JeanInMontana
-
Posts
3,859 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by JeanInMontana
-
-
Hi there jms510 and welcome to Malwarebytes. I need you to get a copy of these files for me please.
Please set your system to show
all files; Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\rqiqgs.dll
Put these into a zipped folder and attach to your next reply.
-
OK, great. I'm sure it's been added by now since there have been three downloads. Update MBAM and scan post the log and a new HJT log.
-
Any firewall that does it's job is going to ask for permission of a new version of a program. It has nothing to do with the shortcut. You can also choose during install whether or not to install a shortcut and you can delete the shortcut. If your going to test MBAM any test file will be detected. If you want to see how MBAM has worked on infected machines do a Google search for some key terms: Vundo, Zlob, Winantivirus, malware, and of course MBAM and see what is said. You can even read the Malware Removal - HijackThis Log forum here and see how it works.
-
A bump. Also for the people telling me removing the hard drive and scanning it as a secondary isn't needed at all, I'd appreciate your advice at this point since apparently you know how to get around this..since apparently alot of people have read the post but nobody has a solution.
Perhaps scanning it as a secondary drive is a solution !?!?!
I would think in this case yes. When this came up before it was a totally different set of circumstances if I remember correctly.
-
What is your concern with your IP address? You use AOL and they will change your IP every time you connect through them to the real internet. What IP are you getting the no host name message on?
-
Please have it scanned http://www.virustotal.com/ that will tell us if it should stay or go, and if it comes up malware then please attach a zipped folder of it to this thread for inclusion in MBAM.
-
We have ruled out every possible item that can be malware causing your issues. Our best advice now is a repair install or to a professional shop.
-
MBAM is designed to remove malware as effectively with a quick scan as it will with a full scan. It's hard to say what might have gone on without a log. What drives did you scan? C or what ever your main drive letter is would be all that is really needed to scan. Scanning the DVD/CD drives is pointless.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
What are we doing here Sunshine?
-
I need to be sure I'm seeing the HJT log after the removal. Be sure to update MBAM.
-
Hello Lutvann and welcome to Malwarbytes. Please follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936 and begin your own topic in that forum. For you safety do not follow advice of posters not approved to give advice at this forum.
-
Well Vundo is not a virus, so your excellent knowledge failed you there.
The only thing you have said that is an absolute truth is avoid getting infected in the first place.
-
Thank you - JeanInMontana. I will follow your link. What Antivirus and Firewall do you recommend?
I use and recommend Avira free for antivirus and OnlineArmor firewall, free. The Windows firewall does not alert to out going traffic and that is often your first clue of malware.
If you are using this computer just for home use Avira AntiVir is free and works great, and it isn't a resource hog.Doesn't matter if at home, at work or at play, Avira is a great AV program.
-
Don't open spam email, don't click on links if you do open them. Don't post your email on the www anywhere, don't forward email with addresses in them. When an email asks you to log onto what ever account, if you even have this account then open a new browser window and log on. Then see if there is indeed any business you need to attend for that account. Rarely is that the case.
-
Hi there kgom and welcome to Malwarebytes. We have got yourself a new strain and we need that file to fix you.
Please set your system to show
all files; Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
Now find this file below and put it in a zip file and attach to this post. We will get it into MBAM definitions ASAP and get you fixed.
C:\WINDOWS\system32\AdavVideoDe.dll
-
We aren't done....
Your log looks clean. We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK.
Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it.
Your running an outdated and unsafe version of Adobe Acrobat Reader latest version. Or get the alternative faster lighter on resources Foxit PDF Reader and Editor Look at the Downloads tab here or Downloads if you don't want to see the features etc.
Many of these infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price.
-
Well the MBAM log you posted here shows you took no action. I need to see a new one and a new HJT log after you remove what MBAM finds.
-
What version of MBAM are you using? Are you doing a quick scan or full system scan? What part of the scan does it stop at, are you able to see where in the scan process it gets before failure? Try right clicking and running as an administrator, and doing a quick scan only.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
Possible successful XP antivirus 2008 removal
in Resolved Malware Removal Logs
Posted
Dave I'm glad we got you fixed up. Surf safe.
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.