You still -or again- have malware entries. You don't run a cleaning program just to remove mystery entries!
Entries on previous Combofix log:
HKLM\...\Run: [ndhuig] rundll32.exe "C:\Users\Barbara\AppData\Roaming\ndhuig.dll",StrToUintA [159744 2012-08-14] ()
HKLM\...\Run: [psfcer] "C:\Windows\System32\rundll32.exe" "C:\Users\Barbara\AppData\Roaming\psfcer.dll",Warn [x]
StrToUintA> identified as Trojan
----------------------------
Orphans Removed in Combofix
HKLM-Run-ndhuig - c:\users\Barbara\AppData\Roaming\ndhuig.dll
HKLM-Run-psfcer - c:\users\Barbara\AppData\Roaming\psfcer.dll\
=====================================
Please go to
VirSCAN.org FREE on-line scan service:
If busy, you can use one of the following: ( you only need one)
VirusTotal
Jotti
- Copy and paste the following file path into the Suspicious files to scan box on the top of the page.
Code:
C:\Users\Barbara\AppData\Roaming\ndhuig.dll
C:\Users\Barbara\AppData\Roaming\psfcer.dll
- At the upload site, click once inside the window next to Browse.
- Press Ctrl+V on the keyboard (both at the same time) to paste the file path into the window.
- Click on the Upload button.
This will perform a scan across multiple different virus scanning engines.
Your file will possibly be entered into a queue which normally takes less than a minute to clear.
Important: Wait for all of the scanning engines to complete.
- Once the Scan is completed scroll down and click on the Copy to Clipboard button. This will copy the link of the report into the Clipboard.
- Paste the contents of the Clipboard in your next reply.
======================================
What are the following?
1) ¡¥p¹º¥ô°È¡¦ ¤å¥ó§¨ ¸Ìªº¤º®e
2) §¹¦¨®É¶¡: 2012-08-17 11:19:34 - ¹q¸£¤w«·s±Ò°Ê
ComboFix-quarantined-files.txt 2012-08-17 01:19
------------------------------------
It's possible that if some processes are in another language, the scanner may not pick it up.
===================================
I'd like you to run the Eset scan again please.
NOTE my direction to UNCHECK 'remove found threats.' I will handle them if any are found:
To run the Eset Online Virus Scan:
If you use Internet Explorer:
- Open the ESETOnlineScan
- Skip to #4 to "Continue with the directions"
If you are using a browser other than Internet Explorer
- Open Eset Smart Installer
[o] Click on the esetsmartinstaller_enu.exelink and save to the desktop.
[o] Double click on the desktop icon to run.
[o] After successful installation of the ESET Smart Installer, the ESET Online Scanner will be launched in a new Window
- Continue with the directions.
- Check 'Yes I accept terms of use.'
- Click Start button
- Accept any security warnings from your browser.
- Uncheck 'Remove found threats'
- Check 'Scan archives/
- Leave remaining settings as is.
- Press the Start button.
- ESET will then download updates for itself, install itself, and begin scanning your computer. Please wait for the scan to finish.
- When the scan completes, press List of found threats
- Push Export of text file and save the file to your desktop using a unique name, such as ESETScan. Paste this log in your next reply.
- Push the Back button, then Finish
NOTE: If no malware is found then no log will be produced. Let me know if this is the case.
=================================
Do you still have Combofix on the system. If not, I will give directions for it. Please don't run by yourself.
