How Do I Get Rid Of Wista For Good

sweetiepie2121

This is a more detailed log from combo fix

ComboFix 09-02-26.02 - Dominique 2009-02-27 17:50:21.1 - NTFSx86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1013.499 [GMT 0:00]
Running from: c:\documents and settings\Dominique\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated)
FW: Kaspersky Internet Security *disabled*
FW: Norton AntiVirus *enabled*
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2009-01-27 to 2009-02-27 )))))))))))))))))))))))))))))))
.
2009-02-27 16:47 . 2009-02-27 16:47 <DIR> d

---

c:\documents and settings\Dominique\Application Data\GetRightToGo
2009-02-26 22:02 . 2009-02-26 22:02 <DIR> d

---

c:\program files\Spybot - Search & Destroy
2009-02-26 22:02 . 2009-02-26 23:25 <DIR> d

---

c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2009-02-26 21:50 . 2009-02-26 21:19 15,688 --a

---

c:\windows\system32\lsdelete.exe
2009-02-26 21:20 . 2009-02-26 21:18 64,160 --a

---

c:\windows\system32\drivers\Lbd.sys
2009-02-26 21:15 . 2009-02-26 21:15 <DIR> d

---

c:\program files\Lavasoft
2009-02-26 21:15 . 2009-02-26 21:19 <DIR> d

---

c:\documents and settings\All Users\Application Data\Lavasoft
2009-02-26 21:15 . 2009-02-26 21:15 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\!!83C91755-2546-441D-AC40-9A6B4B860800}
2009-02-26 02:28 . 2009-02-26 02:28 <DIR> d

---

c:\program files\Trend Micro
2009-02-26 02:00 . 2009-02-26 23:45 <DIR> d

---

c:\program files\Enigma Software Group
2009-02-23 15:18 . 2009-02-23 15:18 <DIR> d

---

c:\program files\Trusteer
2009-02-23 15:18 . 2009-02-23 15:18 <DIR> d

---

c:\documents and settings\Dominique\Application Data\Trusteer
2009-02-22 18:01 . 2009-02-22 18:01 664 --a

---

c:\windows\system32\d3d9caps.dat
2009-02-18 21:44 . 2009-02-18 21:44 <DIR> d

---

c:\program files\UPHClean
2009-02-16 22:43 . 2009-02-16 22:43 <DIR> d

---

c:\documents and settings\Administrator.DOMINIQUE\Application Data\SUPERAntiSpyware.com
2009-02-16 22:33 . 2009-02-16 22:33 <DIR> d

---

c:\documents and settings\Administrator.DOMINIQUE\Application Data\Malwarebytes
2009-02-16 22:13 . 2008-09-18 19:03 <DIR> d

---

c:\documents and settings\Administrator.DOMINIQUE\Application Data\SRSCPL
2009-02-16 22:13 . 2008-09-18 18:59 <DIR> d

---

c:\documents and settings\Administrator.DOMINIQUE\Application Data\InstallShield
2009-02-16 22:13 . 2009-02-26 23:20 <DIR> d

---

c:\documents and settings\Administrator.DOMINIQUE
2009-02-16 21:25 . 2009-02-16 21:25 630 --a

---

C:\CAK7SDMH
2009-02-16 21:25 . 2009-02-16 21:25 0 --a

---

C:\CAK7SDMH
2009-02-16 18:27 . 2009-02-16 18:27 <DIR> d

---

c:\program files\CCleaner
2009-02-16 15:01 . 2009-02-16 15:01 1,152 --a

---

c:\windows\system32\windrv.sys
2009-02-10 18:16 . 2009-02-27 17:27 7,186 --a

---

c:\windows\lg_up.ini
2009-02-05 23:18 . 2009-02-06 18:18 <DIR> d

---

c:\documents and settings\Dominique\.housecall6.6
2009-02-05 20:20 . 2008-09-18 19:03 <DIR> d

---

c:\documents and settings\Administrator\Application Data\SRSCPL
2009-02-05 20:20 . 2008-09-18 18:59 <DIR> d

---

c:\documents and settings\Administrator\Application Data\InstallShield
2009-02-05 20:20 . 2009-02-05 20:20 <DIR> d

---

c:\documents and settings\Administrator
2009-02-05 19:13 . 2009-02-05 19:13 552 --a

---

c:\windows\system32\d3d8caps.dat
2009-02-03 23:34 . 2009-02-03 23:34 <DIR> d

---

c:\program files\MSN Messenger
2009-02-01 21:53 . 2009-02-16 18:16 <DIR> d

---

C:\real_download
2009-02-01 21:44 . 1999-05-21 21:10 129,024 --a

---

c:\windows\system32\ZipDll.dll
2009-02-01 21:44 . 1999-05-21 21:10 115,712 --a

---

c:\windows\system32\UnzDll.dll
2009-02-01 21:44 . 1997-02-17 16:23 53,248 --a

---

c:\windows\system32\UNRAR.DLL
2009-02-01 21:43 . 2009-02-01 21:43 <DIR> d

---

c:\documents and settings\Dominique\WINDOWS
2009-02-01 21:43 . 1996-07-18 13:06 297,472 --a

---

c:\windows\uninst.exe
2009-02-01 21:01 . 2009-02-01 21:01 <DIR> d

---

c:\program files\Innovative Solutions
2009-02-01 18:43 . 2009-02-01 18:43 <DIR> d

---

c:\documents and settings\All Users\Application Data\PC Drivers HeadQuarters
2009-01-31 19:47 . 2009-02-11 20:53 <DIR> d

---

c:\program files\Malwarebytes' Anti-Malware
2009-01-31 19:47 . 2009-01-31 19:47 <DIR> d

---

c:\documents and settings\Dominique\Application Data\Malwarebytes
2009-01-31 19:47 . 2009-01-31 19:47 <DIR> d

---

c:\documents and settings\All Users\Application Data\Malwarebytes
2009-01-31 19:47 . 2009-02-11 10:19 38,496 --a

---

c:\windows\system32\drivers\mbamswissarmy.sys
2009-01-31 19:47 . 2009-02-11 10:19 15,504 --a

---

c:\windows\system32\drivers\mbam.sys
2009-01-30 22:38 . 2009-02-25 23:20 <DIR> d

---

c:\program files\SUPERAntiSpyware
2009-01-30 22:38 . 2009-01-30 22:38 <DIR> d

---

c:\documents and settings\Dominique\Application Data\SUPERAntiSpyware.com
2009-01-30 22:38 . 2009-01-30 22:38 <DIR> d

---

c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2009-01-30 22:37 . 2009-01-30 22:37 <DIR> d

---

c:\program files\Common Files\Wise Installation Wizard
2009-01-30 19:55 . 2009-01-30 19:55 <DIR> d

---

c:\windows\system32\XPSViewer
2009-01-30 19:55 . 2009-01-30 19:55 <DIR> d

---

c:\program files\Reference Assemblies
2009-01-30 19:55 . 2009-01-30 19:55 <DIR> d

---

c:\program files\MSBuild
2009-01-30 19:54 . 2009-01-30 20:31 <DIR> d

---

c:\windows\SxsCaPendDel
2009-01-30 19:54 . 2009-01-30 19:55 <DIR> d

---

C:\18dcbeb562ca1be742
2009-01-30 19:54 . 2008-07-06 12:06 1,676,288

---

c:\windows\system32\xpssvcs.dll
2009-01-30 19:54 . 2008-07-06 12:06 1,676,288

---

c--- c:\windows\system32\dllcache\xpssvcs.dll
2009-01-30 19:54 . 2008-07-06 10:50 597,504

---

c--- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-01-30 19:54 . 2008-07-06 12:06 575,488

---

c:\windows\system32\xpsshhdr.dll
2009-01-30 19:54 . 2008-07-06 12:06 575,488

---

c--- c:\windows\system32\dllcache\xpsshhdr.dll
2009-01-30 19:54 . 2008-07-06 12:06 117,760

---

c:\windows\system32\prntvpt.dll
2009-01-30 19:54 . 2008-07-06 12:06 89,088

---

c--- c:\windows\system32\dllcache\filterpipelineprintproc.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-27 18:05

---

d

---

w c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-02-27 18:03 303,136 --sha-w c:\windows\system32\drivers\fidbox2.dat
2009-02-27 18:03 2,116 --sha-w c:\windows\system32\drivers\fidbox2.idx
2009-02-27 18:03 10,628 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-02-27 18:03 1,222,176 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-02-27 17:28

---

d

---

w c:\program files\lg_swupdate
2009-02-16 22:02

---

d

---

w c:\program files\Common Files\Symantec Shared
2009-02-04 21:34 33,808 ----a-w c:\windows\system32\drivers\klbg.sys
2009-02-03 18:45 89,601 ----a-w c:\windows\system32\drivers\klick.dat
2009-02-03 18:45 101,287 ----a-w c:\windows\system32\drivers\klin.dat
2009-01-26 23:34

---

d

---

w c:\program files\MSECache
2009-01-26 22:16

---

d

---

w c:\program files\Kaspersky Lab
2009-01-26 22:06

---

d

---

w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-01-25 19:16

---

d

---

w c:\documents and settings\All Users\Application Data\DriverCure
2009-01-25 19:11

---

d

---

w c:\documents and settings\Dominique\Application Data\DriverCure
2009-01-25 19:11

---

d

---

w c:\documents and settings\All Users\Application Data\ParetoLogic
2009-01-25 19:10

---

d

---

w c:\documents and settings\All Users\Application Data\Downloaded Installations
2009-01-21 14:24

---

d

---

w c:\documents and settings\Dominique\Application Data\Uniblue
2009-01-21 14:24

---

d

---

w c:\documents and settings\All Users\Application Data\DriverScanner
2009-01-17 21:02

---

d

---

w c:\documents and settings\Dominique\Application Data\MSNInstaller
2009-01-15 18:28

---

d

---

w c:\documents and settings\All Users\Application Data\CyberLink
2009-01-15 17:31

---

d

---

w c:\program files\Windows Live SkyDrive
2009-01-15 17:20

---

d

---

w c:\program files\Common Files\Windows Live
2009-01-15 14:31

---

d

---

w c:\program files\MSXML 4.0
2009-01-14 23:26

---

d

---

w c:\documents and settings\Dominique\Application Data\Samsung
2009-01-14 23:25 5,632 ----a-w c:\windows\system32\drivers\StarOpen.sys
2009-01-14 23:11

---

d--h--w c:\program files\InstallShield Installation Information
2009-01-14 23:11

---

d

---

w c:\program files\Samsung
2009-01-12 07:44 1,130,496 ----a-w c:\windows\system32\CS.dll

sweetiepie2121

I have already scanned with all that I know it includes malware bites,super anti spyware.ad adware n that.
I think I am ok now.
thanks for all your help every body.

aliEnRIK

It seems you may still have some remnants of NORTON on your computer
Use the removal tool to make sure its gone
Norton removal tool
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

sweetiepie2121

aliEnRIK wrote: »

It seems you may still have some remnants of NORTON on your computer
Use the removal tool to make sure its gone
Norton removal tool
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

Thanks for letting me know.I ran the removel tool now I am free of norten.

Moneymaker

sweetiepie2121 wrote: »

Thanks for letting me know. I ran the removel tool now I am free of norten.

Now you need to re-install the spell checker.

sweetiepie2121

Done that thanks

HoofeHearted

aliEnRIK wrote: »

FIX these ~
C:\Program Files\Trusteer\Rapport\bin\RapportService.exe
O4 - HKCU\..\Run: [Rapportexe] "C:\Program Files\Trusteer\Rapport\bin\RapportService.exe" -start -after_boot

...

Alien, I don't think this one is a problem. I have installed this software today. Was offered it by NatWest Bank. I had not heard of it before.

Info here - http://consumers.trusteer.com/frequently-asked-questions