Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Possible infection.Can someone help please.

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 7:41 am

Hi,can I also uninstall all the programs you've got me to install?(combofix,gmer.zip,dss.exe and hijack this)Combofix created some folders called qoobox and there is a folder called deckard too.Thankyou.
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm
Advertisement
Register to Remove

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 7:57 am

Yes, you can.

Click on Start > Run. Copy and paste in ComboFix /u and click OK. An image is below for reference.

Image
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 8:51 am

Hi there,when trying to uninstall office via add/remove programs it's saying "the feature you are tring to use is on a cd-rom disc that is not availiable"Are you saying that because I have office installed I will not get updates?It's just saying that there are none availiable.I got updates from microsoft a couple of weeks ago though.I can send you a screencap to show you if you want?Could you tell me if there is anything wrong with my computer please or if everything is ok?Thankyou.
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 10:26 am

If you have updates installed, it should show up in the CCleaner install.txt.

Alternatively, do the following:

Open Notepad and copy and paste the following in the Code box into Notepad:

Code: Select all
if exist C:\updates.txt del /q C:\updates.txt
cd %windir%
dir /a:dh >> C:\updates.txt
cd $hf_mig$
dir /a:dh >> C:\updates.txt
start notepad C:\updates.txt


Click on File > Save As....

In the File Name box, copy and paste in updates.bat

In the Save As Type box, select All Files from the drop-down list.

Click Save.

Double click on updates.bat to run it. Command Prompt will open and close quickly; this is normal. Notepad will open shortly afterwards. Please post the contents of this Notepad file in your next reply.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 10:30 am

Hi there,here is the copy of the updates you asked for.Thanks.

Volume in drive C has no label.
Volume Serial Number is A847-BC0E

Directory of C:\WINDOWS

21/12/2007 10:10 <DIR> $hf_mig$
16/01/2006 11:35 <DIR> CSC
31/12/2007 18:05 <DIR> inf
24/12/2007 11:43 <DIR> Installer
0 File(s) 0 bytes
4 Dir(s) 48,987,488,256 bytes free
Volume in drive C has no label.
Volume Serial Number is A847-BC0E

Directory of C:\WINDOWS\$hf_mig$

21/12/2007 10:10 <DIR> .
21/12/2007 10:10 <DIR> ..
11/11/2005 23:41 <DIR> KB834707
11/11/2005 23:41 <DIR> KB873339
18/11/2005 00:22 <DIR> KB885250
11/11/2005 23:41 <DIR> KB885835
11/11/2005 23:40 <DIR> KB885836
11/11/2005 23:40 <DIR> KB886185
21/03/2007 16:20 <DIR> KB887472
18/11/2005 00:22 <DIR> KB887742
26/02/2007 17:31 <DIR> KB888113
18/11/2005 00:21 <DIR> KB888302
18/11/2005 00:22 <DIR> KB890046
18/11/2005 00:21 <DIR> KB890859
18/11/2005 00:22 <DIR> KB891781
18/11/2005 00:21 <DIR> KB893066
18/11/2005 00:22 <DIR> KB893756
18/11/2005 00:21 <DIR> KB894391
18/11/2005 00:22 <DIR> KB896358
18/11/2005 00:23 <DIR> KB896422
18/11/2005 00:22 <DIR> KB896423
18/11/2005 00:22 <DIR> KB896424
18/11/2005 00:21 <DIR> KB896428
18/11/2005 00:22 <DIR> KB896688
17/11/2005 15:57 <DIR> KB898461
18/11/2005 00:23 <DIR> KB899587
18/11/2005 00:21 <DIR> KB899589
18/11/2005 00:22 <DIR> KB899591
26/04/2006 16:02 <DIR> KB900485
18/11/2005 00:21 <DIR> KB900725
18/11/2005 00:22 <DIR> KB901017
18/11/2005 00:21 <DIR> KB901214
18/11/2005 00:22 <DIR> KB902400
18/11/2005 00:21 <DIR> KB904706
18/11/2005 00:21 <DIR> KB905414
18/11/2005 00:21 <DIR> KB905749
14/12/2005 09:48 <DIR> KB905915
11/01/2006 12:23 <DIR> KB908519
24/04/2006 23:16 <DIR> KB908531
14/12/2005 09:49 <DIR> KB910437
30/06/2006 16:43 <DIR> KB911280
24/04/2006 23:16 <DIR> KB911562
24/04/2006 23:14 <DIR> KB911567
21/03/2007 16:23 <DIR> KB911927
24/04/2006 23:15 <DIR> KB912812
06/01/2006 16:38 <DIR> KB912919
18/02/2006 10:30 <DIR> KB913446
10/05/2006 09:01 <DIR> KB913580
12/07/2006 18:03 <DIR> KB914388
16/06/2006 16:37 <DIR> KB914389
16/06/2006 16:37 <DIR> KB916281
12/07/2006 18:02 <DIR> KB916595
12/07/2006 18:05 <DIR> KB917159
17/06/2006 09:08 <DIR> KB917344
18/12/2006 10:10 <DIR> KB917422
17/06/2006 09:08 <DIR> KB917953
21/03/2007 16:29 <DIR> KB918118
17/06/2006 09:08 <DIR> KB918439
09/10/2006 16:18 <DIR> KB918899
18/12/2006 10:10 <DIR> KB919007
18/12/2006 10:10 <DIR> KB920213
09/10/2006 16:19 <DIR> KB920214
05/10/2007 10:22 <DIR> KB920342
18/12/2006 10:10 <DIR> KB920670
18/12/2006 10:06 <DIR> KB920683
18/12/2006 10:14 <DIR> KB920685
18/12/2006 10:10 <DIR> KB920872
18/12/2006 10:12 <DIR> KB921398
15/08/2007 09:02 <DIR> KB921503
09/10/2006 16:12 <DIR> KB921883
18/12/2006 10:10 <DIR> KB922582
18/12/2006 10:14 <DIR> KB922616
18/12/2006 10:15 <DIR> KB922819
18/12/2006 10:15 <DIR> KB923414
18/12/2006 10:09 <DIR> KB923694
18/12/2006 10:14 <DIR> KB923980
18/12/2006 10:15 <DIR> KB924191
18/12/2006 10:14 <DIR> KB924270
18/12/2006 10:13 <DIR> KB924496
18/12/2006 10:16 <DIR> KB925454
18/12/2006 10:10 <DIR> KB925486
04/04/2007 10:09 <DIR> KB925902
18/12/2006 10:10 <DIR> KB926255
21/03/2007 16:30 <DIR> KB926436
21/03/2007 16:29 <DIR> KB927779
21/03/2007 16:29 <DIR> KB927802
30/05/2007 12:55 <DIR> KB927891
21/03/2007 16:30 <DIR> KB928090
21/03/2007 16:29 <DIR> KB928255
21/03/2007 16:29 <DIR> KB928843
13/06/2007 08:58 <DIR> KB929123
21/03/2007 17:36 <DIR> KB929338
30/01/2007 15:27 <DIR> KB929969
11/04/2007 08:48 <DIR> KB930178
09/05/2007 09:49 <DIR> KB930916
11/04/2007 08:48 <DIR> KB931261
09/05/2007 09:51 <DIR> KB931768
11/04/2007 08:48 <DIR> KB931784
21/03/2007 16:30 <DIR> KB931836
11/04/2007 08:48 <DIR> KB932168
30/08/2007 08:43 <DIR> KB933360
13/06/2007 08:59 <DIR> KB933566
10/10/2007 10:28 <DIR> KB933729
13/06/2007 08:56 <DIR> KB935839
13/06/2007 08:58 <DIR> KB935840
15/08/2007 09:03 <DIR> KB936021
05/10/2007 10:12 <DIR> KB937143
12/12/2007 10:43 <DIR> KB937894
15/08/2007 09:01 <DIR> KB938127
15/08/2007 09:02 <DIR> KB938828
15/08/2007 09:02 <DIR> KB938829
10/10/2007 10:27 <DIR> KB939653
10/10/2007 10:25 <DIR> KB941202
12/12/2007 10:41 <DIR> KB941568
12/12/2007 10:42 <DIR> KB942615
12/12/2007 10:40 <DIR> KB942763
12/12/2007 10:41 <DIR> KB942840
14/11/2007 10:58 <DIR> KB943460
12/12/2007 10:42 <DIR> KB944653
21/12/2007 10:10 <DIR> KB946627
0 File(s) 0 bytes
120 Dir(s) 48,987,422,720 bytes free
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 10:58 am

Directory of C:\WINDOWS

21/12/2007 10:10 <DIR> $hf_mig$
16/01/2006 11:35 <DIR> CSC
31/12/2007 18:05 <DIR> inf
24/12/2007 11:43 <DIR> Installer


In the C:\Windows folder, it shows a lack of updates there. You aren't getting some updates.

Regarding the error during the uninstallation of Office, see here - http://support.microsoft.com/kb/217706

This brings us to the questions. Did Microsoft Office came installed with your computer when you bought it? Did you ever buy a copy of Microsoft Office? Have you changed job or has just recently graduated from school? Did you bring this computer to a repair shop before?
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 11:10 am

Hi there,I bought this computer brand new from a computer shop.It came pre installed with windows xp and office.I've never bought a copy of office.I had someone repair it last year when I downloaded something called cyberscrub and my computer crashed and wouln't reeboot atall.I was told that it needed a clean install of windows.I've just contacted microsoft and explained my problem to them.What should I do now in regards to my computer?Thankyou.
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 11:21 am

There's nothing I can do to help now since you don't have the Microsoft Office Installation CD. Microsoft will not provide updates until there's no illegal Microsoft products on your computer.

Your computer looks clean as far as I can see. Any problems that you are experiencing?
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 11:31 am

Hi there,if you think my computers clean that's great.I thought there was still something wrong because you wanted me to continue.I've emailed microsoft and explained my situation to them.Hopefully they can help me with the office situation.Thankyou very much for helping me.
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 11:42 am

Hi,

Hopefully Microsoft is able to help with your problems. :)

Update Adobe Reader

  1. Please uninstall Adobe Reader 7.0.8 before installing the latest version by going to Start > Control Panel and double clicking on Add/Remove Programs. Locate Adobe Reader 7.0.9 and click on Change/Remove to uninstall it.
  2. Click here to download the latest version of Adobe Acrobat Reader.
  3. Select your Windows version and click on Download. If you are using Internet Explorer, you will receive prompts. Allow the installation to be ran and it will be installed automatically for you.

    If you are using other browsers, it will prompt you to save a file. Save this file to your desktop and run it to install the latest version of Adobe Reader.
  4. Close your Internet browser and open it again.

Please post back a new HijackThis log after you've updated Adobe.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 12:06 pm

Hi there,it won't let me uninstall adobe either.I'm getting a message saying "the windows installer service can't be accessed,contact your support personell for assistance?Thanks.
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 12:19 pm

Click on Start > Run and type in services.msc. Press Enter.

Scroll down to Windows Installer. Double click on it.

Take a screenshot of this window and post back.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby Hiwatt » January 2nd, 2008, 12:54 pm

Can you tell me how to post the screenshot here?I've saved it.It's set to manual and stopped.I tried starting it manually but it wont start.Thanks.
Hiwatt
Regular Member
 
Posts: 122
Joined: December 16th, 2007, 12:20 pm

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 1:03 pm

The Windows Installer shouldn't start when there are no programs that needs installing. By default, it's set to Manual and it's stopped.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am

Re: Possible infection.Can someone help please.

Unread postby ndmmxiaomayi » January 2nd, 2008, 1:04 pm

Try downloading and installing Windows Installer.

Restart your computer after installing it, then try updating Adobe again.
ndmmxiaomayi
MRU Emeritus
MRU Emeritus
 
Posts: 9708
Joined: July 17th, 2006, 9:22 am
Advertisement
Register to Remove

PreviousNext

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 269 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware