[Dom Fontana]

Okay, here is the GMER log and I'll do the MBAM scan now.

One question. Do you want me to just attach the files to the message or also add them to the post? This time I just attached it.

Attached Files

•  GMER.txt   29.17KB   208 downloads

[Advertisements]

For the smaller ones a post wil do - the larger you can either attach or post your choice

It looks as though we may have to do a standalone virus scan with this, is the system still misbehaving ?

[Essexboy]

For the smaller ones a post wil do - the larger you can either attach or post your choice

It looks as though we may have to do a standalone virus scan with this, is the system still misbehaving ?

[Dom Fontana]

It found one Trojan Agent and deleted it. I attached the log.

The system has not crashed and seems to be more peppy and stable right now. That is good.

Attached Files

•  mbam-log-2011-05-01 (13-22-28).txt   955bytes   119 downloads

[Essexboy]

OK lets check to see if the replacement sptd worked

Could you re-run an ASWMbr scan please and post the log

[Dom Fontana]

Okay, I'll do that right now.

[Dom Fontana]

Here it is. There were 3 problems in red and indeed, one said Rootkit.

 aswMBR2.txt   1.61KB   134 downloads

[Essexboy]

When you run the scan is the FIX button available on completion or is it greyed out ?

[Dom Fontana]

I don't remember. I'll try it again.

Okay, I did it and the Fix button was available, but when I clicked it, it said Fix Error. Here is the log. I have to leave the computer for awhile, but will answer you later.

Thanks for all your help.

 aswMBR3.txt   1.8KB   150 downloads

Edited by Dom Fontana, 01 May 2011 - 11:55 AM.

[Essexboy]

OK I will prepare the deep scan post whilst we are waiting

[Dom Fontana]

Okay, whenever you're ready, please let me know what to do next.

Also note that on all the Web sites I visit, I have to log in each time, icncluding this site, even though I have Remember Me selected. I never had to do that before, so I imagine that is just temporary while we are troubleshooting, right?

Thanks.

[Essexboy]

This is a different one to the Kaspesky and it may not whitelist the sptd file.. If it should then I will remove the file and service, which is not without some risks, but by then I should be prepared for all eventualities

Download Dr Web from here http://www.freedrweb.com/?lng=en link on the top right of the page, tick the EULA and then download

It will download as an 8 digit file save it to your desktop

Restart in safe mode and run
Accept the enhanced version
Then run the quick scan
About halfway through you will be prompted to buy - just X the box closed
Once finished it will generate a log please attach that

[Dom Fontana]

Hi, Essex.

Okay, thanks so much. I am a litle busy now, but will do it a bit later.

Thanks.

[Essexboy]

No problem on the timing - whenever you can

[Essexboy]

OK the deletion of this file is not as scary as I thought - easy peasy in fact - but lets see if Dr Web can cure it first

[Dom Fontana]

Okay, I'll get to it later. Busy morning today. Easy peasy - I love it. hahaha.