JeanInMontana
-
Posts
3,859 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by JeanInMontana
-
-
No you didn't any of it. You did not turn off TeaTimer and you have posted a partial HJT log. Now please turn off TeaTimer and run a quick scan with MBAM after you update it and post that log and a new HJT log.
-
I did follow your instructions from your previous message. I submitted the 3 logs as requested on 17 Aug 08. I did start a new topic. Did I place the logs in the wrong forum? I do not know.
Should I re-submit them if so where?
Serge
I see your thread, you need to update MBAM, it's at version 1.25 now and post a new log from it for Tigger to see, and a new HJT log. Also as melboy has asked, are you referring to your email inbox as well as your quarantine folder?
-
Hi Rocky and sorry for your troubles. Please try this, search for all files associated with SpywareTerminator and delete them, and do the same for MBAM, reboot and download a fresh version of MBAM. Then go here http://www.malwarebytes.org/forums/index.php?showtopic=2936 and follow those instructions. Start a new topic there and post the requested logs.
-
hi melboy, Thanks for your response in this matter
the thing is I already deleted the quarantined files after the scan was completed since it stated that this was a Trojan and I was not aware of the f\p issues. So I -
Let's not get too carried away with praise for fixing a mistake quickly. It is still a mistake.
Sure, they happen, but fp's cause a lot of users a lot of problems... like brad here
What was he told to do?
That's the real story on a thread about a false positive. Not pats on the back for the guys who fix their own issues.
Oh please, who do you think you are? Obviously you have no idea about F/P's in other programs that take weeks to fix. Praise is so appropriate in this case, because the MBAM team not only fixes something when its found in a matter of an hour or two, but they also update the program 3 to 4 times a day. You don't find that anywhere period! You won't find a program that doesn't get a F/P either.
Just so happens Brad's issue is most like because he still has an infection.
-
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
Hi snowplow and welcome to Malwarebytes.
Open SB S&D
Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode.
Click on the Tools section and then Resident.
You will see two items.
1. Resident "SD helper" (Internet Explorer bad download blocker.) active
2. Resident "Tea Timer" (Protection of over-all system settings.) active.
Uncheck number 2..
Leave number 1 checked always.
You can enable Tea Timer again if you wish once all special fixes have been done.
Now update MBAM and run a quick scan again, post that log and a new HJT log please.
-
Hi there splashy, and welcome to Malwarebytes.
Make sure your running as an adminstrator on the machine. Allow email from Malwarebytes.org and set your preferences in the User Control Panel to email notifications for replies to your topics. This ensures you make prompt replies back and we get you cleaned in the fastest way possible.
Please set your system to show
all files; Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
If you haven't already, please get these programs, update and run a complete scan removing all items found.
Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time.
Open SB S&D
Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode.
Click on the Tools section and then Resident.
You will see two items.
1. Resident "SD helper" (Internet Explorer bad download blocker.) active
2. Resident "Tea Timer" (Protection of over-all system settings.) active.
Uncheck number 2..
Leave number 1 checked always.
You can enable Tea Timer again if you wish once all special fixes have been done.
Please run a quick scan of your main drive, usually C with MBAM making sure you check all items found for removal. Please post that log in your next reply.
Then go here and run a scan PandaActive Scan There is a full tutorial on how to to this at the top of this forum.
Post the logs from the Panda and MBAM scans please, along with a log from this program HiJack This!
You will post three logs. 1. MBAM scan. 2. Panda Active Scan. 3. HiJack This scan. Please run and post the scans in this order. You will finish the MBAM first so go ahead and post that log, then move on to Panda and so forth.
I will analyze the logs and give you further instructions. Be sure to set your email to allow mail from Malwarebytes.org and your personal settings to send an email on reply to your topic. This will let you know when there has been an update to your topic and you can come and see what has been said.
Be patient and persistent. These things can take time and many procedures.
-
[Just remove them. Rescan after the removal. Reboot if prompted.
Heavus
Heavus please refrain from giving any advice regarding malware removal. You are not qualified or approved at this forum.
-
Open the program and you will see several tabs. Quarantine is one. You might want to have someone have a look at your logs too, after you follow the instructions here http://www.malwarebytes.org/forums/index.p...;st=0#entry9894 and start your own topic.
-
Hi Andrew and welcome to Malwarebytes. Avast is still a very good program. These new version are just that, they mutate and become undetected by all programs for a period of time. MBAM is probably more aggressive in updating, often 3 to 4 times a day, but even at that there are things that need to be added. I suggest you have someone look over some logs for you and be sure your all clean too. Follow the instructions here http://www.malwarebytes.org/forums/index.p...owtopic=2936and start your own topic.
-
Ok Bruce. How reliable is the online scanner?
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.\n\n
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
Please don't post problems to more than one forum. This takes up the time of 2 helpers and can result in system damage as we don't know what the other is doing.
Since this issue has been resolved I will close it to prevent others from posting to it.
-
Hi and welcome to Malwarebytes. Please follow the instructions here http://www.malwarebytes.org/forums/index.php?showtopic=2936 . Then start your own topic in that forum and post the requested logs in the order requested.
-
If you have a sample upload it to here http://uploads.malwarebytes.org/. Who makes this scanner?
-
Please post a link to the page that won't load.
-
Those comments are about a version totally outdated, they are talking about 1.19 we are at 1.25. There is an issue that causes a BSOD in some machines. It's due to be taken care of in the next 2 to 3 weeks tops. Vundo mutates and gets missed by every program out there until the new version of Vundo is discovered and written into the defs. They are just unaware in one instance and correct in another.
I am a member of Betanews and I did add a review.
-
Hi 12Chris and welcome to Malwarebytes. Please go to here and follow those instructions then start your own topic in that forum and someone will be happy to help you.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
Since this topic has had no reply for over 5 days it will be closed to prevent other from posting into it. Should you decide to resume with your assistance PM any staff member and we will be happy to reopen the topic.
Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.
-
Hello and welcome to Malwarbytes. Please accept our sincere apologies for help offered by someone in no way associated with this site.
Your using an old and outdated version of HJT. Please follow the directions below and we will have a look at where you are in removal.
Make sure your running as an adminstrator on the machine. Allow email from Malwarebytes.org and set your preferences in the User Control Panel to email notifications for replies to your topics. This ensures you make prompt replies back and we get you cleaned in the fastest way possible.
Please set your system to show
all files; Click Start.
Open My Computer.
Select the Tools menu and click Folder Options.
Select the View Tab.
Under the Hidden files and folders heading select Show hidden files and folders.
Uncheck the Hide protected operating system files (recommended) option.
Click Yes to confirm.
Click OK.
If you haven't already, please get these programs, update and run a complete scan removing all items found.
Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time.
Open SB S&D
Make sure you are in Advanced Mode. Click on the Mode link at the top of the program and then Advanced Mode.
Click on the Tools section and then Resident.
You will see two items.
1. Resident "SD helper" (Internet Explorer bad download blocker.) active
2. Resident "Tea Timer" (Protection of over-all system settings.) active.
Uncheck number 2..
Leave number 1 checked always.
You can enable Tea Timer again if you wish once all special fixes have been done.
Please run a quick scan of your main drive, usually C with MBAM making sure you check all items found for removal. Please post that log in your next reply.
Then go here and run a scan PandaActive Scan There is a full tutorial on how to to this at the top of this forum.
Post the logs from the Panda and MBAM scans please, along with a log from this program HiJack This!
You will post three logs. 1. MBAM scan. 2. Panda Active Scan. 3. HiJack This scan. Please run and post the scans in this order. You will finish the MBAM first so go ahead and post that log, then move on to Panda and so forth.
I will analyze the logs and give you further instructions. Be sure to set your email to allow mail from Malwarebytes.org and your personal settings to send an email on reply to your topic. This will let you know when there has been an update to your topic and you can come and see what has been said.
Be patient and persistent. These things can take time and many procedures.
-
Your log looks clean. We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK.
Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it.
Many of these infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price.
the thing is I already deleted the quarantined files after the scan was completed since it stated that this was a Trojan and I was not aware of the f\p issues. So I
help with Malwarebyte
in Resolved Malware Removal Logs
Posted
No you didn't turn off TeaTimer it shows clearly in the part of the HJT log you posted.
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe