magicsdevil

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:06:13 AM, on 4/25/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\

Latest scan log k_report.txt

Even with the

The computer seems to be running well. No popups. It is slow navigating the net, though. Thanks!

HIJACK LOG Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:54:12 PM, on 4/24/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C

Kaspersky Scan Report KASPERSKY_ONLINE_SCANNER_REPORT.txt

Uninstall_list .sol Editor 1.1.0.1 6000 Sound Effects Adobe Flash Player 9 ActiveX Adobe Flash Player 9 ActiveX Adobe Flash Player ActiveX Adobe Photoshop 7.0 Adobe Reader 8 Adobe Shockwave Player Advanced GIF Animator 2.23 AGEIA PhysX v7.07.24 Armagetron Advanced 0.2.8.2.1.gcc Audio Recorder for FREE v10.2 avast! Antivirus BannedStory Canon CanoScan Toolbox 4.1 Canon i960 Canon Utilities Easy-PhotoPrint Canon Utilities Easy-PhotoPrint Plus Canon Utilities PhotoStitch 3.1 Crashday Crazy Machines Crazy Machines II Demo Delta Force DIG Game Manager Digital Media Converter 2.62 Disney Pirates of

It seems the Avast scan stalled out around 65%.......... but here is the log it produced: 04/23/2008 21:55 Scan of all local drives File C:\Documents and Settings\dcomito\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.13449\[PECompact] is infected by Win32:PurityScan-BA [Trj] Scanning aborted Number of searched folders: 3543 Number of tested files: 37826 Number of infected files: 1 ---------------------------------------- 04/23/2008 22:21 Scan of all local drives File C:\Crazy Zach\Data\MISSION\10\MISSION.LEV\MISSION Error 42129 File C:\Crazy Zach\Data\MISSION\12\MI

HiJack Log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:18:05 PM, on 4/23/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost.exe

New ComboFix Log

The rest of the instructions regarding it remain the same. -Ryan I had already run ComboFix prior to reading this. Should I do it again?

HiJackThis Log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:22:59 PM, on 4/23/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost

Attaching new combo fix combo_log.txt

When I did this: Please go to UploadMalware to upload a suspicious file for analysis. Enter your username from this forum Copy and paste the link to this thread In the first box for files to submit, copy and paste the following: C:\PROGRA~1\COMMON~1\ffki\ffkim.exe In the comments, please mention that I asked you to upload this file Click on Send File I got this back: Your file (ffkim.exe) was 0 bytes and could not be uploaded. Please try disabling any anti-virus software and trying the upload again.Your file () was 0 bytes and could not be uploaded. Please try disabling any anti-virus softwa

Attempting to attach Kaspersky log. kaspersky_1.txt

Interestingly, post #8 and post #9 have shown up blank. However, in both posts I pasted the Kaspersky log text. I do not know why it will not show up! Any ideas?

uninstall_list.txt .sol Editor 1.1.0.1 6000 Sound Effects Adobe Flash Player 9 ActiveX Adobe Flash Player 9 ActiveX Adobe Flash Player ActiveX Adobe Photoshop 7.0 Adobe Reader 8 Adobe Shockwave Player Advanced GIF Animator 2.23 AGEIA PhysX v7.07.24 Armagetron Advanced 0.2.8.2.1.gcc Audio Recorder for FREE v10.2 BannedStory Canon CanoScan Toolbox 4.1 Canon i960 Canon Utilities Easy-PhotoPrint Canon Utilities Easy-PhotoPrint Plus Canon Utilities PhotoStitch 3.1 Crashday Crazy Machines Crazy Machines II Demo Delta Force DIG Game Manager Digital Media Converter 2.62 Disney Pirates of the Caribbean

New HiJackThis Log Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:02, on 2008-04-23 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost

Is this what you want?? < purity > OTMoveIt2 by OldTimer - Version 1.0.4.1 log created on 04222008_203813

NEW HIJACKTHIS LOG Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:17, on 2008-04-22 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16640) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\system32\PnkBstrA.exe C:\WINDOWS\system32\svchost