Posted Logs-need Spyware Removal Help

**TheBruce1** · 01-20-2008, 04:43 AM

Hello again

Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)

O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} - http://games.pogo.com/online2/pogo/b...ploader_v6.cab

Please remember to close all other windows, including browsers then click Fix checked.

=====================

Open notepad and copy/paste the text in the quotebox below into it:

Quote:

KillAll::

File::
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-221922-851.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071206-222313-289.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071212-231333-851.dll
C:\Documents and Settings\Adasha Knight\Desktop\backups\backup-20071215-131912-475.dll
C:\Program Files\Common Files\Real\Update_OB\realsched.exe

Save this as CFscript

Refering to the picture above, drag CFscript into ComboFix.exe

Follow the prompts, and post the resulting log, C:\ComboFix.txt

Note: the above code was created specifically for this user. If you are not this user, do NOT follow these directions as they could damage the workings of your system.

Warning:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

=============================

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Updating Java:

Download the latest version of Java Runtime Environment (JRE) 6u4.
Scroll down to where it says "The Java SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
In the pull down menu next to Platform select Windows
Check the box that says: "I agree to the Java SE Runtime Environment 6 License Agreement"
Click Continue
Click on the link to download Windows Offline Installation and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre-6u4-windowsi586-p.exe to install the newest version.

============================

Open HijackThis and click on 'Do a System Scan and save a Logfile'. Save the log file and post it here.

============================
Logs Required
C:\Combofix.txt
Hijackthis log

**TheBruce1** · 01-20-2008, 09:05 AM

I see no evidence of an AntiVirus program on your system. This must be resolved. Here are a few very good free Antivirus products which are available:

Avast!

AVG

Avira PersonalEdition Classic

Select one of these, or another of your choice. Download, install, update definitions, and run a full system scan.

---------------------

You don't seem to have a firewall program installed. Using a firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice:

.

==========================

If you have your Windows XP CD, follow instructions Here for installing Windows Recovery Console.

====================

If you do not have your XP CD follow instructions below:

Go to Microsoft's website => http://support.microsoft.com/kb/310994
Select the download that's appropriate for your Operating System

Download the file & save it as its originally named, next to ComboFix.exe.

Now close all open windows and programs, then drag the setup package onto ComboFix.exe and drop it. Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console. When complete, a log named CF_RC.txt will open. Please post the contents of that log.

Please do not reboot your machine until we have reviewed the log.

======================
Logs Required
Antivirus scan log
CF_RC.txt

01-20-2008, 09:05 AM	#2 (permalink)
TheBruce1 Moderator, Analyst, Security Team Join Date: Oct 2006 Location: Dùn Èideann,Scotland. Posts: 5,093 OS: XP	Re: Posted Logs-need Spyware Removal Help I see no evidence of an AntiVirus program on your system. This must be resolved. Here are a few very good free Antivirus products which are available: Avast! AVG Avira PersonalEdition Classic Select one of these, or another of your choice. Download, install, update definitions, and run a full system scan. --------------------- You don't seem to have a firewall program installed. Using a firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice: Comodo Personal Firewall ZoneAlarm . ========================== If you have your Windows XP CD, follow instructions Here for installing Windows Recovery Console. ==================== If you do not have your XP CD follow instructions below: Go to Microsoft's website => http://support.microsoft.com/kb/310994 Select the download that's appropriate for your Operating System Download the file & save it as its originally named, next to ComboFix.exe. Now close all open windows and programs, then drag the setup package onto ComboFix.exe and drop it. Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console. When complete, a log named CF_RC.txt will open. Please post the contents of that log. Please do not reboot your machine until we have reviewed the log. ====================== Logs Required Antivirus scan log CF_RC.txt __________________ Member of ASAP since 2007 Member of UNITE since 2008 Notice to BT customers BT to dump Phorm, see Here for more information. No DPI If we have helped you in anyway, please consider Donating Last edited by TheBruce1; 01-20-2008 at 09:23 AM.