Infected or Not?

[m_cdr]

Hello. We have several (10+) computers exhibiting similar problems. All are running Windows XP (most are SP 3, but some are SP 2). They are all located in remote offices that are not connected via any WAN other than the public internet. All of them started having problems in the last week. Computers would have difficulty connecting to our Terminal Server (using RDP 5.2). Sometimes, when they would be rebooted, they would only be able to start in a

[m_cdr]

Here is the ComboFix Quarantine Log:

2010-10-13 21:09:27 . 2010-10-13 21:09:28 167 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-WinPatrol.reg.dat

2010-10-13 20:36:30 . 2010-10-13 20:36:30 9,259 ----a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg

2010-10-13 20:14:45 . 2010-10-13 20:14:46 51 ----a-w- C:\Qoobox\Quarantine\catchme.log

[AdvancedSetup]

Hello m_cdr,

As a business customer you need to contact Corporate Support for assistance. Please send an email to corporate-support@malwarebytes.org and include the following.

• Cleverbridge Order Reference Number:
  
  
• Organization name:
  
  
• Approved Contact name:
  
  

We'll be happy to assist you with this issue.

Thank you.

[m_cdr]

(We are a business customer, and we do have paid versions of MBAM, but I don't need support anymore!)

I thought I'd post my resolution here, just in case anybody has a similar set of problems that we had. Our non-networked computers that were all having the same problems -- ie. problems loading user profiles -- some showing malware, some not, ended up having issues due to our primary AV software -- Symantec Corp. AV v. 9.

Here's a thread that matches our problems exactly -- turned out to be Symantec itself that caused the problems. Talk about Damned if you Do, Damned if you Don't..... This scared the dickens out of me -- and I've been working in IT for 15 years! As a result of this, we are moving to a new AV vendor in conjunction with MBAM -- I don't care how good NIS is these days, I will probably NEVER give Symantec my money for any of their products again after this!

http://social.technet.microsoft.com/Forums...02-6c2b00e57cf0

[AdvancedSetup]

Thank you for the follow-up reply. Just a reminder though for anyone else that comes along and reads this post.

Malwarebytes' Anti-Malware is not allowed to be installed or used on any type of business system including Government, Educational, Corporate, Non-Profit, business systems without proper Corporate Licensing.

Thank you again.