tomgschilling Posted November 30, 2011 ID:499794 Share Posted November 30, 2011 Hi, new member. Sorry, I tried to "Hijack" an exiting thread on this subject. Didn't know the rules. My wife's system had encountered a problem(s) that has the following attributes, not all of which may be related:1) Upon bootup she gets a message from Outlook Express offering to free up disk space by compacting messages. She is not running Outlook Express and I see no signs of it in SysConfig Startup.2) Her system occasionally restarts with a message from Windows upon reboot that refers to a problem with Winlogon which caused the restart. 3) After about 5 to 7 minutes, Ping.exe shows up in Task Manager and after several more minutes, Ping.exe takes over almost all resources of the machine. Ending Ping.exe in Task Manager returns system performance to normal but Ping.exe re-appears in a matter of minutes and the cycle repeats itself.4) After doing a Google Search, selecting one of the "found" results, sends you to another site and I think that this other sight is always a commercial site. The only work around is to copy and paste the link from the Google list into the address bar.From the previous thread regarding Ping.exe, I smell a virus. The specifics on my wife's system are :Dell PCPentium 4 CPU 3.20 Hz3.0 GB RamHard Drive 111 GB with 99 GB freeWindows XP Pro Version 2Service Pack 3Antivirus Software: Windows Security Essentials and Scans with Malwarebytes (several viruses have been found and deleted in the past few days).I have run DDS and the two text files are attached.dds.txtattach.txt Link to post Share on other sites More sharing options...
D-FRED-BROWN Posted December 3, 2011 ID:500878 Share Posted December 3, 2011 Hello tomgschilling and welcome to Malwarebytes! I apologize for the delay.I am D-FRED-BROWN and I will be helping you. Please print or save this topic: it will make it easier for you to follow the instructions and complete all of the necessary steps. -------------I see you have IObit installed on your computer.IObit Security 360 is a rogue security program known to cause system problems and that had stolen material from other computer security companies to use in their own program. IOBit Steals Malwarebytes’ Intellectual PropertyIOBit’s Denial of Theft UnconvincingThe program has also been seen to cause numerous system problems that tend to go away after uninstalling their software.Go to Start > Control Panel > Add or Remove Programs and remove the following programs:IObit Security 360Advanced SystemCare(or any program from IObit)T-Tools has created a free program that has been designed specifically to remove every last trace of the entries of IObit programs left behind if and when you had decided to uninstall one or more of these programs. Please download BitRemover from here:http://www.t-tools.nl/bitremoveren.phpSave the program to your Desktop and double-click on the program to run it.-------------Please download to your Desktop:TDSSKiller.zip from here and extract it (right click on it => "Extract here").>>> TDSSKiller: Double-click on TDSSKiller.exe to run the application.Click on the Start Scan button and wait for the scan and disinfection process to be over.If an infected file is detected, the default action will be Cure, click on Continue If a suspicious file is detected, the default action will be Skip, click on Continue If you are asked to reboot the computer to complete the process, click on the Reboot Now button. A report will be automatically saved at the root of the System drive ((usually C:\) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt" (for example, C:\TDSSKiller.2.2.0_20.12.2009_15.31.43_log.txt). Please copy and paste the contents of that file here.If no reboot is required, click on Report. A log file will appear. Please copy and paste the contents of that file in your next reply.In your next reply, please include the following (you may need to use two posts to get it all in):TDSSKiller_log.txthow the PC is running now?-------------Please download ComboFix.exe. Please visit this webpage for download links, and instructions for running the tool: http://www.bleepingcomputer.com/combofix/how-to-use-combofix***IMPORTANT: save ComboFix to your Desktop**** Ensure you have disabled all anti virus and anti malware programs so they do not interfere with the running of ComboFix. Please go here to see a list of programs that should be disabled.**Note: Do not mouseclick ComboFix's window while it's running. That may cause it to stall** Please include the C:\ComboFix.txt in your next reply for further review.Also, please let me know if any problems still remain.-------------Please download Security Check by screen317 from here or here.Save it to your Desktop.Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.A Notepad document should open automatically called checkup.txt; please post the contents of that document.-------------In your next reply, please include:TDSSKiller reportC:\ComboFix.txtcheckup.txtHow is your computer running now? Link to post Share on other sites More sharing options...
Staff screen317 Posted December 12, 2011 Staff ID:503862 Share Posted December 12, 2011 Are you still with us? This topic will be closed in a few days if we do not hear back from you. Link to post Share on other sites More sharing options...
Staff screen317 Posted December 22, 2011 Staff ID:508180 Share Posted December 22, 2011 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts