Trotafox

OK. I've decided not to run ComboFix. I cannot wait for 4-5 hours to have an answer to my questions. Because of that delay, I am not confident of your immediate response in the event something doesn't go right and my computer goes down. I will continue running full scans of Malwarebytes on a regular basis. You may close this topic. Thank you.

In the Desktop folder, I'm right-clicking on: Send To/Desktop/Create Shortcut I can't get the icon to show up.

HELP. My File Download did not give me a chance to save to my Desktop. I found it in Downloads. Right-clicked to moved it to Desktop menu. Did a Desktop(Create Shortcut). Cannot get it to appear on Desktop even though it shows up as a shortcut in the Desktop menu. I did it 4 times. When I click on Combofix.exe, I get the disclaimer. I don't want to run it until I can get the icon on my Desktop. I'm now reactivating my Norton while I'm waiting for your answer. Thank you.

Please address 2nd question: Do I run ComboFix first and then download the Anti-Root kit when ComboFix is finished?

1. Do I have to shut down Malwarebytes (Trial Version) or is it okay ? 2. Do I run ComboFix first and then download the Anti-Root kit when ComboFix is finished?

Do I have to shut off Malwarebytes somehow?

Here is my Malwarebytes log. Took over 2 hours. Found 1 Trojan in the Google Chrome application. I have a Java Update (jucheck.exe) that keeps flashing for my permission to update. I've canceled it but will that interfere with ComboFix run? Malwarebytes Anti-Malware (Trial) 1.65.1.1000 www.malwarebytes.org Database version: v2012.11.13.09 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Karen :: KAREN-PC [administrator] Protection: Enabled 11/14/2012 12:44:00 PM mbam-log-2012-11-14 (12-44-00).txt Scan type: Full scan (C:\|D:\|) Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 355422 Time elapsed: 2 hour(s), 18 minute(s), 56 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 1 C:\Program Files\Google\Chrome\Application\21.0.1180.83\chrome_frame_helper.exe (Trojan.Agent) -> Quarantined and deleted successfully. (end)

Running full system scan now.

Do I conduct full system scan or quick scan? Won't full system scan take a long time?

Hello, Dark Knight. Thank you for answering my questions. Glad to know that it will revert to the FREE version. I didn't want real time protection because of Norton 360. Should I run a full system Malwarebytes scan right now before we do ComboFix? Will the turning off of my Norton, etc. be while my wireless is still connected to Internet? Worried about access by my persistent never-ending IP attacker attempt going on. I run Carbonite backup in background which I must freeze I guess temporarily. So I can plans for being at my computer, approximately how long do you think this will take.

Good morning Dark Knight: Re FREE version download: I went through your link. There was only one option download button. I have found others on the Internet that are having the same problem…end up with Trial instead of Free. I now have 2 days left. Re Reinstall: How do I uninstall this version when this IP address is hitting my computer every 3 minutes non-stop for the last 2 weeks? The block shows up even with no programs open and running. Talk about annoying. What do you call a guy who keeps trying to find a back door into your computer non-stop? Per the Internet, a lot of people are having a problem with him. Re RootKit: Is that remote access capability? It's hitting Port 5900 via winvnc.exe. My computer crashed in June. Took one month and $800 to supposedly fix it. Something tells me he may not have cleaned off a Rootkit. He tried to put remote capability on my computer so he didn't have to come out again but I don't think he could do it for some reason. I have a Dell and Dell may have installed one also. I do get IP address conflict error messages, and my Dell All-in-One printer won't print without rebooting sometimes. I also get Jucheck.exe error messages that it can't run. My tech said to just ignore them. Ignore them? What's your opinion? Re BackUp: I have Carbonite running all the time for my files only; not entire system. To tell you the truth, I am scared to death to go through this ComboFix process myself.

I downloaded the FREE version from your link but it looks like the Trial version downloaded again. It said it was 43 days out of date so I updated it and did a scan and got this. Only one verson is on my computer when I looked at my All Programs and it is still the trial version. This is the scan. My computer is running fine and I have no reason to suspect malware. I would prefer not to run ComboFix at this time. Malwarebytes Anti-Malware (Trial) 1.65.1.1000 www.malwarebytes.org Database version: v2012.11.12.01 Windows Vista Service Pack 2 x86 NTFS Internet Explorer 9.0.8112.16421 Karen :: [i removed this.....] Protection: Enabled 11/11/2012 9:17:10 PM mbam-log-2012-11-11 (21-17-10).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 194426 Time elapsed: 7 minute(s), 45 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)

Be advised, I'm not a techie. Just an elderly lady trying to keep a hacker out. My computer is running okay. I don't think I'm infected so why am I running ComboFix? Can't I just download the Free version from here and let CNET's trial version expire? I can handle a download but the rest just seems over my head. I do not want to mess with the registry. My problem is that this guy is trying to hack into me regularly. When the trial version expires, I don't want a lapse time before I get the free version. I have Norton 360 which requires Windows Firewall to be turned off and I am not comfortable turning off Norton with this hacker.

I downloaded from CNET but accepted trial by mistake. It's running out in 3 days and I want the free version. My problem is that I have a hacker (180.130.251.27) from the Ukraine trying to break into my system via winvnc.exe. Malwarebytes is stopping him. He's been at it for 2 weeks now every 2 mins. I'm afraid if I let the trial version expire that he might get in before I can get the free version downloaded. Incidently, the hacker attempt window went away once. As soon as I performed a Malwarebytes Quick Scan, he came right back. I'm wondering if he is somehow somehow attached to the Malwarebytes CNET download or this is a CNET attempt to force me using fear of being hacked to buy the Pro version. What should I do?