lurkingatu2
-
Posts
173 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by lurkingatu2
-
-
hello
updated to mbam 1.23 from with in the program on both my pc's with no problems
pc 1
Malwarebytes' Anti-Malware 1.23
Database version: 986
Windows 5.1.2600 Service Pack 2
11:16:15 AM 7/24/2008
mbam-log-7-24-2008 (11-16-15).txt
Scan type: Quick Scan
Objects scanned: 38615
Time elapsed: 4 minute(s), 4 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
pc 2
Malwarebytes' Anti-Malware 1.23
Database version: 986
Windows 5.1.2600 Service Pack 3
10:58:33 AM 7/24/2008
mbam-log-7-24-2008 (10-58-33).txt
Scan type: Quick Scan
Objects scanned: 39773
Time elapsed: 2 minute(s), 15 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
-
hello
updated both my pc's to mbam 1.21 with no problems
pc 1
win xp pro sp2 256 mem using windows firewall and Avira PE
uninstalled mbam installed full version mbam 1.21
Malwarebytes' Anti-Malware 1.21
Database version: 966
Windows 5.1.2600 Service Pack 2
7:04:14 PM 7/18/2008
mbam-log-7-18-2008 (19-04-14).txt
Scan type: Quick Scan
Objects scanned: 39397
Time elapsed: 4 minute(s), 4 second(s)
Scan type: Full Scan (C:\|)
Objects scanned: 67100
Time elapsed: 17 minute(s), 7 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
pc 2
win xp pro sp3 MCE 512 mem windows firewall and Avria PE
installed within the program to mbam 1.21 free
Malwarebytes' Anti-Malware 1.21
Database version: 966
Windows 5.1.2600 Service Pack 3
7:02:09 PM 7/18/2008
mbam-log-7-18-2008 (19-02-09).txt
Scan type: Quick Scan
Objects scanned: 40466
Time elapsed: 2 minute(s), 6 second(s)
Scan type: Full Scan (C:\|)
Objects scanned: 80973
Time elapsed: 11 minute(s), 3 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
-
here you go 2Ton
click the Start Menu, Run, and type the following:
mbam.exe /developer there is a space between the e and /
-
ok Jean i can't find it lol
all i see when i click that link is Sorry, an error occurred. If you are unsure on how to use a feature, or don't know why you got this error message, try looking through the help files for more information.
The error returned was:
Sorry, the link that brought you to this page seems to be out of date or broken.
do i have to ask or something ? to get in there
so i'm asking please pretty please lol
-
hello
well i uninstalled OA beta 151 cleaned up and then uninstalled Mbam 1.19 and reinstalled
Mbam 1.19 with just windows firewall and Avira Antivir Pe and i still get Mbam using
cpu every 30 sec. or so and sometimes that error in event viewer about Mbam's driver
not unloading on restart
then i uninstalled Avira Antivir Pe cleaned up ran Avira's reg cleaner then uninstalled
Mbam 1.19 and cleaned up reinstalled Mbam with just windows firewall running and i still
get Mbam using cpu every 30 sec. but after like 8 or so restarts of the pc i doin't see
nothing in the event viewer about Mbam's driver not unloading
thanks
-
hello
pc1 win xp pro sp2 with Mbam full version Avira Antivir Pe Online Armor 150 beta
i uninstalled mbam 1.18 with revo uninstaller and installed mbam 1.19 with no problems
restarted now with the realtime guard on about every 30 sec. i'm getting mbamservice.exe
using cpu for about 30 sec. it goes up and down between 90% 20% 40% 10%
so i made Avira Antivir not start at startup and it is still the same so i made OA 150 beta
not start at startup and it's still doing it with windows firewall and just mbam 1.19 running
i'v restarted a bunch and it's still the same
in event viewer after installing i still get 1 error eventid:1 mbamservice
The description for Event ID ( 1 ) in Source ( MBAMService ) cannot be found. The local computer
may not have the necessary registry information or message DLL files to display messages from a remote computer.
You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details.
The following information is part of the event: MBAMService, Error: MBAM driver unloading failed.
also i email my mbam log from 1 pc to the other with yahoo to post it here and when i opend the attachment i sent
mbam must of tryed to scan it because in event viewer i see this about the sametime i opend it but i'v
tryed to get mbam to do it again but i doin't see it in event viewer now when i try to do it again
theres about 62 errors eventid:1 mbamservice
The description for Event ID ( 1 ) in Source ( MBAMService ) cannot be found. The local computer
may not have the necessary registry information or message DLL files to display messages from a remote computer.
You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details.
The following information is part of the event: MBAMService, Error: Scanner::GetMD5 failed.
with the realtime guard on the quick scan take longer to start and run but with it off it scans
faster
Malwarebytes' Anti-Malware 1.19
Database version: 900
Windows 5.1.2600 Service Pack 2
3:45:46 PM 6/28/2008
mbam-log-6-28-2008 (15-45-46).txt
Scan type: Quick Scan
Objects scanned: 40561
Time elapsed: 4 minute(s), 27 second(s)
Malwarebytes' Anti-Malware 1.19
Database version: 900
Windows 5.1.2600 Service Pack 2
4:06:42 PM 6/28/2008
mbam-log-6-28-2008 (16-06-42).txt
Scan type: Quick Scan
Objects scanned: 40571
Time elapsed: 3 minute(s), 28 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
pc2 win xp pro MCE sp2 Mbam free Online Armor free 2.1.0.131 Avria Antivir Pe
updated mbam to 1.19 from within the program with no problem
Malwarebytes' Anti-Malware 1.19
Database version: 899
Windows 5.1.2600 Service Pack 2
1:15:36 PM 6/28/2008
mbam-log-6-28-2008 (13-15-36).txt
Scan type: Quick Scan
Objects scanned: 41521
Time elapsed: 2 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
-
now if it gets a bsod it should make a dump file in c:\windows\Minidump and attach it here
-
if your using winxp try going in the control panel and open system properties
click on advanced at startup and recovery click on settings
in startup and recovery under system failure make sure there is a check in
write an event to system log
send an administrative alert
under write debugging information make sure you have
small memory dump (64 kb)
and small dump directory as
%systemroot%\Minidump
also in system properties advanced under error reporting make sure to put a check in
enable error reporting
windows operating system
programs
then under choose programs put a check in
all programs
programs from microsoft
windows components
-
here you go
UploadNET
-
hello
updated pc 1 to mbam 1.18 from with in the program no problem
this pc was running just windows xp sp2 firewall and Avira Pe free
Malwarebytes' Anti-Malware 1.18
Database version: 871
7:17:32 PM 6/19/2008
mbam-log-6-19-2008 (19-17-32).txt
Scan type: Quick Scan
Objects scanned: 39654
Time elapsed: 3 minute(s), 1 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Malwarebytes' Anti-Malware 1.18
Database version: 871
7:14:12 PM 6/19/2008
mbam-log-6-19-2008 (19-14-12).txt
Scan type: Full Scan (C:\|)
Objects scanned: 68974
Time elapsed: 9 minute(s), 49 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
updated pc 2 from with in the program to mbam 1.18 free with no problem
this pc was running Online Armor 2.1.131 free and Avira Pe free win MCE xp sp2
Malwarebytes' Anti-Malware 1.18
Database version: 871
7:08:37 PM 6/19/2008
mbam-log-6-19-2008 (19-08-37).txt
Scan type: Quick Scan
Objects scanned: 40816
Time elapsed: 2 minute(s), 29 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Malwarebytes' Anti-Malware 1.18
Database version: 871
7:16:35 PM 6/19/2008
mbam-log-6-19-2008 (19-16-35).txt
Scan type: Full Scan (C:\|)
Objects scanned: 73373
Time elapsed: 7 minute(s), 40 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
-
ok thank you so very much
-
hello
sorry it took so long i seen you post but i was running chkdsk on this laptop watching the craftsman
truck race (great finsh) on my pc and reading you post on my other lol
Malwarebytes' Anti-Malware 1.17
Database version: 856
2:13:45 PM 6/14/2008
mbam-log-6-14-2008 (14-13-45).txt
Scan type: Quick Scan
Objects scanned: 39155
Time elapsed: 6 minute(s), 22 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:14:42 PM, on 6/14/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [updateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe /r
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptop
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {C86FF4B0-AA1D-46D4-8612-025FB86583C7} (AstoundLauncher Control) - http://zone.msn.com/bingame/jobo/default/A...ersion=1,0,0,10
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Personal
-
ok i uploaded them there was 2 cpqset.exe in HPQ so i sent both also i forgot in my last post
i forgot to say i could not find that dxdllreg.exe
also is it ok to remove this because there is no AOL on here no more
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:22:15 PM, on 6/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [updateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe /r
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptop
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {C86FF4B0-AA1D-46D4-8612-025FB86583C7} (AstoundLauncher Control) - http://zone.msn.com/bingame/jobo/default/A...ersion=1,0,0,10
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Personal
-
ok here you go
ComboFix 08-06-12.2 - sharon 2008-06-13 15:31:26.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.206 [GMT -7:00]
Running from: C:\Documents and Settings\sharon\Desktop\ComboFix.exe
Command switches used :: C:\Documents and Settings\sharon\Desktop\WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
* Created a new restore point
.
((((((((((((((((((((((((( Files Created from 2008-05-13 to 2008-06-13 )))))))))))))))))))))))))))))))
.
2008-06-13 09:54 . 2008-06-13 09:54 <DIR> d-------- C:\Program Files\FastStone Capture
2008-06-13 09:54 . 2008-06-13 09:54 <DIR> d-------- C:\Documents and Settings\sharon\Application Data\FastStone
2008-06-12 19:57 . 2008-06-13 12:14 <DIR> d-------- C:\Program Files\Panda Security
2008-06-12 18:45 . 2008-06-12 18:45 <DIR> d-------- C:\WINDOWS\system32\Adobe
2008-06-12 16:21 . 2008-06-12 16:22 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-06-12 16:21 . 2008-06-12 16:24 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-06-12 15:37 . 2008-06-12 15:39 <DIR> d-------- C:\Program Files\EsetOnlineScanner
2008-06-12 12:56 . 2008-06-12 12:56 <DIR> d-------- C:\Program Files\CCleaner
2008-06-12 12:55 . 2008-06-12 12:55 <DIR> d-------- C:\Program Files\UPHClean
2008-06-12 12:38 . 2008-06-12 12:38 <DIR> d-------- C:\Program Files\VS Revo Group
2008-06-12 02:26 . 2008-06-12 02:26 <DIR> d-------- C:\Documents and Settings\sharon\Application Data\Apple Computer
2008-06-11 19:51 . 2008-06-11 19:51 <DIR> d-------- C:\Program Files\Auslogics
2008-06-11 19:51 . 2008-06-11 19:51 <DIR> d-------- C:\Documents and Settings\sharon\Application Data\Auslogics
2008-06-11 19:45 . 2008-06-12 13:54 <DIR> d-------- C:\Program Files\SpywareBlaster
2008-06-11 17:54 . 2008-06-13 09:42 <DIR> d-------- C:\Program Files\a-squared Free
2008-06-11 17:25 . 2008-06-11 17:25 <DIR> d-------- C:\Program Files\Trend Micro
2008-06-11 17:22 . 2008-06-11 17:22 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2008-06-11 17:22 . 2008-06-11 17:22 <DIR> d-------- C:\Documents and Settings\sharon\Application Data\SUPERAntiSpyware.com
2008-06-11 17:21 . 2008-06-11 17:21 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-06-11 17:21 . 2008-06-11 17:21 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-06-11 17:21 . 2008-06-11 17:21 <DIR> d-------- C:\Documents and Settings\sharon\Application Data\Malwarebytes
2008-06-11 17:21 . 2008-06-11 17:21 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-06-11 17:21 . 2008-06-10 19:02 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys
2008-06-11 17:21 . 2008-06-10 19:02 15,864 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-06-11 17:08 . 2008-06-11 17:08 <DIR> d-------- C:\Program Files\Avira
2008-06-11 17:08 . 2008-06-11 17:08 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-06-11 16:19 . 2008-06-11 16:19 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-06-11 15:57 . 2008-04-14 04:01 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys
2008-05-29 15:28 . 2008-02-22 02:33 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-05-25 13:04 . 2008-05-25 13:05 <DIR> d-------- C:\Program Files\Atlantis_at
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-06-12 20:54 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-12 20:47 --------- d-----w C:\Program Files\Google
2008-06-12 20:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-06-12 20:09 --------- d-----w C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
2008-06-12 19:45 --------- d-----w C:\Program Files\Kodak
2008-06-12 19:45 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kodak
2008-06-12 17:39 --------- d-----w C:\Program Files\Games
2008-06-12 17:38 --------- d-----w C:\Program Files\AztecBricks_at
2008-05-29 23:30 --------- d-----w C:\Documents and Settings\sharon\Application Data\MSN6
2008-05-29 22:35 --------- d-----w C:\Program Files\JewelQuest_at
2008-05-29 22:28 --------- d-----w C:\Program Files\Java
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys
2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\dllcache\rmcast.sys
2008-05-07 05:18 1,287,680 ----a-w C:\WINDOWS\system32\quartz.dll
2008-05-07 05:18 1,287,680 ----a-w C:\WINDOWS\system32\dllcache\quartz.dll
2008-04-21 07:04 659,456 ----a-w C:\WINDOWS\system32\wininet.dll
2008-04-21 07:04 659,456 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll
2008-04-21 07:04 615,936 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll
2008-04-21 07:04 474,112 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll
2008-04-21 07:04 1,494,528 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll
2008-04-17 10:52 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe
2008-04-14 11:01 272,128 ----a-w C:\WINDOWS\system32\dllcache\bthport.sys
2008-03-27 08:12 151,583 ----a-w C:\WINDOWS\system32\msjint40.dll
2008-03-27 08:12 151,583 ----a-w C:\WINDOWS\system32\dllcache\msjint40.dll
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\win32k.sys
2008-03-19 09:47 1,845,248 ----a-w C:\WINDOWS\system32\dllcache\win32k.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2003-10-30 01:46 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2003-10-30 01:33 118784]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-05-26 10:15 98304]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-26 10:15 536576]
"HP Software Update"="C:\Program Files\HP\HP Software Update\HPWuSchd.exe" [2003-08-04 17:28 49152]
"HP Component Manager"="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [2004-05-12 15:18 241664]
"eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-07-30 09:33 286720]
"Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-04-30 11:32 208958]
"DXDllRegExe"="dxdllreg.exe" []
"UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 01:01 110592]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-12 10:06 262401]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]
[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 10:13 77824]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"quickcare"=C:\Program Files\Qwest\QuickCare\bin\sprtcmd.exe /P QUICKCARE
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\WINDOWS\\system32\\sessmgr.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=
"C:\\Program Files\\MSN\\MSNCoreFiles\\msn.exe"=
"C:\\Program Files\\Internet Explorer\\IEXPLORE.EXE"=
*Newly Created Service* - CATCHME
*Newly Created Service* - HTTPFILTER
.
**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-06-13 15:32:36
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
HKLM\Software\Microsoft\Windows\CurrentVersion\Run
Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe????????8?3?3?3??????? ???B???????????????B? ??????
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 2008-06-13 15:34:46
ComboFix-quarantined-files.txt 2008-06-13 22:34:38
Pre-Run: 31,884,337,152 bytes free
Post-Run: 31,859,056,640 bytes free
WindowsXP-KB310994-SP2-Home-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Home Edition" /noexecute=optin /fastdetect
C:\CMDCONS\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
129 --- E O F --- 2008-06-11 23:06:49
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:37:50 PM, on 6/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [updateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe /r
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptop
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {C86FF4B0-AA1D-46D4-8612-025FB86583C7} (AstoundLauncher Control) - http://zone.msn.com/bingame/jobo/default/A...ersion=1,0,0,10
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Personal
-
hello Jean hope your doing good
i was watching nascar qualifying on wheels that shows the speed channel with the TVUPlayer
but had to switch to this lappy lol ok here you go i'v quarantined everything i'v found so far
Avira is just finding the 2 games i uninstalled in system restore and i'll delete them last
Malwarebytes' Anti-Malware 1.17
Database version: 854
1:29:25 PM 6/13/2008
mbam-log-6-13-2008 (13-29-25).txt
Scan type: Quick Scan
Objects scanned: 39051
Time elapsed: 5 minute(s), 34 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:34:30 PM, on 6/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [updateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe /r
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptop
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {37DF41B2-61DB-4CAC-A755-CFB3C7EE7F40} - http://esupport.aol.com/help/acp2/engine/aolcoach_core_1.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab
O16 - DPF: {C86FF4B0-AA1D-46D4-8612-025FB86583C7} (AstoundLauncher Control) - http://zone.msn.com/bingame/jobo/default/A...ersion=1,0,0,10
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Personal
-
hello
ok i'm doing this for a friend of my dads she is about 65-70 when i got it the sound was turned off
when i turned it on i could hear a phone ringing then it would stop for a few and start to ring again
over and over also i could hear a cork pop sound over and over and it was not online lol so i went in
to sounds and audio in the control panel and put the sound scheme back to defalt and the sounds stoped
ok heres what i have done so far she had took off Avira and comodo that i put on last year and did not
update or scan with Superantispyware or Avg antispyware and was just using windows firewall
avg antispyware i quarantined
adware whyppc
mbam i quarantined
Registry Keys Infected:
HKEY_CURRENT_USER\Software\Trymedia Systems (Adware.Trymedia) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Screensavers.com (Adware.Comet) -> No action taken.
Registry Data Items Infected:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowSearch (Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\StartMenuLogOff (Hijack.StartMenu) -> Bad: (1) Good: (0) -> No action taken.
a-squared i quarantined
Value: HKEY_LOCAL_MACHINE\SOFTWARE\RealTime Gaming Software --> RTGCLSID detected: Trace.Registry.Diamond Deal Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Casino\ITSM --> cookie detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Detect --> BD detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Detect --> DXVerN detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Detect --> FlashVerN detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Detect --> IEVerN detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Detect --> ScreenX detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\MicroGaming\Thumper\Detect --> ScreenY detected: Trace.Registry.Phoenician Casino
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\CasinonetInstaller --> fullpath detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\CasinonetInstaller --> INSTALLER_GUID detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\CasinonetInstaller --> URL_CASINO_2 detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> serial detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> test_data detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\SDL --> Upd_Flag detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\SDL --> Upg_Date detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> COOKIE_ID detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> DEMO_PASSWORD detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> DEMO_USERNAME detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> P detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\init --> P1 detected: Trace.Registry.CasinoOnNet
Value: HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino\Movies --> LobbyMovAct detected: Trace.Registry.CasinoOnNet
C:\WINDOWS\$NtUninstallKB896423$\spoolsv.exe detected: Worm.Win32.Otwycal.k<--- i scaned at virus,org only a-2 and prevex(trojan,downloader.gen) found it so i think a f/p
scaned it at jotti also and nothing
spybot s&d found wildtangent that i left because of games on the pc
i quarantined
Cassava: [sBI $FFCCB2E4] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet\casino
Cassava: [sBI $63C16629] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\casinoonnet
Cassava: [sBI $A71030A2] Settings (Registry key, nothing done)
HKEY_USERS\S-1-5-21-1173631084-2267833327-4106529673-1007\Software\CasinonetInstaller
Avira Antivir doint find this no more
C:\Downloads\WinBej2Setup.exe
[DETECTION] Is the Trojan horse TR/Agent.9828960<---- i uninstalled
[WARNING] The file was ignored!
C:\Program Files\AztecBricks_at\Aztec Bricks.exe<----- uninstalled
[DETECTION] File has been compressed with an unusual runtime compression tool (PCK/Molebox). Please verify the origin of the file
[WARNING] The file was ignored!
i scaned at eset online scan and found nothing i tryed panda online and after 7 hours of it scanning and getting
to only 42% i gave up
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:48:05 AM, on 6/13/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\HP\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\UPHClean\uphclean.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...n&pf=laptop
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [updateManager] C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe /r
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iehome&locale=EN_US&c=Q304&bd=pavilion&pf=laptop
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
O16 - DPF: {37DF41B2-61DB-4CAC-A755-CFB3C7EE7F40} - http://esupport.aol.com/help/acp2/engine/aolcoach_core_1.cab
O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.mcafee.com/molbin/shared/m...01/mcinsctl.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/...ro.cab56649.cab
O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.mcafee.com/molbin/shared/m...,26/mcgdmgr.cab
O16 - DPF: {C86FF4B0-AA1D-46D4-8612-025FB86583C7} (AstoundLauncher Control) - http://zone.msn.com/bingame/jobo/default/A...ersion=1,0,0,10
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Avira AntiVir Personal
-
well i gave it a run with virscan,org
File Name : mbam-setup.exe
File Size : 1677198 byte
File Type : MS-DOS executable (EXE), OS/2 or MS Windows
MD5 : 34fbc4a8ad7d96866b30ec57845c84ed
SHA1 : 580a945c99b547db5993748ec4a3fbeb734dcc95
ewido 4.0.0.2 2008.06.12 2008-06-12 Not-A-Virus.Adware.EShoper
Prevx V2 20080613 2008-06-13 TROJAN.DOWNLOADER.GEN
VBA32 3.12.6.7 20080612.1416 2008-06-12 Trojan.Hooker.31
i downloaded mbam from major geeks
-
hello
i'm cleaning a laptop and installed mbam 1.17 and did a scan with AVG antispyware
and it's finding
not a virus adware,eshoper in mbam-setup.exe
thanks
-
ok on pc 1 with the full version
i installed over mbam 1.17 with protection on intaslled ok i restarted the pc
i'm running a beta of Online Armor and had it in learning mode and Aviras guard
off and tryed to start a quick scan and it hung
so i closed and shutdown OA and it would do a quick scan so then i restarted again
samething so i restarted one more time and now all works fine even with OA running
on pc 2 with the free version i updated later after the fix and no problems i also
did a full and quick scan on both ok
thanks
-
hello
updated mbam from 1.16 to 1.17 from with in the program now when i start mbam 1.17
from the tray icon or desktop icon the tray icon goes away and comes back then when
mbam opens it popsup with malwarebytes antimalware protection module is now protecting
your computer so i click ok this happens everytime i start mbam 1.17
i did a full and quick scan ok
Malwarebytes' Anti-Malware 1.17
Database version: 846
2:14:51 PM 6/10/2008
mbam-log-6-10-2008 (14-14-51).txt
Scan type: Full Scan (C:\|)
Objects scanned: 71802
Time elapsed: 10 minute(s), 1 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Malwarebytes' Anti-Malware 1.17
Database version: 846
2:04:23 PM 6/10/2008
mbam-log-6-10-2008 (14-04-23).txt
Scan type: Quick Scan
Objects scanned: 38723
Time elapsed: 3 minute(s), 25 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
other than the proection popup when i start mbam 1.17 everything seems ok
thanks
-
hello
updated mbam to 1.16 inside the program on both my pc's with no problems
pc 1
Malwarebytes' Anti-Malware 1.16
Database version: 845
8:14:08 PM 6/9/2008
mbam-log-6-9-2008 (20-14-08).txt
Scan type: Quick Scan
Objects scanned: 36485
Time elapsed: 3 minute(s), 52 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
pc 2
Malwarebytes' Anti-Malware 1.16
Database version: 845
7:43:51 PM 6/9/2008
mbam-log-6-9-2008 (19-43-51).txt
Scan type: Quick Scan
Objects scanned: 40034
Time elapsed: 2 minute(s), 46 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
-
hello
on 1 pc that i got the full version of mbam on i did a uninstall and reinstall
to mbam 1.15 and no problems
Malwarebytes' Anti-Malware 1.15
Database version: 834
10:41:08 AM 6/6/2008
mbam-log-6-6-2008 (10-41-08).txt
Scan type: Quick Scan
Objects scanned: 38643
Time elapsed: 3 minute(s), 30 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
on pc 2 i have the free mbam i upgreaded with in the program no problem but i got
the run-time error 9 subscript out of range when i tryed to do a quick scan
then i restarted the pc again and tryed a quick scan and got no run-time error 9
and the scan works again with no problems
Malwarebytes' Anti-Malware 1.15
Database version: 834
11:35:16 AM 6/6/2008
mbam-log-6-6-2008 (11-35-16).txt
Scan type: Quick Scan
Objects scanned: 39609
Time elapsed: 2 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
-
hello
updated mbam to 1.14 with in the program on both my pc's with no problems
thanks
-
hello
updated both my pc's to mbam 1.13 from with in the program with no problems
pc1
Malwarebytes' Anti-Malware 1.13
Database version: 800
8:16:18 PM 5/29/2008
mbam-log-5-29-2008 (20-16-18).txt
Scan type: Quick Scan
Objects scanned: 37581
Time elapsed: 2 minute(s), 33 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
pc2
Malwarebytes' Anti-Malware 1.13
Database version: 800
8:36:12 PM 5/29/2008
mbam-log-5-29-2008 (20-36-12).txt
Scan type: Quick Scan
Objects scanned: 36355
Time elapsed: 3 minute(s), 11 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
thanks
offline update.
in General Chat
Posted
hello
and welcome to malwarebytes the latest database can be found here
http://www.malwarebytes.org/mbam.php