a bunch of junque infestations would cause a buffer overrun... still don't understand why.

You did a fantastic job.

You followed directions and got the job done.

This thread is here for you to review when needed. Try to update and run MBAM and SAS once every couple of weeks or at first sign of trouble or suspicion, even the Norman once a month. Just schedule them when you are away for work or sleeping. Much better than doing them under the gun.

Thread closing ------------------------------------------------------------------------------------

Some of these tools update so often they require downloading again later if needed. But keep and run MBAM and SAS to maintain.

Remove ComboFix
Start-Run
type
combofix /u
Hit enter or click OK.

Please download OTCleanIt http://download.bleepingcomputer.com/oldtimer/OTCleanIt.exe

Save to desktop.

This will remove all the tools we used to clean your computer.

Double-click OTCleanIt.exe. Click CleanUp. Yes to the "Begin cleanup Process?"

Approve all if prompted by Firewall. Approve Widows Defender or other guards or security programs while OTCleanIt attempting access to the Internet to allow all.

If prompted to Reboot click, Yes.
OTCleanit will delete itself when finished, If not delete it by yourself.

--------------------------------------------------------------------------------------------------------
Run CCleaner again twice or more on Cleanup temps, then on left click Registry then Scan for issues also repeat till clean.

Run ATF-Cleaner http://majorgeeks.com/ATF_Cleaner_d4949.html Temp and Registry, repeatedly until no more found.

KCleaner ftp://ftp2.kcsoftwares.com/kcsoftwa/files/kcleaner.exe
Fantastic cleaner.
--------------------------------------------------------------------------------------------------------
The issues can and are likely found is in System Restore so do the below

Start-Programs-Accessories-System Tools-Disk- System Restore and create a new Restore point. Name it "After cleanup at TechSpot".

Then Start-Programs-Accessories-System Tools-Disk Cleanup
Click OK to accept C:
Select all Boxes
Then click More Options
Here click System Restore and OK to "Are you sure" and the OK to Run.

As this runs it clears all but the most recent Restore Point but it does one other thing that can contain infested files and a huge amount of disk space.

It clears what is known as Shadow copies which are used by specialized back up programs.

This is if you have the Volume Shadow Copy running which is the default.
--------------------------------------------------------------------------------------------------------

Every two weeks or so, run MBAM and SAS until clean.

They take a while, so leave scanning while you are sleeping working or watching TV. If not done under the gun they can be scheduled not to interfere with computer time.

If they find something they can not clean, then get back to us.

Additionally run CCleaner. ATF-Cleaner and KCleaner.
--------------------------------------------------------------------------------------------------------
I have been using ThreatFire for more than a year, it just went from ver 3 to ver 4.

It was designed to be used with and to co-exist with other Virus scanners.

Additionally it uses a totally different process to protect. While conventional Virus scanners work from definitions ThreatFire works on recognizing Virus/Malware activity.

It's like looking at it with 2 sets of eyes and from a different angle.

It works like some Firewalls do to learn what is good/bad.

After install it will ask you about everything that could be a security issue. For example the first time you run IE or FireFox it will prompt you. You would answer to approve and remember the setting. From then on no more prompts about IE or FireFox unless the exe changes like in an update.

As it queries you about the prompt to help you determine to approve or not you can google it with one click.

http://www.threatfire.com/Download/
-------------------------------------------------------------------------------------
Look at http://www.javacoolsoftware.com/spywareblaster.html

Run SpyBot ocassionally and use the Immunize function.
http://www.safer-networking.org/en/download/

I highly reccomend Hostman: Hostman http://majorgeeks.com/HostsMan_d4592.html

Download install run and allow it to disable DNS Client and select all Host files and then Update and install all host files.

A Disk Scan (chkdsk) and Defrag are in order.

Mike