[hondaxxman]

Jimmy,

Dr. Web Cureit did the trick for stopping the redirects. Thanks!

I still can't update my CA Security Suite and I don't think Windows is updating either.

Still have lots of Firefox crashes, too.

I can uninstall CA if you recommend another program to take its place.

Also, do I need all the programs that I downloaded for this fix or should I clean them out of the system?

Any ideas?

Randy

[Advertisements]

Hello hondaxxman,

Also, do I need all the programs that I downloaded for this fix or should I clean them out of the system?

Once we are done, you can go ahead and remove them.

Please delete ComboFix.exe and try re-downloading it and see if it will run this time.




Download ComboFix from one of these locations:

Link 1
Link 2
Link 3


* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

[Jimmy2012]

Hello hondaxxman,

Also, do I need all the programs that I downloaded for this fix or should I clean them out of the system?

Once we are done, you can go ahead and remove them.

Please delete ComboFix.exe and try re-downloading it and see if it will run this time.




Download ComboFix from one of these locations:

Link 1
Link 2
Link 3


* IMPORTANT !!! Save ComboFix.exe to your Desktop

• Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools
  
  
• Double click on ComboFix.exe & follow the prompts.
  
  
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  
  
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.

**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:




Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you. Please include the C:\ComboFix.txt in your next reply.

[hondaxxman]

Jimmy,

I downloaded the program as "Comb-Fix" and it acted like it wanted to run with a burst of hard drive activity and then nothing. Same as before.

I tried to deactivate all the anti-virus programs I have but maybe I'm not catching something.

Thanks,
Randy

EDIT: Combo-Fix crashed my system hard. I deleted Combo-Fix, then searched for all the files containing the word "combo" and deleted the ones I felt were related. I couldn't launch Firefox or do much of anything. I couldn't even shut down the computer. I just held down the power button until it shut down and then restarted the computer. All looks OK now.

My computer does not like Combo-Fix at all. I think I have some major software conflicts with it.

Edited by hondaxxman, 07 April 2009 - 10:54 PM.

[Jimmy2012]

Hello hondaxxman,

Are you able to update your CA Security Suite now?

[hondaxxman]

Jimmy,

I was able to update the CA Security Suite files just a minute ago. I couldn't until now. I rebooted as per CA's instructions.

Some of the CA functions are enabled. I'll disable them at your request.

Windows isn't updating. Not automatically or manually. It tries to and then searches for updates endlessly and nothing happens. Then the update window freezes up and I can't close it.

Thanks,
Randy

Edited by hondaxxman, 08 April 2009 - 09:04 PM.

[Jimmy2012]

Hello hondaxxman,
Please try the following and see if it works.

• Please start Malwarebytes' Anti-Malware and update it.
• To update please do this, click Update and then click Check for Updates.
• It will now install any updates it finds.
• Once it is done updating please click Scanner and then click "Perform Quick Scan", then click Scan.
• The scan may take some time to finish,so please be patient.
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
• The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
• Copy&Paste the entire report in your next reply.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.








Please run the F-Secure Online Scanner

Note: This Scanner is for Internet Explorer Only!

• Follow the Instruction Here for installation.
• Accept the License Agreement.
• Once the ActiveX installs,Click Full System Scan
• Once the download completes,the scan will begin automatically.
• The scan will take some time to finish,so please be patient.
• When the scan completes, click the Automatic cleaning (recommended) button.
• Click the Show Report button and Copy&Paste the entire report in your next reply.

~~~~~~~~~~~~~~
In your next reply please have these logs.
The Malwarebytes log
And the F-Secure log

[Jimmy2012]

Hello hondaxxman,
Since you are unable to run F-Secure, please try the following.



Please click here to download AVP Tool by Kaspersky.

• Save it to your desktop.
• Reboot your computer into SafeMode.
  

  You can do this by restarting your computer and continually tapping the F8 key until a menu appears.
  Use your up arrow key to highlight SafeMode then hit enter.

• Double click the setup file to run it.
• Click Next to continue.
• It will by default install it to your desktop folder.Click Next.
• Hit ok at the prompt for scanning in Safe Mode.
• It will then open a box There will be a tab that says Automatic scan.
• Under Automatic scan make sure these are checked.

• System Memory
• Startup Objects
• Disk Boot Sectors.
• My Computer.
• Also any other drives (Removable that you may have)

After that click on Security level then choose Customize then click on the tab that says Heuristic Analyzer then choose Enable Deep rootkit search then choose ok.
Then choose OK again then you are back to the main screen.

• Then click on Scan at the to right hand Corner.
• It will automatically Neutralize any objects found.
• If some objects are left un-neutralized then click the button that says Neutralize all
• If it says it cannot be Neutralized then chooose The delete option when prompted.
• After that is done click on the reports button at the bottom and save it to file name it Kas.
• Save it somewhere convenient like your desktop and just post only the detected Virus\malware in the report it will be at the very top under Detected post those results in your next reply.
  
  

  Note: This tool will self uninstall when you close it so please save the log before closing it.

[hondaxxman]

Hi Jimmy,

AVP found nothing...after 8 hours. Ugh.

Windows won't shut down now. I have to just turn off the computer manually. Haven't done much browsing to see if my browser still wants to crash all the time.

Here's the Malwarebytes log:

Malwarebytes' Anti-Malware 1.36
Database version: 1964
Windows 5.1.2600 Service Pack 3

4/10/2009 6:34:22 PM
mbam-log-2009-04-10 (18-34-22).txt

Scan type: Quick Scan
Objects scanned: 77215
Time elapsed: 2 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

----------

Thanks for your help!
Randy

[Jimmy2012]

Hello hondaxxman,

Windows won't shut down now.

When you try to shut it down, what does it do?

[hondaxxman]

Hi Jimmy,

It just says shutting down and then doesn't. Maybe its just taking really really long because I shut down last night and went to bed without checking to see if it was really going to shut down. The computer was off when I checked this morning. Maybe there's just a lot of stuff on the computer now that is slowing it down.

Anyway, the good news is I haven't had a browser redirect since that got fixed. Windows is also automatically updating. I just turned CA Security Suite back on. I can turn it off if you need me to. Or uninstall it and use something else. Your call.

Thanks!
Randy

[Jimmy2012]

Hello hondaxxman,

Maybe there's just a lot of stuff on the computer now that is slowing it down.

Is it slow other then shutting down? Have you tryed to run a disk defragmenter?

Or uninstall it and use something else. Your call.

You can use CA if you want, up to you.

[hondaxxman]

Hi Jimmy,

No, I haven't run a defrag, yet. I was waiting until all this fun was over.

OK, I'll continue to use CA.

So, where do we go from here, my friend?

Thanks!
Randy

[Jimmy2012]

Hello hondaxxman,

No, I haven't run a defrag, yet. I was waiting until all this fun was over.

Would you mind trying and see if it helps out at all?

So, where do we go from here, my friend?

Lets see if the disk defragmenter helped any first, then we can try other things.

[hondaxxman]

Hi Jimmy,

I'll run it tonight. I'm sure it will take awhile since that hasn't been done for awhile.

Thanks!

Randy

[Jimmy2012]

Ok