Login 
 Search | |
| |
09-Jul-2009, 05:54 AM
#16 | |||||
| Hello! How is the computer running now? Please go to Virus Total <http://www.virustotal.com/> or Jotti and upload c:\windows\system32\drivers\bvfadxvt.sys for scanning. For Virus Total 1. Please copy and paste c:\windows\system32\drivers\bvfadxvt.sys in the text box next to the Browse button. 2. Click on Send File. For Jotti 1. Please copy and paste c:\windows\system32\drivers\bvfadxvt.sys in the text box next to the Browse button. 2. Click on Submit. Repeat for the below file/s: c:\windows\Lmeci.bin c:\windows\Lmeci.binLmeci.bin c:\windows\Lhomoge.dat Please post back the results of the scan in your next post.
Open Hijack This and select Do a System Scan Only place a check next to the below lines if still present
Once selected close all windows except HJT an click on Fix Checked COMBOFIX-Script A word of warning: Please do not run ComboFix on your own. This tool is not a toy and not for everyday use. Please delete the copy you have and download the latest version from one of these locations: Link 1 Link 2 Link 3
Please reply with:-
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
| |
10-Jul-2009, 09:57 AM
#18 | |||||
| I am sorry, I forgot to change everything back to I:\ and had posted the files showing C:\. Try Virus total or Jotti again using the correct drive. Are you able to change your background picture at all? Please go to Virus Total <http://www.virustotal.com/> or Jotti and upload I:\windows\system32\drivers\bvfadxvt.sys for scanning. For Virus Total 1. Please copy and paste I:\windows\system32\drivers\bvfadxvt.sys in the text box next to the Browse button. 2. Click on Send File. For Jotti 1. Please copy and paste c:\windows\system32\drivers\bvfadxvt.sys in the text box next to the Browse button. 2. Click on Submit. Repeat for the below file/s: I:\windows\Lmeci.bin I:\windows\Lmeci.binLmeci.bin I:\windows\Lhomoge.dat Please post back the results of the scan in your next post. COMBOFIX-Script A word of warning: Please do not run ComboFix on your own. This tool is not a toy and not for everyday use. Please delete the copy you have and download the latest version from one of these locations: Link 1 Link 2 Link 3
Please reply with:-
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
11-Jul-2009, 01:34 AM
#20 | |||||
| Quote:
The other files I asked you to check, please still do that unless you know what they are. You can also do the CF script. Post logs on your reply  |
13-Jul-2009, 06:27 AM
#24 | |||||
|
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
15-Jul-2009, 02:55 AM
#25 | |||||
| i have no idea what Onlineeye Firewall Service is, so we can go ahead and delete that. computer seems to be running fine. not really having anymore problems. can't think of any symptoms that the computer is having. _______________ S y s t e m L o o k v 1 . 0 b y j p s h o r t s t u f f ( 2 2 . 0 5 . 0 9 ) L o g c r e a t e d a t 0 0 : 5 1 o n 1 5 / 0 7 / 2 0 0 9 b y V a h a b ( A d m i n i s t r a t o r - E l e v a t i o n s u c c e s s f u l ) = = = = = = = = = = F i l e f i n d = = = = = = = = = = S e a r c h i n g f o r " P r o q u o t a . e x * " I : \ Q o o b o x \ Q u a r a n t i n e \ I \ W I N D O W S \ s y s t e m 3 2 \ w b e m \ p r o q u o t a . e x e . v i r - - a - - - 3 6 3 5 2 b y t e s [ 0 5 : 5 6 0 4 / 0 8 / 2 0 0 4 ] [ 0 5 : 5 6 0 4 / 0 8 / 2 0 0 4 ] 3 4 1 2 8 F A C 8 7 3 E D 9 9 9 E F 8 B D C 6 A B 5 8 3 8 3 2 7 I : \ W I N D O W S \ P r e f e t c h \ P R O Q U O T A . E X E - 3 B 5 8 F D 9 A . p f - - a - - - 4 5 7 4 6 b y t e s [ 1 2 : 1 4 1 1 / 0 7 / 2 0 0 9 ] [ 0 5 : 5 0 1 5 / 0 7 / 2 0 0 9 ] 6 4 3 D 5 9 B 3 A F 5 9 F 4 0 A 8 6 F F F 6 E A E 3 F B 5 C D 7 I : \ W I N D O W S \ S o f t w a r e D i s t r i b u t i o n \ D o w n l o a d \ d d 9 a b 5 1 9 3 5 0 1 4 8 4 c f 5 e 6 8 8 4 f a 1 d 2 2 f 9 e \ p r o q u o t a . e x e - - a - - - 5 0 1 7 6 b y t e s [ 0 0 : 1 1 2 1 / 0 1 / 2 0 0 9 ] [ 0 0 : 1 2 1 4 / 0 4 / 2 0 0 8 ] F 6 4 6 5 A 2 E E F 7 5 4 6 8 9 8 8 A 4 F C F 1 2 4 1 4 8 F A 8 I : \ W I N D O W S \ s y s t e m 3 2 \ w b e m \ p r o q u o t a . e x e - - a - - - 3 6 3 5 2 b y t e s [ 0 5 : 5 6 0 4 / 0 8 / 2 0 0 4 ] [ 0 5 : 5 6 0 4 / 0 8 / 2 0 0 4 ] 1 7 B F E 7 C E 4 3 6 3 B A 7 8 2 2 0 E F 2 3 5 3 7 6 0 B B 3 3 - = E n d O f F i l e = - |
15-Jul-2009, 04:46 AM
#26 | |||||
| Quote:
 Open Hijack This and select Do a System Scan Only place a check next to the below lines if still present
Once selected close all windows except HJT an click on Fix Checked *************** COMBOFIX-Script A word of warning: Please do not run ComboFix on your own. This tool is not a toy and not for everyday use. Please delete the copy you have and download the latest version from one of these locations: Link 1 Link 2 Link 3
Update Java Runtime You are using an old version of Java. Sun's Java is sometimes updated in order to eliminate the exploitation of vulnerabilities in an existing version. For this reason, it's extremely important that you keep the program up to date, and also remove the older more vulnerable versions from your system. The most current version of Sun Java is: Java Runtime Environment Version 6 Update 14.
Update Adobe Reader Recently there have been vunerabilities detected in older versions of Adobe Reader. It is strongly suggested that you update to the current version. Adobe Reader 9. You can download it from http://www.adobe.com/products/acrobat/readstep2.html After installing the latest Adobe Reader, uninstall all previous versions. If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition. Please reply with:-
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
16-Jul-2009, 07:40 PM
#29 | |||||
|
__________________ Teacher - Malware Removal University - You too could train to help others Topics not replied to within 3 days will be removed from my Subscribed Threads List |
 |
| |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -4. The time now is 01:49 PM. Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved. |  |
Facebook
Twitter
TechGuy.tv
TSG Mobile