[green karma]

I am able to update SAS, and MBAM but not Ad-Aware...should I just uninstall and reinstall a new one? Or is it something deeper than that?

[emeraldnzl]

Hello again nice_camel_toe,

should I just uninstall and reinstall a new one

If your other updates are working fine then I think something may be corrupted with Ad-Aware so yes, a reinstallation would be the best option.

Now

Your Java is out to date. Older versions are vunerable to attack.

Please follow these steps:

• Download from here Java Runtime Environment (JDK) Update
• Scroll to where it says "Windows XP/Vista/2000/2003/2008 online" and download and follow the instructions.
  
  Reboot your computer.
  You also need to uininstall older versions of Java.
  
• Click Start > Control Panel > Add or Remove Programs
• Remove all Java updates except the latest one you have just installed.

Next

Just a last check to make sure we haven't missed anything before we go to clearing away the tools we have been using.

Kaspersky on line scanner is very thorough. It can take a long time and for periods may seem not to be working. Just be patient and let it do its job.

Kaspersky works with Internet Explorer and Firefox 3. It uses Java Runtime Environment (JRE) .

Go to Kaspersky website and perform an online antivirus scan.

Note: you will need to turn off your security programs to allow Kaspersky to do its job.

• Read through the requirements and privacy statement and click on Accept button.
• It will start dowanloading and installing the scanner and virus definitions. You will be prompted to install an application from Kaspersky. Click Run.
• When the downloads have finished, click on Settings.
• Make sure these boxes are checked (ticked). If they are not, please tick them and click on the Save button:
  • Spyware, Adware, Dialers, and other potentially dangerous programs
    Archives
    Mail databases
• Click on My Computer under Scan.
• Once the scan is complete, it will display the results. Click on View Scan Report.
• You will see a list of infected items there. Click on Save Report As....
• Save this report to a convenient place. Change the Files of type to Text file (.txt) before clicking on the Save button.

Copy and paste that information in your next post.

[green karma]

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0: scan report
Monday, November 16, 2009
Operating system: Microsoft Windows XP Home Edition Service Pack 2 (build 2600)
Kaspersky Online Scanner version: 7.0.26.13
Last database update: Monday, November 16, 2009 09:36:53
Records in database: 3222683
--------------------------------------------------------------------------------

Scan settings:
scan using the following database: extended
Scan archives: yes
Scan e-mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\

Scan statistics:
Objects scanned: 55705
Threats found: 0
Infected objects found: 0
Suspicious objects found: 0
Scan duration: 02:09:35

No threats found. Scanned area is clean.

Selected area has been scanned.


I don't know if it is coincidence but my IE and Firefox has been unstable. Randomly having error message and then browser shuts down.

[emeraldnzl]

Hello green karma,

I don't know if it is coincidence but my IE and Firefox has been unstable. Randomly having error message and then browser shuts down.

Well here are my thoughts on that.

When I saw those last logs my thoughts were that your machine is clean. Then I saw your sentence about problems with your browsers and thought, well maybe a software problem or maybe even a hardware problem beginning to develop.

Thinking further though, I think to myself, before I say to you that I think it's not malware related I should carry out some more scans checking for malware, especially when I see that your machine hasn't updated to SP3 which contains a whole lot of security patches.

SOoo.... what do you think?

Let's do this:

Please download ComboFix from one of these locations:

Link 1
Link 2

* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools.
• Double click on ComboFix.exe & follow the prompts.
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



Click on Yes, to continue scanning for malware.

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.

[green karma]

Ran comb-fix.

Upon restart (from combo-fix not me), it said there was an error, and no log was produced. Should I start CF again?

TIA

[emeraldnzl]

Hi green karma,

What's happened. Have you changed you name?

Upon restart (from combo-fix not me), it said there was an error, and no log was produced. Should I start CF again?

Right click on Start > Explore and navigate to:

C:\QooBox\LastRun\ <--Data from failed CF runs are stored here.

You should be able to find the data for the failed run there.

If you don't find it there then:

Try looking in :\Qoobox folder (most likely C:\Qoobox\ComboFix.txt) and pasting the contents of the text file back here. Note: ComboFix.txt are numbered so if there was more than one run for instance you might find C:\Qoobox\ComboFix2.txt.

Copy and paste back here.

[green karma]

Originally Posted by emeraldnzl

Hi green karma,

What's happened. Have you changed you name?



Right click on Start > Explore and navigate to:

C:\QooBox\LastRun\ <--Data from failed CF runs are stored here.

You should be able to find the data for the failed run there.

If you don't find it there then:

Try looking in :\Qoobox folder (most likely C:\Qoobox\ComboFix.txt) and pasting the contents of the text file back here. Note: ComboFix.txt are numbered so if there was more than one run for instance you might find C:\Qoobox\ComboFix2.txt.

Copy and paste back here.

Hello...admin made me change my name

I tried C\QooBox\LastRun\ and got this


I tried looking for ComboFix.txt but no luck

What do you want me to do next?

[emeraldnzl]

Let's try running ComboFix again.

Please delete your version of ComboFix, including the folders C:\Qoobox and C:\Combofix, and download a new version of Combofix.

Download ComboFix from one of these locations:

Link 1
Link 2
* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  
• Double click on ComboFix.exe & follow the prompts.
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:



Click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.