JeanInMontana

Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Your log looks clean. We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK. Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it. Many of these infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use. A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient. Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan. Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions. SpywareBlaster from Javacool Software WinPatrol by BillPStudios SiteHound by FireTrust RogueRemover hpHosts The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free Also the full protection of MBAM is offered at a very low price. Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you. The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.

Sorry I didn't get notice of your reply. Please update MBAM do a quick scan and post that log and a new HJT log.

Update MBAM do a quick scan. Post that log and a new HJT log.

I'm not seeing malware. Did you scan with MBAM in normal boot? This is crucial to do that. You have some evidence of a past infection and possibly system damage. If you did scan with MBAM in normal mode then I would suggest you try a check disk for errors see if any are found.

OK Sooz I need you to find these files please C:\WINDOWS\system32\SonyIEx.exe C:\Documents and Settings\Valued Customer\My Documents\My Downloads\MouseAround10.exe And copy them to a folder you name MouseAround and right click the folder and choose send to zipped folder. Then go to this forum http://www.malwarebytes.org/forums/index.php?showforum=55 start your own topic and attach that file please. Now you posted a log from MBAM that is from yesterday and not updated. Please update MBAM and scan again. Post that log.

Glad we could help. We have a site.

No I didn't misunderstand. I wanted the link you got from the Google search. I'm wondering if the bot got the info before you hid it? A fluke that it was crawling at the same time you registered. But since I don't know what your seeing in your search I really have no idea.

Hi gabian and welcome to Malwarebytes. Do you get any error messages? I just updated with no problems from here. I do have the update revert to Securitywonks all the time but both are working for me.

Hi Sooz and welcome to Malwarebytes. Please follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936

OK great. Sorry about the HD.

Probably new stuff added with the update. I need a HJT log too please. Also update MBAM again, there is another version of the definitions.

Well it all boils down to the same thing. You get paid to do this at the help desk and your using a free program to do that. MBAM has a corporate license and that's what the school should be using to do this.

Usually it's fine to just install over. If not it will be noted in the release notes, in this forum.

Got a link to the search your referring to?

Hi Droopy and welcome to Malwarbytes. You need to put HJT into the folder it was meant to go into, named HiJackThis and in Program Files on the main drive, usually C:\ Program Files. Please do this and then update MBAM run another quick scan, post that log and a new HJT log.

I really don't like or use IE. Your using an older version and your missing the latest Service Pack for XP. Let's see one more log from MBAM. Be sure to update before the scan.

LOL OK, I'm glad you aren't installing stuff you have no idea what it is. I can assure all of you MBAM is indeed updating this fast. Be happy.

Yes MBAM is great and it is the leader in Vundo/Virtuomonde removal. Do you charge students for removal?

That's exactly what you were told to begin with. MBAM must be run under an admin account. Limited accounts will not work in Vista for any program installs or changes to the program. @ LordPake you are correct.

The topic here isn't about creating the definitions. People are actually complaining they get the updates too fast.

I would be delighted to give you my list of recommended programs. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient. Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan. Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions. MBAM Avira Antivir Spybot Search & Destroy Be sure to use the immunize feature. SpywareBlaster from Javacool Software WinPatrol by BillPStudios SiteHound by FireTrust RogueRemover hpHosts The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free Also the full protection of MBAM is offered at a very low price For life in my signature. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.

Not really, I fail to see why there is any doubt when every single clue that there has been an update is present. If there is a problem then we would want to get to the bottom of it ASAP. Digging for a bit more when it just seems there is no reason for doubting. Why are you downloading stuff you don't know what it is? Again, if the version numbers change and the fingerprints, the program has updated.

So your the school IT dept? Essentially a campus repair shop?

The logs look clean. How is it running?