http://www.helpmyos.com/malware-threat-removal-f6/-t1.htm A forum dedicated in removing spyware, viruses, and other malware. Sat, 04 Sep 2010 03:13:17 GMT 10 http://i45.tinypic.com/28a5cmc.jpg http://www.helpmyos.com/malware-threat-removal-f6/-t1.htm http://www.helpmyos.com/malware-threat-removal-f6/malware-problems-and-internet-redirecting-t2043.htm blink711
thansk for your help.]]> Malware/Threat Removal Fri, 09 Jul 2010 21:47:29 GMT http://www.helpmyos.com/malware-threat-removal-f6/malware-problems-and-internet-redirecting-t2043.htm#6168 http://www.helpmyos.com/malware-threat-removal-f6/malware-problems-and-internet-redirecting-t2043.htm http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t2026.htm cielito Hi! My laptop was infected with this BDS small.iuj a long time ago, as detected by the free version of Avira. Unaware of things, I chose the "remove this file" option and everything went abnormal ie. no start buttons and desktop icons only wallpaper. I already reformatted my os and installed several anti-virus software to no avail. I badly need your help in solving this problem since my work is highly dependent on a working and virus-free laptop. Having this is really a hassle. Appreciate ... Malware/Threat Removal Tue, 29 Jun 2010 08:31:59 GMT http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t2026.htm#6072 http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t2026.htm http://www.helpmyos.com/malware-threat-removal-f6/fatal-system-error-antimalware-doctor-t2216.htm birddog2001 Hi, I have a crazy virus called anti "malware doctor". So I ran avg free to try to get rid of it. But when it said to restart my computer, it wouldnt restart so I just unplugged it. When I turned it back on, it has a blue screen and says: STOP: c000021a {Fatal System Error} The windows logon process system process terminated unexpectedly with a st f 0xc0000034 (0x00000000 0x00000000). The system has been shut down. I even pressed F8 on boot up and started in safe mode, but it goes ... Malware/Threat Removal Sat, 04 Sep 2010 03:13:17 GMT http://www.helpmyos.com/malware-threat-removal-f6/fatal-system-error-antimalware-doctor-t2216.htm#7016 http://www.helpmyos.com/malware-threat-removal-f6/fatal-system-error-antimalware-doctor-t2216.htm http://www.helpmyos.com/malware-threat-removal-f6/tell-me-whether-i-have-a-virus-malware-rootkit-t2209.htm nsrajesh Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:53:50 PM, on 8/30/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\Program Files\Avira\AntiVir Desktop\avguard.exe C:\Program Files\Avira\AntiVir Desktop\avshadow.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program ... Malware/Threat Removal Mon, 30 Aug 2010 11:41:37 GMT http://www.helpmyos.com/malware-threat-removal-f6/tell-me-whether-i-have-a-virus-malware-rootkit-t2209.htm#6984 http://www.helpmyos.com/malware-threat-removal-f6/tell-me-whether-i-have-a-virus-malware-rootkit-t2209.htm http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2156.htm iamjam15 Hi! My Avira (free version) seems to be detecting a BDS\small.iuj malware in my explorer.exe. I chose the "remove this file" option and it deleted my explorer.exe. I reformatted my pc but when I installed Avira, it detected this malware again. This time, i chose to ignore it and searched the net for some solutions to remove this. I stumbled upon your site and downloaded the System Look, gave it a run and got this log. SystemLook v1.0 by jpshortstuff (11.01.10) Log created at 23:01 ... Malware/Threat Removal Sat, 14 Aug 2010 15:43:23 GMT http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2156.htm#6832 http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2156.htm http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2155.htm janghag hi, i reformat my pc because when i upgrade from sp2 to sp3 it doesn't work... and now back to zero, and my explorer.exe was infected again with bds\small.iuj...T_T Malware/Threat Removal Sat, 14 Aug 2010 04:17:00 GMT http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2155.htm#6818 http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2155.htm http://www.helpmyos.com/malware-threat-removal-f6/can-someone-check-this-outinvited-by-the-amp-t2006.htm Scheffing Scan saved at 2:34:14 PM, on 6/15/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\AVG\AVG9\avgchsvx.exe C:\Program ... Malware/Threat Removal Fri, 18 Jun 2010 21:29:53 GMT http://www.helpmyos.com/malware-threat-removal-f6/can-someone-check-this-outinvited-by-the-amp-t2006.htm#5993 http://www.helpmyos.com/malware-threat-removal-f6/can-someone-check-this-outinvited-by-the-amp-t2006.htm http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2136.htm janghag hi, i have a problem regarding the malware bds\small.iuj... my anti virus is avira, and it keep giving me warnings about my explorer.exe... Malware/Threat Removal Sun, 08 Aug 2010 04:55:27 GMT http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2136.htm#6712 http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t2136.htm http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t1864.htm james.salazar2010 *REMOVED*

thanks in advance...]]> Malware/Threat Removal Fri, 12 Mar 2010 16:38:54 GMT http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t1864.htm#5198 http://www.helpmyos.com/malware-threat-removal-f6/bdssmalliuj-t1864.htm http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t1820.htm sabs Hi there. Yes, I've got the BDS/Small.iuj thing going on here. I've read some of the topics here regarding this and I believe it's not that simple to get rid of. I got infected two weeks ago, it erased my explorer.exe. I was was able to perform a system restore. After system restore, I uninstalled Avira and proceeded to DL Malwarebytes, ran a full scan and showed up nothing. I then got ComboFix and also ran a full scan. After running the full scan, I reinstalled Avira just to see if it'll ... Malware/Threat Removal Mon, 01 Mar 2010 11:03:43 GMT http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t1820.htm#4880 http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t1820.htm http://www.helpmyos.com/malware-threat-removal-f6/no-idea-what-to-do-next-t2127.htm secondbest21 i've ran into pretty some pretty nasty viruses in my day that i was eventually able to remove but this one has me stumped. i am at the point where i was going to just reformat this guy's laptop, but either it will give me a stop 0x0000007b blue screen at the end of the boot cd loading it's files telling me to check for viruses (and after a few seconds will shut down), or shut down right before or while the boot cd is trying to load it's files. i'm not being shut off from logging on to the computer, ... Malware/Threat Removal Thu, 29 Jul 2010 00:45:16 GMT http://www.helpmyos.com/malware-threat-removal-f6/no-idea-what-to-do-next-t2127.htm#6604 http://www.helpmyos.com/malware-threat-removal-f6/no-idea-what-to-do-next-t2127.htm http://www.helpmyos.com/malware-threat-removal-f6/eat-space-t2054.htm grinlif17 Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:40:58, on 12/07/2010 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v8.00 (8.00.6001.18928) Boot mode: Normal Running processes: C:\Windows\System32\smss.exe C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\system32\SLsvc.exe C:\Windows\system32\svchost.exe C:\Windows\system32\svchost.exe C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program ... Malware/Threat Removal Mon, 12 Jul 2010 13:52:56 GMT http://www.helpmyos.com/malware-threat-removal-f6/eat-space-t2054.htm#6213 http://www.helpmyos.com/malware-threat-removal-f6/eat-space-t2054.htm http://www.helpmyos.com/malware-threat-removal-f6/internet-search-redirecting-t2035.htm blink711 I have been having problems with my computer, where when searching on the internet through google, or yahoo, or other search engines, when i first click on a link in the search it redirects me to some random site, unrelated to what i was looking for. i cant click the back button, bercause all it does is reload the bogus page. but if i click on the drop down arror next to the foward and back button, and go back to the original search and then click on the link again, it takes me to the site. I ... Malware/Threat Removal Sun, 04 Jul 2010 16:12:59 GMT http://www.helpmyos.com/malware-threat-removal-f6/internet-search-redirecting-t2035.htm#6097 http://www.helpmyos.com/malware-threat-removal-f6/internet-search-redirecting-t2035.htm http://www.helpmyos.com/malware-threat-removal-f6/internet-redirection-google-results-t2037.htm Hidden Snake hi. i'm new here. i was looking over this thread: http://www.helpmyos.com/malware-threat-removal-f6/internet-search-redirecting-t2035.htm this virus keeps redirectgin my search results. so, not sure what to do. but i have run dds. DDS (Ver_10-03-17.01) - NTFSx86 Run by snakes at 10:53:05.81 on Mon 07/05/2010 Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_20 Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.2047.1457 [GMT -6] AV: AVG Anti-Virus Free *On-access ... Malware/Threat Removal Tue, 06 Jul 2010 07:05:46 GMT http://www.helpmyos.com/malware-threat-removal-f6/internet-redirection-google-results-t2037.htm#6119 http://www.helpmyos.com/malware-threat-removal-f6/internet-redirection-google-results-t2037.htm http://www.helpmyos.com/malware-threat-removal-f6/trouble-please-help-t2030.htm emerald_green07 Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 13:53:12, on 01/07/2010 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\WgaTray.exe C:\Program ... Malware/Threat Removal Thu, 01 Jul 2010 06:13:10 GMT http://www.helpmyos.com/malware-threat-removal-f6/trouble-please-help-t2030.htm#6083 http://www.helpmyos.com/malware-threat-removal-f6/trouble-please-help-t2030.htm http://www.helpmyos.com/malware-threat-removal-f6/hiya-i-d-like-some-help-t2008.htm ibae So I followed the directions on the "Read before posting your log" thread and so here are my log files, first the MBAM log, and then the MySystem-Search (MSS) log. It would be of my best interest to leave reinstalling Windows Vista, for I have a good amount of important files that I'd like to keep. Thanks in advance for your help! Let me know if you guys need anything more. Malwarebytes' Anti-Malware 1.46 www.malwarebytes.org Database version: 4217 Windows 6.0.6002 Service ... Malware/Threat Removal Sun, 20 Jun 2010 05:43:40 GMT http://www.helpmyos.com/malware-threat-removal-f6/hiya-i-d-like-some-help-t2008.htm#6002 http://www.helpmyos.com/malware-threat-removal-f6/hiya-i-d-like-some-help-t2008.htm http://www.helpmyos.com/malware-threat-removal-f6/first-thank-s-for-your-help-here-is-my-problem-t2014.htm L.LAWLIET I followed the directions on the "Read before posting your log" thread and so here are my log files. - Backup Registry with ERUNT = Done - TFC by OldTimer = Done -Update Malwarebytes' Anti-Malware and Launch Malwarebytes Anti-Malware and Scan Complete , here is the log file : dl.free.fr vnG2Da6dm - MSS Log File : dl.free.fr r9cwdSkdM the log was too long so i have upload it thank you very much for your help , you do a great job guys Malware/Threat Removal Tue, 22 Jun 2010 23:41:21 GMT http://www.helpmyos.com/malware-threat-removal-f6/first-thank-s-for-your-help-here-is-my-problem-t2014.htm#6038 http://www.helpmyos.com/malware-threat-removal-f6/first-thank-s-for-your-help-here-is-my-problem-t2014.htm http://www.helpmyos.com/malware-threat-removal-f6/please-help-me-t2009.htm vagabond74 could you help me? my logfile: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:40:02, on 2010.06.20. Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast5\AvastSvc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\igfxtray.exe C:\WINDOWS\system32\hkcmd.exe C:\WINDOWS\AGRSMMSG.exe C:\Program ... Malware/Threat Removal Sun, 20 Jun 2010 22:18:50 GMT http://www.helpmyos.com/malware-threat-removal-f6/please-help-me-t2009.htm#6013 http://www.helpmyos.com/malware-threat-removal-f6/please-help-me-t2009.htm http://www.helpmyos.com/malware-threat-removal-f6/help-t1952.htm joh turner Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 16:01:14, on 18/05/2010 Platform: Windows Vista SP2 (WinNT 6.00.1906) MSIE: Internet Explorer v8.00 (8.00.6001.18904) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Windows\system32\taskeng.exe C:\Windows\System32\igfxtray.exe C:\Windows\System32\hkcmd.exe C:\Windows\System32\igfxpers.exe C:\Program Files\NewTech Infosystems\NTI Backup Now 5\BkupTray.exe c:\Program Files\Common Files\Symantec ... Malware/Threat Removal Wed, 19 May 2010 14:07:39 GMT http://www.helpmyos.com/malware-threat-removal-f6/help-t1952.htm#5777 http://www.helpmyos.com/malware-threat-removal-f6/help-t1952.htm http://www.helpmyos.com/malware-threat-removal-f6/sure-i-have-a-virus-t1955.htm luke sutton hello i just got givin a laptop by by girlfreinds sister as she got a new 1 and when i turned it on o noticed it was really slow and that she had no anti-virus or nothing like that so i was hopeing u cud help me check to see if there where any infections on the pc because i just dont know where to start thank you Malware/Threat Removal Fri, 28 May 2010 05:59:19 GMT http://www.helpmyos.com/malware-threat-removal-f6/sure-i-have-a-virus-t1955.htm#5858 http://www.helpmyos.com/malware-threat-removal-f6/sure-i-have-a-virus-t1955.htm http://www.helpmyos.com/malware-threat-removal-f6/check-t1951.htm LFc4
I have Microsoft security essesntials and it wont let me update it, I keep the getting 'x80072efe' error code, I've done some research to resolve the problem but I was unable to resolve the problem.

Recently I had some viruses and managed to remove them but one of them kept coming back so I did a system restore.

Thanks]]> Malware/Threat Removal Sat, 15 May 2010 12:54:43 GMT http://www.helpmyos.com/malware-threat-removal-f6/check-t1951.htm#5760 http://www.helpmyos.com/malware-threat-removal-f6/check-t1951.htm http://www.helpmyos.com/malware-threat-removal-f6/rootrepeal-t1953.htm fhanshew I have followed your instructions and installed everything you recommended from your discussion with James. I am at rootrepeal and have performed a scan and am uncertain what to do from here. The info you gave me removed a lot of malware but an error message for WIN32 Bad Image keeps appearing for everything I open. Will you help me please?]]> Malware/Threat Removal Sun, 23 May 2010 11:02:55 GMT http://www.helpmyos.com/malware-threat-removal-f6/rootrepeal-t1953.htm#5811 http://www.helpmyos.com/malware-threat-removal-f6/rootrepeal-t1953.htm http://www.helpmyos.com/malware-threat-removal-f6/how-can-i-remove-myfastwebsearch-from-my-homepage-t1954.htm DJTrevG How do I stop my internet explorer home page from changing to www.myfastwebsearch.com every time I restart my computer. Below is a log file from Hijackthis: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:39:16 PM, on 24/05/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program ... Malware/Threat Removal Mon, 24 May 2010 09:43:19 GMT http://www.helpmyos.com/malware-threat-removal-f6/how-can-i-remove-myfastwebsearch-from-my-homepage-t1954.htm#5820 http://www.helpmyos.com/malware-threat-removal-f6/how-can-i-remove-myfastwebsearch-from-my-homepage-t1954.htm http://www.helpmyos.com/malware-threat-removal-f6/possible-trojan-t1950.htm kalomar after yesterday my default browser (firefox) starts up by itself, even if i i close it in the task manager 1 min after it just pops back up, sometimes its crashes juts to start back up. im thinking its might be my own fault, kinda clicked an .exe file i got sent from a friend might teach me a lesson, dont play with your laptop after a night out anyways here is my HT log, hope sombody can help me out Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 4:16:53 AM, on 5/14/2010 Platform: ... Malware/Threat Removal Fri, 14 May 2010 11:26:47 GMT http://www.helpmyos.com/malware-threat-removal-f6/possible-trojan-t1950.htm#5758 http://www.helpmyos.com/malware-threat-removal-f6/possible-trojan-t1950.htm http://www.helpmyos.com/malware-threat-removal-f6/hijackthis-log-to-be-reviewed-by-an-expert-t1942.htm mk1959 Would appreciate it if someone could look at this log and advise. Thanks Mark K Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 5:08:02 PM, on 5/9/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\ZoneLabs\vsmon.exe C:\WINDOWS\Explorer.EXE C:\Program ... Malware/Threat Removal Mon, 10 May 2010 01:01:26 GMT http://www.helpmyos.com/malware-threat-removal-f6/hijackthis-log-to-be-reviewed-by-an-expert-t1942.htm#5749 http://www.helpmyos.com/malware-threat-removal-f6/hijackthis-log-to-be-reviewed-by-an-expert-t1942.htm http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-win32smallive-removal-t1834.htm isabellaneedshelp My computer is running on Win Xp... recently I got infected with BDS/Small.iuj trojan.... I reinstalled my OS and installed Kaspersky Internet Security 2010.... then something like a win32.small.ive was also detected..... I did the same process again but this time I did not install Kaspersky... I tried using combo fix, after that I installed Kaspersky again and the virus was back again..... need help please.... Malware/Threat Removal Fri, 05 Mar 2010 02:56:09 GMT http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-win32smallive-removal-t1834.htm#4978 http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-win32smallive-removal-t1834.htm http://www.helpmyos.com/malware-threat-removal-f6/helpassistant-t1941.htm mpower76 HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList DefaultUserProfile REG_SZ Default User AllUsersProfile REG_SZ All Users HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18 ProfileImagePath REG_EXPAND_SZ %systemroot%\system32\config\systemprofile HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19 ProfileImagePath REG_EXPAND_SZ %SystemDrive%\Documents and Settings\LocalService HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows ... Malware/Threat Removal Fri, 07 May 2010 07:38:19 GMT http://www.helpmyos.com/malware-threat-removal-f6/helpassistant-t1941.htm#5746 http://www.helpmyos.com/malware-threat-removal-f6/helpassistant-t1941.htm http://www.helpmyos.com/malware-threat-removal-f6/application-can-not-be-executed-the-file-is-infected-t1940.htm slimy
Can anyone help?]]> Malware/Threat Removal Thu, 06 May 2010 03:49:04 GMT http://www.helpmyos.com/malware-threat-removal-f6/application-can-not-be-executed-the-file-is-infected-t1940.htm#5744 http://www.helpmyos.com/malware-threat-removal-f6/application-can-not-be-executed-the-file-is-infected-t1940.htm http://www.helpmyos.com/malware-threat-removal-f6/google-image-redirect-to-searchmagnified-t1936.htm H5N1Duck Help, I have some sort of redirect malware/virus! If i click on an image from google images then my browser shows the target page briefly before redirecting me to a page that starts www.searchmagnified.com but the title on the page is Gilane.net. I have tried a few things but it still remains. I can't find anything to give the solution. Only partly finished investigations. I have no problems to visit antispyware sites. Symantec doesn't spot it and malwarebytes hasn't managed to remove ... Malware/Threat Removal Thu, 29 Apr 2010 13:35:44 GMT http://www.helpmyos.com/malware-threat-removal-f6/google-image-redirect-to-searchmagnified-t1936.htm#5716 http://www.helpmyos.com/malware-threat-removal-f6/google-image-redirect-to-searchmagnified-t1936.htm http://www.helpmyos.com/malware-threat-removal-f6/antivirus-software-alert-t1938.htm Darklad I recently was infected by this "Antivirus software alert" that basically imitates an Antivirus program and opens loads of pop up windows and also blocks every program I try to open and says the program is "infected".
So what can I do ?

Thanx for your help,

Darklad]]> Malware/Threat Removal Sat, 01 May 2010 14:31:04 GMT http://www.helpmyos.com/malware-threat-removal-f6/antivirus-software-alert-t1938.htm#5732 http://www.helpmyos.com/malware-threat-removal-f6/antivirus-software-alert-t1938.htm http://www.helpmyos.com/malware-threat-removal-f6/bds-small-t1935.htm AlexanderAndro ComboFix 10-04-26.05 - Alexander 04/28/2010 9:00.1.2 - x86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1023.665 [GMT 1:00] Running from: c:\documents and settings\Alexander\Desktop\ComboFix.exe Command switches used :: c:\documents and settings\Alexander\Desktop\CFScript.txt.txt AV: AntiVir Desktop *On-access scanning disabled* (Outdated) {AD166499-45F9-482A-A743-FDD3350758C7} . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\desktop.ini . ((((((((((((((((((((((((( ... Malware/Threat Removal Wed, 28 Apr 2010 08:08:59 GMT http://www.helpmyos.com/malware-threat-removal-f6/bds-small-t1935.htm#5714 http://www.helpmyos.com/malware-threat-removal-f6/bds-small-t1935.htm http://www.helpmyos.com/malware-threat-removal-f6/microsoft-office-error-t1934.htm sandman i posted in the other forum. but then again i dont know if i have malware. so can we check that too???? Malware/Threat Removal Fri, 23 Apr 2010 19:34:03 GMT http://www.helpmyos.com/malware-threat-removal-f6/microsoft-office-error-t1934.htm#5708 http://www.helpmyos.com/malware-threat-removal-f6/microsoft-office-error-t1934.htm http://www.helpmyos.com/malware-threat-removal-f6/i-got-a-virus-t1933.htm wordlifecena

can you tell me what to do.

L8R]]> Malware/Threat Removal Fri, 23 Apr 2010 19:29:28 GMT http://www.helpmyos.com/malware-threat-removal-f6/i-got-a-virus-t1933.htm#5705 http://www.helpmyos.com/malware-threat-removal-f6/i-got-a-virus-t1933.htm http://www.helpmyos.com/malware-threat-removal-f6/norton-detects-packedgeneric-t1932.htm watthehell
it is called packed.generic. i have no idea what to do about it, but it is so annoying and will not go away. omg

what steps do i take first? how do i get rid of this ridicullous virus?]]> Malware/Threat Removal Fri, 23 Apr 2010 19:26:12 GMT http://www.helpmyos.com/malware-threat-removal-f6/norton-detects-packedgeneric-t1932.htm#5704 http://www.helpmyos.com/malware-threat-removal-f6/norton-detects-packedgeneric-t1932.htm http://www.helpmyos.com/malware-threat-removal-f6/backdoortidserv-gave-a-blue-screen-on-removal-t1931.htm blazing_wildfire
anyways, i read about how it can give blue screens. so it happened to me, and i cant remove this infection.

i tried tdsskiller, but that did not work, as the infection continually got detected in atapi.sys.]]> Malware/Threat Removal Fri, 23 Apr 2010 19:21:41 GMT http://www.helpmyos.com/malware-threat-removal-f6/backdoortidserv-gave-a-blue-screen-on-removal-t1931.htm#5701 http://www.helpmyos.com/malware-threat-removal-f6/backdoortidserv-gave-a-blue-screen-on-removal-t1931.htm http://www.helpmyos.com/malware-threat-removal-f6/malware-threats-from-hijack-this-t1926.htm echeek Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:37:19 PM, on 4/17/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\Ati2evxx.exe C:\Program ... Malware/Threat Removal Sat, 17 Apr 2010 23:41:38 GMT http://www.helpmyos.com/malware-threat-removal-f6/malware-threats-from-hijack-this-t1926.htm#5674 http://www.helpmyos.com/malware-threat-removal-f6/malware-threats-from-hijack-this-t1926.htm http://www.helpmyos.com/malware-threat-removal-f6/packeddelfcrypt-t1930.htm bobbyb Can you help me get rid of this? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 9:23:56 AM, on 4/20/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\iS3\Anti-Spyware\SZServer.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program ... Malware/Threat Removal Tue, 20 Apr 2010 14:33:21 GMT http://www.helpmyos.com/malware-threat-removal-f6/packeddelfcrypt-t1930.htm#5689 http://www.helpmyos.com/malware-threat-removal-f6/packeddelfcrypt-t1930.htm http://www.helpmyos.com/malware-threat-removal-f6/w32-ridnu-being-detected-in-the-c-location-t1927.htm doggy
I found these weird files on the C:\ location:
c:\autorun.scr
c:\contacts..scr
c:\explorer.exe
c:\mr_cf\mr_cf.exe
c:\mr_coolface.scr
c:\mutant.scr

I am using Norton, which didn't block the threat but detected it.]]> Malware/Threat Removal Tue, 20 Apr 2010 00:34:03 GMT http://www.helpmyos.com/malware-threat-removal-f6/w32-ridnu-being-detected-in-the-c-location-t1927.htm#5684 http://www.helpmyos.com/malware-threat-removal-f6/w32-ridnu-being-detected-in-the-c-location-t1927.htm http://www.helpmyos.com/malware-threat-removal-f6/logfile-of-trend-micro-hijackthis-t1921.htm linksedge Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 02:59:28, on 08/04/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\System32\rundll32.exe C:\Program Files\AVG\AVG9\avgtray.exe C:\Windows\vVX3000.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Java\jre6\bin\jusched.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program ... Malware/Threat Removal Thu, 08 Apr 2010 02:03:48 GMT http://www.helpmyos.com/malware-threat-removal-f6/logfile-of-trend-micro-hijackthis-t1921.htm#5571 http://www.helpmyos.com/malware-threat-removal-f6/logfile-of-trend-micro-hijackthis-t1921.htm http://www.helpmyos.com/malware-threat-removal-f6/malwarebytes-log-in-your-first-post-t1923.htm RockNRollStrega The below log showed 101 threats: a combination of worms, trojans & packed.delfcrypts (sort of like Dorothy in the Wizard of Oz...lions, and tigers and bears, oh my!) I ran "AVG" antivirus and it still shows 1 packed.delfcrypt virus found. Should I just wipe my computer and reload my OS? Here's the log... Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Database version: 3967 Windows 5.1.2600 Service Pack 3 Internet Explorer 8.0.6001.18702 4/7/2010 11:09:56 PM mbam-log-2010-04-07 ... Malware/Threat Removal Thu, 08 Apr 2010 04:22:10 GMT http://www.helpmyos.com/malware-threat-removal-f6/malwarebytes-log-in-your-first-post-t1923.htm#5576 http://www.helpmyos.com/malware-threat-removal-f6/malwarebytes-log-in-your-first-post-t1923.htm http://www.helpmyos.com/malware-threat-removal-f6/another-tdss-sufferer-t1924.htm jorgk3 My system is also infected by the TDSS rootkit. I tried both the Kaspersky and Norman removers. Both detected the rootkit and promised to remove it upon reboot, but after a reboot, it was still there. Perhaps it's a new more resistant variant. In my case it infects atapi.sys, but restoring this file using the "System Recovery Console" from know clean source doesn't help, since as far as I understand how the rootkit works, it just reinfects the same file over and over. Malware/Threat Removal Fri, 09 Apr 2010 07:55:10 GMT http://www.helpmyos.com/malware-threat-removal-f6/another-tdss-sufferer-t1924.htm#5598 http://www.helpmyos.com/malware-threat-removal-f6/another-tdss-sufferer-t1924.htm http://www.helpmyos.com/malware-threat-removal-f6/help-hijackthis-log-t1925.htm karenina044 Looking for a knight to assist in deciphering my HijackThis log. I have ran MalwareBytes, AVG and a few others to no avail. Help? Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 1:45:30 PM, on 4/13/2010 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\crypserv.exe C:\Program ... Malware/Threat Removal Tue, 13 Apr 2010 21:17:22 GMT http://www.helpmyos.com/malware-threat-removal-f6/help-hijackthis-log-t1925.htm#5662 http://www.helpmyos.com/malware-threat-removal-f6/help-hijackthis-log-t1925.htm http://www.helpmyos.com/malware-threat-removal-f6/tdss-removal-failed-t1920.htm whatever I am getting constantly website redirections to spam-sites in Firefox latest version on XP SP3. Several AV-Programm and various Anti-Malware software did not found anything.
I just checked tdsskiller and it says that iAstor.sys is infected with tdss rootkit, but is not able to remove it. I think about starting a linux live-cd and try to replace iAStor.sys with a clean version. Would that help? Do you have any other suggestions?
Thanks.
whatever]]> Malware/Threat Removal Wed, 07 Apr 2010 10:11:07 GMT http://www.helpmyos.com/malware-threat-removal-f6/tdss-removal-failed-t1920.htm#5557 http://www.helpmyos.com/malware-threat-removal-f6/tdss-removal-failed-t1920.htm http://www.helpmyos.com/malware-threat-removal-f6/hijackdisplay-found-in-malware-bytes-scan-t1922.htm Labyrinthsgirl Can anyone tell me what this is.....i recently had my WOW account hacked twice in less than 2 hours, even after changing all my information, so Blizzard told me i needed to check my pc for malware or a keylogger. Ive ran nortons and only came up with low level risk tracking cookies but I downloaded malwarebytes tonight and found this....can anyone tell me if this was the culprit or what this is ? thank you! Malwarebytes' Anti-Malware 1.45 www.malwarebytes.org Database version: 3967 Windows ... Malware/Threat Removal Thu, 08 Apr 2010 04:12:07 GMT http://www.helpmyos.com/malware-threat-removal-f6/hijackdisplay-found-in-malware-bytes-scan-t1922.htm#5575 http://www.helpmyos.com/malware-threat-removal-f6/hijackdisplay-found-in-malware-bytes-scan-t1922.htm http://www.helpmyos.com/malware-threat-removal-f6/laptop-start-error-t1790.htm LFc4 Hello, I'm hoping you can help me with my problem on my laptop. Laptop info: IBM ThinkPad Running on windows xp -cant remember that other details such as memory; sorry but if required please ask and ill see what i can find ANY OTHER REQUIRED INFO PLEASE ASK The problem is that I start the laptop and it directs me to a blue screen (even in safe mode). The screen displays text saying there has been a problem detected ........and so on...... but if that info is required please ask ... Malware/Threat Removal Sat, 20 Feb 2010 01:08:12 GMT http://www.helpmyos.com/malware-threat-removal-f6/laptop-start-error-t1790.htm#4674 http://www.helpmyos.com/malware-threat-removal-f6/laptop-start-error-t1790.htm http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t1897.htm mewt518
Can someone please help me remove this virus on my xp box? Thanks]]> Malware/Threat Removal Tue, 30 Mar 2010 00:30:16 GMT http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t1897.htm#5507 http://www.helpmyos.com/malware-threat-removal-f6/bds-smalliuj-t1897.htm http://www.helpmyos.com/malware-threat-removal-f6/what-is-psi-service-installer-t1910.htm TriciaM
Licensing Service Installer 851 KB, found under my Documents Library.

I'm not really clear on whether this is required for one of my programs or not. I do have Corel Paintshop Pro X2, which I read it is associated with. I thought it was associated with Microsoft. What exactly is it, and should I be worried about whether it is (harmful) spyware ?]]> Malware/Threat Removal Thu, 01 Apr 2010 18:57:40 GMT http://www.helpmyos.com/malware-threat-removal-f6/what-is-psi-service-installer-t1910.htm#5533 http://www.helpmyos.com/malware-threat-removal-f6/what-is-psi-service-installer-t1910.htm http://www.helpmyos.com/malware-threat-removal-f6/helpassist-infection-t1909.htm shkatz I would appreciate any help in getting rid of the helpassist infection on my computer. I have the otl.exe logs if necessary, but they are LONG, so will post them only if you need them. Here is the log generated by profiles.exe: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList DefaultUserProfile REG_SZ Default User AllUsersProfile REG_SZ All Users HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18 ProfileImagePath ... Malware/Threat Removal Thu, 01 Apr 2010 14:50:06 GMT http://www.helpmyos.com/malware-threat-removal-f6/helpassist-infection-t1909.htm#5531 http://www.helpmyos.com/malware-threat-removal-f6/helpassist-infection-t1909.htm http://www.helpmyos.com/malware-threat-removal-f6/i-need-help-t1895.htm kfur Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 04:54:39 PM, on 26/03/2010 Platform: Unknown Windows (WinNT 6.01.3504) MSIE: Internet Explorer v8.00 (8.00.7600.16385) Boot mode: Normal Running processes: C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\AVG\AVG9\avgtray.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe C:\Program ... Malware/Threat Removal Fri, 26 Mar 2010 22:03:16 GMT http://www.helpmyos.com/malware-threat-removal-f6/i-need-help-t1895.htm#5481 http://www.helpmyos.com/malware-threat-removal-f6/i-need-help-t1895.htm http://www.helpmyos.com/malware-threat-removal-f6/i-have-got-2-viruses-need-some-help-t1887.htm jeannot18 http://www.helpmyos.com/malware-threat-removal-f6/packeddelfcrypt-infection-t1793.htm?sid=b568bd83bc34f8179687f26c4810c963

Could someone tell me if I should do the same process? Many thanks

JC]]> Malware/Threat Removal Sun, 21 Mar 2010 13:45:51 GMT http://www.helpmyos.com/malware-threat-removal-f6/i-have-got-2-viruses-need-some-help-t1887.htm#5381 http://www.helpmyos.com/malware-threat-removal-f6/i-have-got-2-viruses-need-some-help-t1887.htm