Jump to content

kathleenf

Members
  • Posts

    13
  • Joined

  • Last visited

Reputation

0 Neutral
  1. Thanks so much, this solved my problem. The only minor tweak I'd add (for people who are either very literal or beginner) is the path to follow: Settings -> Protection -> Advanced Settings [next to Manage Protected Applications] -> Advanced Memory Protection tab Again, thank you so much. I've reactivated MB.
  2. I will try to be clearer. I have made no recent changes to microsoft office products; I am extremely conservative about adding doo-dahs; those add-ins have been there for years. I do not need to disable them in safe mode, to start Word. The problem is with MB latest update. I don't have a single problem starting word/excel etc as long as I have quit MB. So my question is, are you going to look over the files I submitted to see if there is something there or do I submit a help ticket. MB has been really wonky for the past week now. Never had any issues with it before now.
  3. Well, I'm finally back. I'll omit the drama but suffice to say, I've reinstalled office and malwarebytes still blocks it. So, buh bye MWB for now. Previously, you'd asked for a screen cap. Here that is.
  4. Hours later, I'm back. This is all I've been working on since I last posted. I'm dead in the water. I'm logged in from another PC. Trying the system restore made everything crash. It won't even boot now. I have tried system repair tools to no avail -I'm definitely not a pro when it comes to that. I have a system image back up but nowhere, can I find, the straight story on whether it erases everything on there and over writes it, or what. I also can't find how to actually use it (thank you seagate) under these circumstances. Fwiw, I have not updated my office program; last win update was well before MWB got wonky on me (that was yesterday btw). So, I'm out of business until this is fixed. At this point, I am thinking I have to go to best buy, buy another drive, clone my existing dead one onto the new drive and then (once I figure it out) install the system image back up onto the existing drive. This is the only way I can be sure I don't lose any files from the now broken drive. I don't have anyone to help me with this so I'm certain that this is both stupid and inefficient but it's all I can do.
  5. I'm unable to do this. Since the quick fix didn't work, I started the long fix. Unfortunately, that stalled but not before it uninstalled office 2013 from my computer. So now, I'm thinking I will roll back to another restore point.
  6. Yes, I'm able to do this. ----------- I followed the link and the steps to repair the program. I've now finished the quick repair option but that didn't fix the problem. I am now in the process of doing the longer, more in depth repair.
  7. Whenever I try to start a microsoft 2013 office product, MWB blocks it. It happens repeatedly and with any product I attempt to use. Screenshot attached: This started yesterday. To get around it, I disabled MWB. I hope I followed these instructions properly. Thanks so much for your help. mb-check-results.zip FRST.txt Addition.txt
  8. Hi LD. I had been surfing yesterday after the fix with FFv5 (thought I had v6x but no, updated this morning) and it was fine. Rereading, left you with the wrong impression. I don't use IE but have a few programs that use its ports. Have since allowed IE (four hours ago) online, ran those programs that use it and all seems to be running smoothly. Unless you are of another opinion, this log can be closed. I *sincerely* appreciate your help and while I mean this kindly, I endeavor to never need it again .
  9. 1. Ran TDSS, it was clean, nothing found. 2. Updated MBAM. 3. Ran scan, log follows below. 4. Computer seems okay, dare I say, somewhat back to normal? I'm gun shy so I haven't been putting it through much (I still have IE offline) but my better half will be here soon and he's the better judge of these things. Thanks so much! Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Database version: 7680 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 9/8/2011 6:35:58 PM mbam-log-2011-09-08 (18-35-57).txt Scan type: Quick scan Objects scanned: 204771 Time elapsed: 7 minute(s), 20 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
  10. Okay, have followed all instructions. Computer behavior: very slow boot but ATF said that could be expected. FF is back to being my default browser. I tried a couple of google searches and those were good. Only issue is a pop up for IE. It says: Webpage unavailable while offline The webpage you requested is not available offline. To view this page, click Connect I had taken IE offline before I started following your instructions. I selected "stay offline". Below is the report pasted in. I deleted my surname from the username but otherwise no changes. I appreciate your help. Thank you. 2011/09/08 16:40:16.0171 5392 TDSS rootkit removing tool 2.5.20.0 Sep 7 2011 16:44:34 2011/09/08 16:40:16.0921 5392 ================================================================================ 2011/09/08 16:40:16.0921 5392 SystemInfo: 2011/09/08 16:40:16.0921 5392 2011/09/08 16:40:16.0921 5392 OS Version: 5.1.2600 ServicePack: 3.0 2011/09/08 16:40:16.0921 5392 Product type: Workstation 2011/09/08 16:40:16.0921 5392 ComputerName: PATTERNMAKER 2011/09/08 16:40:16.0921 5392 UserName: Kathleen F 2011/09/08 16:40:16.0921 5392 Windows directory: C:\WINDOWS 2011/09/08 16:40:16.0921 5392 System windows directory: C:\WINDOWS 2011/09/08 16:40:16.0921 5392 Processor architecture: Intel x86 2011/09/08 16:40:16.0921 5392 Number of processors: 2 2011/09/08 16:40:16.0921 5392 Page size: 0x1000 2011/09/08 16:40:16.0921 5392 Boot type: Normal boot 2011/09/08 16:40:16.0921 5392 ================================================================================ 2011/09/08 16:40:17.0328 5392 Initialize success 2011/09/08 16:40:19.0250 4380 ================================================================================ 2011/09/08 16:40:19.0250 4380 Scan started 2011/09/08 16:40:19.0250 4380 Mode: Manual; 2011/09/08 16:40:19.0250 4380 ================================================================================ 2011/09/08 16:40:19.0984 4380 abp480n5 (6abb91494fe6c59089b9336452ab2ea3) C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS 2011/09/08 16:40:20.0078 4380 ACPI (8fd99680a539792a30e97944fdaecf17) C:\WINDOWS\system32\DRIVERS\ACPI.sys 2011/09/08 16:40:20.0093 4380 ACPIEC (9859c0f6936e723e4892d7141b1327d5) C:\WINDOWS\system32\drivers\ACPIEC.sys 2011/09/08 16:40:20.0140 4380 adpu160m (9a11864873da202c996558b2106b0bbc) C:\WINDOWS\system32\DRIVERS\adpu160m.sys 2011/09/08 16:40:20.0234 4380 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys 2011/09/08 16:40:20.0312 4380 AFD (355556d9e580915118cd7ef736653a89) C:\WINDOWS\System32\drivers\afd.sys 2011/09/08 16:40:20.0390 4380 AFS2K (0ebb674888cbdefd5773341c16dd6a07) C:\WINDOWS\system32\drivers\AFS2K.sys 2011/09/08 16:40:20.0453 4380 agp440 (08fd04aa961bdc77fb983f328334e3d7) C:\WINDOWS\system32\DRIVERS\agp440.sys 2011/09/08 16:40:20.0515 4380 agpCPQ (03a7e0922acfe1b07d5db2eeb0773063) C:\WINDOWS\system32\DRIVERS\agpCPQ.sys 2011/09/08 16:40:20.0562 4380 Aha154x (c23ea9b5f46c7f7910db3eab648ff013) C:\WINDOWS\system32\DRIVERS\aha154x.sys 2011/09/08 16:40:20.0640 4380 aic78u2 (19dd0fb48b0c18892f70e2e7d61a1529) C:\WINDOWS\system32\DRIVERS\aic78u2.sys 2011/09/08 16:40:20.0687 4380 aic78xx (b7fe594a7468aa0132deb03fb8e34326) C:\WINDOWS\system32\DRIVERS\aic78xx.sys 2011/09/08 16:40:20.0796 4380 aksfridge (9e989429631a0588c60c430fd7db7576) C:\WINDOWS\system32\DRIVERS\aksfridge.sys 2011/09/08 16:40:20.0890 4380 akshasp (f2454a0c7dd0f79847f3ecf45570aca4) C:\WINDOWS\system32\DRIVERS\akshasp.sys 2011/09/08 16:40:20.0921 4380 akshhl (ea987a959eeadcb49ffaa4999dde5032) C:\WINDOWS\system32\DRIVERS\akshhl.sys 2011/09/08 16:40:20.0984 4380 aksusb (c0389eae9b0c0abbc294d34dbd41e81f) C:\WINDOWS\system32\DRIVERS\aksusb.sys 2011/09/08 16:40:21.0046 4380 AliIde (1140ab9938809700b46bb88e46d72a96) C:\WINDOWS\system32\DRIVERS\aliide.sys 2011/09/08 16:40:21.0109 4380 alim1541 (cb08aed0de2dd889a8a820cd8082d83c) C:\WINDOWS\system32\DRIVERS\alim1541.sys 2011/09/08 16:40:21.0156 4380 amdagp (95b4fb835e28aa1336ceeb07fd5b9398) C:\WINDOWS\system32\DRIVERS\amdagp.sys 2011/09/08 16:40:21.0187 4380 amsint (79f5add8d24bd6893f2903a3e2f3fad6) C:\WINDOWS\system32\DRIVERS\amsint.sys 2011/09/08 16:40:21.0234 4380 asc (62d318e9a0c8fc9b780008e724283707) C:\WINDOWS\system32\DRIVERS\asc.sys 2011/09/08 16:40:21.0281 4380 asc3350p (69eb0cc7714b32896ccbfd5edcbea447) C:\WINDOWS\system32\DRIVERS\asc3350p.sys 2011/09/08 16:40:21.0328 4380 asc3550 (5d8de112aa0254b907861e9e9c31d597) C:\WINDOWS\system32\DRIVERS\asc3550.sys 2011/09/08 16:40:21.0421 4380 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys 2011/09/08 16:40:21.0453 4380 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys 2011/09/08 16:40:21.0515 4380 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys 2011/09/08 16:40:21.0562 4380 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys 2011/09/08 16:40:21.0609 4380 b57w2k (8c0403aa21029804f31d869e6b0adedf) C:\WINDOWS\system32\DRIVERS\b57xp32.sys 2011/09/08 16:40:21.0656 4380 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys 2011/09/08 16:40:22.0062 4380 BHDrvx86 (378a5e067c170dc6046226ba61ff205f) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\BASHDefs\20110901.001\BHDrvx86.sys 2011/09/08 16:40:22.0171 4380 cbidf (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\DRIVERS\cbidf2k.sys 2011/09/08 16:40:22.0218 4380 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys 2011/09/08 16:40:22.0359 4380 ccSet_NAV (2b2f9b4a08190334a9c36446b208bae9) C:\WINDOWS\system32\drivers\NAV\1301000.01C\ccSetx86.sys 2011/09/08 16:40:22.0406 4380 cd20xrnt (f3ec03299634490e97bbce94cd2954c7) C:\WINDOWS\system32\DRIVERS\cd20xrnt.sys 2011/09/08 16:40:22.0421 4380 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys 2011/09/08 16:40:22.0515 4380 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys 2011/09/08 16:40:22.0562 4380 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys 2011/09/08 16:40:22.0640 4380 CmdIde (e5dcb56c533014ecbc556a8357c929d5) C:\WINDOWS\system32\DRIVERS\cmdide.sys 2011/09/08 16:40:22.0671 4380 Compbatt (6e4c9f21f0fae8940661144f41b13203) C:\WINDOWS\system32\DRIVERS\compbatt.sys 2011/09/08 16:40:22.0718 4380 Cpqarray (3ee529119eed34cd212a215e8c40d4b6) C:\WINDOWS\system32\DRIVERS\cpqarray.sys 2011/09/08 16:40:22.0765 4380 dac2w2k (e550e7418984b65a78299d248f0a7f36) C:\WINDOWS\system32\DRIVERS\dac2w2k.sys 2011/09/08 16:40:22.0828 4380 dac960nt (683789caa3864eb46125ae86ff677d34) C:\WINDOWS\system32\DRIVERS\dac960nt.sys 2011/09/08 16:40:22.0906 4380 DgiVecp (770471de2550820feeb7e5d24bf2e273) C:\WINDOWS\system32\Drivers\DgiVecp.sys 2011/09/08 16:40:22.0937 4380 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys 2011/09/08 16:40:22.0984 4380 DLABOIOM (e2d0de31442390c35e3163c87cb6a9eb) C:\WINDOWS\system32\DLA\DLABOIOM.SYS 2011/09/08 16:40:23.0000 4380 DLACDBHM (d979bebcf7edcc9c9ee1857d1a68c67b) C:\WINDOWS\system32\Drivers\DLACDBHM.SYS 2011/09/08 16:40:23.0015 4380 DLADResN (83545593e297f50a8e2524b4c071a153) C:\WINDOWS\system32\DLA\DLADResN.SYS 2011/09/08 16:40:23.0031 4380 DLAIFS_M (96e01d901cdc98c7817155cc057001bf) C:\WINDOWS\system32\DLA\DLAIFS_M.SYS 2011/09/08 16:40:23.0046 4380 DLAOPIOM (0a60a39cc5e767980a31ca5d7238dfa9) C:\WINDOWS\system32\DLA\DLAOPIOM.SYS 2011/09/08 16:40:23.0062 4380 DLAPoolM (9fe2b72558fc808357f427fd83314375) C:\WINDOWS\system32\DLA\DLAPoolM.SYS 2011/09/08 16:40:23.0078 4380 DLARTL_N (7ee0852ae8907689df25049dcd2342e8) C:\WINDOWS\system32\Drivers\DLARTL_N.SYS 2011/09/08 16:40:23.0093 4380 DLAUDFAM (f08e1dafac457893399e03430a6a1397) C:\WINDOWS\system32\DLA\DLAUDFAM.SYS 2011/09/08 16:40:23.0109 4380 DLAUDF_M (e7d105ed1e694449d444a9933df8e060) C:\WINDOWS\system32\DLA\DLAUDF_M.SYS 2011/09/08 16:40:23.0156 4380 dmboot (d992fe1274bde0f84ad826acae022a41) C:\WINDOWS\system32\drivers\dmboot.sys 2011/09/08 16:40:23.0218 4380 dmio (7c824cf7bbde77d95c08005717a95f6f) C:\WINDOWS\system32\drivers\dmio.sys 2011/09/08 16:40:23.0234 4380 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys 2011/09/08 16:40:23.0265 4380 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys 2011/09/08 16:40:23.0296 4380 dpti2o (40f3b93b4e5b0126f2f5c0a7a5e22660) C:\WINDOWS\system32\DRIVERS\dpti2o.sys 2011/09/08 16:40:23.0328 4380 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys 2011/09/08 16:40:23.0375 4380 DRVMCDB (fd0f95981fef9073659d8ec58e40aa3c) C:\WINDOWS\system32\Drivers\DRVMCDB.SYS 2011/09/08 16:40:23.0406 4380 DRVNDDM (b4869d320428cdc5ec4d7f5e808e99b5) C:\WINDOWS\system32\Drivers\DRVNDDM.SYS 2011/09/08 16:40:23.0453 4380 E100B (3fca03cbca11269f973b70fa483c88ef) C:\WINDOWS\system32\DRIVERS\e100b325.sys 2011/09/08 16:40:23.0593 4380 eeCtrl (8f7dbc4be48f5388a6fe1f285e7948ef) C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys 2011/09/08 16:40:23.0656 4380 EraserUtilRebootDrv (3ee14d400e0fdd0d214275a4a20b7022) C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 2011/09/08 16:40:23.0765 4380 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys 2011/09/08 16:40:23.0859 4380 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\DRIVERS\fdc.sys 2011/09/08 16:40:23.0890 4380 Fips (d45926117eb9fa946a6af572fbe1caa3) C:\WINDOWS\system32\drivers\Fips.sys 2011/09/08 16:40:23.0906 4380 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\DRIVERS\flpydisk.sys 2011/09/08 16:40:23.0984 4380 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\drivers\fltmgr.sys 2011/09/08 16:40:24.0078 4380 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys 2011/09/08 16:40:24.0078 4380 Ftdisk (6ac26732762483366c3969c9e4d2259d) C:\WINDOWS\system32\DRIVERS\ftdisk.sys 2011/09/08 16:40:24.0156 4380 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys 2011/09/08 16:40:24.0234 4380 Hardlock (c03718f2b954972a40ad75e22d159f9f) C:\WINDOWS\system32\drivers\hardlock.sys 2011/09/08 16:40:24.0328 4380 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys 2011/09/08 16:40:24.0359 4380 HidBatt (748031ff4fe45ccc47546294905feab8) C:\WINDOWS\system32\DRIVERS\HidBatt.sys 2011/09/08 16:40:24.0406 4380 HidUsb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys 2011/09/08 16:40:24.0468 4380 hpn (b028377dea0546a5fcfba928a8aefae0) C:\WINDOWS\system32\DRIVERS\hpn.sys 2011/09/08 16:40:24.0546 4380 HPZid412 (863cc3a82c63c9f60acf2e85d5310620) C:\WINDOWS\system32\DRIVERS\HPZid412.sys 2011/09/08 16:40:24.0625 4380 HPZipr12 (08cb72e95dd75b61f2966b311d0e4366) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys 2011/09/08 16:40:24.0671 4380 HPZius12 (ca990306ed4ef732af9695bff24fc96f) C:\WINDOWS\system32\DRIVERS\HPZius12.sys 2011/09/08 16:40:24.0765 4380 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys 2011/09/08 16:40:24.0843 4380 i2omgmt (9368670bd426ebea5e8b18a62416ec28) C:\WINDOWS\system32\drivers\i2omgmt.sys 2011/09/08 16:40:24.0890 4380 i2omp (f10863bf1ccc290babd1a09188ae49e0) C:\WINDOWS\system32\DRIVERS\i2omp.sys 2011/09/08 16:40:24.0921 4380 i8042prt (4a0b06aa8943c1e332520f7440c0aa30) C:\WINDOWS\system32\DRIVERS\i8042prt.sys 2011/09/08 16:40:25.0000 4380 iaStor (019cf5f31c67030841233c545a0e217a) C:\WINDOWS\system32\drivers\iaStor.sys 2011/09/08 16:40:25.0453 4380 IDSxpx86 (e72d3894d42355e9cd5fd77e1e4fea11) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\IPSDefs\20110907.030\IDSxpx86.sys 2011/09/08 16:40:25.0578 4380 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys 2011/09/08 16:40:25.0656 4380 ini910u (4a40e045faee58631fd8d91afc620719) C:\WINDOWS\system32\DRIVERS\ini910u.sys 2011/09/08 16:40:25.0703 4380 IntelIde (b5466a9250342a7aa0cd1fba13420678) C:\WINDOWS\system32\DRIVERS\intelide.sys 2011/09/08 16:40:25.0796 4380 intelppm (8c953733d8f36eb2133f5bb58808b66b) C:\WINDOWS\system32\DRIVERS\intelppm.sys 2011/09/08 16:40:25.0828 4380 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\drivers\ip6fw.sys 2011/09/08 16:40:25.0890 4380 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys 2011/09/08 16:40:25.0937 4380 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys 2011/09/08 16:40:26.0000 4380 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys 2011/09/08 16:40:26.0031 4380 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys 2011/09/08 16:40:26.0078 4380 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys 2011/09/08 16:40:26.0125 4380 isapnp (05a299ec56e52649b1cf2fc52d20f2d7) C:\WINDOWS\system32\DRIVERS\isapnp.sys 2011/09/08 16:40:26.0156 4380 Kbdclass (463c1ec80cd17420a542b7f36a36f128) C:\WINDOWS\system32\DRIVERS\kbdclass.sys 2011/09/08 16:40:26.0187 4380 kbdhid (9ef487a186dea361aa06913a75b3fa99) C:\WINDOWS\system32\DRIVERS\kbdhid.sys 2011/09/08 16:40:26.0203 4380 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys 2011/09/08 16:40:26.0281 4380 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys 2011/09/08 16:40:26.0343 4380 MBAMProtector (eca00eed9ab95489007b0ef84c7149de) C:\WINDOWS\system32\drivers\mbam.sys 2011/09/08 16:40:26.0421 4380 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys 2011/09/08 16:40:26.0484 4380 Modem (dfcbad3cec1c5f964962ae10e0bcc8e1) C:\WINDOWS\system32\drivers\Modem.sys 2011/09/08 16:40:26.0562 4380 Mouclass (35c9e97194c8cfb8430125f8dbc34d04) C:\WINDOWS\system32\DRIVERS\mouclass.sys 2011/09/08 16:40:26.0625 4380 mouhid (b1c303e17fb9d46e87a98e4ba6769685) C:\WINDOWS\system32\DRIVERS\mouhid.sys 2011/09/08 16:40:26.0656 4380 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys 2011/09/08 16:40:26.0703 4380 mraid35x (3f4bb95e5a44f3be34824e8e7caf0737) C:\WINDOWS\system32\DRIVERS\mraid35x.sys 2011/09/08 16:40:26.0734 4380 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys 2011/09/08 16:40:26.0796 4380 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys 2011/09/08 16:40:26.0812 4380 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys 2011/09/08 16:40:26.0859 4380 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys 2011/09/08 16:40:26.0906 4380 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys 2011/09/08 16:40:26.0968 4380 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys 2011/09/08 16:40:27.0046 4380 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys 2011/09/08 16:40:27.0125 4380 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys 2011/09/08 16:40:27.0187 4380 MXOPSWD (c29f284ff7ab4ed38ce419a9424e52a2) C:\WINDOWS\system32\DRIVERS\mxopswd.sys 2011/09/08 16:40:27.0593 4380 NAVENG (862f55824ac81295837b0ab63f91071f) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20110908.001\NAVENG.SYS 2011/09/08 16:40:27.0671 4380 NAVEX15 (529d571b551cb9da44237389b936f1ae) C:\Documents and Settings\All Users\Application Data\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_19.1.0.28\Definitions\VirusDefs\20110908.001\NAVEX15.SYS 2011/09/08 16:40:27.0843 4380 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys 2011/09/08 16:40:27.0953 4380 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys 2011/09/08 16:40:28.0000 4380 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys 2011/09/08 16:40:28.0046 4380 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys 2011/09/08 16:40:28.0140 4380 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys 2011/09/08 16:40:28.0171 4380 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys 2011/09/08 16:40:28.0234 4380 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys 2011/09/08 16:40:28.0281 4380 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys 2011/09/08 16:40:28.0328 4380 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys 2011/09/08 16:40:28.0421 4380 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys 2011/09/08 16:40:28.0578 4380 nv (e6412ce5a04ed36f77e47244076efa95) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys 2011/09/08 16:40:28.0718 4380 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys 2011/09/08 16:40:28.0765 4380 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys 2011/09/08 16:40:28.0859 4380 Parport (5575faf8f97ce5e713d108c2a58d7c7c) C:\WINDOWS\system32\DRIVERS\parport.sys 2011/09/08 16:40:28.0906 4380 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys 2011/09/08 16:40:28.0953 4380 ParVdm (70e98b3fd8e963a6a46a2e6247e0bea1) C:\WINDOWS\system32\drivers\ParVdm.sys 2011/09/08 16:40:28.0984 4380 PCI (a219903ccf74233761d92bef471a07b1) C:\WINDOWS\system32\DRIVERS\pci.sys 2011/09/08 16:40:29.0046 4380 PCIIde (ccf5f451bb1a5a2a522a76e670000ff0) C:\WINDOWS\system32\DRIVERS\pciide.sys 2011/09/08 16:40:29.0078 4380 Pcmcia (9e89ef60e9ee05e3f2eef2da7397f1c1) C:\WINDOWS\system32\drivers\Pcmcia.sys 2011/09/08 16:40:29.0296 4380 perc2 (6c14b9c19ba84f73d3a86dba11133101) C:\WINDOWS\system32\DRIVERS\perc2.sys 2011/09/08 16:40:29.0359 4380 perc2hib (f50f7c27f131afe7beba13e14a3b9416) C:\WINDOWS\system32\DRIVERS\perc2hib.sys 2011/09/08 16:40:29.0453 4380 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys 2011/09/08 16:40:29.0484 4380 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys 2011/09/08 16:40:29.0562 4380 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys 2011/09/08 16:40:29.0640 4380 PxHelp20 (49452bfcec22f36a7a9b9c2181bc3042) C:\WINDOWS\system32\Drivers\PxHelp20.sys 2011/09/08 16:40:29.0703 4380 ql1080 (0a63fb54039eb5662433caba3b26dba7) C:\WINDOWS\system32\DRIVERS\ql1080.sys 2011/09/08 16:40:29.0750 4380 Ql10wnt (6503449e1d43a0ff0201ad5cb1b8c706) C:\WINDOWS\system32\DRIVERS\ql10wnt.sys 2011/09/08 16:40:29.0796 4380 ql12160 (156ed0ef20c15114ca097a34a30d8a01) C:\WINDOWS\system32\DRIVERS\ql12160.sys 2011/09/08 16:40:29.0843 4380 ql1240 (70f016bebde6d29e864c1230a07cc5e6) C:\WINDOWS\system32\DRIVERS\ql1240.sys 2011/09/08 16:40:29.0875 4380 ql1280 (907f0aeea6bc451011611e732bd31fcf) C:\WINDOWS\system32\DRIVERS\ql1280.sys 2011/09/08 16:40:29.0906 4380 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys 2011/09/08 16:40:29.0984 4380 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys 2011/09/08 16:40:30.0031 4380 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys 2011/09/08 16:40:30.0046 4380 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys 2011/09/08 16:40:30.0093 4380 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys 2011/09/08 16:40:30.0125 4380 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys 2011/09/08 16:40:30.0187 4380 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys 2011/09/08 16:40:30.0250 4380 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys 2011/09/08 16:40:30.0312 4380 redbook (f828dd7e1419b6653894a8f97a0094c5) C:\WINDOWS\system32\DRIVERS\redbook.sys 2011/09/08 16:40:30.0437 4380 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys 2011/09/08 16:40:30.0562 4380 Sentinel (aebba7428a6c40cce3c5abde45190b24) C:\WINDOWS\System32\Drivers\SENTINEL.SYS 2011/09/08 16:40:30.0609 4380 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys 2011/09/08 16:40:30.0640 4380 Serial (cca207a8896d4c6a0c9ce29a4ae411a7) C:\WINDOWS\system32\DRIVERS\serial.sys 2011/09/08 16:40:30.0687 4380 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\DRIVERS\sfloppy.sys 2011/09/08 16:40:30.0828 4380 sisagp (6b33d0ebd30db32e27d1d78fe946a754) C:\WINDOWS\system32\DRIVERS\sisagp.sys 2011/09/08 16:40:30.0953 4380 SNTNLUSB (a1ff7d99b199cea1f3df371ba70d2780) C:\WINDOWS\system32\DRIVERS\SNTNLUSB.SYS 2011/09/08 16:40:31.0000 4380 Sparrow (83c0f71f86d3bdaf915685f3d568b20e) C:\WINDOWS\system32\DRIVERS\sparrow.sys 2011/09/08 16:40:31.0093 4380 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys 2011/09/08 16:40:31.0171 4380 sr (76bb022c2fb6902fd5bdd4f78fc13a5d) C:\WINDOWS\system32\DRIVERS\sr.sys 2011/09/08 16:40:31.0343 4380 SRTSP (2c5fbf6a00a4a3dcf643e46e8acb20c2) C:\WINDOWS\system32\drivers\NAV\1301000.01C\SRTSP.SYS 2011/09/08 16:40:31.0453 4380 SRTSPX (9034ea58552b55f370e5293a7175c5ac) C:\WINDOWS\system32\drivers\NAV\1301000.01C\SRTSPX.SYS 2011/09/08 16:40:31.0531 4380 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys 2011/09/08 16:40:31.0640 4380 STHDA (9db5dbed65f2d74acd1d20a53898af79) C:\WINDOWS\system32\drivers\sthda.sys 2011/09/08 16:40:31.0765 4380 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys 2011/09/08 16:40:31.0812 4380 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys 2011/09/08 16:40:31.0875 4380 symc810 (1ff3217614018630d0a6758630fc698c) C:\WINDOWS\system32\DRIVERS\symc810.sys 2011/09/08 16:40:31.0937 4380 symc8xx (070e001d95cf725186ef8b20335f933c) C:\WINDOWS\system32\DRIVERS\symc8xx.sys 2011/09/08 16:40:32.0093 4380 SymDS (690fa0e61b90084c4d9a721bd4f3d779) C:\WINDOWS\system32\drivers\NAV\1301000.01C\SYMDS.SYS 2011/09/08 16:40:32.0250 4380 SymEFA (a0c7005387bb6f055bb50bd8e779368b) C:\WINDOWS\system32\drivers\NAV\1301000.01C\SYMEFA.SYS 2011/09/08 16:40:32.0359 4380 SymEvent (98d28d08e68145fb550ee7670b43baf2) C:\WINDOWS\system32\Drivers\SYMEVENT.SYS 2011/09/08 16:40:32.0515 4380 SymIRON (39c35ddbb570e9f334f239248e4de34d) C:\WINDOWS\system32\drivers\NAV\1301000.01C\Ironx86.SYS 2011/09/08 16:40:32.0578 4380 symlcbrd (b226f8a4d780acdf76145b58bb791d5b) C:\WINDOWS\system32\drivers\symlcbrd.sys 2011/09/08 16:40:32.0625 4380 SYMTDI (aaae36e8235dab7da8a64bd10de281e5) C:\WINDOWS\system32\drivers\NAV\1301000.01C\SYMTDI.SYS 2011/09/08 16:40:32.0687 4380 sym_hi (80ac1c4abbe2df3b738bf15517a51f2c) C:\WINDOWS\system32\DRIVERS\sym_hi.sys 2011/09/08 16:40:32.0703 4380 sym_u3 (bf4fab949a382a8e105f46ebb4937058) C:\WINDOWS\system32\DRIVERS\sym_u3.sys 2011/09/08 16:40:32.0781 4380 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys 2011/09/08 16:40:32.0859 4380 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys 2011/09/08 16:40:32.0921 4380 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys 2011/09/08 16:40:32.0968 4380 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys 2011/09/08 16:40:33.0000 4380 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys 2011/09/08 16:40:33.0062 4380 TosIde (f2790f6af01321b172aa62f8e1e187d9) C:\WINDOWS\system32\DRIVERS\toside.sys 2011/09/08 16:40:33.0093 4380 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys 2011/09/08 16:40:33.0140 4380 ultra (1b698a51cd528d8da4ffaed66dfc51b9) C:\WINDOWS\system32\DRIVERS\ultra.sys 2011/09/08 16:40:33.0234 4380 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys 2011/09/08 16:40:33.0281 4380 usbaudio (e919708db44ed8543a7c017953148330) C:\WINDOWS\system32\drivers\usbaudio.sys 2011/09/08 16:40:33.0312 4380 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys 2011/09/08 16:40:33.0343 4380 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys 2011/09/08 16:40:33.0375 4380 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys 2011/09/08 16:40:33.0390 4380 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys 2011/09/08 16:40:33.0437 4380 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys 2011/09/08 16:40:33.0484 4380 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS 2011/09/08 16:40:33.0531 4380 usbuhci (26496f9dee2d787fc3e61ad54821ffe6) C:\WINDOWS\system32\DRIVERS\usbuhci.sys 2011/09/08 16:40:33.0562 4380 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys 2011/09/08 16:40:33.0671 4380 viaagp (754292ce5848b3738281b4f3607eaef4) C:\WINDOWS\system32\DRIVERS\viaagp.sys 2011/09/08 16:40:33.0703 4380 ViaIde (3b3efcda263b8ac14fdf9cbdd0791b2e) C:\WINDOWS\system32\DRIVERS\viaide.sys 2011/09/08 16:40:33.0812 4380 VolSnap (4c8fcb5cc53aab716d810740fe59d025) C:\WINDOWS\system32\drivers\VolSnap.sys 2011/09/08 16:40:33.0890 4380 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys 2011/09/08 16:40:33.0953 4380 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys 2011/09/08 16:40:34.0078 4380 WudfPf (f15feafffbb3644ccc80c5da584e6311) C:\WINDOWS\system32\DRIVERS\WudfPf.sys 2011/09/08 16:40:34.0140 4380 WudfRd (28b524262bce6de1f7ef9f510ba3985b) C:\WINDOWS\system32\DRIVERS\wudfrd.sys 2011/09/08 16:40:34.0203 4380 MBR (0x1B8) (6f9a1d528242bc09104b85e0becf5554) \Device\Harddisk0\DR0 2011/09/08 16:40:34.0250 4380 \Device\Harddisk0\DR0 - detected Rootkit.Boot.SST.a (0) 2011/09/08 16:40:34.0265 4380 Boot (0x1200) (fe08358e8b6bbc20aba38dabfeaa544f) \Device\Harddisk0\DR0\Partition0 2011/09/08 16:40:34.0265 4380 ================================================================================ 2011/09/08 16:40:34.0265 4380 Scan finished 2011/09/08 16:40:34.0265 4380 ================================================================================ 2011/09/08 16:40:34.0281 2964 Detected object count: 1 2011/09/08 16:40:34.0281 2964 Actual detected object count: 1 2011/09/08 16:41:36.0750 2964 \Device\Harddisk0\DR0 (Rootkit.Boot.SST.a) - will be cured after reboot 2011/09/08 16:41:36.0750 2964 \Device\Harddisk0\DR0 - ok 2011/09/08 16:41:36.0750 2964 Rootkit.Boot.SST.a(\Device\Harddisk0\DR0) - User select action: Cure 2011/09/08 16:47:23.0343 4496 Deinitialize success
  11. Hello LD, I appreciate the response. I took the affected computer (win xp pro sp3) offline and am connecting with a back up laptop. I'm backing up the infected computer before proceeding with new solutions; my better half thinks it may be a rootkit because this does something new every time I fix something. Since I posted, I realized it had set my browser (firefox v6) to IE (I was wondering why the Norton and other sites were opening in IE, it was annoying, I thought it was their site configuration) and I couldn't change it back. Once I'm done with back up, I will follow your instructions and report back. Thank you.
  12. First hint of a problem was a warning for IDE/SATA hard disk failure. Found the fix, has been resolved. Since then, I'm being redirected after clicking links from google search page results. Norton's forum is not helpful, they said to install malwarebytes, 3 items found and fixed. Currently I'm still getting redirected but am mostly bounced back to the search results page. Your help will be much appreciated (actually, helpful/polite admin responses is what convinced me to buy). I read the other threads on this subject and would have followed previous advice instead of posting but suggestions varied too much and I don't know enough to discriminate. Here is latest log: Malwarebytes' Anti-Malware 1.51.1.1800 www.malwarebytes.org Database version: 7677 Windows 5.1.2600 Service Pack 3 Internet Explorer 7.0.5730.13 9/8/2011 11:26:01 AM mbam-log-2011-09-08 (11-26-01).txt Scan type: Quick scan Objects scanned: 208146 Time elapsed: 9 minute(s), 55 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detected) Memory Modules Infected: (No malicious items detected) Registry Keys Infected: (No malicious items detected) Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: (No malicious items detected)
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.