Computer slow, log file,which virus protection? done combofix

closed

Sometimes it's easier and cleaner to backup your data, wipe it, and reinstall windows, (especially if you have a restore partition)

zoeeeet

the above terms need a fuller explanation for me i'm afraid.
i'm not sure how to carry out any of those steps or about the partition point sorry

aliEnRIK

zoeeeet

Whatever dr web found ~ post the log please

zoeeeet

please find log below

setup.exe;C:\Documents and Settings\All Users\Application Data\AOL\C_AOL 9.0\ASPUK;Probably BACKDOOR.Trojan;Incurable.Moved.;
Voyager105PPPoEDriver.exe/Setup.EXE\data018;C:\Documents and Settings\Paul michael\Local Settings\Temp\Voyager105PPPoEDriver.exe/Setup.EXE;Probably DLOADER.Trojan;;
Voyager105PPPoEDriver.exe/Setup.EXE\data019;C:\Documents and Settings\Paul michael\Local Settings\Temp\Voyager105PPPoEDriver.exe/Setup.EXE;Trojan.KillDisk.307;;
\Setup.EXE;C:\Documents and Settings\Paul michael\Local Settings\Temp;Archive contains infected objects;;
Voyager105PPPoEDriver.exe;C:\Documents and Settings\Paul michael\Local Settings\Temp;Archive contains infected objects;Moved.;
chorus.exe/data002\vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/ProgramFiles/registry.exe;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus\chorus.exe/data002;Trojan.MulDrop.origin;;
chorus.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriv;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus\chorus.exe/data002/vendors/aoluk/cont;Probably DLOADER.Trojan;;
chorus.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriv;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus\chorus.exe/data002/vendors/aoluk/cont;Trojan.KillDisk.307;;
\Setup.EXE;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus;Archive contains infected objects;;
vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriver.exe;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus;Archive contains infected objects;;
data002;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus;Archive contains infected objects;;
chorus.exe;C:\Documents and Settings\Paul michael\Local Settings\Temp\aoluk\Broadband CheckUp\Chorus;Container contains infected objects;Moved.;
couponprinter[1].exe\data008;C:\Documents and Settings\Paul michael\Local Settings\Temporary Internet Files\Content.IE5\MI3UGPOH\couponprinter[1].exe;Adware.Coupons.34;;
couponprinter[1].exe\data010;C:\Documents and Settings\Paul michael\Local Settings\Temporary Internet Files\Content.IE5\MI3UGPOH\couponprinter[1].exe;Adware.Coupons.34;;
couponprinter[1].exe;C:\Documents and Settings\Paul michael\Local Settings\Temporary Internet Files\Content.IE5\MI3UGPOH;Container contains infected objects;Moved.;
Voyager100pppoeDriver.exe/Setup.EXE\data018;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager100\Voyager100PPPoEDriv;Probably DLOADER.Trojan;;
Voyager100pppoeDriver.exe/Setup.EXE\data019;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager100\Voyager100PPPoEDriv;Trojan.KillDisk.307;;
\Setup.EXE;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager100\Voyager100PPPoEDriv;Archive contains infected objects;;
Voyager100pppoeDriver.exe;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager100\Voyager100PPPoEDriv;Archive contains infected objects;Moved.;
registry.exe;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager105\ProgramFiles;Trojan.MulDrop.origin;Incurable.Moved.;
Voyager105pppoeDriver.exe/Setup.EXE\data018;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager105\Voyager105PPPoEDriv;Probably DLOADER.Trojan;;
Voyager105pppoeDriver.exe/Setup.EXE\data019;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager105\Voyager105PPPoEDriv;Trojan.KillDisk.307;;
\Setup.EXE;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager105\Voyager105PPPoEDriv;Archive contains infected objects;;
Voyager105pppoeDriver.exe;C:\Program Files\AOL\Broadband Assistant\vendors\aoluk\content\template\driven_dev\BroadBandAsst\Voyager105\Voyager105PPPoEDriv;Archive contains infected objects;Moved.;
setup.exe;C:\Program Files\AOL\Installers\ASP 2.0;Probably BACKDOOR.Trojan;Incurable.Moved.;
registry.exe;C:\Program Files\BT Voyager 105 ADSL Modem;Trojan.MulDrop.origin;Incurable.Moved.;
fwRemoteCfg.dll;C:\Program Files\Common Files\FTL Shared;Probably DLOADER.Trojan;Incurable.Moved.;
InstallHelper.exe;C:\Program Files\Common Files\Motive;Probably MULDROP.Trojan;Incurable.Moved.;
msimg32.dll;C:\Program Files\Internet Explorer;Adware.Funweb;Incurable.Moved.;
BBCheckup.exe/data026/data002\vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/ProgramFiles/registry.exe;C:\Setup\BroadbandCheckup\BBCheckup.exe/data026/data002;Trojan.MulDrop.origin;;
BBCheckup.exe/data026/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager1;C:\Setup\BroadbandCheckup\BBCheckup.exe/data026/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voya;Probably DLOADER.Trojan;;
BBCheckup.exe/data026/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager1;C:\Setup\BroadbandCheckup\BBCheckup.exe/data026/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voya;Trojan.KillDisk.307;;
\Setup.EXE;C:\Setup\BroadbandCheckup;Archive contains infected objects;;
vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriver.exe;C:\Setup\BroadbandCheckup;Archive contains infected objects;;
data002;C:\Setup\BroadbandCheckup;Archive contains infected objects;;
data026;C:\Setup\BroadbandCheckup;Container contains infected objects;;
BBCheckup.exe;C:\Setup\BroadbandCheckup;Archive contains infected objects;Moved.;
chorus.exe/data002\vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/ProgramFiles/registry.exe;C:\Setup\BroadbandCheckup\chorus.exe/data002;Trojan.MulDrop.origin;;
chorus.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriv;C:\Setup\BroadbandCheckup\chorus.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoE;Probably DLOADER.Trojan;;
chorus.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriv;C:\Setup\BroadbandCheckup\chorus.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoE;Trojan.KillDisk.307;;
\Setup.EXE;C:\Setup\BroadbandCheckup;Archive contains infected objects;;
vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriver.exe;C:\Setup\BroadbandCheckup;Archive contains infected objects;;
data002;C:\Setup\BroadbandCheckup;Archive contains infected objects;;
chorus.exe;C:\Setup\BroadbandCheckup;Container contains infected objects;Moved.;
A0088562.ocx;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP380;Adware.Coupons.34;Incurable.Moved.;
A0088889.exe/Setup.EXE\data018;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088889.exe/Setup.EXE;Probably DLOADER.Trojan;;
A0088889.exe/Setup.EXE\data019;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088889.exe/Setup.EXE;Trojan.KillDisk.307;;
\Setup.EXE;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
A0088889.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;Moved.;
A0088890.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Trojan.MulDrop.origin;Incurable.Moved.;
A0088891.exe/Setup.EXE\data018;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088891.exe/Setup.EXE;Probably DLOADER.Trojan;;
A0088891.exe/Setup.EXE\data019;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088891.exe/Setup.EXE;Trojan.KillDisk.307;;
\Setup.EXE;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
A0088891.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;Moved.;
A0088892.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Trojan.MulDrop.origin;Incurable.Moved.;
A0088893.exe/data026/data002\vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/ProgramFiles/registry.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088893.exe/data026/data002;Trojan.MulDrop.origin;;
A0088893.exe/data026/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager10;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088893.exe/data026/data002/vendors/aoluk/co;Probably DLOADER.Trojan;;
A0088893.exe/data026/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager10;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088893.exe/data026/data002/vendors/aoluk/co;Trojan.KillDisk.307;;
\Setup.EXE;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriver.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
data002;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
data026;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Container contains infected objects;;
A0088893.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;Moved.;
A0088894.exe/data002\vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/ProgramFiles/registry.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088894.exe/data002;Trojan.MulDrop.origin;;
A0088894.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDr;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088894.exe/data002/vendors/aoluk/content/te;Probably DLOADER.Trojan;;
A0088894.exe/data002/vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDr;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383\A0088894.exe/data002/vendors/aoluk/content/te;Trojan.KillDisk.307;;
\Setup.EXE;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
vendors/aoluk/content/template/driven_dev/BroadBandAsst/Voyager105/Voyager105PPPoEDriver/Voyager105pppoeDriver.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
data002;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Archive contains infected objects;;
A0088894.exe;C:\System Volume Information\_restore{6F9DCA67-1B78-41EE-9C6E-378DBF13A624}\RP383;Container contains infected objects;Moved.;
CouponPrinter.ocx;C:\WINDOWS;Adware.Coupons.34;Incurable.Moved.;
Restart.exe;C:\WINDOWS;Trojan.KillDisk.307;Deleted.;

aliEnRIK

Well I agree with 'closed'
I would seriously suggest formatting and starting afresh

If your willing to go on I REALLY need you to get combofix running

(SAVE AS 'qwerty.exe'. Take note of WHERE it is (eg ~ C/USERNAME/DOWNLOADS). RIGHT CLICK and COPY then onto desktop and RIGHT CLICK and PASTE)

closed

The how depends if you have the windows disk, or a restore partition, instructions should be available in the manual or hp website. Did you have any antivirus on your pc, if they are real infections, you have quite a few.

zoeeeet

we did have mcafee, till the other daybut there was problems with it and it kept downloading updates all the time
you obviously know how far along the proces of sorting this out. i have not a clue or maybe the capabilities i had problems getting combo fix to work the other day-is it worth another go not sure if we have the original disk will have to have a rummage i dont know the best thing to do but thank you for your patience -
i got a mac code this week and really need to be able to get back on line i daren't go on any other websites aside this one

aliEnRIK

Use the MCAFEE REMOVAL TOOL
http://download.mcafee.com/products/licensed/cust_support_patches/MCPR.exe

...............................................................................................

Download SUPERANTISPYWARE (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_superantispyware/
UPDATE and PERFORM COMPLETE SCAN
(Then goto console and LOGS and post the log it created then untick it from STARTING UP WITH WINDOWS)

.......................................................................................

Then yes. I really need combofix running

zoeeeet

we did have mcafee, till the other day kept downloading all the time, will do as above don't know how far i am along the process or if i have the capabilities to sort this out-found a disk from emachines restore cd- will have ago at the above thanks for patience ps since i posted my log file above the page display has changed and gone massive -ihave to scroll right to see the whole page

zoeeeet

Managed to use macafee removal tool succesfully using your link thanks
downloaded superspy antispware currently doing a scan
(had password problems getting locked out of site over last few days, think i've sorted it now, thats why replies have been a bit slow)
results of scan to follow asap