exile360

Greetings and welcome to the forum. To get you fixed up please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Most likely the dll or whatever file was causing the issue was in memory and the system needed a reboot for MBAM to delete it. If you notice any further issues or suspect you may still be infected please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Greetings. Please follow AdvancedSetup's instructions here to see if it helps: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If it does then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Hello again. I'm going to try to answer your questions. 1. It won't hurt anything to use Ccleaner to control startups, but it's somewhat limited in the locations that it checks compared to tools like Microsoft Sysinternals Autoruns. 2. With Malwarebytes' you're much better off scanning in normal mode if possible because it's more likely to catch active infections while they're running. Each tool is different however and some are better in safe mode. My rule is if I can scan in Normal Mode I do and if after reboot it didn't remove what was detected, then reboot to Safe Mode to try getting rid of it. 3. Generally best practice here is to create a restore point before the cleaning begins in case of issues during removals. Then, after the system is totally clean, reset System Restore by turning it off and then back on again and create a new restore point. 4. Your best bet is to pick 2 or 3 that you trust and are updated frequently (like Malwarebytes', A-squared and SAS) and do a scan with them once a week or so (depending on how safe your surfing habits are). Also scan with your antivirus about that often as well. As far as trojan detectors go, there aren't too many specifically dedicated to that purpose these days, but you could use Comodo Boclean. I've had good luck with it myself. For the sake of resources I would disable SAS (SUPERAntiSpyware) from running on startup if you're only using the free version. I would also recommend purchasing either Malwarebytes' or SAS as the only AS apps I see resident are Windows Defender and TeaTimer, neither of which are updated frequently enough to stop the newest infections. It looks like you're dedicated to security and that's good. In addition I'd recommend not using Peer to Peer programs like limewire and bittorrent and stay away from sites like myspace and facebook as they are common targets for makers of malicious software. I hope I've been helpful, if you need anything else just let us know. Good luck and safe surfing.

I somewhat agree, but at the same time it probably wouldn't be as light on resources then and would have more chance of causing conflicts with antivirus softwares and internet security suites.

Greetings and welcome. Please follow AdvancedSetup's instuctions here to see if it helps: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If it does, then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Greetings and welcome. Please follow AdvancedSetup's instuctions here to see if it helps: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If it does, then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Absolutely, Malwarebytes' is designed to run in realtime alongside your active antivirus without conflicting, and the reason your AV didn't detect it is the very reason that Malwarebytes' did. Malwarebytes' was created to catch the vicious and frequently updated threats that most antivirus softwares miss, such as rogues, trojans and rootkits (more than that, but you get the idea). The trouble with these types of threats is that they are modified so frequently to bypass detection by most security software companies, and this is where Malwarebytes' comes in. The developers try to keep up with these threats constantly both by helping users in the forum and collecting samples of malware from them as well as monitoring websites that are known to infect PC's with these malicious threats. It's a specialized tool, and if it were a full blown antivirus it would probably be less effective because that would be like 10 times more threats they would have to keep up with (which is why antivirus vendors tend to miss them because they're always so far behind). If an antivirus does detect one of the infections that Malwarebytes' does it's probably a very old variant of that infection.

Excellent, I'm glad to hear Malwarebytes' was helpful. You should also follow up with a scan in Normal Mode to make sure there's no leftovers and if you should see any signs of infections that Malwarebytes' doesn't detect just let us know and we'll help you out. There's a bunch of kind and brilliant volunteers here who assist with cleaning up vicious infections.

Wow, I'm a moron and it's been far too long. It didn't even occur to me that the OS not found error was the message from the BIOS! You'd think after all the years I spent as a tech I'd remember that one, oh well.

Yeah, it doesn't give a log. The reason we have you run it is to get rid of some of the more common and easy to remove infections so the expert who assists you can get down to removing the really nasty and difficult stuff. Be sure to create a topic here though: http://www.malwarebytes.org/forums/index.php?showforum=7 as that's where the experts assist with removing malware. Also be sure to follow the rest of the steps here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 so the expert who assists you will have all the logs they need. Run through the Panda scan, run HijackThis etc. and get all those logs posted in a new topic in that first link I mentioned.

If you're looking for one of the freebie AV's, then I'd either go with Avira (best of freebies) or Avast (also good, but not quite as good as Avira), and if you're looking for a paid one, I'd use either Kaspersky or NOD32 (or even Avira Premium as it's pretty good as well). All of the above are very light on resources so they won't eat up all your ram and they have very good detection rates against viruses and malware. A good added layer would be Spybot Search & Destroy (use the immunize function, just don't use TeaTimer as it could conflict with Malwarebytes') as well as Spywareblaster (works similar to Spybot's immunization feature). Both of those will help to block malicious websites and malicious activeX controls when using firefox and internet explorer.

You're welcome, and have a lovely day yourself, and Happy New Year!

Greetings and welcome. As you are currently being assisted in another forum, I don't want to have you do anything without them telling you to as it could do more harm to your system than good. However, I will provide some info on that entry you found. Please see here: http://www.systemlookup.com/O21/236-WPDShServiceObj_dll.html Apparently it is a normal entry to be found, but might have been altered by running Malwarebytes. If you refer to this post: http://www.malwarebytes.org/forums/index.php?showtopic=6104 it explains that installing the new version of Malwarebytes' and then doing a quick scan and repairing the issue if found should correct it. I'm not sure if it's related to your internet connectivity though.

OK, if you don't have any luck let us know.

Good idea on returning PCTools and getting Malwarebytes'. You also won't have to pay renewal fees, the license for MBAM is lifetime. By the way, if you do ever need help with manual removal of malware that MBAM can't handle, just follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 One of our experts here will walk you through getting cleaned up, and they'll collect samples of the malware to add to MBAM's detections to save others the hassle of a manual removal in the future.

OK, you should be able to just boot from it and it should offer the option to install. But since you wiped the drive, make sure you select the option to install, not repair.

OK, is the Windows disc you're using a standard Windows installation disc or is it some type of Spartan branded "Recovery or Restore disc"?

Greetings, and welcome to the forum. Please check your settings in Internet Explorer and make sure it can connect to both malwarebytes.org and securitywonks.net. MBAM uses the same settings as IE, so if IE can connect and download files from here then MBAM should be able to also.

Yeah, most often if registering the .dll files manually doesn't fix it, then installing the VB6 runtime files does.

What type of PC is it (brand name, laptop, desktop etc)?

You're welcome. If you ever have such a problem again, you can reinstall the offending program (this will make sure all the files are there, including the uninstaller) and then uninstall it. Sometimes this happens when a program is removed incorrectly or an installation gets corrupted, but generally it's not a big deal. Good luck and safe surfing.

Hello, yes it's a False Positive.

Greetings. Please follow AdvancedSetup's instructions here to see if it helps: http://www.malwarebytes.org/forums/index.p...amp;#entry35969 If that works then please follow the instructions here: http://www.malwarebytes.org/forums/index.php?showtopic=2936 and post your logs in a new topic here: http://www.malwarebytes.org/forums/index.php?showforum=7 Please be sure not to install any software or use any removal/scanning tools exept those that you are instructed to by the expert who will be assisting you as doing so can make their job much more difficult. I hope I was helpful. Good luck and safe surfing.

Hello again. I'm not sure of the cause yet and need a bit more info. First off, what antivirus software do you have installed (all I saw listed were antispyware softwares)? Second, please download Microsoft Sysinternals Autoruns from here: http://live.sysinternals.com/autoruns.exe Save the file to your desktop and double click it to run it (if running Vista, save to your desktop, then right click the file and select "Run as administrator" then click Continue or Allow at the UAC prompt) Next, press the Esc key on your keyboard to halt the scan and click the Options button at the top. Select Hid Microsoft and Windows Entries as well as Verify Code Signatures from that menu. Then press the F5 key on your keyboard and the scan will start again, let it run until it says Ready in the lower left portion of the window. Once the scan completes, click the File menu and select Save. Save the file as Autoruns.arn (this is the default setting) and then zip the file with the Windows zip utility or Winrar if you have it installed. Attach the zipped file to your next post and I'll see if there's anything loading at boot that you can get rid of to speed things up without doing any harm.