We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Firefox password problem

2

Comments

  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Quite a few bits and pieces in there im unsure of

    Uninstall ASKBARDIS


    Turn off Spybots 'TEA TIMER' mode ~
    Open Spybot
    Change Mode (Top) to ADVANCED
    Select TOOLS then RESIDENT
    UNTICK 'Resident TEA TIMER' (Leave 'SD Helper' TICKED)


    Open notepad and copy/paste the text in RED below

    File::
    c:\windows\bwUnin-8.1.1.50-8876480SL.exe

    Save this as "CFScript"

    Then drag the CFScript into ComboFix.exe as you see in the screenshot below.

    CFScriptB-4.gif

    This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThis log.

    Combofix should never take more that 20 minutes including the reboot if malware is detected.
    If it does, open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

    then run a scan with KASPERSKY ONLINE SCANNER
    (Needs to be run using internet explorer and will probably take hours)
    Post the FULL report it gives
    :idea:
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    When I copied CFScript into combo fix, shortly after I got an error message saying windows cannot find 32788R22FWJFW\n.com, but then carried on ok and gave this log:
    ComboFix 09-04-04.01 - guy 2009-04-09 15:30:58.2 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.3061.1721 [GMT 1:00]
    Running from: c:\users\guy\Downloads\ComboFix.exe
    Command switches used :: c:\users\guy\Desktop\CFScript.txt
    AV: AVG Anti-Virus Free *On-access scanning enabled* (Outdated)

    FILE ::
    c:\windows\bwUnin-8.1.1.50-8876480SL.exe
    .

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .

    c:\windows\bwUnin-8.1.1.50-8876480SL.exe

    .
    ((((((((((((((((((((((((( Files Created from 2009-03-09 to 2009-04-09 )))))))))))))))))))))))))))))))
    .

    2009-03-28 21:40 . 2008-12-11 09:38 159,600 --a
    c:\windows\System32\drivers\pctgntdi.sys
    2009-03-28 21:40 . 2009-03-06 17:45 130,424 --a
    c:\windows\System32\drivers\PCTCore.sys
    2009-03-28 21:40 . 2008-12-18 13:16 73,840 --a
    c:\windows\System32\drivers\PCTAppEvent.sys
    2009-03-28 19:22 . 2009-03-28 19:22 <DIR> dr
    c:\windows\System32\config\systemprofile\Music
    2009-03-28 18:16 . 2009-03-28 18:16 <DIR> d
    C:\ISIS
    2009-03-28 18:16 . 2002-12-11 10:41 246,272 --a
    c:\windows\UNINST16.EXE
    2009-03-28 18:16 . 2009-03-28 18:16 46,020 --a
    c:\windows\System32\FORDLINE.TTF
    2009-03-28 09:40 . 2009-03-28 09:40 <DIR> d
    c:\users\guy\AppData\Roaming\PCToolsFirewallPlus
    2009-03-28 09:36 . 2009-03-28 21:44 <DIR> d
    c:\program files\PC Tools Firewall Plus
    2009-03-28 09:36 . 2009-03-28 21:40 <DIR> d
    c:\program files\Common Files\PC Tools
    2009-03-28 09:36 . 2008-09-22 13:29 97,408 --a
    c:\windows\System32\drivers\pctfw.sys
    2009-03-28 09:36 . 2009-01-21 11:38 95,640 --a
    c:\windows\System32\drivers\pctplfw.sys
    2009-03-28 09:35 . 2009-03-28 09:35 <DIR> d
    c:\users\All Users\PC Tools
    2009-03-28 09:35 . 2009-03-28 09:35 <DIR> d
    c:\programdata\PC Tools
    2009-03-28 09:35 . 2009-03-28 09:49 <DIR> d
    c:\program files\ThreatFire
    2009-03-28 09:35 . 2009-03-03 13:19 51,472 --a
    c:\windows\System32\drivers\TfFsMon.sys
    2009-03-28 09:35 . 2009-03-03 13:19 39,184 --a
    c:\windows\System32\drivers\TfSysMon.sys
    2009-03-28 09:35 . 2009-03-03 13:19 33,040 --a
    c:\windows\System32\drivers\TfNetMon.sys
    2009-03-28 09:35 . 2009-03-03 13:19 12,560 --a
    c:\windows\System32\drivers\TfKbMon.sys
    2009-03-27 14:42 . 2009-03-27 15:23 <DIR> d
    c:\users\guy\AppData\Roaming\Dreamsdwell Stories
    2009-03-20 11:43 . 2009-03-20 11:43 <DIR> d
    c:\users\guy\AppData\Roaming\Boolat Games
    2009-03-20 10:37 . 2009-03-20 10:37 <DIR> d
    c:\users\All Users\FarmFrenzy-PizzaParty
    2009-03-20 10:37 . 2009-03-20 10:37 <DIR> d
    c:\programdata\FarmFrenzy-PizzaParty
    2009-03-19 09:04 . 2008-06-20 02:14 781,344 --a
    c:\windows\System32\PresentationNative_v0300.dll
    2009-03-19 09:04 . 2008-06-20 02:14 622,080 --a
    c:\windows\System32\icardagt.exe
    2009-03-19 09:04 . 2008-06-20 02:14 326,160 --a
    c:\windows\System32\PresentationHost.exe
    2009-03-19 09:04 . 2008-06-20 02:14 105,016 --a
    c:\windows\System32\PresentationCFFRasterizerNative_v0300.dll
    2009-03-19 09:04 . 2008-06-20 02:14 97,800 --a
    c:\windows\System32\infocardapi.dll
    2009-03-19 09:04 . 2008-06-20 02:14 43,544 --a
    c:\windows\System32\PresentationHostProxy.dll
    2009-03-19 09:04 . 2008-06-20 02:14 37,384 --a
    c:\windows\System32\infocardcpl.cpl
    2009-03-19 09:04 . 2008-06-20 02:14 11,264 --a
    c:\windows\System32\icardres.dll
    2009-03-19 08:57 . 2008-07-27 19:03 282,112 --a
    c:\windows\System32\mscoree.dll
    2009-03-19 08:57 . 2008-07-27 19:03 96,760 --a
    c:\windows\System32\dfshim.dll
    2009-03-19 08:57 . 2008-07-27 19:03 41,984 --a
    c:\windows\System32\netfxperf.dll
    2009-03-19 08:56 . 2008-07-27 19:03 158,720 --a
    c:\windows\System32\mscorier.dll
    2009-03-19 08:56 . 2008-07-27 19:03 83,968 --a
    c:\windows\System32\mscories.dll
    2009-03-12 10:45 . 2009-03-12 10:46 <DIR> d
    c:\users\All Users\Go Go Gourmet
    2009-03-12 10:45 . 2009-03-12 10:46 <DIR> d
    c:\programdata\Go Go Gourmet
    2009-03-11 08:48 . 2008-12-16 04:29 8,147,456 --a
    c:\windows\System32\wmploc.DLL
    2009-03-11 08:48 . 2009-02-09 04:10 2,033,152 --a
    c:\windows\System32\win32k.sys
    2009-03-11 08:48 . 2008-11-27 05:43 268,288 --a
    c:\windows\System32\schannel.dll
    2009-03-11 08:48 . 2008-12-16 06:31 7,680 --a
    c:\windows\System32\spwmp.dll
    2009-03-11 08:48 . 2008-12-16 06:31 4,096 --a
    c:\windows\System32\msdxm.ocx
    2009-03-11 08:48 . 2008-12-16 06:31 4,096 --a
    c:\windows\System32\dxmasf.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-04-09 14:39
    d
    w c:\programdata\Kontiki
    2009-04-09 14:21
    d---a-w c:\programdata\TEMP
    2009-04-09 14:15
    d
    w c:\programdata\Spybot - Search & Destroy
    2009-04-08 15:55
    d
    w c:\program files\Logitech
    2009-04-08 15:53
    d
    w c:\program files\Malwarebytes' Anti-Malware
    2009-04-08 11:05
    d
    w c:\users\guy\AppData\Roaming\uTorrent
    2009-04-06 14:32 38,496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
    2009-04-06 14:32 15,504 ----a-w c:\windows\system32\drivers\mbam.sys
    2009-03-28 16:53
    d
    w c:\programdata\Roxio
    2009-03-28 08:06 3,888,459 ----a-w c:\windows\Internet Logs\tvDebug.Zip
    2009-03-27 15:47
    d
    w c:\program files\Virgin Media Games
    2009-03-27 14:46
    d
    w c:\programdata\MumboJumbo
    2009-03-27 14:46
    d
    w c:\program files\Oberon Media
    2009-03-27 07:50
    d
    w c:\program files\SUPERAntiSpyware
    2009-03-26 20:44
    d
    w c:\users\guy\AppData\Roaming\DVD Flick
    2009-03-26 20:44
    d
    w c:\program files\Glary Utilities
    2009-03-26 20:37 42,865 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_24_43_small.dmp.zip
    2009-03-26 20:37 36,661 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_30_10_small.dmp.zip
    2009-03-26 20:37 36,559 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_49_small.dmp.zip
    2009-03-26 20:37 35,800 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_58_small.dmp.zip
    2009-03-26 20:37 25,568 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_19_small.dmp.zip
    2009-03-26 20:37 25,538 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_29_37_small.dmp.zip
    2009-03-26 20:24 44,045 ----a-w c:\windows\Internet Logs\vsmon_2nd_2009_03_26_20_22_29_small.dmp.zip
    2009-03-12 08:01
    d
    w c:\program files\Windows Mail
    2009-03-05 17:34
    d
    w c:\users\guy\AppData\Roaming\EleFun Games
    2009-03-03 10:20
    d
    w c:\users\guy\AppData\Roaming\BeachPartyCraze
    2009-02-28 07:19
    d
    w c:\program files\Microsoft Silverlight
    2009-02-26 20:37
    d
    w c:\users\guy\AppData\Roaming\GlarySoft
    2009-02-26 20:20
    d
    w c:\program files\Trend Micro
    2009-02-26 12:15
    d
    w c:\programdata\SugarGames
    2009-02-25 20:33
    d
    w c:\users\guy\AppData\Roaming\Roxio
    2009-02-24 20:51
    d
    w c:\programdata\DVD Shrink
    2009-02-24 20:48
    d
    w c:\program files\DVD Shrink
    2009-02-22 18:06
    d
    w c:\program files\Spybot - Search & Destroy
    2009-02-17 08:59
    d
    w c:\programdata\Fugazo
    2009-02-16 00:11 293,528 ----a-w c:\windows\system32\drivers\vsdatant.sys
    2009-02-15 08:15 410,984 ----a-w c:\windows\System32\deploytk.dll
    2009-02-15 08:15
    d
    w c:\program files\Java
    2009-02-13 08:17
    d
    w c:\program files\Turbo Subs
    2009-02-12 22:13
    d
    w c:\program files\Alwil Software
    2009-02-12 22:07
    d
    w c:\users\guy\AppData\Roaming\Malwarebytes
    2009-02-12 22:07
    d
    w c:\programdata\SUPERAntiSpyware.com
    2009-02-12 22:07
    d
    w c:\programdata\Malwarebytes
    2009-02-12 22:06
    d
    w c:\users\guy\AppData\Roaming\SUPERAntiSpyware.com
    2009-02-12 22:06
    d
    w c:\program files\Common Files\Wise Installation Wizard
    2009-02-12 22:03
    d
    w c:\programdata\avg8
    2009-01-18 09:17 31,890,303 ----a-w c:\windows\Internet Logs\vsmon_on_demand_thread_2009_01_18_09_15_36_full.dmp.zip
    2009-01-15 06:11 827,392 ----a-w c:\windows\System32\wininet.dll
    2008-11-02 08:50 760 ----a-w c:\users\guy\AppData\Roaming\wklnhst.dat
    2008-08-09 11:58 174 --sha-w c:\program files\desktop.ini
    2008-06-21 11:33 76 --sh--r c:\windows\CT4CET.bin
    .

    ((((((((((((((((((((((((((((( SnapShot@2009-04-09_ 9.43.58.68 )))))))))))))))))))))))))))))))))))))))))
    .
    - 2009-04-09 08:29:33 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2009-04-09 13:51:31 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2009-04-09 08:29:33 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2009-04-09 13:51:31 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2009-04-09 08:43:07 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat
    + 2009-04-09 13:55:22 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat
    + 2009-04-09 13:55:22 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.L!!!
    - 2009-04-09 08:43:01 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat
    + 2009-04-09 13:55:12 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat
    + 2009-04-09 13:55:12 262,144 ---ha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat.L!!!
    - 2009-04-09 08:31:56 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-04-09 13:53:54 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-04-09 08:31:56 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-04-09 13:53:54 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-04-09 08:31:56 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-04-09 13:53:54 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-04-09 08:37:31 105,852 ----a-w c:\windows\System32\perfc009.dat
    + 2009-04-09 13:58:23 105,852 ----a-w c:\windows\System32\perfc009.dat
    - 2009-04-09 08:37:31 600,378 ----a-w c:\windows\System32\perfh009.dat
    + 2009-04-09 13:58:23 600,378 ----a-w c:\windows\System32\perfh009.dat
    - 2009-04-09 08:31:30 81,308 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    + 2009-04-09 13:56:14 81,394 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
    "msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "Apoint"="c:\program files\DellTPad\Apoint.exe" [2007-10-25 167936]
    "OEM02Mon.exe"="c:\windows\OEM02Mon.exe" [2008-03-04 36864]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2008-03-06 133656]
    "DELL Webcam Manager"="c:\program files\Dell\Dell Webcam Manager\DellWMgr.exe" [2007-07-27 118784]
    "IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\Iaanotif.exe" [2007-03-21 174872]
    "Broadcom Wireless Manager UI"="c:\windows\system32\WLTRAY.exe" [2007-12-12 3444736]
    "SigmatelSysTrayApp"="c:\program files\SigmaTel\C-Major Audio\WDM\sttray.exe" [2007-11-12 405504]
    "PCMService"="c:\program files\Dell\MediaDirect\PCMService.exe" [2007-12-21 184320]
    "WPCUMI"="c:\windows\system32\WpcUmi.exe" [2006-11-02 176128]
    "avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2009-02-05 81000]
    "ThreatFire"="c:\program files\ThreatFire\TFTray.exe" [2009-03-03 263440]
    "00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2009-02-23 2652056]
    "Kernel and Hardware Abstraction Layer"="KHALMNPR.EXE" [2008-02-29 c:\windows\KHALMNPR.Exe]

    c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
    Digital Line Detect.lnk - c:\program files\Digital Line Detect\DLG.exe [2008-06-21 50688]
    Logitech Desktop Messenger.lnk.disabled [2009-01-21 2252]
    Logitech SetPoint.lnk.disabled [2009-02-19 1835]
    QuickSet.lnk - c:\program files\Dell\QuickSet\quickset.exe [2007-09-07 1180952]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
    2008-12-22 12:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\GoToAssist]
    2008-06-21 12:50 10536 c:\program files\Citrix\GoToAssist\514\g2awinlogon.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=c:\progra~1\Google\GOOGLE~2\GOEC62~1.DLL

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
    @="Driver"

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
    backup=c:\windows\pss\Adobe Gamma Loader.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Microsoft Office.lnk]
    backup=c:\windows\pss\Microsoft Office.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^Users^guy^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.0.lnk]
    backup=c:\windows\pss\OpenOffice.org 3.0.lnk.Startup
    backupExtension=.Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4oD]
    --a
    2007-04-23 11:23 1032640 c:\program files\Kontiki\KHost.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a
    2008-10-15 02:04 39792 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DellSupportCenter]
    --a
    2008-08-14 00:04 206064 c:\program files\Dell Support Center\bin\sprtcmd.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
    --a
    2008-01-19 08:33 125952 c:\windows\ehome\ehtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\five Media Manager Tray]
    --a
    2008-05-21 11:32 368640 c:\program files\Entriq\MediaSphere\EntriqMediaTray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
    --a
    2008-03-06 08:58 141848 c:\windows\System32\igfxtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\kdx]
    --a
    2007-04-23 11:23 1032640 c:\program files\Kontiki\KHost.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
    2008-02-20 17:19 356352 c:\program files\Sony Ericsson\Sony Ericsson PC Suite\SEPCSuite.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
    --a
    2009-02-15 09:15 136600 c:\program files\Java\jre6\bin\jusched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WMPNSCFG]
    --a
    2008-01-19 08:33 202240 c:\program files\Windows Media Player\wmpnscfg.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
    "SUPERAntiSpyware"=c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
    "DellSupportCenter"="c:\program files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
    "dscactivate"="c:\program files\Dell Support Center\gs_agent\custom\dsca.exe"
    "HotKeysCmds"=c:\windows\system32\hkcmd.exe
    "Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    "Windows Defender"=%ProgramFiles%\Windows Defender\MSASCui.exe -hide

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiSpyware]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{B97A218F-B57B-463B-B6B8-8BAC8F5F5285}"= c:\program files\Dell\MediaDirect\MediaDirect.exe:Dell MediaDirect
    "{924A64CB-AB0B-4087-9304-2D9E014234ED}"= c:\program files\Dell\MediaDirect\PCMService.exe:CyberLink PowerCinema Resident Program
    "{BB8CB084-99D3-4BF1-A220-F5A803CB09D9}"= c:\program files\Dell\MediaDirect\Kernel\DMP\CLBrowserEngine.exe:Cyberlink Media Server Browser Engine
    "{526A9986-A111-48EC-A40D-0470D1BA55C5}"= c:\program files\Dell\MediaDirect\Kernel\DMS\CLMSService.exe:CyberLink Media Server
    "{3B8A3CD5-CE39-43CD-AC4E-FE4678DD4EA3}"= c:\program files\AVG\AVG8\avgemc.exe:avgemc.exe
    "{62CB7B37-4BED-4B40-8960-26D43E7F0F74}"= c:\program files\AVG\AVG8\avgupd.exe:avgupd.exe
    "{9B2A84F8-9875-495A-8141-B3C5467A4674}"= UDP:c:\program files\Kontiki\KService.exe:Delivery Manager Service
    "{F26379BE-0A3F-4F61-B98E-7E42AFD65D4D}"= TCP:c:\program files\Kontiki\KService.exe:Delivery Manager Service
    "{0017E8C9-0F07-4CDD-8AAE-F5D260A577F0}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent (TCP-In)
    "{7AA2BD61-F6E9-4C81-924F-2D39DAF82C51}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent (UDP-In)
    "{6666DAC5-F797-42CC-A108-1469F48349F8}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{D95B09B7-92E0-46C4-B3FA-5A6804293EEA}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{CB0FB048-3B30-4AE2-88C1-885156EB2BC3}"= c:\program files\Windows Live\Messenger\livecall.exe:Windows Live Messenger (Phone)
    "{1601CA93-6DDB-4C0D-A4E8-61C1462D5250}"= c:\program files\AVG\AVG8\avgnsx.exe:avgnsx.exe
    "{6F737E54-724E-4C09-AA2C-553079B808B1}"= UDP:c:\program files\uTorrent\uTorrent.exe:µTorrent
    "{968D5161-7194-4E93-A664-755833FA5118}"= TCP:c:\program files\uTorrent\uTorrent.exe:µTorrent

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
    "EnableFirewall"= 0 (0x0)

    R0 TfFsMon;TfFsMon;c:\windows\System32\drivers\TfFsMon.sys [2009-03-28 51472]
    R0 TfSysMon;TfSysMon;c:\windows\System32\drivers\TfSysMon.sys [2009-03-28 39184]
    R1 aswSP;avast! Self Protection;c:\windows\System32\drivers\aswSP.sys [2009-02-12 114768]
    R1 pctgntdi;pctgntdi;c:\windows\System32\drivers\pctgntdi.sys [2009-03-28 159600]
    R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\SASDIFSV.SYS [2009-01-15 9968]
    R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
    R2 AESTFilters;Andrea ST Filters Service;c:\windows\System32\AEstSrv.exe [2008-06-21 73728]
    R2 aswFsBlk;aswFsBlk;c:\windows\System32\drivers\aswFsBlk.sys [2009-02-12 20560]
    R2 aswMonFlt;aswMonFlt;c:\windows\System32\drivers\aswMonFlt.sys [2009-02-12 51792]
    R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\System32\drivers\PCTAppEvent.sys [2009-03-28 73840]
    R2 ThreatFire;ThreatFire;c:\program files\ThreatFire\TFService.exe service --> c:\program files\ThreatFire\TFService.exe service [?]
    R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI Service;c:\windows\System32\drivers\IntcHdmi.sys [2008-06-21 111616]
    R3 OEM02Dev;Creative Camera OEM002 Driver;c:\windows\System32\drivers\OEM02Dev.sys [2008-06-21 235648]
    R3 OEM02Vfx;Creative Camera OEM002 Video VFX Driver;c:\windows\System32\drivers\OEM02Vfx.sys [2008-06-21 7424]
    R3 pctplfw;pctplfw;c:\windows\System32\drivers\pctplfw.sys [2009-03-28 95640]
    R3 TfNetMon;TfNetMon;c:\windows\System32\drivers\TfNetMon.sys [2009-03-28 33040]
    S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\System32\drivers\ggflt.sys [2008-09-11 13352]
    S3 RT-USB;Ross-Tech USB driver;c:\windows\System32\drivers\RT-USB.SYS [2007-11-16 54400]
    S3 s3017bus;Sony Ericsson Device 3017 driver (WDM);c:\windows\System32\drivers\s3017bus.sys [2008-09-11 83880]
    S3 s3017mdfl;Sony Ericsson Device 3017 USB WMC Modem Filter;c:\windows\System32\drivers\s3017mdfl.sys [2008-09-11 15016]
    S3 s3017mdm;Sony Ericsson Device 3017 USB WMC Modem Driver;c:\windows\System32\drivers\s3017mdm.sys [2008-09-11 110632]
    S3 s3017mgmt;Sony Ericsson Device 3017 USB WMC Device Management Drivers (WDM);c:\windows\System32\drivers\s3017mgmt.sys [2008-09-11 104616]
    S3 s3017nd5;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (NDIS);c:\windows\System32\drivers\s3017nd5.sys [2008-09-11 25512]
    S3 s3017obex;Sony Ericsson Device 3017 USB WMC OBEX Interface;c:\windows\System32\drivers\s3017obex.sys [2008-09-11 100648]
    S3 s3017unic;Sony Ericsson Device 3017 USB Ethernet Emulation SEMC3017 (WDM);c:\windows\System32\drivers\s3017unic.sys [2008-09-11 110120]
    S3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]

    --- Other Services/Drivers In Memory ---

    *Deregistered* - mchInjDrv
    .
    Contents of the 'Scheduled Tasks' folder

    2009-04-09 c:\windows\Tasks\GlaryInitialize.job
    - c:\program files\Glary Utilities\initialize.exe [2009-02-12 18:10]
    .
    .
    Supplementary Scan
    .
    LSP: c:\windows\system32\wpclsp.dll
    DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} - hxxp://magnet.2020.net/virtualplanner/Core/Player/2020PlayerAX_Win32.cab
    FF - ProfilePath - c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.bbc.co.uk/
    FF - component: c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayAccessService.dll
    FF - component: c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\extensions\{62760FD6-B943-48C9-AB09-F99C6FE96088}\platform\WINNT\components\EbayFormSubmitObserver.dll
    FF - plugin: c:\program files\Entriq\MediaSphere\3.8.2.9\npEntriqMediaMozillaPlugin.dll
    FF - plugin: c:\program files\Entriq\MediaSphere\3.8.2.9\npEntriqVersionCheckMozillaPlugin.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\np-mswmp.dll
    FF - plugin: c:\program files\Mozilla Firefox\plugins\npzylomgamesplayer.dll
    FF - plugin: c:\program files\Virtual Earth 3D\npVE3D.dll
    FF - plugin: c:\programdata\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
    FF - plugin: c:\users\guy\AppData\Roaming\Mozilla\Firefox\Profiles\dh1aend2.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll

    ---- FIREFOX POLICIES ----
    .

    **************************************************************************

    catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-04-09 15:39:41
    Windows 6.0.6001 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    DLLs Loaded Under Running Processes

    - - - - - - - > 'winlogon.exe'(772)
    c:\program files\ThreatFire\TFWAH.dll

    - - - - - - - > 'lsass.exe'(696)
    c:\program files\ThreatFire\TFWAH.dll
    .
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    Completion time: 2009-04-09 15:42:54
    ComboFix-quarantined-files.txt 2009-04-09 14:42:50
    ComboFix2.txt 2009-04-09 08:46:28

    Pre-Run: 145,401,774,080 bytes free
    Post-Run: 150,512,816,128 bytes free
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    and the hijackthis log:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 15:49:17, on 09/04/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
    Boot mode: Normal

    Running processes:
    C:\Windows\System32\smss.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\wininit.exe
    C:\Windows\system32\csrss.exe
    C:\Windows\system32\services.exe
    C:\Windows\system32\lsass.exe
    C:\Windows\system32\lsm.exe
    C:\Windows\system32\winlogon.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\SLsvc.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\System32\WLTRYSVC.EXE
    C:\Windows\system32\WLANExt.exe
    C:\Windows\System32\bcmwltry.exe
    C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Windows\System32\spoolsv.exe
    C:\Windows\system32\svchost.exe
    C:\Windows\system32\aestsrv.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    C:\Program Files\Kontiki\KService.exe
    C:\Program Files\PC Tools Firewall Plus\FWService.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    C:\Windows\system32\STacSV.exe
    C:\Windows\system32\svchost.exe
    C:\Program Files\ThreatFire\TFService.exe
    C:\Windows\System32\svchost.exe
    C:\Windows\system32\SearchIndexer.exe
    C:\Windows\system32\DRIVERS\xaudio.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Windows\system32\taskeng.exe
    C:\Windows\system32\Dwm.exe
    C:\Windows\system32\taskeng.exe
    C:\Program Files\DellTPad\Apoint.exe
    C:\Windows\OEM02Mon.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe
    C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
    C:\Windows\System32\WLTRAY.EXE
    C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe
    C:\Program Files\Dell\MediaDirect\PCMService.exe
    C:\Windows\System32\wpcumi.exe
    C:\Program Files\Alwil Software\Avast4\ashDisp.exe
    C:\Program Files\ThreatFire\TFTray.exe
    C:\Windows\system32\igfxsrvc.exe
    C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Digital Line Detect\DLG.exe
    C:\Program Files\Dell\QuickSet\quickset.exe
    C:\Windows\system32\wbem\wmiprvse.exe
    C:\Program Files\DellTPad\ApMsgFwd.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\DellTPad\HidFind.exe
    C:\Program Files\DellTPad\Apntex.exe
    C:\Program Files\Windows Live\Messenger\usnsvc.exe
    C:\Windows\Explorer.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    C:\Windows\system32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe
    O4 - HKLM\..\Run: [OEM02Mon.exe] C:\Windows\OEM02Mon.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [DELL Webcam Manager] "C:\Program Files\Dell\Dell Webcam Manager\DellWMgr.exe" /s
    O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
    O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\Windows\system32\WLTRAY.exe
    O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe
    O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
    O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [WPCUMI] C:\Windows\system32\WpcUmi.exe
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
    O4 - HKLM\..\Run: [ThreatFire] C:\Program Files\ThreatFire\TFTray.exe
    O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk.disabled
    O4 - Global Startup: Logitech SetPoint.lnk.disabled
    O4 - Global Startup: QuickSet.lnk = C:\Program Files\Dell\QuickSet\quickset.exe
    O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\wpclsp.dll
    O13 - Gopher Prefix:
    O16 - DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} (20-20 3D Viewer) - http://magnet.2020.net/virtualplanner/Core/Player/2020PlayerAX_Win32.cab
    O16 - DPF: {3EA4FA88-E0BE-419A-A732-9B79B87A6ED0} (CTVUAxCtrl Object) - http://dl.tvunetworks.com/TVUAx.cab
    O16 - DPF: {49312E18-AA92-4CC2-BB97-55DEA7BCADD6} (WMI Class) - http://support.euro.dell.com/systemprofiler/SysProExe.CAB
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/VistaMSNPUplden-gb.cab
    O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
    O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\514\G2AWinLogon.dll
    O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
    O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\514\g2aservice.exe
    O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
    O23 - Service: KService - Kontiki Inc. - C:\Program Files\Kontiki\KService.exe
    O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
    O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
    O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe
    O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
    O23 - Service: ThreatFire - PC Tools - C:\Program Files\ThreatFire\TFService.exe
    O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\Windows\System32\WLTRYSVC.EXE
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 9625 bytes
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    Kaspersky online scanner will not let me run as it says i do not have at least version 1.6 of Java, i have checked and i have 1.6.0_13.
    Any other options?
    Thanks for your help so far!
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    uninstall ALL java entries then reinstall the latest
    http://java.com/en/

    Then try kaspersky again (Try in firefox too if IE wont work)
    :idea:
  • PeterPerfect
    PeterPerfect Posts: 83 Forumite
    In Firefox you have the option not to save any passwords, which maybe not set. Check under Options->Security. It maybe the case that you have similar passwords, and the type ahead feature that can be found is kicking in. You can remove passwords with pressing the saved passwords button on the security tab.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    jakecake wrote: »
    Be careful of what rik says.


    :rotfl::rotfl::rotfl::rotfl::rotfl::rotfl:

    I love your sig
    :idea:
  • lunny_2
    lunny_2 Posts: 63 Forumite
    Part of the Furniture Combo Breaker
    Friday, April 10, 2009
    Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
    Kaspersky Online Scanner version: 7.0.26.13
    Program database last update: Friday, April 10, 2009 17:22:21
    Records in database: 2031984

    Scan settings Scan using the following database extended Scan archives yes Scan mail databases yes
    Scan area Critical Areas C:\Program Files
    C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
    C:\Users\guy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
    C:\Windows
    Scan statistics Files scanned 100372 Threat name 2 Infected objects 2 Suspicious objects 0 Duration of the scan 01:08:07
    File name Threat name Threats count C:\Program Files\CrossLoop\VNCHooks.dllInfected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.b1

    C:\Program Files\CrossLoop\winvnc.exeInfected: not-a-virus:RemoteAdmin.Win32.WinVNC-based.h1

    The selected area was scanned.
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Id suggest using kaspersky to scan the WHOLE computer lunny. Not just the critical areas
    :idea:
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.6K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245.1K Work, Benefits & Business
  • 600.7K Mortgages, Homes & Bills
  • 177.5K Life & Family
  • 258.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.1K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.
Update Your Picture