I'm infected again

Stokkers · January 15, 2011

Thought I had this one sorted out in October, but has come back to haunt me again. It only affects Google at the moment and presents itself as Woofi.info.

Hope you can help. I am attaching DDS.txt, Attach.txt and ark.txt

Ken

ark.txt

DDS.txt

screen317 · January 21, 2011

Hi,

Please update MBAM, run a Quick Scan, and post its log. Then run DDS again and post DDS.txt; ensure that you copy the reports directly into your reply instead of attaching them.

Stokkers · January 22, 2011

Hi,
Please update MBAM, run a Quick Scan, and post its log. Then run DDS again and post DDS.txt; ensure that you copy the reports directly into your reply instead of attaching them.

Hi

Have updated MBAM and here is the log:

Malwarebytes' Anti-Malware 1.50.1.1100

www.malwarebytes.org

Database version: 5570

Windows 6.1.7600

Internet Explorer 8.0.7600.16385

22/01/2011 13:41:46

mbam-log-2011-01-22 (13-41-46).txt

Scan type: Quick scan

Objects scanned: 152115

Time elapsed: 15 minute(s), 33 second(s)

Memory Processes Infected: 0

Memory Modules Infected: 0

Registry Keys Infected: 0

Registry Values Infected: 0

Registry Data Items Infected: 0

Folders Infected: 0

Files Infected: 0

Memory Processes Infected:

(No malicious items detected)

Memory Modules Infected:

(No malicious items detected)

Registry Keys Infected:

(No malicious items detected)

Registry Values Infected:

(No malicious items detected)

Registry Data Items Infected:

(No malicious items detected)

Folders Infected:

(No malicious items detected)

Files Infected:

(No malicious items detected)

Now to Run and Post DDS.txt

Stokkers · January 22, 2011

Hi
Have updated MBAM and here is the log:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5570
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
22/01/2011 13:41:46
mbam-log-2011-01-22 (13-41-46).txt
Scan type: Quick scan
Objects scanned: 152115
Time elapsed: 15 minute(s), 33 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)
Now to Run and Post DDS.txt

DDS.txt

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

Microsoft Windows 7 Home Premium

Boot Device: \Device\HarddiskVolume2

Install Date: 26/01/2010 22:33:14

System Uptime: 22/01/2011 08:32:12 (5 hours ago)

Motherboard: Packard Bell BV | | RC415

Processor: Intel® Pentium® D CPU 3.00GHz | CPU 1 | 3000/200mhz

==== Disk Partitions =========================

C: is FIXED (NTFS) - 141 GiB total, 37.004 GiB free.

D: is CDROM ()

E: is CDROM ()

F: is Removable

G: is Removable

H: is Removable

I: is Removable

J: is FIXED (NTFS) - 466 GiB total, 451.813 GiB free.

K: is Removable

==== Disabled Device Manager Items =============

Class GUID: {4d36e96f-e325-11ce-bfc1-08002be10318}

Description: Microsoft PS/2 Mouse

Device ID: ACPI\PNP0F03\4&3860741C&0

Manufacturer: Microsoft

Name: Microsoft PS/2 Mouse

PNP Device ID: ACPI\PNP0F03\4&3860741C&0

Service: i8042prt

Class GUID: {4d36e96c-e325-11ce-bfc1-08002be10318}

Description: Conexant's BtPCI WDM Video Capture

Device ID: ROOT\MEDIA\0000

Manufacturer: IllusionHope

Name: Conexant's BtPCI WDM Video Capture

PNP Device ID: ROOT\MEDIA\0000

Service: BT848

==== System Restore Points ===================

RP357: 06/01/2011 14:28:04 - Windows Update

RP358: 07/01/2011 09:14:50 - Windows Update

RP359: 11/01/2011 08:40:11 - Windows Update

RP360: 11/01/2011 16:05:15 - Installed PCMSCAN

RP362: 12/01/2011 13:05:04 - Quicksys RegDefrag

RP363: 12/01/2011 16:45:04 - Removed Google Gears

RP364: 12/01/2011 23:33:23 - Windows Update

RP365: 14/01/2011 09:14:32 - Windows Update

RP366: 18/01/2011 08:31:09 - Windows Update

RP367: 20/01/2011 16:03:21 - Removed Drivers For Free.

RP369: 20/01/2011 16:15:46 - Installed DirectX

RP370: 21/01/2011 08:13:14 - Windows Update

==== Installed Programs ======================

32 Bit HP CIO Components Installer

Acrobat.com

Adobe AIR

Adobe Flash Player 10 ActiveX

Adobe Flash Player 10 Plugin

Adobe Reader 9.4.1

AIM 7

Amazon MP3 Downloader 1.0.9

Any DVD Cloner Express 1.1.5

Apple Application Support

Apple Mobile Device Support

Apple Software Update

Belarc Advisor 8.1

Bonjour

BufferChm

CCleaner

CD Recovery Toolbox Free 1.1

Copy

Corel Paint Shop Pro Photo X2

D3DX10

deskUNPDF 3 Professional

deskUNPDF 3 Standard

Destinations

DeviceDiscovery

DJ_AIO_03_F2200_Software_Min

DocProc

Download Updater (AOL LLC)

DTE

DVD-Cloner V8.10 Build 1005

F2200

FileZilla Client 3.3.5.1

FreeOCR 3.0

Google Chrome

Google Update Helper

GPBaseService2

HP Customer Participation Program 13.0

HP Deskjet F2200 All-In-One Driver Software 13.0 Rel. 3

HP Imaging Device Functions 13.0

HP Photosmart Essential 3.5

HP Smart Web Printing 4.60

HP Solution Center 13.0

HP Update

HPPhotoGadget

HPPhotoSmartDiscLabelContent1

HPPhotosmartEssential

HPProductAssistant

i-Catcher 3.0

i-Catcher Console 4.0

Java Auto Updater

Java 6 Update 21

Junk Mail filter update

KWorld Editing Device Driver

KWorld USB 2860 Device Driver

Licensing Service Install

LightScribe Applications

LightScribe Diagnostic Utility

LightScribe System Software

LightScribe Template Labeler

Mahjong Escape Ancient China

Malwarebytes' Anti-Malware

MarketResearch

McAfee SecurityCenter

Metamorphosis Design Webmaster's Kit 1.0.6

Microsoft .NET Framework 4 Client Profile

Microsoft Application Error Reporting

Microsoft Expression Web 2

Microsoft Expression Web 2 MUI (English)

Microsoft Office 2007 Service Pack 2 (SP2)

Microsoft Office Proof (English) 2007

Microsoft Office Proof (French) 2007

Microsoft Office Proof (Spanish) 2007

Microsoft Office Proofing (English) 2007

Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)

Microsoft Office Shared MUI (English) 2007

Microsoft Office Shared Setup Metadata MUI (English) 2007

Microsoft Office XP Professional with FrontPage

Microsoft Search Enhancement Pack

Microsoft Silverlight

Microsoft SQL Server 2005 Compact Edition [ENU]

Microsoft Visual C++ 2005 Redistributable

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

Microsoft Windows Media Video 9 VCM

Motorola Driver Installation 3.2.0

Mozilla Firefox (3.6.13)

MSVCRT

MSXML 4.0 SP2 (KB954430)

MSXML 4.0 SP2 (KB973688)

OCR Software by I.R.I.S. 13.0

OGA Notifier 2.0.0048.0

OneTouch Software

OneTouch USB Driver

PCMSCAN

Philips Intelligent Agent

Philips SPC230NC Webcam

PL-2303 USB-to-Serial

Promaxx Card Designer

QuickTime

RealPlayer

Realtek High Definition Audio Driver

RealUpgrade 1.0

Registry Mechanic 10.0

Revo Uninstaller Pro 2.4.3

RunAlyzer

Scan

Security Update for 2007 Microsoft Office System (KB2288621)

Security Update for 2007 Microsoft Office System (KB2288931)

Security Update for 2007 Microsoft Office System (KB2289158)

Security Update for 2007 Microsoft Office System (KB2345043)

Security Update for 2007 Microsoft Office System (KB969559)

Security Update for 2007 Microsoft Office System (KB976321)

Security Update for Microsoft Office system 2007 (972581)

Security Update for Microsoft Office system 2007 (KB974234)

Serif PagePlus 11

Serif PagePlus 11 Resources

Serif PhotoPlus X3

Ship Simulator 2008

Sky Broadband

Skype

screen317 · January 22, 2011

Hi,

You posted Attach.txt from DDS; please post DDS.txt as instructed.

Stokkers · January 23, 2011

Hi,
You posted Attach.txt from DDS; please post DDS.txt as instructed.

Hi Chris

I posted -

DDS.txt

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_10-12-12.02)

If this is not correct, please advise which one it it

Ken

screen317 · January 25, 2011

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

This is attach.txt (the filename); post the other log please.

screen317 · February 8, 2011

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.

Other members who need assistance please start your own topic in a new thread. Thanks!

I'm infected again

Recommended Posts

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Link to post

Share on other sites

Recently Browsing 0 members

Important Information