Probs with Internet Connection...what I've done so far...help pls

[kipfeet]

OK, I assume you're not having any problems other than with iTunes. The scans seem to have fixed some things for you but there could still be some things amiss that we don't know about yet. If your computer starts getting flaky again I suggest posting in the Malware Removal Forum so those folks can dig a little deeper than the two malware-scan programs you ran. If you do end up having to go to that forum, read the Read and Run Me Sticky in that forum and do everything it says before posting your problem.

Other than the iTunes thing I think all else that remained for you to do is sort out the problem with your SD card (copy off what you want and reformat it) and seeing how IE runs now. Regarding the latter run it and see before doing the reinstall mentioned in a previous post as it's possible that the problems running it you had may have been taken care of with the scans you did. If not, uninstall IE and reinstall the latest version of it that your computer will run.

To help keep things from getting out of hand again I suggest you read (meaning Study and Do!) the following
http://forums.majorgeeks.com/showthread.php?t=44525
which has excellent advise for anyone.

A few miscellaneous things to keep in mind:

1) Keep your AV and malware scanners updated. Occasionally those programs will update the program files as well as the definition files. When they alert you that a new program version is available, allow them to install it.

2) Run quick scans with SAS and AMB regularly. if anything is found besides tracking cookies follow up with full scans.

3) When your Trend AV runs out, switch to one of the free ones mentioned in in the above thread. Microsoft Security Essentials may be a good one for you but take your pick.

I think that's about it. Sorry all this took so long, but at least you're better off than you were. All the above can help you keep it that way. If you're proactive in keeping your computer clean that's a lot easier than fixing it after malware breaks it again.

Good luck to you

[jacknscoob]

Hiya

Thanks for all the extra advice, I will keep on top of it as I dont want it all crashing again.

But you're quite correct in not counting your smilies or chickens just yet. The question is, how did IE get the way it is? Some sort of snafu with the program? Or malware that got into it and did something?

Yes wise words. After absolute hours speaking to apple re itunes to a senior person, we went through a very extensive process of elimination, some things I had already done, some new things. After having nearly exhausted them all, he asked me to download a new version of IE (you cannot uninstall IE), there was a problem with this. The outcome with apple was to go to the computer shop and get Windows re-installed.

We deduced that the virus has corupted IE and because itunes works via IE (whether it is your browser or not) that the virus has affected that too.

I am not dragging this post out anymore. I will attempt to download IE again. ITunes is the only thing left that isnt working properly and I can live with that.

However I am attempting to download Firefox as a browser back-up and will just keep doing all my malware scans etc.

[jacknscoob]

I am looking through the Geek link you recommended Kipfeet, is it OK to have both Trend and SAS?

[jacknscoob]

Ummmn I am getting a little worried about the general well being of my computer. I have had the following error messages in the last few days, just tonight,
1. Runtime error! \Jasc Software\Paintshop Pro 8\Paintshop Pro 8.exe Abnormal Program Termination, Paintshop pro has stopped working
2. DVD Flick (authoring tool) - An error occured from cLsLog: Unable to create text file. Last DLL error: 5
3. My desktop icons all disappeared except recycle bin - Catalyst Control Centre : Host application has stopped working
4. I tried to download Firefox, after download it just said 'file corupt'

I am currently trying for a second time to download IE, after that I am going to close everything & run all my full scans & CCleaner, then -
If they are indeed normal cookies, CCleaner should delete them when you run it, so run CCleaner>Run Cleaner and exit, and then, with browser closed, run another quick scan with SAS and see if they're gone.
Using Windows Explorer navigate to the two folders shown in SAS and delete everything in the folders. If the files won't delete, we may have more work to do. Be careful not to delete the folders themselves, just everything in them.

[satrow]

DON'T use any cleaner if you have icons, shortcuts, programs missing - you might lose them completely.

This reads more like a return of some malware infection!

[kipfeet]

Hello, again, jacknscoob...you just can't stay away from MG, can you?

Bummer to hear about continued problems, though.

To answer your question, there's no problem using Trend AV with SAS. SAS is a scanner, not an AV.

To continue from that, see the first paragraph of my post 41 and hie thee to the Malware-Removal Forum without delay. Be patient as they're always busy over there. They are truly wizards, though. Besides, your computer may not be as bad as it appears; with any luck the Read and Run Me will cure most if not all of your ills and all you'll have to do is get the wizards to confirm whether or not you are clean. Let's just hope it isn't one of the real bad rootkit viruses that is going around. We'll see. Let us know how it turns out. And no need to panic or despair just yet...there's plenty of time to do those later

[sikvik]

Yes as satrow said, leave any temp cleaning app alone. The infection has changed the attributes of these files that are missing to hidden +(H). Variants of some infection(s) dump these file to a Temp folder.
You really need to work through the Read & Run and attach the requested logs in
Malware Removal.

Cheers..

[jacknscoob]

Hi Guys

I am carefully going thru the READ & RUN.

I am stuck at Step 7: Windows OS Specific Cleaning Instructions
'Downloading tools'.

SAS is already downloaded on my system, however I have gone to download the latest updates and it says 'Checking for Definition Updates - Failed' and Definitions Update Error Failed'.

Should I uninstall and reinstall?

Re: ComboFix, I have clicked on the download icon several times and it wont download, I have tried the 'Geeks, click here if it doesnt download', it just opens the page 'How to use ComboFix', I am not sure what to do next.

Also, whilst I am awaiting a reply (I know you guys are busy busy) and later I wish to check my emails etc should 'Defrogger' be enabled or disabled?

Should I move this post / repost to Malware-Removal Forum? (Ah I know Kipfeet will miss me, lol)

Hope to hear from you x

[satrow]

SAS has definition updates available here, try to install them and then see if SAS will scan.

Try downloading Combofix from the link again, it's updated very frequently so there's always a chance someone can't reach it for a short time when the files are being changed on the server.

DeFogger should in no way impact on your ability to check your emails, it's wise to limit your online activities while you may be infected though.

It's best to create a new thread in Malware as soon as you have the necessary logs, or all the logs you can get. Make notes of anything unusual, errors etc. and add those comments to your new thread.

[kipfeet]

Hello, again,

Have you been able to download SAS definitions and ComboFix yet? If not, can you get on the 'net at all now (may be that the bugger has crippled your internet, too)? If you can no longer get on the 'net, do as much as you can and get as far as you can with the Read and Run sticky (taking notes, as suggested) and make your post in the Malware-Removal Forum. The wizards will fix you up. Hang in there and be patient as those folks are busy

PS Suggest making all your work from now until fixed with hard-wired connection instead of wireless, just to eliminate as many variables as possible.

[jacknscoob]

Hiya

I have downloaded SAS and Combo Fix now, phew

When I download something there appears no option to choose where it is saved. IS is OK, after it has downloaded to 'cut' n 'paste' the downloaded file to my desktop?

Once I have all my results I'll start a freshie on the Malware-Removal Forum

[satrow]

Sure, cut and paste the downloaded files to wherever the Read & Run/Windows version says they must be run from, not all are run from the Desktop.

[kipfeet]

Good show on SAS and ComboFix downloads. That helps.

One other suggestion, if you will: When we were trying to sort your initial problem I was encouraging you to run scans with SAS and AntiMalware, BUT once you've run the scans requested by the Read and Run Me and posted those to the Malware-Removal Forum then it's best not run any more scans unless directed to do so by the wizards in that forum.

In fact, unless absolutely necessary for some obscure reason don't run anything at all other than what the MR Forum wizards request. It's best to submit the logs that they request at each stage and then wait for further instructions. I see over there people complicating things by continuing to try fixing things themselves, but usually all that does is make moving targets for the wizards. You'll be in good hands, so don't make it more difficult than necessary. Hope this helps a bit

[jacknscoob]

Originally Posted by kipfeet

One other suggestion, if you will: When we were trying to sort your initial problem I was encouraging you to run scans with SAS and AntiMalware, BUT once you've run the scans requested by the Read and Run Me and posted those to the Malware-Removal Forum then it's best not run any more scans unless directed to do so by the wizards in that forum.

In fact, unless absolutely necessary for some obscure reason don't run anything at all other than what the MR Forum wizards request. It's best to submit the logs that they request at each stage and then wait for further instructions. I see over there people complicating things by continuing to try fixing things themselves, but usually all that does is make moving targets for the wizards. You'll be in good hands, so don't make it more difficult than necessary. Hope this helps a bit

The above was not wasted on me. THANKYOU for the reminder

I have started a new thread in the Malware-Removal Forum

[Colemanguy]

One thing that might be a route to go down after the malware is to see if your actual internet connection itself is having issues, or a router issue. Just a thought to visit when the malware visit is done.

[kipfeet]

Me again.

I'm guessing that TimW may not have time to delve through this thread to try to get clues to your problems. I suggest you copy the first 4 points of your post #44 here to your next post there. And also explain that the first SAS log you ran was inadvertently lost, but that a lot of threats were found. If you can remember any details of that log, pass those on to him, such as whether they were memory threats, file threats, registry threats, etc.

Also, attach for his info the earliest scan you did of AMB (I think mbam-log-2012-02-22 (22-36-48 LOG FULL 22 Feb.txt is the one?). That shows that you had some malware originally. Might be useful to tell him that it was run after the initial SAS scan (if that's true).

Tell him that your first scans with SAS and AMB seemed to have gotten your internet back, but you think they didn't catch everything (as evidenced by the 4 items in your post #44 here) and that's why you were advised to seek help in Malware Removal.

More or less the above or something to those effects, in your own words. That might give him some clues about where to look for additional problems

[jacknscoob]

Kipfeet

I did as you suggested below in your last post.

FYI re my iTunes problems. It was all running fine for about 3 days, then suddenly it stopped. Nothing much else had changed on my computer, so I was a bit miffed. However, the timing corresponds exactly to the time my internet 'shaped' ie slows because we have gone over our monthly internet GB limit. Also, this sits well with the fact that it suddenly started working and I couldnt tell why, anyhow just thought I'd let you know.

This problem-solving dilema reminds me of when I had an extremely long thread disecting problems with pixilation after burning DVDs from Utube. It turned out it was the DVD player, doh

Yes our internet allowance is 2GBs and lasts about 3 days til it is shaped , we are tied in til July. Hopefully after thou we can increase it.

[kipfeet]

Hmmm...well, the internet-limit thing might explain some things, eh?

Yeah, it did drag out some, but we both learned some things. And it was not all for naught because you did find some malware on your computer and you learned a few things about keeping the computer clean. Hopefully TimW won't find anything else and you can go on your merry way. TimW will point you to another MG resource when he thinks you're good to go. Read and act on that and you'll be more secure still.

And by all means, get that internet allowance increased: 2GB isn't much these days.

Thanks for letting us know, and good luck to you.