Tammy Posted August 2, 2009 ID:105347 Share Posted August 2, 2009 I think I know what to wipe from the list but I want to make sure because once its done it can't be fixed. Its the only one that says .sys right?Path: c:\documents and settings\tammy\local settings\temp\~dfca20.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~df8ffe.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfa16.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfa8d0.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfaef6.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfaf09.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\UACmd.exeStatus: Invisible to the Windows API!Path: c:\documents and settings\compaq_owner\local settings\history\history.ie5\index.datStatus: Allocation size mismatch (API: 86016, Raw: 65536)Path: c:\documents and settings\compaq_owner\local settings\temporary internet files\content.ie5\index.datStatus: Allocation size mismatch (API: 724992, Raw: 708608)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1326.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1327.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1328.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1329.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\log[1]Status: Invisible to the Windows API!Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\getAds[1].htmStatus: Invisible to the Windows API!Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\story[1].htmStatus: Invisible to the Windows API!Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\ikonboard[1].txtStatus: Visible to the Windows API, but not on disk.Path: C:\Documents and Settings\Tammy\Application Data\Macromedia\Flash Player\#SharedObjects\U44G26LJ\redir.adap.tvStatus: Visible to the Windows API, but not on disk.Thanks in Advance Link to post Share on other sites More sharing options...
Tammy Posted August 2, 2009 Author ID:105349 Share Posted August 2, 2009 I think I know what to wipe from the list but I want to make sure because once its done it can't be fixed. Its the only one that says .sys right?ROOTREPEAL © AD, 2007-2009==================================================Scan Start Time: 2009/08/02 14:39Program Version: Version 1.3.3.0Windows Version: Windows XP SP3==================================================Hidden/Locked Files-------------------Path: C:\WINDOWS\Temp\UACdd8e.tmpStatus: Invisible to the Windows API!Path: C:\WINDOWS\Temp\UACedcb.tmpStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UACcbxdoouqav.dllStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\uacinit.dllStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UACiwmjqkkspb.dllStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UAClnqvnmbnev.dllStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UACmrfocetmtl.dllStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UACrfwkeqdtkl.dbStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UACstnxgmbavj.datStatus: Invisible to the Windows API!Path: C:\WINDOWS\system32\UACxcxbirxcky.dllStatus: Invisible to the Windows API!Path: C:\Program Files\Yahoo! Games\Elf Bowling 7 - The Last Insult\ElfBowling.exe:{E4F14643-2D6E-42E1-354B-B025A2387607}Status: Visible to the Windows API, but not on disk.Path: C:\WINDOWS\system32\drivers\UACwbutextpby.sysStatus: Invisible to the Windows API!Path: C:\Documents and Settings\Compaq_Owner\Local Settings\Temp\UACe7c8.tmpStatus: Invisible to the Windows API!Path: c:\documents and settings\kaitlin\local settings\temp\~df21e7.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\kaitlin\local settings\temp\~df2d82.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\kaitlin\local settings\temp\~df4bad.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\kaitlin\local settings\temp\~df4edd.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\networkservice\local settings\temp\perflib_perfdata_164.datStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~df2897.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~df3b4e.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~df4e88.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfca20.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~df8ffe.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfa16.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfa8d0.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfaef6.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: c:\documents and settings\tammy\local settings\temp\~dfaf09.tmpStatus: Allocation size mismatch (API: 16384, Raw: 0)Path: C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\UACmd.exeStatus: Invisible to the Windows API!Path: c:\documents and settings\compaq_owner\local settings\history\history.ie5\index.datStatus: Allocation size mismatch (API: 86016, Raw: 65536)Path: c:\documents and settings\compaq_owner\local settings\temporary internet files\content.ie5\index.datStatus: Allocation size mismatch (API: 724992, Raw: 708608)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1326.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1327.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1328.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: c:\program files\microsoft sql server\mssql.1\mssql\log\log_1329.trcStatus: Allocation size mismatch (API: 4096, Raw: 0)Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\log[1]Status: Invisible to the Windows API!Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\getAds[1].htmStatus: Invisible to the Windows API!Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\story[1].htmStatus: Invisible to the Windows API!Path: C:\Documents and Settings\Tammy\Local Settings\Temporary Internet Files\Content.IE5\6VV267LJ\ikonboard[1].txtStatus: Visible to the Windows API, but not on disk.Path: C:\Documents and Settings\Tammy\Application Data\Macromedia\Flash Player\#SharedObjects\U44G26LJ\redir.adap.tvStatus: Visible to the Windows API, but not on disk.Thanks in Advance Link to post Share on other sites More sharing options...
Tammy Posted August 3, 2009 Author ID:105586 Share Posted August 3, 2009 Can someone help please...I've tried many things. Mbam won't finish installing or run. I'm out of options Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 8, 2009 Root Admin ID:107454 Share Posted August 8, 2009 Hi Tammy, Sorry for the delay but we're just overflowing with requests for help from too many users.Please visit this webpage for instructions for downloading ComboFix to your DESKTOP : how-to-use-combofixPlease ensure you read this guide carefully and install the Recovery Console first.NOTE!!: You must save and run ComboFix.exe on your DESKTOP and not from any other folder.Also, DO NOT click the mouse or launch any other applications while this is running or it may stall the programAdditional links to download the tool:ComboFix.exeComboFix.exeComboFix.exeNote: The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.Once installed, you should see a blue screen prompt that says:The Recovery Console was successfully installed.Please continue as follows:Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.Click Yes to allow ComboFix to continue scanning for malware.When the tool is finished, it will produce a report for you.Please post the C:\ComboFix.txt along with a new HijackThis log so we may continue cleaning the system. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 9, 2009 Root Admin ID:107803 Share Posted August 9, 2009 Hi Tammy, Please post an update on this. Thanks. Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted August 11, 2009 Root Admin ID:108640 Share Posted August 11, 2009 Due to the lack of feedback this Topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!The fixes and advice in this thread are for this machine only. Do not apply the instructions from this thread to your own machine. Please start a new thread describing your issue and someone will be along to assist you. Link to post Share on other sites More sharing options...
Recommended Posts