Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Virus SEEMS gone, but now my wireless has gone all WONKY!


  • Please log in to reply

#1
Phlegmbot

Phlegmbot

    Member

  • Member
  • PipPipPip
  • 449 posts
Acccording to Avira te virus is: 'TR/Zlob.58025.1' [trojan]

I cleaned up with Avira, which says I'm clean (Full Scan), I used TFC, then MBAM (log below; I also did a FULL MBAM scan, says I'm clean), then SuperAntiSpyware -- all tell me I'm clear. But I've uninstalled and reinstalled my wireless drivers and I'm getting this weird thing where it loses the connection and tries to reconnect several times within a minute. This started around the time Avira found the virus.

Also: FYI: ERUNT couldn't backup my registry. I DL'd a version from here: http://www.larsheder...nline.de/erunt/ and that one worked.

I'm moving on to steps 4 and on and will post udpates, but any advice on this particular oddity would be appreciated.

I'm also getting an error from Microsoft NET framework. An image of this is attached here and below. And the text from the error "details" is below the MBAM log.
2010-07-25_221708.jpg


MBAM Log:
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4347

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

7/25/2010 9:46:30 PM
mbam-log-2010-07-25 (21-46-30).txt

Scan type: Quick scan
Objects scanned: 135124
Time elapsed: 3 minute(s), 44 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)


===============================================
2010-07-25_221708.jpg

See the end of this message for details on invoking
just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************
System.ArgumentOutOfRangeException: Cannot anchor balloon at position '{X=1628,Y=0}.' The point is not contained within the visible bounds of any screen.
Parameter name: point
Actual value was {X=1628,Y=0}.
at Rilling.Common.UI.Forms.BalloonWindow.MoveAnchorTo(Point point, Point pivot)
at Rilling.Common.UI.Forms.BalloonWindow.MoveAnchorTo(Point point)
at Rilling.Common.UI.Forms.BalloonWindow.Show(Point pt)
at Swapdrive.Client.Screens.FormMain.ShowCustomBalloon(CustomBalloonType balloonType)
at Swapdrive.Client.Screens.FormMain.OnTrayMouseOver(Object sender, MouseEventArgs e)
at System.Windows.Forms.NotifyIcon.OnMouseMove(MouseEventArgs e)
at System.Windows.Forms.NotifyIcon.WmMouseMove(Message& m)
at System.Windows.Forms.NotifyIcon.WndProc(Message& msg)
at System.Windows.Forms.NotifyIcon.NotifyIconNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)


************** Loaded Assemblies **************
mscorlib
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll
----------------------------------------
DataSafeOnline
Assembly Version: 1.1.0.12260
Win32 Version: 1.1.0.12260
CodeBase: file:///C:/Program%20Files%20(x86)/Dell%20DataSafe%20Online/DataSafeOnline.exe
----------------------------------------
System
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll
----------------------------------------
SdbShared
Assembly Version: 1.1.0.12260
Win32 Version: 1.1.0.12260
CodeBase: file:///C:/Program%20Files%20(x86)/Dell%20DataSafe%20Online/SdbShared.DLL
----------------------------------------
System.Windows.Forms
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll
----------------------------------------
System.Drawing
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll
----------------------------------------
BalloonWindow
Assembly Version: 1.2.0.0
Win32 Version: 1.2.0.0
CodeBase: file:///C:/Program%20Files%20(x86)/Dell%20DataSafe%20Online/BalloonWindow.DLL
----------------------------------------
SdbUI
Assembly Version: 1.1.0.12260
Win32 Version: 1.1.0.12260
CodeBase: file:///C:/Program%20Files%20(x86)/Dell%20DataSafe%20Online/SdbUI.DLL
----------------------------------------
System.Web.Services
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Web.Services/2.0.0.0__b03f5f7f11d50a3a/System.Web.Services.dll
----------------------------------------
System.Xml
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll
----------------------------------------
System.Configuration
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll
----------------------------------------
SdbShared.XmlSerializers
Assembly Version: 1.1.0.12260
Win32 Version: 1.1.0.12260
CodeBase: file:///C:/Program%20Files%20(x86)/Dell%20DataSafe%20Online/SdbShared.XmlSerializers.DLL
----------------------------------------
System.Management
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Management/2.0.0.0__b03f5f7f11d50a3a/System.Management.dll
----------------------------------------
Accessibility
Assembly Version: 2.0.0.0
Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)
CodeBase: file:///C:/Windows/assembly/GAC_MSIL/Accessibility/2.0.0.0__b03f5f7f11d50a3a/Accessibility.dll
----------------------------------------

************** JIT Debugging **************
To enable just-in-time (JIT) debugging, the .config file for this
application or computer (machine.config) must have the
jitDebugging value set in the system.windows.forms section.
The application must also be compiled with debugging
enabled.

For example:

<configuration>
<system.windows.forms jitDebugging="true" />
</configuration>

When JIT debugging is enabled, any unhandled exception
will be sent to the JIT debugger registered on the computer
rather than be handled by this dialog box.

Edited by Phlegmbot, 25 July 2010 - 09:13 PM.

  • 0

Advertisements


#2
Phlegmbot

Phlegmbot

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 449 posts
I just started running GMER.

It gave me this error right off the bat -- also, please note the panel on the right, how it does NOT match the panel in the guide...

2010-07-25_221708AAAAA.jpg

At the end of the scan it told it "didn't find any system modification"...but did it scan everything??? (Did I really need THREE question marks?)

And OTL will NOT run. At all. I tried running as administrator...it simply won't open.

Edited by Phlegmbot, 25 July 2010 - 09:01 PM.

  • 0

#3
Phlegmbot

Phlegmbot

    Member

  • Topic Starter
  • Member
  • PipPipPip
  • 449 posts
Problem resolved.

I unplugged/reset all of my modem/wireless-related devices for 10 minutes, restarted, and we're good.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP