WiredWX Christian Hobby Weather Tools
Would you like to react to this message? Create an account in a few clicks or log in to continue.

WiredWX Christian Hobby Weather ToolsLog in

 


description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Hello.
That didn't work right.

After uploading, it gives you a URL on the page, not the link from your browser address bar.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Sorry, hope this works:

http://rapidshare.com/files/266289492/combofix.txt

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
I screwed the last one up. Let's try again:

http://rapidshare.com/files/266400514/combofix.txt.html

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Hello.

Now open a new notepad file.
Input this into the notepad file:

Rootkit::
c:\windows\system32\drivers\hmaawpjpgy.sys
c:\windows\system32\drivers\str.sys

Registry::
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mjqusdj]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"19721334"=-

Folder::
c:\programdata\19721334

File::
c:\windows\system32\drivers\smss.exe_


Save this as CFScript.txt, save it to your desktop also.
Then drag and drop CFScript.txt into combofix as seen below:
"System Security" headaches - Page 1 Sfxdaw

This will open combofix again, agree to it's terms and allow it to run.
It may want to reboot after it's done. (It will warn you if it wants to)
Post the resulting log back here.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
So far so good. Here's the link:

http://rapidshare.com/files/266688995/combofix.txt.html

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
One major glitch: When I attempted to open Task Manager or Control Panel I get an error message: "Illegal operation attempted on a registry key that has been marked for deletion."

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Could be the malware causing it, not sure yet.
Were gonna need to run another script, but first, lets uninstall a few things.

  • Open HijackThis.
  • When Hijack This opens, click "Open the Misc Tools section"
  • Then select "Open Uninstall Manager"
  • Click on "Save List..." (generates uninstall_list.txt)
  • Click Save, copy and paste the results in your next post.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Here it is:

2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
2007 Microsoft Office Suite Service Pack 1 (SP1)
Activation Assistant for the 2007 Microsoft Office suites
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
Adobe Reader 8.1.0
Adobe Shockwave Player
AIM 6
Alarm Clock v1.0
Apple Mobile Device Support
Apple Software Update
Bonjour
Choice Guard
Compatibility Pack for the 2007 Office system
CyberLink YouCam
DivX Codec
DivX Converter
DivX Player
DivX Plus DirectShow Filters
DivX Web Player
DVD Suite
EA Link
ESU for Microsoft Vista
Fwink
Hauppauge MCE XP/Vista Software Encoder (2.0.25149)
Hewlett-Packard Active Check
Hewlett-Packard Asset Agent for Health Check
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
HP Customer Experience Enhancements
HP Doc Viewer
HP Easy Setup - Frontend
HP Help and Support
HP Photosmart Essential 2.5
HP Quick Launch Buttons 6.30 E1
HP QuickPlay 3.6
HP QuickTouch 1.00 C4
HP Smart Web Printing
HP Total Care Advisor
HP Update
HP User Guides 0087
HP Wireless Assistant
HPNetworkAssistant
Intel®️ Matrix Storage Manager
iTunes
Java(TM) 6 Update 2
LabelPrint
LimeWire 4.18.8
Malwarebytes' Anti-Malware
McAfee VirusScan Enterprise
Microsoft .NET Framework 3.5 SP1
Microsoft .NET Framework 3.5 SP1
Microsoft Office Access MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (English) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office Home and Student 2007
Microsoft Office Home and Student 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office OneNote MUI (English) 2007
Microsoft Office Outlook MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint Viewer 2007 (English)
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Word MUI (English) 2007
Microsoft Visual C++ 2005 Redistributable
Microsoft Works
Motorola SM56 Data Fax Modem
Mozilla Firefox (3.0.11)
MSCU for Microsoft Vista
MSN Webcam Recorder 17.0
MSVCRT
MSXML 4.0 SP2 (KB936181)
MSXML 4.0 SP2 (KB941833)
MSXML 4.0 SP2 (KB954430)
muvee autoProducer 6.1
My HP Games
NVIDIA Drivers
Power2Go
PowerDirector
QuickPlay SlingPlayer 0.4.4
QuickTime
Realtek 8169 PCI, 8168 and 8101E PCIe Ethernet Network Card Driver for Windows Vista
Realtek High Definition Audio Driver
RICOH R5C83x/84x Flash Media Controller Driver Ver.3.51.01
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951550)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB951944)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB969679)
Security Update for 2007 Microsoft Office System (KB969679)
Security Update for Microsoft Office Excel 2007 (KB969682)
Security Update for Microsoft Office Excel 2007 (KB969682)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office OneNote 2007 (KB950130)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office PowerPoint 2007 (KB957789)
Security Update for Microsoft Office Publisher 2007 (KB950114)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB954326)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office system 2007 (KB969613)
Security Update for Microsoft Office Word 2007 (KB969604)
Security Update for Microsoft Office Word 2007 (KB969604)
Security Update for Windows Media Encoder (KB954156)
Slingbox Flash Tour
SlingPlayer
SUPERAntiSpyware Free Edition
Synaptics Pointing Device Driver
The Sims™️ Life Stories
Update for 2007 Microsoft Office System (KB967642)
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Access 2007 Help (KB963663)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Excel 2007 Help (KB963678)
Update for Microsoft Office Infopath 2007 Help (KB963662)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office OneNote 2007 Help (KB963670)
Update for Microsoft Office Outlook 2007 (KB969907)
Update for Microsoft Office Outlook 2007 Help (KB963677)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Powerpoint 2007 Help (KB963669)
Update for Microsoft Office Publisher 2007 Help (KB963667)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Microsoft Office Word 2007 Help (KB963665)
Update for Outlook 2007 Junk Email Filter (kb970012)
VC80CRTRedist - 8.0.50727.762
VideoLAN VLC media player 0.8.6f
Viewpoint Media Player
Vongo
WeatherBug Gadget
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Encoder 9 Series
Windows Media Encoder 9 Series
Windows Media Player Firefox Plugin
WinRAR archiver
Yahoo! Install Manager
Yahoo! Toolbar

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Hello.

  • Click Start >> Control Panel.
  • Under the Programs click Uninstall a Program
  • Highlight the following:

    Java(TM) 6 Update 2
    LimeWire 4.18.8
    Viewpoint Media Player

  • Click on the Uninstall/Change button at the top.

Now open a new notepad file.
Input this into the notepad file:

File::
c:\windows\system32\drivers\hmaawpjpgy.sys

Registry::
[-HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
[HKLM\~\services\sharedaccess\parameters\firewallpolicy]
""=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
""=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\AuthorizedApplications]
""=-
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile\AuthorizedApplications\List]
""=-


Save this as CFscript.txt, save it to your desktop also.
Then drag and drop CFscript.txt into combofix as seen below:
"System Security" headaches - Page 1 Sfxdaw

This will open combofix again, agree to it's terms and allow it to run.
It may want to reboot after it's done. (It will warn you if it wants to)
Post the resulting log back here.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
I can't access the Control Panel.

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
I got it in safe mode, but when I click to uninstall, it tells me: "The Windows Installer Service could not be accessed. This can occur if the Windows Installer is not correctly installed."

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Darn, forgot about that.
Oh well, just run the CFScript for now.

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
I'm working on it now. I may get interrupted, but now is a good time to say thanks for hanging in there and helping me out. I will post back when I get it all together.

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Here's the log:

http://rapidshare.com/files/267483011/combofixlog2.txt.html

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
In a further good news/bad news development, I went back into Control Panel (this time I was able to access it in "regular", not safe, mode. I was then able to uninstall the three programs above without any problem. The bad news is that I am not able to access web pages with either IE or Firefox, even though the network icon in the system tray says the laptop is connected to my home wireless network, with five bars, no less.

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Hello.
The log shows Viewpoint still present, uninstall this too: Viewpoint Media Player

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
I thought I uninstalled it yesterday, and it does not show up in the list of installed programs.

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Please run a full scan with Malwarebytes and post the results back here.

............................................................................................

While my help is always free, please consider donating to keep this site alive: Donate

"System Security" headaches - Page 1 2wg6fte

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Here it is:

Malwarebytes' Anti-Malware 1.40
Database version: 2551
Windows 6.0.6000

8/15/2009 2:44:42 PM
mbam-log-2009-08-15 (14-44-42).txt

Scan type: Quick Scan
Objects scanned: 82837
Time elapsed: 3 minute(s), 48 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Hello.
How is the machine running now?

............................................................................................

Site Admin / Security Administrator

Virus Removal ~ OS Support ~ Have we helped you? Help us! ~ GeekChat
- Please PM me if I fail to respond within 24hrs.
"System Security" headaches - Page 1 DXwU4
"System Security" headaches - Page 1 VvYDg

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
Everything seems to be good, Belahzur. I seem to be able to access everything, and a winsock repair brought the internet back. One last time, I want to thank you for the large amount of attention you devoted to my problem, and especially for solving it. It's people like you who make the web worth coming back to. Thanks for everything.

description"System Security" headaches - Page 1 EmptyRe: "System Security" headaches

more_horiz
privacy_tip Permissions in this forum:
You cannot reply to topics in this forum