Jump to content

trojans keep reappearing after cleanups


Recommended Posts

Hello.  I have run Malware Pro a number of times but still new trojans are being dropped onto my system.  I know the email that started it all if that helps.  

 

Any help would be much appreciated!

 

Anyway, here are the contents of dds and attach:

 

DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 10.0.9200.16686
Run by dell at 20:33:41 on 2013-10-02
Microsoft Windows 7 Professional   6.1.7601.1.1252.44.1033.18.3482.1707 [GMT 1:00]
.
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\IDT\WDM\STacSV.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\System32\WUDFHost.exe
C:\Windows\system32\WLANExt.exe
C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
C:\Windows\system32\conhost.exe
C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe
C:\Program Files\Common Files\SPBA\upeksvr.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmService.exe
C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\EMBASSY Client Core\EmbassyServer.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Windows\system32\IProsetMonitor.exe
C:\Program Files\Intel\Intel® Management Engine Components\DAL\jhi_service.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Windows\system32\o2flash.exe
C:\Program Files\Microsoft Office 15\ClientX86\integratedoffice.exe
C:\Program Files\Dell\Dell Data Protection\Access\Advanced\hapi32\pbadrvsvc.exe
C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Authentication Manager\WaveAMService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe
C:\Program Files\Dell\Feature Enhancement Pack\DFEPService.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\Explorer.EXE
C:\Program Files\DellTPad\Apoint.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\DellTPad\ApMsgFwd.exe
C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
C:\Program Files\Intel\Intel® USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Dell\Dell Data Protection\Access\Advanced\Wave\Trusted Drive Manager\TdmNotify.exe
C:\Program Files\Dell\Feature Enhancement Pack\DFEPApplication.exe
C:\Program Files\DellTPad\HidFind.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\DellTPad\Apntex.exe
C:\Users\dell\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
C:\Windows\system32\conhost.exe
C:\Users\dell\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\Dell\Feature Enhancement Pack\SmartSettings.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe
c:\Program Files\Dell Digital Delivery\DeliveryService.exe
C:\Program Files\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe
C:\Program Files\Intel\Intel® Management Engine Components\LMS\LMS.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\Intel\Intel® Management Engine Components\UNS\UNS.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
mWinlogon: Userinit = c:\windows\system32\userinit.exe,-sm,
BHO: Windows Live ID Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: LastPass Vault: {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - c:\program files\lastpass\LPToolbar.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office 15\root\office15\URLREDIR.DLL
TB: LastPass Toolbar: {9f6b5cc3-5c7b-4b5c-97af-19dec1e380e5} - c:\program files\lastpass\LPToolbar.dll
uRun: [skyDrive] "c:\users\dell\appdata\local\microsoft\skydrive\SkyDrive.exe" /background
uRun: [aiivongg] "c:\users\dell\appdata\local\bgvehtek.exe"
uRun: [relsds] "c:\windows\system32\rundll32.exe" "c:\users\dell\appdata\roaming\relsds.dll",Keys
mRun: [Apoint] c:\program files\delltpad\Apoint.exe
mRun: [sysTrayApp] c:\program files\idt\wdm\sttray.exe
mRun: [igfxTray] c:\windows\system32\igfxtray.exe
mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
mRun: [Persistence] c:\windows\system32\igfxpers.exe
mRun: [broadcom Wireless Manager UI] c:\program files\dell\dw wlan card\WLTRAY.exe
mRun: [iAStorIcon] c:\program files\intel\intel® rapid storage technology\iastoriconlaunch.exe "c:\program files\intel\intel® rapid storage technology\IAStorIcon.exe" 60
mRun: [uSB3MON] "c:\program files\intel\intel® usb 3.0 extensible host controller driver\application\iusb3mon.exe"
mRun: [TdmNotify] c:\program files\dell\dell data protection\access\advanced\wave\trusted drive manager\TdmNotify.exe
mRun: [DFEPApplication] c:\program files\dell\feature enhancement pack\DFEPApplication.exe
mRun: [NBAgent] "c:\program files\nero\nero 11\nero backitup\NBAgent.exe" /WinStart
mRun: [relsds] "c:\windows\system32\rundll32.exe" "c:\users\dell\appdata\roaming\relsds.dll",Keys
StartupFolder: c:\users\dell\appdata\roaming\micros~1\windows\startm~1\programs\startup\dropbox.lnk - c:\users\dell\appdata\roaming\dropbox\bin\Dropbox.exe
StartupFolder: c:\users\dell\appdata\roaming\micros~1\windows\startm~1\programs\startup\smarts~1.lnk - c:\program files\dell\feature enhancement pack\SmartSettings.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\instal~1.lnk - c:\program files\common files\lpuninstall.exe
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableLUA = dword:0
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-System: EnableVirtualization = dword:0
mPolicies-System: DisableCAD = dword:1
IE: E&xport to Microsoft Excel - c:\program files\microsoft office 15\root\office15\EXCEL.EXE/3000
IE: LastPass - c:\users\dell\appdata\locallow\lastpass\context.html?cmd=lastpass
IE: LastPass Fill Forms - c:\users\dell\appdata\locallow\lastpass\context.html?cmd=fillforms
IE: Se&nd to OneNote - c:\program files\microsoft office 15\root\office15\ONBttnIE.dll/105
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office 15\root\office15\ONBttnIE.dll
IE: {43699cd0-e34f-11de-8a39-0800200c9a66} - {95D9ECF5-2A4D-4550-BE49-70D42F71296E} - c:\program files\lastpass\LPToolbar.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office 15\root\office15\ONBttnIELinkedNotes.dll
TCP: NameServer = 194.168.4.100 194.168.8.100
TCP: Interfaces\{8324BF27-9C00-4B49-91B8-838E32AFEE51} : DHCPNameServer = 194.168.4.100 194.168.8.100
TCP: Interfaces\{F6E6749A-1341-4595-A0BE-E93B17468974} : DHCPNameServer = 194.168.4.100 194.168.8.100
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - c:\program files\microsoft office 15\root\office15\MSOSB.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Notify: igfxcui - igfxdev.dll
Notify: spba - c:\program files\common files\spba\homefus2.dll
SSODL: WebCheck - <orphaned>
LSA: Authentication Packages =  msv1_0 wvauth
LSA: Notification Packages =  scecli c:\program files\widcomm\bluetooth software\BtwProximityCP.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\30.0.1599.66\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R0 iusb3hcs;Intel® USB 3.0 Host Controller Switch Driver;c:\windows\system32\drivers\iusb3hcs.sys [2013-6-4 16440]
R0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\drivers\NBVol.sys [2013-9-30 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\drivers\NBVolUp.sys [2013-9-30 12464]
R0 stdcfltn;Disk Class Filter Driver for Accelerometer;c:\windows\system32\drivers\stdcfltn.sys [2013-6-4 17904]
R2 Credential Vault Host Control Service;Credential Vault Host Control Service;c:\program files\broadcom corporation\broadcom ush host components\cv\bin\HostControlService.exe [2012-10-24 826312]
R2 Credential Vault Host Storage;Credential Vault Host Storage;c:\program files\broadcom corporation\broadcom ush host components\cv\bin\HostStorageService.exe [2012-10-24 31688]
R2 DellDigitalDelivery;Dell Digital Delivery Service;c:\program files\dell digital delivery\DeliveryService.exe [2013-8-7 199176]
R2 DFEPService;Dell Feature Enhancement Pack Service;c:\program files\dell\feature enhancement pack\DFEPService.exe [2012-8-15 1569336]
R2 EmbassyService;EmbassyService;c:\program files\dell\dell data protection\access\advanced\wave\embassy client core\EmbassyServer.exe [2012-11-20 185784]
R2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files\intel\intel® rapid storage technology\IAStorDataMgrSvc.exe [2013-6-4 13632]
R2 Intel® Capability Licensing Service Interface;Intel® Capability Licensing Service Interface;c:\program files\intel\icls client\HeciServer.exe [2012-2-3 458464]
R2 Intel® PROSet Monitoring Service;Intel® PROSet Monitoring Service;c:\windows\system32\IPROSetMonitor.exe [2013-6-4 132768]
R2 jhi_service;Intel® Dynamic Application Loader Host Interface Service;c:\program files\intel\intel® management engine components\dal\Jhi_service.exe [2013-6-4 161560]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes' anti-malware\mbamscheduler.exe [2013-9-25 418376]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2013-9-25 701512]
R2 NAUpdate;Nero Update;c:\program files\nero\update\NASvc.exe [2011-11-25 687400]
R2 OfficeSvc;Microsoft Office Service;c:\program files\microsoft office 15\clientx86\integratedoffice.exe [2013-9-24 1316536]
R2 PbaDrvSvc;Dell PBA Service;c:\program files\dell\dell data protection\access\advanced\hapi32\pbadrvsvc.exe [2012-11-23 17408]
R2 UNS;Intel® Management and Security Application User Notification Service;c:\program files\intel\intel® management engine components\uns\UNS.exe [2013-6-4 363800]
R2 Wave Authentication Manager Service;Wave Authentication Manager Service;c:\program files\dell\dell data protection\access\advanced\wave\authentication manager\WaveAMService.exe [2012-11-19 1251328]
R2 WMCoreService;Mobile Broadband Service;c:\program files\dell\dell wwan\wmcore\mini_WMCore.exe [2013-6-4 689560]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter;c:\windows\system32\drivers\bcbtums.sys [2013-6-4 144424]
R3 btwampfl;btwampfl Bluetooth filter driver;c:\windows\system32\drivers\btwampfl.sys [2013-6-4 521768]
R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\drivers\btwl2cap.sys [2013-6-4 33832]
R3 CtClsFlt;Creative Camera Class Upper Filter Driver;c:\windows\system32\drivers\CtClsFlt.sys [2013-6-4 147360]
R3 cvusbdrv;Dell ControlVault;c:\windows\system32\drivers\cvusbdrv.sys [2012-10-24 41480]
R3 d554gps;Dell Wireless  HSPA Mini-Card GPS Port;c:\windows\system32\drivers\d554gps.sys [2013-6-4 88848]
R3 d554scard;Dell Wireless  HSPA Mini-Card USIM Port;c:\windows\system32\drivers\d554scard.sys [2013-6-4 53800]
R3 dcdbas;System Management Driver;c:\windows\system32\drivers\dcdbas32.sys [2012-9-23 32872]
R3 ecnssndis; Mobile Broadband Driver;c:\windows\system32\drivers\wwanuss.sys [2013-6-4 23592]
R3 ecnssndisfltr; Mobile Broadband Driver Filter;c:\windows\system32\drivers\wwanussf.sys [2013-6-4 25640]
R3 IntcDAud;Intel® Display Audio;c:\windows\system32\drivers\IntcDAud.sys [2013-6-4 280576]
R3 iusb3hub;Intel® USB 3.0 Hub Driver;c:\windows\system32\drivers\iusb3hub.sys [2013-6-4 351288]
R3 iusb3xhc;Intel® USB 3.0 eXtensible Host Controller Driver;c:\windows\system32\drivers\iusb3xhc.sys [2013-6-4 796216]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2013-9-25 22856]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [2013-10-2 40776]
R3 Mbm3CBus;Dell Wireless 5560 HSPA+ Mini-Card Device (WDM);c:\windows\system32\drivers\Mbm3CBus.sys [2013-6-4 394056]
R3 Mbm3DevMt;Dell Wireless  HSPA Mini-Card Device Management Driver (WDM);c:\windows\system32\drivers\Mbm3DevMt.sys [2013-6-4 433736]
R3 Mbm3mdfl;Dell Wireless  HSPA Mini-Card Modem Filter;c:\windows\system32\drivers\Mbm3mdfl.sys [2013-6-4 17992]
R3 Mbm3Mdm;Dell Wireless  HSPA Mini-Card Modem Driver;c:\windows\system32\drivers\Mbm3Mdm.sys [2013-6-4 450120]
R3 MEI;Intel® Management Engine Interface ;c:\windows\system32\drivers\HECI.sys [2013-6-4 46080]
R3 O2SDJRDR;O2SDJRDR;c:\windows\system32\drivers\o2sdjw7.sys [2013-6-4 64056]
R3 ST_ACCEL;STMicroelectronics Accelerometer Service;c:\windows\system32\drivers\ST_ACCEL.sys [2013-6-4 59888]
R3 wbfcvusbdrv;WBF Control Vault;c:\windows\system32\drivers\wbfcvusbdrv.sys [2012-10-24 12936]
R3 WwanUsbServ;Mobile Broadband Driver;c:\windows\system32\drivers\WwanUsbMp.sys [2013-6-4 242928]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 WvPCR;WvPCR;c:\program files\dell\dell data protection\access\advanced\wave\common\WvPCR.exe [2012-11-8 171440]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 CtAudDrv;Provides advanced audio effects for audio devices.;c:\windows\system32\drivers\CtAudDrv.sys [2013-6-4 134144]
S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2010-11-21 62464]
S3 ffusb2audio;Focusrite USB 2.0 Audio Driver;c:\windows\system32\drivers\ffusb2audio.sys [2013-9-25 47960]
S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2013-6-4 49664]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2012-9-12 1512448]
S3 netvsc;netvsc;c:\windows\system32\drivers\netvsc60.sys [2010-11-21 126464]
S3 O2MDFRDR;O2MDFRDR;c:\windows\system32\drivers\o2mdfw7.sys [2013-6-4 60904]
S3 O2MDRRDR;O2MDRRDR;c:\windows\system32\drivers\O2MDRw7.sys [2013-6-4 62440]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 synasusb;eLicenser;c:\windows\system32\drivers\synasusb.sys [2013-9-24 23696]
S3 SynthVid;SynthVid;c:\windows\system32\drivers\VMBusVideoM.sys [2010-11-21 19456]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-9-26 1343400]
.
=============== Created Last 30 ================
.
2013-10-02 19:22:50 40776 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2013-10-02 18:36:05 -------- d-----w- c:\programdata\lpggn373
2013-10-02 06:33:00 409600 ----a-w- c:\users\dell\appdata\roaming\relsds.dll
2013-10-02 06:32:55 774144 ----a-w- c:\users\dell\appdata\roaming\lasci.dll
2013-10-02 02:00:27 9728 ----a-w- c:\windows\system32\Wdfres.dll
2013-10-02 02:00:27 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2013-10-02 02:00:27 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2013-10-02 02:00:22 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2013-10-02 02:00:22 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2013-10-02 02:00:22 613888 ----a-w- c:\windows\system32\WUDFx.dll
2013-10-02 02:00:22 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2013-10-02 02:00:22 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2013-10-02 02:00:22 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2013-10-02 02:00:22 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2013-10-01 21:26:21 -------- d-----w- c:\users\dell\appdata\local\Nero_AG
2013-10-01 21:26:14 -------- d-----w- c:\users\dell\appdata\local\Nero
2013-10-01 19:06:40 38400 ----a-w- c:\users\dell\appdata\local\bgvehtek.exe
2013-10-01 08:27:46 196328 ----a-w- c:\windows\system32\drivers\fvevol.sys
2013-10-01 08:27:42 40960 ----a-w- c:\windows\system32\wwanprotdim.dll
2013-10-01 08:27:42 24576 ----a-w- c:\windows\system32\cryptdlg.dll
2013-10-01 08:27:42 186368 ----a-w- c:\windows\system32\wwansvc.dll
2013-10-01 08:27:30 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-10-01 08:27:19 133056 ----a-w- c:\windows\system32\drivers\ataport.sys
2013-10-01 08:27:05 7328304 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{031c2a8a-6476-451d-aa1f-fb3ac05c14c4}\mpengine.dll
2013-09-30 14:01:41 -------- d-----w- c:\users\dell\appdata\roaming\Windows Live Writer
2013-09-30 14:01:41 -------- d-----w- c:\users\dell\appdata\local\Windows Live Writer
2013-09-30 13:46:44 -------- d-----w- c:\programdata\Nero
2013-09-30 13:44:33 56496 ----a-w- c:\windows\system32\drivers\NBVol.sys
2013-09-30 13:44:33 12464 ----a-w- c:\windows\system32\drivers\NBVolUp.sys
2013-09-30 13:44:33 -------- d-----w- c:\program files\Nero
2013-09-30 13:43:50 1974616 ----a-w- c:\windows\system32\D3DCompiler_42.dll
2013-09-30 13:43:42 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2013-09-30 13:43:34 1892184 ----a-w- c:\windows\system32\D3DX9_42.dll
2013-09-30 13:43:27 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2013-09-30 13:43:19 4379984 ----a-w- c:\windows\system32\D3DX9_40.dll
2013-09-30 13:43:12 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2013-09-30 13:43:04 3727720 ----a-w- c:\windows\system32\d3dx9_35.dll
2013-09-30 13:42:57 3497832 ----a-w- c:\windows\system32\d3dx9_34.dll
2013-09-30 09:33:33 -------- d-----w- c:\windows\system32\MRT
2013-09-27 12:54:02 -------- d-----w- c:\users\dell\appdata\local\Diagnostics
2013-09-27 12:49:56 7328304 ----a-w- c:\programdata\microsoft\windows defender\definition updates\backup\mpengine.dll
2013-09-26 14:22:01 1247744 ----a-w- c:\windows\system32\DWrite.dll
2013-09-26 09:23:44 -------- d-----w- c:\windows\system32\Wat
2013-09-26 06:08:30 293376 ----a-w- c:\windows\system32\browserchoice.exe
2013-09-26 06:05:19 -------- d-----w- c:\program files\MSXML 4.0
2013-09-26 06:02:47 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-09-25 19:37:32 47960 ----a-w- c:\windows\system32\drivers\ffusb2audio.sys
2013-09-25 19:37:32 20824 ----a-w- c:\windows\system32\ffusb2audio_coinst.dll
2013-09-25 19:37:32 -------- d-----w- c:\program files\Focusrite
2013-09-25 15:49:17 -------- d-----w- c:\windows\pss
2013-09-25 15:05:14 -------- d-----r- c:\users\dell\Dropbox
2013-09-25 15:03:59 2348544 ----a-w- c:\windows\system32\win32k.sys
2013-09-25 15:01:31 -------- d-----w- c:\users\dell\appdata\roaming\Malwarebytes
2013-09-25 15:01:24 -------- d-----w- c:\programdata\Malwarebytes
2013-09-25 15:01:23 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-09-25 15:01:23 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2013-09-25 15:01:07 -------- d-----w- c:\users\dell\appdata\local\Programs
2013-09-24 22:28:19 11668480 ----a-w- c:\program files\common files\lpuninstall.exe
2013-09-24 22:28:19 -------- d-----w- c:\program files\LastPass
2013-09-24 15:39:46 -------- d-----w- c:\users\dell\appdata\roaming\Wave Systems Corp
2013-09-24 15:33:17 -------- d--h--w- C:\SkyDriveTemp
2013-09-24 15:22:17 -------- d-----w- c:\program files\Microsoft SkyDrive
2013-09-24 15:22:17 -------- d-----r- c:\users\dell\SkyDrive
2013-09-24 15:22:09 -------- d-----w- c:\programdata\Microsoft SkyDrive
2013-09-24 15:16:59 564432 ----a-w- c:\programdata\microsoft\clicktorun\{9ac08e99-230b-47e8-9721-4577b7f124ea}\integrator.exe
2013-09-24 15:15:43 -------- d-----w- c:\programdata\regid.1991-06.com.microsoft
2013-09-24 15:14:26 -------- d-----w- c:\users\dell\appdata\local\Google
2013-09-24 15:14:21 -------- d-----w- c:\users\dell\appdata\local\Deployment
2013-09-24 15:14:21 -------- d-----w- c:\users\dell\appdata\local\Apps
2013-09-24 15:11:21 -------- d-----w- c:\program files\Microsoft Office 15
2013-09-24 15:10:24 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-09-24 14:59:01 0 ----a-w- c:\windows\invcol.tmp
2013-09-24 14:57:57 -------- d-----w- c:\users\dell\appdata\roaming\Intel Corporation
2013-09-24 14:57:04 -------- d-----w- c:\users\dell\appdata\local\Broadcom
2013-09-24 14:57:03 -------- d-----w- c:\users\dell\appdata\local\Dell
.
==================== Find3M  ====================
.
2013-09-24 15:25:28 2892 ----a-w- c:\windows\system32\audcon.sys
2013-08-02 01:50:36 169984 ----a-w- c:\windows\system32\winsrv.dll
2013-08-02 01:49:19 293376 ----a-w- c:\windows\system32\KernelBase.dll
2013-08-02 00:52:57 271360 ----a-w- c:\windows\system32\conhost.exe
2013-08-02 00:43:05 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 00:43:05 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 00:43:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 00:43:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-07-25 08:57:27 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-07-19 01:41:01 2048 ----a-w- c:\windows\system32\tzres.dll
2013-07-09 05:03:34 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-07-09 05:03:34 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-07-09 04:53:46 1289096 ----a-w- c:\windows\system32\ntdll.dll
2013-07-09 04:52:10 175104 ----a-w- c:\windows\system32\wintrust.dll
2013-07-09 04:50:42 652800 ----a-w- c:\windows\system32\rpcrt4.dll
2013-07-09 04:46:31 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-07-09 04:46:31 1166848 ----a-w- c:\windows\system32\crypt32.dll
2013-07-09 04:46:31 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-07-06 05:05:35 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
.
============= FINISH: 20:33:54.26 ===============
 
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional 
Boot Device: \Device\HarddiskVolume2
Install Date: 24/09/2013 15:56:25
System Uptime: 02/10/2013 20:16:16 (0 hours ago)
.
Motherboard: Dell Inc. |  | 0V7C40
Processor: Intel® Core i3-3130M CPU @ 2.60GHz | SOCKET 0 | 2600/100mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 118 GiB total, 79.601 GiB free.
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP23: 25/09/2013 20:37:39 - Device Driver Package Install: Focusrite Sound, video and game controllers
RP24: 26/09/2013 07:02:12 - Windows Update
RP25: 27/09/2013 03:00:27 - Windows Update
RP26: 30/09/2013 10:33:27 - Windows Update
RP27: 30/09/2013 14:42:28 - Installed Microsoft Visual C++ 2005 Redistributable
RP28: 30/09/2013 14:42:38 - Installed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
RP30: 30/09/2013 14:42:45 - Installed DirectX
RP32: 30/09/2013 14:42:52 - Installed DirectX
RP34: 30/09/2013 14:43:00 - Installed DirectX
RP36: 30/09/2013 14:43:08 - Installed DirectX
RP38: 30/09/2013 14:43:15 - Installed DirectX
RP40: 30/09/2013 14:43:23 - Installed DirectX
RP42: 30/09/2013 14:43:31 - Installed DirectX
RP44: 30/09/2013 14:43:38 - Installed DirectX
RP46: 30/09/2013 14:43:46 - Installed DirectX
RP47: 30/09/2013 14:46:39 - Installed Nero 11.
RP49: 01/10/2013 20:06:58 - Windows Defender Checkpoint
RP50: 01/10/2013 22:17:16 - Windows Backup
RP51: 02/10/2013 03:00:10 - Windows Update
RP52: 02/10/2013 07:36:27 - Windows Update
.
==== Installed Programs ======================
.
Adobe Flash Player 11 ActiveX
Cisco EAP-FAST Module
Cisco LEAP Module
Cisco PEAP Module
Custom
D3DX10
Dell Client System Update
Dell ControlVault Host Components Installer
Dell Data Protection | Access
Dell Digital Delivery
Dell Edoc Viewer
Dell Feature Enhancement Pack
Dell Touchpad
Dell Webcam Central
Dell Wireless HSPA Mini-Card Drivers
DellAccess
Dropbox
DW WLAN Card Utility
eLicenser Control
EMBASSY Client Core
ERAS Connector
Focusrite USB 2.0 Audio Driver 2.2
Gemalto
GemPcCCID
Google Chrome
Google Update Helper
High-Definition Video Playback
Intel® Control Center
Intel® Management Engine Components
Intel® Network Connections 16.8.45.00
Intel® Processor Graphics
Intel® Rapid Storage Technology
Intel® USB 3.0 eXtensible Host Controller Driver
Intel® Trusted Connect Service Client
Junk Mail filter update
LastPass (uninstall only)
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Office Home and Student 2013 - en-us
Microsoft SkyDrive
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
Movie Maker
MSVCRT
MSVCRT110
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nero 11
Nero 11 Cliparts
Nero 11 Disc Menus Basic
Nero 11 Effects Basic
Nero 11 Image Samples
Nero 11 Kwik Themes Basic
Nero 11 PiP Effects Basic
Nero 11 Video Samples
Nero Audio Pack 1
Nero BackItUp 11
Nero BackItUp 11 Help (CHM)
Nero Backup Drivers
Nero Burning ROM 11
Nero Burning ROM 11 Help (CHM)
Nero ControlCenter 11
Nero ControlCenter 11 Help (CHM)
Nero Core Components 11
Nero CoverDesigner 11
Nero CoverDesigner 11 Help (CHM)
Nero Express 11
Nero Express 11 Help (CHM)
Nero Kwik Media
Nero Kwik Media Help (CHM)
Nero Recode 11
Nero Recode 11 Help (CHM)
Nero RescueAgent 11
Nero RescueAgent 11 Help (CHM)
Nero SharedVideoCodecs
Nero SoundTrax 11
Nero SoundTrax 11 Help (CHM)
Nero Update
Nero Video 11
Nero Video 11 Help (CHM)
Nero WaveEditor 11
Nero WaveEditor 11 Help (CHM)
nero.prerequisites.msi
Office 15 Click-to-Run Extensibility Component
Office 15 Click-to-Run Licensing Component
Office 15 Click-to-Run Localization Component
PBA Driver
Photo Common
Photo Gallery
Preboot Manager
Private Information Manager
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2804576)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2835393)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)
Security Update for Microsoft .NET Framework 4 Extended (KB2656351)
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)
SI TSS
SPBA (WBF) 5.9
ST Microelectronics 3 Axis Digital Accelerometer Solution
Steinberg Cubase 7
Steinberg REVerence Content 01
Steinberg Upload Manager
Steinberg VST Amp Rack Content 01
Trusted Drive Manager
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)
Update for Microsoft .NET Framework 4 Extended (KB2468871)
Update for Microsoft .NET Framework 4 Extended (KB2533523)
Update for Microsoft .NET Framework 4 Extended (KB2600217)
Update for Microsoft .NET Framework 4 Extended (KB2836939)
Wave Crypto Runtime 2.0.9.0 x86
Wave Infrastructure Installer
Wave Support Software Installer
Welcome App (Start-up experience)
WIDCOMM Bluetooth Software
Windows Driver Package - Focusrite USB 2.0 Audio Driver (09/22/2011 2.2.0.0)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live MIME IFilter
Windows Live Photo Common
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer Resources
.
==== Event Viewer Messages From Past Week ========
.
30/09/2013 20:18:53, Error: Ntfs [137]  - The default transaction resource manager on volume D: encountered a non-retryable error and could not start.  The data contains the error code.
27/09/2013 07:22:54, Error: Microsoft-Windows-Smartcard-Server [610]  - Smart Card Reader 'Mobile Broadband SIM Card Reader 0' rejected IOCTL GET_STATE: The I/O operation has been aborted because of either a thread exit or an application request.  If this error persists, your smart card or reader may not be functioning correctly. Command Header: XX XX XX XX
26/09/2013 16:45:16, Error: Microsoft-Windows-Smartcard-Server [610]  - Smart Card Reader 'Mobile Broadband SIM Card Reader 0' rejected IOCTL GET_STATE: The device has been removed.  If this error persists, your smart card or reader may not be functioning correctly. Command Header: XX XX XX XX
26/09/2013 11:01:44, Error: Service Control Manager [7022]  - The O2FLASH service hung on starting.
26/09/2013 11:01:41, Error: Service Control Manager [7011]  - A timeout (30000 milliseconds) was reached while waiting for a transaction response from the iphlpsvc service.
26/09/2013 10:27:28, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x80242016: Cumulative Security Update for Internet Explorer 9 for Windows 7 (KB2870699).
26/09/2013 10:24:55, Error: Service Control Manager [7023]  - 
26/09/2013 07:14:58, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x8024200d: Security Update for Windows 7 (KB2835361).
25/09/2013 16:41:23, Error: Disk [11]  - The driver detected a controller error on \Device\Harddisk1\DR1.
25/09/2013 16:07:33, Error: iaStor [9]  - The device, \Device\Ide\iaStor0, did not respond within the timeout period.
25/09/2013 16:04:47, Error: Service Control Manager [7031]  - The Dell Digital Delivery Service service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 1000 milliseconds: Restart the service.
02/10/2013 20:16:27, Error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  cdrom
02/10/2013 20:16:25, Error: Service Control Manager [7001]  - The WvPCR service depends on the TPM Base Services service which failed to start because of the following error:  The operation completed successfully.
02/10/2013 20:16:25, Error: Service Control Manager [7001]  - The SI TSS v1.2.1.41 TCS service depends on the TPM Base Services service which failed to start because of the following error:  The operation completed successfully.
02/10/2013 19:46:31, Error: Microsoft-Windows-Smartcard-Server [610]  - Smart Card Reader 'Mobile Broadband SIM Card Reader 0' rejected IOCTL GET_STATE: The device does not recognize the command.  If this error persists, your smart card or reader may not be functioning correctly. Command Header: XX XX XX XX
02/10/2013 07:25:51, Error: Microsoft-Windows-Smartcard-Server [610]  - Smart Card Reader 'Mobile Broadband SIM Card Reader 0' rejected IOCTL TRANSMIT: The system cannot find the file specified.  If this error persists, your smart card or reader may not be functioning correctly. Command Header: 00 a4 04 00
02/10/2013 03:00:48, Error: Microsoft-Windows-WindowsUpdateClient [20]  - Installation Failure: Windows failed to install the following update with error 0x80070643: Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243).
01/10/2013 22:31:18, Error: volsnap [14]  - The shadow copies of volume E: were aborted because of an IO failure on volume E:.
01/10/2013 22:28:29, Error: Disk [11]  - The driver detected a controller error on \Device\Harddisk1\DR2.
.
==== End Of File ===========================
 

 

Link to post
Share on other sites

Download AdwCleaner by Xplode from here: http://www.bleepingcomputer.com/download/adwcleaner/ and save to your Desktop.

 

  • Double click on AdwCleaner.exe to run the tool.
  • Vista/Windows 7/8 users right-click and select Run As Administrator
  • Click on the Scan button.
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • When it's done you'll see: Pending: Uncheck any elements you don't want removed.
  • Now click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review.
  • Look over the log especially under Files/Folders for any program you want to save.
  • If there's a program you want to save, just uncheck it from AdwCleaner.
  • If you're not sure, post the log for review.
  • If you're ready to clean it all up.....click the Clean button.
  • After rebooting, a logfile report (AdwCleaner[s0].txt) will open automatically.
  • Copy and paste the contents of that logfile in your next reply.
  • A copy of that logfile will also be saved in the C:\AdwCleaner folder.
  • Items that are deleted are moved to the Quarantine Folder: C:\AdwCleaner\Quarantine
  • To restore an item that has been deleted (if necessary):
  • Go to Tools > Quarantine Manager > check what you want restored > now click on Restore.

 

Next,

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Kevin

Link to post
Share on other sites

Thanks for replying so quickly.  Have followed instructions but Malware still furiously blocking attempts to access websites from svchost.exe.  AdwCleaner log here:

 

# AdwCleaner v3.006 - Report created 02/10/2013 at 21:24:26
# Updated 01/10/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : dell - DELL-PC
# Running from : C:\Users\dell\Downloads\AdwCleaner.exe
# Option : Clean
 
***** [ Services ] *****
 
 
***** [ Files / Folders ] *****
 
 
***** [ Shortcuts ] *****
 
 
***** [ Registry ] *****
 
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
 
***** [ Browsers ] *****
 
-\\ Internet Explorer v10.0.9200.16686
 
 
-\\ Google Chrome v30.0.1599.66
 
[ File : C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\preferences ]
 
Deleted : urls_to_restore_on_startup
 
*************************
 
AdwCleaner[R0].txt - [903 octets] - [02/10/2013 21:21:42]
AdwCleaner[s0].txt - [829 octets] - [02/10/2013 21:24:26]
 
########## EOF - C:\AdwCleaner\AdwCleaner[s0].txt - [888 octets] ##########
Link to post
Share on other sites

Thats good to hear,  If all is ok with no issues here are some tips to reduce the potential for malware infection in the future:

 

Make proper use of your antivirus and firewall

 

Antivirus and Firewall programs are integral to your computer security. However, just having them installed isn't enough. The definitions of these programs are frequently updated to detect the latest malware, if you don't keep up with these updates then you'll be vulnerable to infection. Many antivirus and firewall programs have automatic update features, make use of those if you can. If your program doesn't, then get in the habit of routinely performing manual updates, because it's important.

 

You should keep your antivirus and firewall guard enabled at all times, NEVER turn them off unless there's a specific reason to do so. Also, regularly performing a full system scan with your antivirus program is a good idea to make sure you're system remains clean. Once a week should be adequate. You can set the scan to run during a time when you don't plan to use the computer and just leave it to complete on its own.

 

Install and use WinPatrol from here http://www.winpatrol.com/download.html  This will inform you of any attempted unauthorized changes to your system.

 

WinPatrol features explained here http://www.winpatrol.com/features.html

 

Go here http://www.filehippo.com/updatechecker/ run the FileHippo Update Checker, update all applications as suggested by the Update Checker. Ignore any Beta updates. (Use stand alone version, not a full install)

If Java or Adobe are updated please check under Start > Control Panel > Add/Remove Programs, ensure any old versions are removed. <--- Very important

 

Use a safer web browser

 

Internet Explorer is not the most secure tool for browsing the web. It has been known to be very susceptible to infection, and there are a few good free alternatives:

 

FireFox http://www.mozilla.com/en-US/,

 

Opera http://www.opera.com/, and

 

Chrome http://www.google.com/chrome.

 

All of these are excellent faster, safer, more powerful and functional free alternatives to Internet Explorer. It's definitely worth the short period of adjustment to start using one of these. If you wish to continue using Internet Explorer, it would be a good idea to follow the tutorial here http://www.bleepingcomputer.com/tutorials/tutorial102.html which will help you to make IE MUCH safer.

 

These browser add-ons will help to make your browser safer:

 

Web of Trust warns you about risky websites that try to scam visitors, deliver malware or send spam. WOT's color-coded icons show you ratings for 21 million websites, helping you avoid the dangerous ones:

 

Available for Firefox and Internet Explorer.

 

Green to go,

Yellow for caution, and

Red to stop.

 

 

Available for Firefox only. NoScript helps to block malicious scripts and in general gives you much better control over what types of things webpages can do to your computer while you're browsing.

 

These are just a couple of the most popular add-ons, if you're interested in more, take a look at this article:

http://browsers.about.com/od/addonsplugi2/tp/browser_security_privacy.htm

 

Here a couple of links by two security experts that will give some excellent tips and advice.

 

So how did I get infected in the first place by Tony Klein from here: http://www.spywareinfoforum.com/index.php?/topic/60955-so-how-did-i-get-infected-in-the-first-place/

 

How to prevent Malware by Miekiemoes from here: http://users.telenet.be/bluepatchy/miekiemoes/prevention.html

 

Finally this link http://www.geekstogo.com/forum/topic/38-free-antivirus-and-antispyware-software will give a comprehensive upto date list of free Security programs. To include - Antivirus, Antispyware, Firewall, Antimalware, Online scanners and rescue CD`s.

 

Don`t forget, the best form of defense is common sense. If you don`t recognize it, don`t open it. If something looks to good to be true, then it aint.

 

Let me know when its OK to close out your thread....

 

Take care,

 

Kevin

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.