also @ TechSpot: Valve's Steam suffers worldwide failure over the weekend
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Sign up or Login to participate.

Go Back   TechSpot OpenBoards > Tech Support > Virus and Malware Removal

Collaborate in the cloud with Office, Exchange, SharePoint, and Lync

Confirmation on virus protecting logs

Thread Tools Search this Thread
  #1  
Old 12-01-2008
TechSpot Member
 
Member since: Nov 2008, 32 posts
Confirmation on virus protecting logs

I have followed through with the 8-step process, and still I'm a bit skeptical that all is right with it. I still have problems with browsers, i.e. i can download updates and such, yet i can't view any web pages in any browser. Also, privleges still haven't come back to my account. Please look through these logs and see if all is well with my computer, I have the Malwarebyte's, superspyware anti-virus, and the HJT logs. Much appreciated!
Attached Files
File Type: txt mbam-log-2008-12-01 (00-05-56).txt (9.4 KB, 2 views)
File Type: log SUPERAntiSpyware Scan Log - 12-01-2008 - 03-05-32.log (2.3 KB, 2 views)
File Type: log hijackthis.log (9.2 KB, 2 views)
  #2  
Old 12-01-2008
TechSpot Addict
 
Location: Illinois, USA
Member since: Feb 2007, 931 posts
System specs
Welcome to TS. More progress is needed. Your logs show found but unanswered items. For your case, we will supplement our guide with a special scan / tool.

Observations & Recommended Action:
  • ‘Delete on Reboot’ are appearing in the log, requires that you react to the message & restart the computer after exit from the scan.
  • ComboFix is a very effective tool that scans / fixes hard to clean infections. Additionally, it includes diagnostic information.
  • Uninstall old copy of ComboFix

Supplement to guide. Successive scans used to uncover additional infections.
  • Update both MBAM & SAS. Rerun them both.

  • This effort is complete when logs report NO infections/threats, or reporting something it can not clean.

  • Follow ComboFix instructions referenced below.

  • Scan with HJT. (part of instructions for ComboFix)

  • Posts logs. Report progress & what changes are observed. Include logs that found infections.
Quote:
Originally Posted by Blind Dragon View Post
Uninstall Combofix
* Click START then RUN
* Now type Combofix /u in the runbox
* Make sure there's a space between Combofix and /u
* Then hit Enter.

*The above procedure will:
* Delete the following: ComboFix and its associated files and folders.
* Reset the clock settings.
* Hide file extensions, if required.
* Hide System/Hidden files, if required.
* Set a new, clean Restore Point.
Quote:
Originally Posted by Blind Dragon View Post
Disable all realtime protection before running combofix by right clicking it in the system tray and unchecking the real time monitoring

Combofix
  • Download Combofix to your desktop.
  • Double click combofix.exe & follow the prompts.
  • A window will open with a warning.
  • When the scan completes it will open a text window. Please attach that log back here together with a fresh HJT log.
  • How-to-use instructions
Caution - do not touch your mouse/keyboard until the scan has completed. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Combofix is a very powerful tool so please do NOT do anything without instruction

Combofix will automatically save the log file to C:\combofix.txt
Also attach a fresh hijackthis scan ran afterwards
  #3  
Old 12-01-2008
Bobbye's Avatar
Helper on the Fringe
 
Location: Florida
Member since: Mar 2007, 15,043 posts
A note: You are running two security suites. Decide which you want to keep and remove the other:
Avast:
Quote:
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
CA Security Suite:
Quote:
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\CAVRID.exe
C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\VetMsg.exe
Plus Services running for both:
Avast:
Quote:
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
CA:
Quote:
O23 - Service: CaCCProvSP (caccprovsp) - CA, Inc. - C:\Program Files\CA\CA Internet Security Suite\ccprovsp.exe
O23 - Service: CAISafe (caisafe) - Computer Associates International, Inc. - C:\Program Files\CA\CA Internet Security Suite\CA Anti-Virus\ISafe.exe
The Services for the program you do not want to keep need to be disabled,
Closed Thread

Similar Topics
Topic Replies Forum
Followed 8 step-solution, request confirmation of logs 7 Virus and Malware Removal
Followed 8 step Viruses/Spyware/Malware Removal, need confirmation of logs 10 Virus and Malware Removal
Double confirmation by checking logs 5 Virus and Malware Removal
Logs attached - just need confirmation 5 Virus and Malware Removal

Thread Tools Search this Thread
Search this Thread:

Advanced Search
All times are GMT -4. The time now is 08:16 AM.