That's exactly what I would've done. You should run the scanner again and see if those files are still on your system. These links should give you all that you need to fix this problem.
http://rootrepeal.googlepages.com/ http://www.myantispyware.com/2008/08/27/how-to-remove-antivirus-xp-2008/ http://www.bullguard.com/forum/8/Virus-taking-over-desktop-and-_65110.html http://www.threatexpert.com/files/tdssserv.sys.html Be mindful that this is a rootkit and definitely more tricky to resolve than your typical virus. You can plow through these links and spend a lot of time doing so and you still may not resolve the issue completely. My suggestion would be to format that and change all of your passwords, including the ones for your online activities... ALL of them! Regards, Matt www.crossloop.com/matthewbramer On Sep 19, 4:15 pm, BigMatt <[EMAIL PROTECTED]> wrote: > You try reinstalling IE7 after the scan? > > On Sep 19, 10:55 am, bow.bill <[EMAIL PROTECTED]> wrote: > > > > > Hello helpful people, > > > Yesterday (18-09-08) I had a problem with malware infecting my > > browsers Internet Explorer 7 and Firefox Version 3.0.1. Every link I > > clicked on > > > after using Google search, Live Search or A9.com search, I was being > > redirected by way of go.google to some other website. I ran C.Cleaner, > > > Spybot Search & Destroy, Lavasoft Ad-Aware, Avast Antivirus & > > a-squared but the problem persisted. I installed and ran Malwarebytes' > > Anti-Malware (MBA > > > -M) and this seems to have fixed the problem (log file below) but then > > I found that on opening my Gmail account in Internet Explorer it only > > filled the left > > > three quarters of the screen (screenshots attached) but opening it in > > Firefox seems O.K.. I then found that the Page and Tools drop down > > boxes of Internet Explorer were blank (Screenshots attached). I > > > then installed Internet Explorer 8 Beta 2 thinking this might solve > > the problem but my luck was not in today. > > > ------------------------------------------- > > > Malwarebytes' Anti-Malware 1.28 > > Database version: 1175 > > Windows 5.1.2600 Service Pack 3 > > > 19/09/2008 15:02:12 > > mbam-log-2008-09-19 (15-01-28).txt > > > Scan type: Full Scan (C:\|E:\|F:\|) > > Objects scanned: 164753 > > Time elapsed: 31 minute(s), 21 second(s) > > > Memory Processes Infected: 0 > > Memory Modules Infected: 0 > > Registry Keys Infected: 3 > > Registry Values Infected: 0 > > Registry Data Items Infected: 0 > > Folders Infected: 0 > > Files Infected: 8 > > > Memory Processes Infected: > > (No malicious items detected) > > > Memory Modules Infected: > > (No malicious items detected) > > > Registry Keys Infected: > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows > > NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken. > > HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken. > > HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier > > (Rogue.Multiple) -> No action taken. > > > Registry Values Infected: > > (No malicious items detected) > > > Registry Data Items Infected: > > (No malicious items detected) > > > Folders Infected: > > (No malicious items detected) > > > Files Infected: > > E:\WINDOWS\system32\tdssadw.dll (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\tdssl.dll (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\tdssserf.dll (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\tdssmain.dll (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\tdssinit.dll (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\tdsslog.dll (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\tdssservers.dat (Trojan.Agent) -> No action taken. > > E:\WINDOWS\system32\drivers\tdssserv.sys (Trojan.Agent) -> No action taken. > > > ---------------------------------- > > > Although the Log File states 'No action taken' I was informed that > > these files would be removed on Re-boot. I have since checked the > > system32 directory and none of the above infected files could be > > found. > > > Any help would be much appreciated. > > > Thanks. > > > Bill. > > > 08-09-19 Gmail 1.JPG > > 188KViewDownload > > > 08-09-19 Gmail 2.JPG > > 73KViewDownload > > > 08-09-19 IE (01).JPG > > 88KViewDownload > > > 08-09-19 IE (02).JPG > > 91KViewDownload > > > 08-09-19 IE (03).JPG > > 89KViewDownload- Hide quoted text - > > - Show quoted text - --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Computer Tech Support" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/computer-tech-support?hl=en -~----------~----~----~----~------~----~------~--~---
