Firefox problem??

gerturdeanna

Right - full scan log after almost 3 hours!!!

Malwarebytes' Anti-Malware 1.36
Database version: 2009
Windows 6.0.6001 Service Pack 1
19/04/2009 14:27:19
mbam-log-2009-04-19 (14-27-19).txt
Scan type: Full Scan (C:\|)
Objects scanned: 219970
Time elapsed: 2 hour(s), 56 minute(s), 31 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)



Nothing, nothing, nothing....whats going on?? Any ideas folks??

I can't do a hijack this as it won't let me run it....says its already running. Can't uninstall as computer tells me I don't have administrator rights, when I obv do as its my computer!!

TIA!

aliEnRIK

Please run COMBOFIX
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be)

If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe')

gerturdeanna

I'm on Windows Vista and it told me it was only for XP or 2000. But now it won't stop running?? How can I stop it?

aliEnRIK

Combofix runs fine on vista

Let it run

gerturdeanna

Its not doing anything though - there is just a green bar under the Combofix sign and has been like that for about 10/15 mins - sorry I'm probably doing your head in now aliEnRIK!!!
Thanks for the help!

aliEnRIK

open Task Manager then Processes tab (press ctrl, alt and del at the same time) and end any processes of findstr, find, sed or swreg, then combofix should continue.

If not try and reboot (If you can)

Or simply pull the power

gerturdeanna

OK. So its now running again, although now an error comes up saying the contents have been compromised and to dowload from some other site.....bleeping computer?

Shall I just reboot and try again or just cry?!?! haha!

aliEnRIK

its supposed to be from BLEEPING COMPUTER anyways

Reboot and leave it (for now)

run LSPFIX



Download HostsXpert
http://www.softpedia.com/get/Security/Security-Related/Hoster.shtml
and then follow the below steps.

* Unzip HostsXpert.zip
* It will create a folder named HostsXpert in whatever folder you extract it to.
* Run HostsXpert.exe by double clicking on it.
* click the Make Writeable? button.
* click Restore Microsoft's Hosts File and then click OK.
* Click the X to exit the program

then ~
* Download DDS by sUBs and save it to your desktop.

http://download.bleepingcomputer.com/sUBs/dds.scr

* Double click on the DDS icon, allow it to run.
* A small box will open, with an explaination about the tool. No input is needed, the scan is running.
* Notepad will open with the results.
* Follow the instructions that pop up for posting the results.
* Close the program window, and delete the program from your desktop.

gerturdeanna

Can't run the first one as don't have administrator rights now!!!! Grrrr!€ Stupid computer!! haha!

Can't restore MS host files as : Cannot create file C:/Windows\system32\drivers\ETC\hosts


Am I best just finding the original disk and rewriting the hard drive?

aliEnRIK

gerturdeanna wrote: »

Am I best just finding the original disk and rewriting the hard drive?

I suspect you will have major problems if you attempt that as you will also need to reinstall all drivers for your computer