i need help with my log!

[PhilliePhan]

oh, i forgot that i had a picture of the virus'es name and where it is. Hopefully this can help you.
Hope to hear from you soon =]

It looks like AVAST! has quarantined that one in the Virus Chest. It should not be running and you can remove it. Are you sure that is the culprit behind the problem?

The baddie in System Restore will be removed when we uninstall ComboFix & flush System Restore.

PP

[Louiex]

Ok, so since the virus is in the chest, it cant do anything right?? should i leave it in the chest or should i delete it?????

what do you mean by flushing the restore system? was i supose to turn it back on or leave it off??? im confused, sorry ahah

[jholland1964]

Louiex, empty the virus chest. Yes you are correct on how to flush restore, be sure to do this. Turn it off, wait a minute and then turn it back on, it will set a new, clean restore point.

[Louiex]

ok, i deleted the virus'es in the chest and flushed my restore system. Anything else i should do?

[jholland1964]

Wait for PP to check everything out but probably not.

[Louiex]

hmm i still have a volume problem and a pop up problem. any suggestions??
oh by the way, you told me to delete limewire, could i reinstall it? or should i find another music source?

[jholland1964]

Limewire is p2p file sharing, not something we recommend usually because how do you know who you are sharing with and where did THEY get it? This is a way a HUGE number of viruses and trojans get sent around the web.
What do the pop ups say? Do you have a pop up blocker and if so, is it enabled?

[PhilliePhan]

hmm i still have a volume problem and a pop up problem. any suggestions??
oh by the way, you told me to delete limewire, could i reinstall it? or should i find another music source?

I agree with Judy - P2P opens you up to all manner of trouble. A number of forums will not even agree to assist you unless you uninstall (or in some cases simply disable) those P2P clients.

What popups are you having? The logs are pretty clean, but I do wonder if something is hiding behind some sort of stealthing technology.


Let's try the following:

-- Scan with Sophos Anti-Rootkit :
http://www.sophos.com/products/free-...i-rootkit.html

-There is an instruction manual on that page for your reference:
http://www.sophos.com/sophos/docs/en.../rk_13_men.pdf

Run the scan, but I think it might be best to hold off on having it clean anything at this point.

Rather, allow the scan to finish completely and then click Start --> Run and then type or copy & paste %TEMP%\sarscan.log in the box and hit Enter.
A log ought to open. Please save it to where you can find it easily and then submit it for me.
-- Do not use your computer while the scan is running.


ALSO:
Please run http://www.eset.com/onlinescan/
-- You will need to temporarily disable your current Antivirus program.
-- Make sure that the option "Remove found threats" is Un-checked, and the option "Scan unwanted applications" is checked.

-- Remember to Re-enable your Resident Anvirisus program after the scan has finished.
-- A logfile ought to be found at C:\\Program Files\\EsetOnlineScanner\\log.txt. Please post that for me.



I am going to be away from the computer for days at a time for the next few weeks and be unable to reply in a timely manner. Please bear with me.

PP

[Louiex]

hmm i did the sophos scan but i couldnt upload the log, it kept saying invalid type... anyways ill just copy/paste what it said:

Sophos Anti-Rootkit Version 1.3.1 (data 1.08) (c) 2006 Sophos Plc
Started logging on 15/03/2008 at 9:40:37 AM
Stopped logging on 15/03/2008 at 9:44:54 AM


Sophos Anti-Rootkit Version 1.3.1 (data 1.08) (c) 2006 Sophos Plc
Started logging on 15/03/2008 at 9:57:06 AM
Stopped logging on 15/03/2008 at 10:00:48 AM

And for the Eset scan,when i was installing it right b4 it would finish, it said update failed(108) so yea, i dont know how to fix that.

hope to hear from you guys soon,
Louie.

[PhilliePhan]

And for the Eset scan,when i was installing it right b4 it would finish, it said update failed(108) so yea, i dont know how to fix that.

How about trying this one --> F-Secure Online Scanner
Note - You’ll need to use Internet Explorer for this scan.

• Click on Online Services and then Online Scanner
• Accept the License Agreement.
• Once the ActiveX installs,Click Full System Scan
• Once the download completes, the scan will begin automatically.
• The scan will take some time to finish, so please be patient.
• When the scan completes, click the Automatic cleaning (recommended) button.
• Click the Show Report button – save and submit that for us.

We must be missing something, but I am not seeing it . . ..

PP