DDS and ATTACH logs

BrighidMoon · February 22, 2013

A few weeks ago I got a trojan. I can't recall the name but I thought it was removed (using Malwarebytes). The same actions as before have begun on my computer - namely autoscrolling on pages. I ran Malwarebytes again and nothing came up. Also ran my Avast, to no avail. So I looked on the forums and found "I'm infected, what do I do?" and did what it said. Here's the logs:

DDS (Ver_2012-11-20.01) - NTFS_x86

Internet Explorer: 9.0.8112.16448 BrowserJavaVersion: 1.6.0_26

Run by Barbara at 11:31:53 on 2013-02-22

Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3546.1864 [GMT -5:00]

.

AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {9FF26384-70D4-CE6B-3ECB-E759A6A40116}

AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

SP: Lavasoft Ad-Watch Live! *Enabled/Updated* {24938260-56EE-C1E5-047B-DC2BDD234BAB}

.

============== Running Processes ================

.

C:\Windows\system32\wininit.exe

C:\Windows\system32\lsm.exe

C:\Windows\System32\spoolsv.exe

C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe

C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

C:\Program Files\AVAST Software\Avast\AvastSvc.exe

C:\Program Files\Bonjour\mDNSResponder.exe

C:\Program Files\Synaptics\Scrybe\Service\ScrybeUpdater.exe

C:\Windows\system32\taskhost.exe

C:\Windows\system32\Dwm.exe

C:\Windows\Explorer.EXE

C:\Windows\system32\WUDFHost.exe

C:\Windows\system32\SearchIndexer.exe

C:\Program Files\Windows Media Player\wmpnetwk.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Windows\System32\hkcmd.exe

C:\Windows\System32\igfxpers.exe

C:\Program Files\Microsoft IntelliPoint\ipoint.exe

C:\Program Files\AVAST Software\Avast\AvastUI.exe

C:\Program Files\Windows Sidebar\sidebar.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

C:\Program Files\Synaptics\Scrybe\scrybe.exe

C:\Program Files\Microsoft Works\WkCalRem.exe

C:\Program Files\Microsoft IntelliPoint\dpupdchk.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Mozilla Firefox\plugin-container.exe

C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_149.exe

C:\Windows\system32\ctfmon.exe

C:\Windows\system32\conhost.exe

C:\Windows\system32\wbem\wmiprvse.exe

C:\Windows\system32\svchost.exe -k DcomLaunch

C:\Windows\system32\svchost.exe -k RPCSS

C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted

C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted

C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k LocalService

C:\Windows\system32\svchost.exe -k NetworkService

C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork

C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation

C:\Windows\system32\svchost.exe -k imgsvc

C:\Windows\System32\svchost.exe -k LocalServicePeerNet

.

============== Pseudo HJT Report ===============

.

uStart Page = hxxp://search.conduit.com?SearchSource=10&CUI=UN36118596272566332&ctid=CT3279141&SSPV=SP_IENSP06

uDefault_Page_URL = hxxp://www.dell.com

uURLSearchHooks: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - <orphaned>

BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll

BHO: DivX Plus Web Player HTML5 <video>: {326E768D-4182-46FD-9C16-1449A49795F4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll

BHO: Spybot-S&D IE Protection: {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>

BHO: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll

BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files (x86)\skype\toolbars\internet explorer\skypeieplugin.dll

BHO: Java™ Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre6\bin\jp2ssv.dll

TB: avast! WebRep: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll

uRun: [sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun

uRun: [PlayNC Launcher] <no file>

mRun: [synTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe

mRun: [igfxTray] c:\windows\system32\igfxtray.exe

mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe

mRun: [Persistence] c:\windows\system32\igfxpers.exe

mRun: [intelliPoint] "c:\program files\microsoft intellipoint\ipoint.exe"

mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui

StartupFolder: c:\users\barbara\appdata\roaming\micros~1\windows\startm~1\programs\startup\wkcalrem.lnk - c:\program files\microsoft works\WkCalRem.exe

StartupFolder: c:\progra~3\micros~1\windows\startm~1\programs\startup\scrybe.lnk - c:\windows\installer\{13061caa-0284-4f9a-b460-3d4699575b35}\NewShortcut11_8ACB210B42E44145A8C31F8E3DD765A3.exe

uPolicies-Explorer: NoDriveTypeAutoRun = dword:145

uPolicies-Explorer: HideSCAHealth = dword:1

mPolicies-System: ConsentPromptBehaviorAdmin = dword:0

mPolicies-System: ConsentPromptBehaviorUser = dword:3

mPolicies-System: EnableLUA = dword:0

mPolicies-System: EnableUIADesktopToggle = dword:0

mPolicies-System: PromptOnSecureDesktop = dword:0

IE: Save video on Savevid.com - c:\program files\savevid\redirect.htm

IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files (x86)\skype\toolbars\internet explorer\skypeieplugin.dll

IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\program files\spybot - search & destroy\SDHelper.dll

.

INFO: HKCU has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

INFO: HKLM has more than 50 listed domains.

If you wish to scan all of them, select the 'Force scan all domains' option.

.

TCP: NameServer = 192.168.1.1

TCP: Interfaces\{98587456-FA1F-44DB-9F22-291489F7AA69} : DHCPNameServer = 192.168.1.1

TCP: Interfaces\{98587456-FA1F-44DB-9F22-291489F7AA69}\3574341383 : DHCPNameServer = 192.168.2.1

TCP: Interfaces\{DBC2B80B-0FB1-4404-9CE5-036295B93D43} : DHCPNameServer = 192.168.1.1

Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files (x86)\skype\toolbars\internet explorer\skypeieplugin.dll

Notify: igfxcui - igfxdev.dll

SSODL: WebCheck - <orphaned>

Hosts: 127.0.0.1 www.spywareinfo.com

.

================= FIREFOX ===================

.

FF - ProfilePath - c:\users\barbara\appdata\roaming\mozilla\firefox\profiles\xylfs8oa.default\

FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279141&SearchSource=3&q={searchTerms}&sspv=SP_FFNSP06&CUI=UN42693976353006826

FF - prefs.js: browser.startup.homepage - hxxp://us.mc574.mail.yahoo.com/mc/welcome?.gx=1&.tm=1295293819&.rand=544l3o9ngrh0m

FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3279141&SearchSource=2&CUI=UN42693976353006826&sspv=SP_FFNSP06&q=

FF - prefs.js: network.proxy.type - 0

FF - component: c:\users\barbara\appdata\roaming\mozilla\firefox\profiles\xylfs8oa.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko19.dll

FF - component: c:\users\barbara\appdata\roaming\mozilla\firefox\profiles\xylfs8oa.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll

FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll

FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll

FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll

FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll

FF - plugin: c:\program files\microsoft silverlight\4.1.10329.0\npctrlui.dll

FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll

FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll

FF - plugin: c:\users\barbara\appdata\roaming\mozilla\firefox\profiles\xylfs8oa.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\plugins\np-mswmp.dll

FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_5_502_149.dll

.

============= SERVICES / DRIVERS ===============

.

R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-8-22 738504]

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-8-22 361032]

R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-8-22 21256]

R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2012-8-22 58680]

R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2012-11-9 44808]

R2 ScrybeUpdater;Scrybe Updater;c:\program files\synaptics\scrybe\service\ScrybeUpdater.exe [2011-1-14 1294848]

R3 swg3kser00;Sierra Wireless QMI USB Device for Legacy Serial Communication;c:\windows\system32\drivers\swg3kser00.sys [2012-7-15 215552]

R3 swiwdmbx;Sierra Wireless USB Bus Service;c:\windows\system32\drivers\swiwdmbx.sys [2012-7-15 83968]

R3 SWNC8UA3;Sierra Wireless MUX NDIS Driver (UMTSA3);c:\windows\system32\drivers\swnc8ua3.sys [2012-7-15 208128]

R3 yukonw7;NDIS6.2 Miniport Driver for Marvell Yukon Ethernet Controller;c:\windows\system32\drivers\yk62x86.sys [2009-9-28 315392]

S2 AxAutoMntSrv;Alcohol Virtual Drive Auto-mount Service;c:\program files\alcohol soft\alcohol 120\AxAutoMntSrv.exe [2012-1-5 75624]

S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]

S2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2011-2-21 1153368]

S2 StarWindServiceAE;StarWind AE Service;c:\program files\alcohol soft\alcohol 120\starwind\StarWindServiceAE.exe [2009-12-23 370688]

S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2009-12-18 11336]

S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2011-2-24 15872]

S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2011-2-24 52224]

S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2011-1-18 1343400]

.

=============== Created Last 30 ================

.

2013-02-09 19:48:27 -------- d-----w- c:\users\barbara\appdata\roaming\OpenOffice.org

2013-02-09 19:27:31 -------- d-----w- c:\windows\system32\appmgmt

2013-02-09 19:23:38 -------- d-----w- c:\program files\OpenOffice.org 3

2013-02-09 19:14:36 -------- d-----w- c:\users\barbara\appdata\local\SwvUpdater

2013-02-09 19:09:14 -------- d-sh--w- c:\windows\system32\AI_RecycleBin

2013-02-09 19:09:01 -------- d-sh--w- C:\AI_RecycleBin

.

==================== Find3M ====================

.

2013-02-08 12:55:57 697712 ----a-w- c:\windows\system32\FlashPlayerApp.exe

2013-02-08 12:55:56 74096 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl

2012-12-14 21:49:28 21104 ----a-w- c:\windows\system32\drivers\mbam.sys

.

============= FINISH: 11:32:59.15 ===============

.

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

.

DDS (Ver_2012-11-20.01)

.

Microsoft Windows 7 Ultimate

Boot Device: \Device\HarddiskVolume3

Install Date: 1/16/2011 7:24:43 PM

System Uptime: 2/22/2013 7:53:15 AM (4 hours ago)

.

Motherboard: Dell Inc. | | 0G848F

Processor: Intel® Pentium® Dual CPU T3400 @ 2.16GHz | Microprocessor | 2161/166mhz

.

==== Disk Partitions =========================

.

C: is FIXED (NTFS) - 218 GiB total, 118.62 GiB free.

D: is FIXED (FAT32) - 15 GiB total, 12.162 GiB free.

E: is CDROM (UDF)

F: is Removable

G: is CDROM ()

I: is Removable

.

==== Disabled Device Manager Items =============

.

==== System Restore Points ===================

.

RP305: 1/10/2013 10:37:39 AM - Scheduled Checkpoint

RP306: 1/18/2013 8:06:04 AM - Scheduled Checkpoint

RP307: 1/28/2013 7:09:31 AM - Scheduled Checkpoint

RP308: 2/4/2013 11:38:34 AM - Scheduled Checkpoint

RP309: 2/9/2013 2:03:42 PM - Installed Microsoft Office Excel Viewer

RP310: 2/9/2013 2:22:44 PM - Installed OpenOffice.org 3.4.1

RP311: 2/10/2013 2:03:42 PM - Removed OpenOffice.org 3.4.1

RP312: 2/10/2013 2:17:34 PM - Removed Ad-Aware

RP313: 2/22/2013 8:18:40 AM - Scheduled Checkpoint

.

==== Installed Programs ======================

.

µTorrent

Adobe AIR

Adobe Flash Player 11 ActiveX

Adobe Flash Player 11 Plugin

Adobe Reader X (10.1.5)

Adobe Shockwave Player 11.5

Amazon Kindle

Apple Application Support

Apple Mobile Device Support

Apple Software Update

avast! Free Antivirus

Bejeweled 2 Deluxe

Bonjour

CentrED 0.6.3

Compatibility Pack for the 2007 Office system

Dell Driver Download Manager

DivX Setup

FLV Player

Intel® Graphics Media Accelerator Driver

Intel® Rapid Storage Technology

iTunes

Java Auto Updater

Java™ 6 Update 26

Malwarebytes Anti-Malware version 1.70.0.1100

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Choice Guard

Microsoft IntelliPoint 8.2

Microsoft Office Excel Viewer

Microsoft Office PowerPoint Viewer 2007 (English)

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319

Microsoft Works

mIRC

Mozilla Firefox 19.0 (x86 en-US)

Mozilla Maintenance Service

MSVCRT

NCsoft Launcher

QuickTime

SaveVid Plug-in

Security Update for Microsoft .NET Framework 4 Client Profile (KB2446708)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2478663)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2633870)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656368v2)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2656405)

Security Update for Microsoft .NET Framework 4 Client Profile (KB2686827)

Skype Click to Call

Skype™ 5.5

Spybot - Search & Destroy

Synaptics Gesture Suite featuring SYNAPTICS | Scrybe

Synaptics Pointing Device Driver

System Requirements Lab

System Requirements Lab CYRI

System Requirements Lab for Intel

Trillian

Update for Microsoft .NET Framework 4 Client Profile (KB2468871)

Update for Microsoft .NET Framework 4 Client Profile (KB2533523)

Update for Microsoft .NET Framework 4 Client Profile (KB2600217)

VC80CRTRedist - 8.0.50727.6195

Windows Live Call

Windows Live Communications Platform

Windows Live Essentials

Windows Live Messenger

Windows Live Photo Gallery

Windows Live Sign-in Assistant

Windows Live Sync

Windows Live Upload Tool

WinISO 5.3

WinRAR 4.00 beta 4 (32-bit)

.

==== Event Viewer Messages From Past Week ========

.

2/22/2013 7:54:35 AM, Error: Service Control Manager [7024] - The HomeGroup Listener service terminated with service-specific error %%-2147023143.

2/22/2013 7:53:43 AM, Error: Service Control Manager [7023] - The Computer Browser service terminated with the following error: The specified service does not exist as an installed service.

2/22/2013 7:53:35 AM, Error: Service Control Manager [7003] - The Internet Connection Sharing (ICS) service depends the following service: BFE. This service might not be installed.

2/22/2013 7:53:34 AM, Error: Service Control Manager [7003] - The SBSD Security Center Service service depends the following service: wscsvc. This service might not be installed.

2/22/2013 11:27:22 AM, Error: Service Control Manager [7034] - The StarWind AE Service service terminated unexpectedly. It has done this 1 time(s).

.

==== End Of File ===========================

MrCharlie · February 22, 2013

Welcome to the forum.

Before we proceed further, please uninstall or disable uTorrent and any other peer-to-peer filesharing app.

Continued use of filesharing or ill-advised downloads will surely re-infect your system.

Risks of File-Sharing Technology.

P2P file sharing: Know the risks

It's also against the forums policy concerning P2P programs:

If you're using Peer 2 Peer software such as uTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

Then............

Please remove any usb or external drives from the computer before you run this scan!

Please download and run RogueKiller to your desktop.

http://tigzy.geeksto...ueKillerX64.exe <---use this one for 64 bit systems

Quit all running programs.

For Windows XP, double-click to start.

For Vista or Windows 7-8, do a right-click on the program, select Run as Administrator to start, & when prompted Allow to run.

Click Scan to scan the system.

When the scan completes > Close out the program > Don't Fix anything!

Don't run any other options, they're not all bad!!!!!!!

Post back the report which should be located on your desktop. (please don't put logs in code or quotes)

P2P Warning:

If you're using Peer 2 Peer software such as uTorrent or similar you must either fully uninstall it or completely disable it from running while being assisted here.
Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.

MrC

<+>

Please don't run any other scans, download, install or uninstall any programs while I'm working with you.

<+>

Please stick with me until I give you the "all clear".

<+>The removal of malware isn't instantaneous, please be patient.

------->Your topic will be closed if you haven't replied within 3 days!<--------

(If I don't respond within 24 hours, please send me a PM)

BrighidMoon · February 22, 2013

Okie doke! Thank you. I think I got it.

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<head>

<title>AT&T Mobile Hotspot Elevate 4G</title>

</head>

<h1>Sierra Wireless</h1>

<p>Admin Login</p>

<label for="admin_password">Enter admin login</label>

</fieldset>

</form>

</div>

<h2>

<span class="m_sim_phoneNumber_text" title="Your device wireless number; please use when calling Sierra Wireless Support.">Wireless number: (540) 760-1564</span>

<br/>

<div id="wifi_SSIDTitle" title="Your device Wi-Fi network name; choose this network when connecting to your mobile hotspot.">SSID: <span class="m_wifi_displaySSID">Elevate-0CD7</span></div>

</h2>

<li>

<span class="m_wwan_connectionText">Disconnected</span>

</span>

</a>

</li>

<li>

<span class="m_wwan_dataUsage_generic_dataUsageString">Data Usage</span>

</span>

</a>

</li>

<li>

1 Wi-Fi user

</span></span>

</a>

</li>

<li>

<span class="m_sms_msgText">Messages</span>

</span>

</a>

</li>

<li>

</a>

</li>

<li>

<span class="status_text"><span class="m_power_text">100% remaining</span></span>

</a>

</li>

<li>

<span class="status_text"><span class="m_audio_muteStateText">Alert Sounds on</span></span>

</a>

</li>

<li>

</a>

</li>

<li>

<span class="status_text">Device Security</span>

</a>

</li>

<li>

<span class="status_text">Advanced Settings</span>

</a>

</li>

<li>

<span class="status_text">About Your Mobile Hotspot</span>

</a>

</li>

<li>

</a>

</li>

</ul>

</ul>

</div>

<h3>Network Technology</h3>

<h4>Status</h4>

<table>

<thead><tr><th>Network Type</th><th>Status</th></tr></thead>

<tbody>

<tr>

<td class="m_wwan_connectionText">Disconnected</td>

</tr>

</tbody>

</table>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>Messages / Alerts</h3>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>SD Information and Settings</h3>

<h4>Status</h4>

<p>Card Status: <span class="m_storage_text"></span>

</p>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>GPS Information and Settings</h3>

<h4>Status</h4>

<dl>

<dt>Latitude:</dt><dd class="m_lbs_latitude_text"></dd>

<dt>Longitude:</dt><dd class="m_lbs_longitude_text"></dd>

<dt>Altitude:</dt><dd class="m_lbs_altitudeText"></dd>

<dt>Speed:</dt><dd class="m_lbs_speedText"></dd>

<dt>Heading:</dt><dd class="m_lbs_direction"></dd>

<dt>Satellites:</dt><dd class="m_lbs_satelliteCnt"></dd>

<dt>Timestamp:</dt><dd class="m_lbs_fixTime"></dd>

</dl>

</div>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>Connected Users</h3>

<h4>Status</h4>

<p>

<span class="m_wifi_usersString">1 Wi-Fi users connected.</span>

</p>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>Battery Information and Settings</h3>

<h4>Status</h4>

<p>Battery Level: <span class="m_power_text">100% remaining</span></p>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>Data Usage Details</h3>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>Sounds</h3>

<h4>Status</h4>

<p><span class="m_audio_muteStateText">Alert Sounds on</span></p>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>Device Security</h3>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<ul>

<li><a href="http://att.com/devicesupport" target="helpwin">Support</a></li>

<li><a href="help/en_US/Default.htm" target="helpwin">Online Help</a></li>

</ul>

</div>

<h4>Customer Care</h4>

<ul>

<li>

<strong><span id="customercare_accounttype">Account type: </span></strong>

<option value="Personal" selected="selected">Personal</option>

<option value="Small Business">Small Business</option>

<option value="Enterprise">Enterprise</option>

</select>

</li>

<li>Your device wireless number:

</li>

<li style="color:#1C78AB; font-weight:bold;">Quick Links</li>

<a href="https://www.att.com/olam/loginAction.olamexecute" target="_blank">Manage Your Account</a>

</li>

<a href="http://www.wireless.att.com/businesscenter/premier/index.jsp" target="_blank">Manage Your Account</a>

</li>

<li style="color:#1C78AB; font-weight:bold;">Self-Service Support</li>

<li>

<a href="https://www.att.com/tutorials" target="_blank">Interactive Tutorials</a>

</li>

<a href="http://www.wireless.att.com/support" target="_blank">AT&T Device Support site</a>

</li>

<a href="https://www.att.com/biztech" target="_blank">Business Center Support site</a>

</li>

<li style="color:#1C78AB; font-weight:bold;">Contact AT&T</li>

</li>

</li>

<li>

</li>

</ul>

</div>

<h3>Advanced Settings</h3>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<h3>About Your Mobile Hotspot</h3>

<p>Please login at the top of the page to view the status or make changes to settings.</p><p>Note: the default login is shown on the device label under the battery.</p>

</div>

</div>

<label for="general_password">Password to log on to the home page. 5-31 characters.</label>

<label for="general_showAdvHelp-false">Do not show Advanced mouse-over help text</label>

<label for="general_showAdvHelp-true">Show Advanced mouse-over help text</label>

<label for="power_standby_onIdle_timer_onBattery">How soon the Wi-Fi radio turns off when no users are connected to Wi-Fi on the hotspot. <br/><br/> When Wi-Fi turns off, the battery standby life will be extended. <br/> Note: This has no effect if the USB cable is plugged into the unit. <br/> To wake the unit up, the power button must be pressed once. <br/> Only then will you be able to reconnect a Wi-Fi device to the hotspot again.</label>

<label for="general_HIDenabled_false">The host driver is installed each time the hotspot USB is connected to a computer.</label>

<label for="general_HIDenabled_no">The host driver is installed each time the hotspot USB is connected to a computer. The host driver is needed to data tether the hotspot. <br/>If the driver is installed once on a computer, the driver will not install again.</label>

<label for="install_usb_driver">Install Host drivers, to enable data tethering. This button will only be visible when the hotspot is plugged into a computer</label>

<label for="import_router_settings_file">Browse for hotspot settings file to import.</label>

<label for="export_router_settings">Export hotspot settings or configuration.<br/>This can be used to save your current hotspot settings and re-import later to restore your hotspot configuration.</label>

<label for="general_LEDenabled-true">The Power LED on the device indicates that the device is on.</label>

<label for="general_LEDenabled-false">The Power LED can be turned off to conserve battery life.</label>

<label for="general_defaultlang">Default language used by the mobile hotspot LCD and homepage.</label>

<label for="lcd_backlightEnabled-true">Turns on the LCD backlight.</label>

<label for="lcd_backlightEnabled-false">Turns off the LCD backlight. <br/>When turned off you will not be able to check the LCD for status messages and icons.</label>

<label for="lcd_inactivityTimer">Turns off the LCD backlight after a period of time. Battery life is conserved with a lower time period.</label>

<label for="lcd_brightnessOnBatt">When powered by battery, you can change the brightness of the LCD backlight. A lower brightness will conserve battery life.</label>

<label for="lcd_brightnessOnUSB">When powered by USB, you can change the brightness of the LCD backlight.</label>

<label for="lcd_brightnessOnAC">When powered by AC wall charger, you can change the brightness of the LCD backlight.</label>

<label for="audio_onBattLowAlert">When checked, a sound will play when the battery is low and should be charged.</label>

<label for="audio_onWwanConnect">When checked, a sound will play when the hotspot connects to the network and internet is ready to use.</label>

<label for="audio_onWwanDisconnect">When checked, a sound will play when the hotspot disconnects from the network and internet will not be available.</label>

<label for="audio_onWifiConnect">When checked, a sound will play when a Wi-Fi user connects to the hotspot.</label>

<label for="audio_onWifiDisconnect">When checked, a sound will play when a Wi-Fi user disconnects from the hotspot.</label>

<label for="audio_onLastUserLeft">When checked, a sound will play when the last Wi-Fi and or USB user disconnects from the hotspot.</label>

<label for="audio_onSystemAlert">When checked, a sound will play when a system alert has occurred. You can check the alert by viewing Alerts/Messages on the home page.</label>

<label for="audio_onStandbyEntry">When checked, a sound will play when the Wi-Fi radio enters standby (low power mode).</label>

<label for="audio_onSMSreceived">When checked, a sound will play when an incoming SMS is received.</label>

<label for="reset_factory_defaults">Resets the hotspot back to factory defaults.</label>

<label for="wwan_bandRegion_setIndex">Sets to a specific Band Region to connect to the network.</label>

<label for="wwan_netAutomatic">Manual Network Selection. Select manual to scan for other wireless networks.</label>

<label for="wwan_autoconnect-Always">Always auto-connects to the network, even when roaming. If roaming, additional network changes will apply.</label>

<label for="wwan_autoconnect-HomeNetwork">Only auto-connects to the home network (not roaming). </label>

<label for="wwan_autoconnect-Never">Never auto connects to the network. Requires manual connection using the power button on the hotspot or the connect button on the home page under the virtual device.</label>

<label for="adv_wwan_autoconnect-Always">Always auto-connects to the network, even when roaming. If roaming, additional network changes will apply.</label>

<label for="adv_wwan_autoconnect-HomeNetwork">Only auto-connects to the home network (not roaming). </label>

<label for="adv_wwan_autoconnect-Never">Never auto connects to the network. Requires manual connection using the power button on the hotspot or the connect button on the home page under the virtual device.</label>

<label for="wwan_profile_default">Selects the Default profile to connect to the wireless network.</label>

<label for="edit_wwan_profiles_button">Add, Edit and Delete profiles. For Authentication Type, use PAP or CHAP if a username and password are required to connect to the network.</label>

<label for="get_fix_button">Searches for GPS satellites and gets the current GPS coordinates. Use this if you are in a single location. </label>

<label for="start_fix_button">Starts GPS continuous tracking and gets the current coordinates on a regular interval. Use this if you are constantly moving. </label>

<label for="lbs_mapService">The mapping service that displays the GPS results.</label>

<label for="sim_pin_mode-enable">Turns on SIM security. You will need your SIM PIN to enable SIM security.</label>

<label for="sim_pin_mode-disable">Turns off SIM Security. You will need your SIM PIN to disable SIM security.</label>

<label for="sim_change_pin">Used to change your SIM PIN. You will need your current SIM PIN to change to a new PIN.</label>

<label for="wifi_client_list_button">Shows the current list of devices connected to your hotspot.</label>

<label for="adv_wifi_enabled_true">Enables the Wi-Fi radio. </label>

<label for="adv_wifi_enabled_false">Disables Wi-Fi and only allows devices to be used in data tethering mode. No Wi-Fi signals will be broadcasted.</label>

<label for="wifi_enabled_true">Enables the Wi-Fi radio. </label>

<label for="wifi_enabled_false">Disables Wi-Fi and only allows devices to be used in data tethering mode. No Wi-Fi signals will be broadcasted.</label>

<label for="wifi_SSID">This name is visible to other Wi-Fi devices and is used to identify your Wi-Fi network. If this SSID (Network Name) is changed, you and other previously connected Wi-Fi devices will have to reconnect with the new SSID.<br/>A valid SSID is 1-32 characters.</label>

<label for="wifi_SSID_a">This name is visible to other Wi-Fi devices and is used to identify your Wi-Fi network. If this SSID (Network Name) is changed, you and other previously connected Wi-Fi devices will have to reconnect with the new SSID.<br/>A valid SSID is 1-32 characters.</label>

<label for="wifi_SSID_b">This name is visible to other Wi-Fi devices and is used to identify your Wi-Fi network. If this SSID (Network Name) is changed, you and other previously connected Wi-Fi devices will have to reconnect with the new SSID.<br/>A valid SSID is 1-32 characters.</label>

<label for="router_hostname_a">The name of your hotspot. This is used to access your home page.<br/>A valid hostname is 1-31 letters and numbers. It must start with a letter.</label>

<label for="router_hostname_b">The name of your hotspot. This is used to access your home page.<br/>A valid hostname is 1-31 letters and numbers. It must start with a letter.</label>

<label for="wifi_hiddenSSID-false">Broadcast your SSID to everyone nearby</label>

<label for="wifi_hiddenSSID-true">Do not broadcast your SSID to everyone nearby</label>

<label for="wifi_txPower-ShortRange">Provides better battery life. The Wi-Fi range is shorter</label>

<label for="wifi_txPower-MediumRange">Improved Wi-Fi range</label>

<label for="wifi_txPower-LongRange">Best Wi-Fi range, but will have a bigger impact on battery life. </label>

<label for="adv_wifi_txPower-ShortRange">Provides better battery life. The Wi-Fi range is shorter</label>

<label for="adv_wifi_txPower-MediumRange">Improved Wi-Fi range</label>

<label for="adv_wifi_txPower-LongRange">Best Wi-Fi range, but will have a bigger impact on battery life. </label>

<label for="wifi_channel">The active Wi-Fi channel of your hotspot. Change this if you are having performance issues. </label>

<label for="security_link">Changes the basic rate in security.</label>

<label for="wifi_RTSthreshold">The smallest packet size, in bytes, for which RTS/CTS (Request to Send/Clear to Send) handshaking is used. The recommended value is 2347 . Change this value only if you are experiencing inconsistent data flow. Make only minor changes to this value.</label>

<label for="wifi_fragThreshold">The largest allowable size, in bytes, for a packet. If the packet is larger than this, it is fragmented into multiple packets before it is transmitted. To prevent poor network performance, it is recommended to keep this value as large as possible (up to 2346).</label>

<label for="wifi_client_list_button">Shows the current list of devices connected to your hotspot.</label>

<label for="wifi_encryption-None">No security (no password is required to access the network); not recommended. Anyone may access your hotspot and use your internet connection (you are responsible for payment for data usage).</label>

<label for="wifi_encryption-WEP64_Open">Lower Security. Works with older and newer Wi-Fi devices. Recommended only if your Wi-Fi devices do not support WPA or WPA2. Open WEP uses the key for encryption, but not for authentication. 5 ASCII characters.</label>

<label for="wifi_encryption-WEP64_Shared">Lower security. Works with older and newer Wi-Fi devices. Recommended only if your Wi-Fi devices do not support WPA or WPA2. Shared WEP uses the same key for encryption and authentication; some consider shared WEP to be less secure than open WEP. 5 ASCII characters.</label>

<label for="wifi_encryption-WEP128_Open">Lower Security. Works with older and newer Wi-Fi devices. Recommended only if your Wi-Fi devices do not support WPA or WPA2. Open WEP uses the key for encryption, but not for authentication. 13 ASCII characters.</label>

<label for="wifi_encryption-WEP128_Shared">Lower security encryption that works with both older and newer Wi-Fi devices. <br/> Recommended only for Wi-Fi devices that do not support WPA or WPA2. <br/> Shared WEP uses the same key for encryption and authentication. Shared WEP is considered to be less secure than open WEP. The passphrase requires 13 ASCII characters.</label>

<label for="wifi_encryption-WPA_Personal_TKIP">A strong security standard, supported by most Wi-Fi devices. ASCII string, 8 to 63 characters</label>

<label for="wifi_encryption-WPA_Personal_CCMP">A strong security standard, supported by most Wi-Fi devices. ASCII string, 8 to 63 characters</label>

<label for="wifi_encryption-WPA2_Personal_TKIP">A stronger, newer security standard. Limited to newer Wi-Fi devices. ASCII string, 8 to 63 characters.</label>

<label for="wifi_encryption-WPA2_Personal_CCMP">A stronger, newer security standard. Limited to newer Wi-Fi devices. ASCII string, 8 to 63 characters.</label>

<label for="wifi_encryption-WPA_WPA2_Personal_TKIP">Wi-Fi devices that use either WPA or WPA2 can connect to the hotspot. Supported by most Wi-Fi devices. ASCII string, 8 to 63 characters.</label>

<label for="wifi_passPhrase">The maximum length of this field depends on the Wi-Fi security type you have selected. If you will be sharing your internet connection with others, you will have to give the Wi-Fi Passphrase to others.</label>

<label for="wifi_passwordReminder">Display Wi-Fi Passphrase on the LCD of the hotspot when the power button is clicked.</label>

<label for="wifi_passwordReminder-true">Display Wi-Fi Passphrase on the LCD of the hotspot when the power button is clicked.</label>

<label for="wifi_passwordReminder-false">Do not display the Wi-Fi Passphrase on the LCD.</label>

<label for="wifi_SSIDreminder">Display Wi-Fi Network Name on the LCD of the hotspot when the power button is clicked.</label>

<label for="wifi_SSIDreminder-true">Display Wi-Fi Network Name on the LCD of the hotspot when the power button is clicked.</label>

<label for="wifi_SSIDreminder-false">Do not display the Wi-Fi Network Name on the LCD.</label>

<label for="wifi_mode">Type of wireless devices connected to your hotspot network. If you are certain that all the Wi-Fi devices used will support 802.11g, then select 802.11g only (this ensures faster speeds); otherwise select 802.11b/g/n compatibility or 802.11b/g compatibility.</label>

<label for="wifi_accessControl">MAC filtering can prevent unauthorized wireless devices from connecting to your network.<br/><br/>No Filtering: All Wi-Fi devices are allowed to access the network.<br/><br/>Block all in list: Prevent all Wireless devices in the MAC filter list to access the network.<br/><br/>Allow only those in list: Allow only Wireless devices in the MAC filter list to access the network.</label>

<label for="wifi_client_list_button">Shows the current list of devices connected to your hotspot.</label>

<label for="router_portFwdEnabled-true">Forwards incoming traffic to specific ports and devices (using their local IP address) on your network.<br/>Used to allow internet users to access a website, FTP, email server, gaming or internet application hosted by your computer.<br/>The Port Forward panel is used to configure settings. <br/>Note: Port forwarding creates a security risk. When not required, port forwarding should be disabled.<br/></label>

<label for="router_portFwdEnabled-false">Disable Port Forwarding</label>

<label for="router_VPNpassthrough-true">Allows VPN traffic from endpoints to pass through router firewall</label>

<label for="router_VPNpassthrough-false">Disable VPN Pass-through</label>

<label for="wifi_IP">The routing hardwares IP address on the LAN (WI-Fi)</label>

<label for="router_netMask">The routing hardwares internal Subnet mask on the LAN (WI-Fi)</label>

<label for="router_DHCP_serverEnabled-true">DHCP automatically assigns an IP address to each device on the network and manages their configuration information for (most internet service providers use DHCP). If DHCP is enabled, each devices TCP/IP settings must be configured to obtain an IP address automatically, or to be bound to the Ethernet connection with DHCP.</label>

<label for="router_DHCP_serverEnabled-false">Disable DHCP. Each device on the network must be configured with: - Fixed (permanent/static) IP addresses. - DNS server addresses. Normally DHCP should be enabled.</label>

<label for="router_DHCP_range_low">Starting address of the range of IP addresses available for the hotspot to assign to Wi-Fi devices.</label>

<label for="router_DHCP_range_high">Ending address of the range of IP addresses available for the hotspot to assign to Wi-Fi devices.</label>

<label for="router_DHCP_DNSmode-Manual">The routing hardware assigns DHCP clients the DNS servers specified in the Manual DNS Server.</label>

<label for="router_DHCP_DNSmode-Auto">The DNS mode setting specifies how the DNS servers are obtained. Auto: Use DNS relay specified by the internet operator.</label>

<label for="router_DHCP_DNS1">Static DNS address 1</label>

<label for="router_DHCP_DNS2">Static DNS address 2</label>

<label for="newPfEntry_label">Name of Port Forward entry</label>

<label for="wifi_encryption">The encryption mode used to secure your Wi-Fi connection</label>

<label for="router_DMZenabled-true">Forward all incoming traffic to the DMZ IP address. Note: Port forwarding creates a security risk. When not required, port forwarding should be disabled.</label>

<label for="router_DMZenabled-false">Disable DMZ</label>

<label for="router_DMZaddress">The IP address of the computer on your network to which all incoming network traffic will be forwarded when DMZ is enabled.</label>

<label for="router_portFilteringEnabled-true">Port filtering blocks or allows access to ports based on your settings. When using Black List filtering, all ports are allowed except those in the list. With White List filtering, all ports are blocked except those explicitly allowed.</label>

<label for="router_portFilteringEnabled-false">Disable port filtering</label>

<label for="router_portFilteringMode-BlackList">When using Black List filtering, all ports are allowed except those in the list.</label>

<label for="router_portFilteringMode-WhiteList">With White List filtering, all ports are blocked except those explicitly allowed.</label>

<label for="router_DHCP_USBpcIP">The IP address assigned to tethered devices connected through USB.</label>

<label for="router_DHCP_leaseTime">The amount of time (in minutes) before an assigned DHCP IP address expires</label>

<label for="general_keyLockEnabled-true">When enabled, the buttons will automatically be locked after inactivity.</label>

<label for="general_keyLockEnabled-false">Disable key lock.</label>

<label for="fota_webupdater_period">How often to check for new firmware updates. When new firmware is available for download or installation you will receive a system alert.</label>

<label for="button_check_firmware_updates">Check now for available firmware updates. Please check the system alerts to see if new firmware is available for download or installation.</label>

</div>

All other marks are the property of their respective owners.

<span id="sierra_logo">Sierra Wireless</span>

</div>

<div id="dialog-bad_password" class="dlg_error" title="Incorrect Password"><p>Please enter a valid administrator password.</p></div>

<p>Attempting to reconnect...</p>

<h4>Final Steps</h4>

<ol>

<li>You may have to reconnect your Wi-Fi enabled device (or computer) to your hotspot. </li>

<li>Wait until Step 1 is completed then <a href='index.html'>click here</a><br/>(This step will only work if you have reconnected to your hotspot)</li>

</ol>

</div>

<div id="dialog-reconnected" class="dlg_inform" title="Reconnected to device"><p>Reconnected...</p></div>

</div>

<div id="dialog-error_external_link_unavailable" class="dlg_error" title="Link Unavailable"><p>You are not currently connected to the internet. Please check your hotspot settings</p></div>

<p>Modem is SIM Locked. Please login as administrator to enter the unlocking PIN</p>

<dl>

<dt>Admin Password:</dt><dd><input id="sim_session_password" type="password" name="session.password" autocomplete="off" size="8" class="required" /></dd>

</dl>

</form>

</div>

<p>Modem is SIM Blocked. Please login as administrator to enter the unblocking (PUK) code</p>

<dl>

<dt>Admin Password:</dt><dd><input id="puk_session_password" type="password" name="session.password" autocomplete="off" size="8" class="required" /></dd>

</dl>

</form>

</div>

<p>Modem is Network (MEP) Locked. Please login as administrator to enter the unlock code</p>

<dl>

<dt>Admin Password:</dt><dd><input id="mep_session_password" type="password" name="session.password" autocomplete="off" size="8" class="required" /></dd>

</dl>

</form>

</div>

<p>Your currently configured manual network is not available. Please login as administrator to change your network configuration.</p>

<dl>

<dt>Admin Password:</dt><dd><input id="net_session_password" type="password" name="session.password" autocomplete="off" size="8" class="required" /></dd>

</dl>

</form>

</div>

</div>

</body>

</html>

BrighidMoon · February 22, 2013

Okay well, this is what the report put out but looking at it it's obviously not what you want, and I see it's not what I want to post, but there's no delete or edit. So, yeah. If you could delete my information that I did not mean to put up here, that'd be nice. Thanks. Meanwhile, no idea why it's on there, since I was totally disconned from my modem and it was turned off at the time.

MrCharlie · February 22, 2013

I can't edit anything on this forum, so just attach the report:

To attach a log:

Bottom right corner of this page.

New window that comes up.

MrC

LDTate · February 26, 2013

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

Sign In

DDS and ATTACH logs

Recommended Posts

BrighidMoon

Link to post

Share on other sites

MrCharlie

Link to post

Share on other sites

BrighidMoon

Link to post

Share on other sites

BrighidMoon

Link to post

Share on other sites

MrCharlie

Link to post

Share on other sites

LDTate

Link to post

Share on other sites

Recently Browsing 0 members

Browse

Activity

Personal

Business

Business Modules

Partners

Learn

Start here

Type of malware/attacks

How does it get on my computer?

Scams and grifts

Support

Important Information