JeanInMontana

I can't help you if you won't follow instructions. I have never asked for a log from AVG. It shows it removed Vundo.... so why would vundofix not find it? When I ask for logs. I want to see those logs. You still have TeaTimer active. That is one of the first things you are asked to stop. It will keep tools from working, and it can cause F/P's. You still have the Symantec updater installed, you can remove it from add/remove programs. What were the errors from Avast? Warnings of infection perhaps? You are still infected. Turn off TeaTimer. Open SB S&D Make sure you are in Advanced Mode. Click on the Tools section and then Resident. You will see two items. 1. Resident "SD helper" (Internet Explorer bad download blocker.) active 2. Resident "Tea Timer" (Protection of over-all system settings.) active. Uncheck 2. Leave 1 checked always. You can enable Tea Timer again if you wish once all special fixes have been done. Run HJT in scan only and put a check next to these items then click fix. R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\admin\AppData\Local\Temp\cbxww.dll,c Now please update MBAM and run a full scan of C and post that log and a new HJT log.

Hi there Little Rem, and welcome to Malwarebytes. Make sure your running as an adminstrator on the machine. Allow email from Malwarebytes.org and set your preferences in the User Control Panel to email notifications for replies to your topics. This ensures you make prompt replies back and we get you cleaned in the fastest way possible. Please set your system to show all files; Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Under the Hidden files and folders heading select Show hidden files and folders. Uncheck the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK. If you haven't already, please get these programs, update and run a complete scan removing all items found. Spybot Search & Destroy Be sure to use the immunize feature. But do not enable TeaTimer at this time. Use the tutorial feature in the help tab to see how to go about this. Please run a full scan of your main drive, usually C with MBAM making sure you check all items found for removal. Please post that log in your next reply. Then go here and run a scan PandaActive Scan There is a full tutorial on how to to this at the top of this forum. Post the logs from the Panda and MBAM scans please, along with a log from this program HiJack This! You will post three logs. 1. MBAM scan. 2. Panda Active Scan. 3. HiJack This scan. Please run and post the scans in this order. You will finish the MBAM first so go ahead and post that log, then move on to Panda and so forth. I will analyze the logs and give you further instructions. Be sure to set your email to allow mail from Malwarebytes.org and your personal settings to send an email on reply to your topic. This will let you know when there has been an update to your topic and you can come and see what has been said. Be patient and persistent. These things can take time and many procedures.

due to lack of response this topic will now be closed. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Due to lack of response this topic will now be closed.

Since this topic has been resolved it will now be closed. Thanks to AdvancedSetup for your help it is much appreciated. Note: the fixes in this topic are for this system only. Applying them to your system can cause severe damage and result in utter system failure. If you need help start your own topic and someone will be happy to assist you.

Thank you for bringing it to our attention. We appreciate users letting us know of any problems, that's how MBAM gets to be better than the rest. Since this topic has been resolved I will now close it to prevent others from posting into it.

If you have the paid version I'm sure Winfixer is in the defs for prevention. Either version would remove.

It is my pleasure to announce the addition of AdvancedSetup to the moderation team here at Malwarebytes. I'm certain we will all come to appreciate and value what a great asset we have acquired.

You have been assigned a group soldier.

NP just sorting, so we can help.

Hi Mac and welcome to Malwarebytes!! Yes this is where most of my time is spent...not at my own site. LOL Everyone, Mac is one of my mods and the Linux guru. Please make him feel at home here.

OK here is what the lead researcher says. I have also pasted your new MBAM log into that topic. Sorry for the rude interjection into this topic it has been taken care of.

I wish things had been different Jim and if you need help on the reformat post to the general PC Help forum. We have some very knowledgeable people here. Many of these infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep Spybot Search & Destroy and always immunize when you update. You will also need at least one other scanning program AVG is good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use. A firewall and antivirus are also essential. The Windows firewall in XP is not sufficient. Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan. SpywareBlaster from Javacool Software WinPatrol by BillPStudios SiteHound by FireTrust RogueRemover hpHosts The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free Also the full protection of MBAM is offered at a very low price. Give it a trial using the link in my signature. The fixes in this topic are for this machine only. Applying them to another can cause severe damage. Should you need assistance read the post at the top of this page for Pre-HighJack This log posting and begin your own topic. Someone will be happy to help you.

Ok well I am sorry. The team is very busy right now with behind the scenes issues. Let's get another full system scan [C drive] with updated MBAM and see what its showing now. Please also recap any symptoms your having.

http://www.malwarebytes.org/forums/index.php?showtopic=2936 You need to follow those instructions. Post all logs in their entirety into the post box not as attachments please.

Possibly 2 issues definitely 1. I have posted this before. The quick scan doesn't run after auto update. There has been no scan run since 4/22/08 and I did see the update run today. I'm sure it did yesterday too but I was at work so didn't see it. Today update ran but I'm not sure it actually updated at 10 am, I did a manual update just now at 1:54 MDT and the defs were updated to 677. There are no scan logs between 4/22 and today and I haven't ran a manual scan since then either so I know it's not doing the auto scan scheduled with auto update.

It's excellent IMO. They actually listen to users when a bad site is reported.

Well, I have XP Pro 1.5 GHZ 1 gig of RAM. As HardHead says it will slow the system during an update, depending how much other stuff I have going at the time.

Loads fine for me. This is an old topic as far as MM being down.

This topic seems to be resolved or dead. To prevent others from posting to it I will close it. Should it need to be opened contact any staff member and we will do that for you. Thanks Screen317 for your most appreciated help! Note: The fixes here are for this system only. Applying to your system can cause severe damage. Please read the topic Pre HJT Post Instructions and begin your own topic if you need assistance.

Jim I'm going to go one more day and then close this, to prevent others from posting into it.

I did look at the log and that's why I mentioned it is not complete. Your issue is whether or not the line from MBAM is a F/P correct? Complete logs are what will help to determine this. Has anyone from the MBAM dev team been in contact and is this issue on going or resolved?

Hi blackcrowsfan [great band] and welcome to Malwarebytes. Your HJT log was missing important information and to reduce scroll time I removed it. Please follow the instructions at the top of this forum [moved you here also] and when the HJT log is copied to Notepad, post all of it. Someone will be happy to help you once the logs are pasted here.

Oooh it's AT&T behind this and based on Mozilla. I tend to agree with the critics saying entering the browser market is not the smartest move.