Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Recurring XP Anti-virus 2011 infection and others...


  • Please log in to reply
6 replies to this topic

#1 gszeman

gszeman

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:02:02 AM

Posted 30 April 2011 - 08:56 PM

Hi all,

I've had an issue with some virii and malware recently. I get things "cleaned up", but they always seem to return within a week or two. I'm hoping someone can take a look and see what the issue is. I just ran MBAM and it found some issues. I reran MBAM and it found nothing. However, a few hours later the XP anti-virus alerts popped up. I ran MBAM once again and it found some firefox and IE start up entries, which it removed. Things are running ok now, but my worry is that something is hiding and will return in no time...

Any help seeing if we can clean this old Laptop up would be appreciated.

I'm running Windows XP SP3

Thank you,
Glenn

Edited by gszeman, 30 April 2011 - 09:01 PM.


BC AdBot (Login to Remove)

 


#2 Computerproblem101

Computerproblem101

  • Members
  • 140 posts
  • OFFLINE
  •  
  • Local time:01:02 AM

Posted 30 April 2011 - 09:05 PM

Lets dig a little bit and see what we can find.

Download Superantispyware from http://www.superantispyware.com - download the program, update it and run a quick scan. *full scan later dependent on what the log shows* - post the log here after you have removed everything and rebooted your PC. The scan will take about 1/2 an hour.

I can then instruct you further.

Edited by Computerproblem101, 30 April 2011 - 09:06 PM.


#3 gszeman

gszeman
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:02:02 AM

Posted 30 April 2011 - 10:51 PM

Thank you for the quick reply, I'm currently running the scan I my laptop. I forgot to mention in my post above that Windows Security Alerts in the taskbar shows that my firewall and automatic updates are turned off. I turned the firewall back on, but the automatic updates won't turn back on...even though they site up as being on in settings>control panel>system.

I'll post the log as soon as it's finished.

Thank you,
Glenn

#4 Computerproblem101

Computerproblem101

  • Members
  • 140 posts
  • OFFLINE
  •  
  • Local time:01:02 AM

Posted 30 April 2011 - 10:53 PM

I am going to bed shortly, has it found anything yet?

#5 gszeman

gszeman
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:02:02 AM

Posted 30 April 2011 - 11:00 PM

Yes, as am I, so no worries. It has found 34 adware tracking cookies. It appears to be almost done. I work tomorrow from 9am to 6 or 7pm, so no hurry on the next reply. Again, thank you!

#6 gszeman

gszeman
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:02:02 AM

Posted 30 April 2011 - 11:01 PM

Yes, as am I, so no worries. It has found 34 adware tracking cookies. It appears to be almost done. I work tomorrow from 9am to 6 or 7pm, so no hurry on the next reply. Again, thank you!

#7 gszeman

gszeman
  • Topic Starter

  • Members
  • 37 posts
  • OFFLINE
  •  
  • Local time:02:02 AM

Posted 30 April 2011 - 11:16 PM

Sorry about the double post...was posting from my Droid and the page froze on me.

Here is the log:

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 05/01/2011 at 00:05 AM

Application Version : 4.51.1000

Core Rules Database Version : 6963
Trace Rules Database Version: 4775

Scan type : Quick Scan
Total Scan Time : 00:47:36

Memory items scanned : 580
Memory threats detected : 0
Registry items scanned : 1879
Registry threats detected : 0
File items scanned : 12002
File threats detected : 34

Adware.Tracking Cookie
C:\Documents and Settings\SixTen\Cookies\sixten@server.iad.liveperson[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@tacoda.at.atwola[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@click.blue-square-media[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@ad.wsod[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@collective-media[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@liveperson[3].txt
C:\Documents and Settings\SixTen\Cookies\sixten@at.atwola[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@www.qsstats[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@segment-pixel.invitemedia[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@g-pixel.invitemedia[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@optimize.indieclick[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@o1.qnsr[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@mm.chitika[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@clicksor[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@qnsr[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@myroitracking[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@liveperson[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@invitemedia[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@indieclick[2].txt
C:\Documents and Settings\SixTen\Cookies\sixten@clickthrough.kanoodle[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@www.qsstats[1].txt
C:\Documents and Settings\SixTen\Cookies\sixten@ar.atwola[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@at.atwola[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@collective-media[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@kaspersky.122.2o7[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@clicks.search312[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@myroitracking[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@ads.pureleads[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@ads.bleepingcomputer[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@clicksor[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@tracking202[2].txt
C:\Documents and Settings\Administrator\Cookies\administrator@ads.ask[1].txt
C:\Documents and Settings\Administrator\Cookies\administrator@eset.122.2o7[1].txt
media.mtvnservices.com [ C:\Documents and Settings\SixTen\Application Data\Macromedia\Flash Player\#SharedObjects\62AUHCDN ]

Thank you,
Glenn




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users