[Cinnamoroll]

VirSCAN.org Scanned Report :

Scanned time : 2010/05/28 20:42:51 (EDT)
Scanner results: Scanners did not find malware!
File Name : comctl32.dll
File Size : 1684480 byte
File Type : PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bi
MD5 : a5bb4537004c8dcc096a952ef1e20fe9
SHA1 : 9fb13fd723113c58677a36ebfb0a44a931bef64e
Online report : http://virscan.org/r...424403e8cb.html

Scanner Engine Ver Sig Ver Sig Date Time Scan result
a-squared 5.0.0.8 00050000000000 0005-00-00 0.56 -
AhnLab V3 ... .. -- 1.10 -
AntiVir 8.2.1.242 7.10.7.195 2010-05-28 0.25 -
Antiy 2.0.18 20100525.4450001 2010-05-25 0.02 -
Arcavir 2009 201005281720 2010-05-28 0.09 -
Authentium 5.1.1 201005280128 2010-05-28 3.08 -
AVAST! 4.7.4 100528-1 2010-05-28 0.11 -
AVG 8.5.793 271.1.1/2902 2010-05-29 0.24 -
BitDefender 7.90123.6104898 7.31885 2010-05-29 3.90 -
ClamAV 0.96.1 11096 2010-05-29 0.34 -
Comodo 3.13.579 4942 2010-05-25 0.87 -
CP Secure 1.3.0.5 2010.05.29 2010-05-29 0.47 -
Dr.Web 5.0.2.3300 2010.05.29 2010-05-29 7.51 -
F-Prot 4.4.4.56 20100528 2010-05-28 2.97 -
F-Secure 7.02.73807 2010.05.28.04 2010-05-28 11.21 -
Fortinet 4.1.133 11.992 2010-05-28 0.18 -
GData 21.248/21.82 20100529 2010-05-29 7.03 -
ViRobot 20100528 2010.05.28 2010-05-28 0.37 -
Ikarus T3.1.01.84 2010.05.28.75957 2010-05-28 6.71 -
JiangMin 13.0.900 2010.05.27 2010-05-27 1.22 -
Kaspersky 5.5.10 2010.05.28 2010-05-28 0.08 -
KingSoft 2009.2.5.15 2010.5.28.18 2010-05-28 0.64 -
McAfee 5400.1158 5996 2010-05-28 15.89 -
Microsoft 1.5802 2010.05.29 2010-05-29 6.47 -
Norman 6.04.12 6.04.00 2010-05-28 4.01 -
Panda 9.05.01 2010.05.27 2010-05-27 0.64 -
Trend Micro 9.120-1004 7.204.17 2010-05-28 0.04 -
Quick Heal 10.00 2010.05.28 2010-05-28 2.08 -
Rising 20.0 22.49.04.04 2010-05-28 0.54 -
Sophos 3.07.1 4.53 2010-05-29 3.63 -
Sunbelt 3.9.2424.2 6371 2010-05-28 9.20 -
Symantec 1.3.0.24 20100528.002 2010-05-28 0.07 -
nProtect 20100527.02 8509573 2010-05-27 8.72 -
The Hacker 6.5.2.0 v00288 2010-05-27 0.41 -
VBA32 3.12.12.5 20100527.2036 2010-05-27 3.20 -
VirusBuster 4.5.11.10 10.126.55/2032416 2010-05-28 3.58 -

[Advertisements]

Cheers. I want to check back through all your logs, I'll be back to you tomorrow

Edited by azarl, 29 May 2010 - 02:44 PM.

[azarl]

Cheers. I want to check back through all your logs, I'll be back to you tomorrow

Edited by azarl, 29 May 2010 - 02:44 PM.

[Cinnamoroll]

ok no prob

[azarl]

Your logs are now clean - you are clear or seem to be. It doesn't look like your problems are malware related

For your next step, I'd suggest posting your problem in the Windows Vista™ and Windows 7™ forum. Tell them you've been referred from the malware forum. After you've made your posting, please post a link to the page in your reply here, and I'll bring the responding tech up to date on your problem.

We'll move on to the cleanup now. There's a bit to do here, just take your time

To re-enable your Emulation drivers, double click DeFogger to run the tool.

• The application window will appear
• Click the Re-enable button to re-enable your CD Emulation drivers
• Click Yes to continue
• A 'Finished!' message will appear
• Click OK
• DeFogger will now ask to reboot the machine - click OK

IMPORTANT! If you receive an error message while running DeFogger, please post the log defogger_enable which will appear on your desktop.

Your Emulation drivers are now re-enabled.

Updates
Before we begin the actual cleanup, I'll just say a few words on the importance of updates. From time to time, software vendors introduce updates for their products. Sometimes these are to enhance the product, but often they are to repair an exploitable vulnerability. You may like to consider installing Secunia PSI. This is a free application (for home users) that sits in the system tray and alerts you when security updates are available, and where from. Secunia PSI can be downloaded from HERE

OTL Cleanup
A good workman always cleans up after himself so..Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.

Preventing re-infection
Now that your system is clear, there are a number of steps you can take to prevent re-infection

It is critical that you have both a firewall and anti virus to protect your system and to keep them updated.

Visit Microsoft's Windows Update Site Frequently - It is important that you visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

Winpatrol will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. Help file and tutorial can be found Here
SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
MVPS Hosts File - Blocks known bad sites by adding them to your Hosts file thereby preventing you from accessing them
TFC (Temp File Cleaner)- Cleans an enormous amount of junk held in temporary files and disposes of any malware lurking there.
Anti Spyware Program - We recommend MalwareBytes Anti-Malware and SUPERAntiSpyware

Browsers
Consider using FIREFOX or OPERA, both are free to use and are more secure than IE. If you are using Firefox you can stay more secure by adding NoScript and WOT (Web Of Trust). NoScript stops Java scripts from starting on a web page unless you give permission for them, and WOT has a comprehensive list of ratings for different websites allowing you to easily see if a website that you are about to go to has a bad reputation; in fact it will warn you to check if you are sure that you want to continue to a bad website.


Make your Internet Explorer more secure - This can be done by following these simple instructions:

• Run Internet Explorer
• Click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
• Change the Download unsigned ActiveX controls to Disable
• Change the Initialize and script ActiveX controls not marked as safe to Disable
• Change the Installation of desktop items to Prompt
• Change the Launching programs and files in an IFRAME to Prompt
• Change the Navigate sub-frames across different domains to Prompt
• When all these settings have been made, click on the OK button
• If it prompts you as to whether or not you want to save the settings, press the Yes button.
• Next press the Apply button and then the OK to exit the Internet Properties page.

[Cinnamoroll]

http://www.geekstogo...UP-t278232.html

[azarl]

Thanks. I've been in touch with Broni

[azarl]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.