1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

[Solved] Possible Infection or glitch

Discussion in 'Malware Removal Help' started by Rustys, Mar 30, 2016.

  1. Rustys

    Rustys Registered Members

    Joined:
    Feb 29, 2016
    Messages:
    1,656
    Location:
    127.0.0.1
    Operating System:
    Linux Based
    Computer Brand or Motherboard:
    Compaq H3900 (Windows 2002)
    CPU:
    Intel (R) PXA250
    Memory:
    64 MB RAM 48 MB ROM
    Hard Drive:
    Yes
    Graphics Card:
    4 D
    Power Supply:
    Solar
    IE is still acting strange with CHF. If I open another tab after being logged in or sometimes if I go to post something then it tells me that I have to be logged in to do that. When I try to log back in it keeps looping to CHF site showing I am not logged in. The only way I have found to correct it is close IE then clear cache/cookie/... then reload the page and start again.

    Result of Security Analysis by Rocket Grannie (x86) version: 28th March 2016
    Running from:C:\Users\Loretta\Desktop (11:20:16 - 04/15/2016)
    ***---------------------------------------------------------***
    Microsoft Windows 7 Home Premium X64 Service Pack 1
    UAC is Enabled!
    Internet Explorer 11
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    ***-----------------Anti-Virus - Firewall-------------------***

    Windows Firewall is *Disabled*
    Searching for any other Firewall
    *No other Firewall Installed*
    ***----------------AntiSpyware - Miscellaneous---------------***
    Adobe flash Player Plugin is not installed
    Adobe Flash Player ActiveX (version 21.0.0.197)
    Adobe Reader XI (version 11.0.0.15)
    CCleaner (version 5.16)
    Microsoft Silverlight (version 5)

    ***----------------Analysis Complete-------------------------***
     
  2. Rustys

    Rustys Registered Members

    Joined:
    Feb 29, 2016
    Messages:
    1,656
    Location:
    127.0.0.1
    Operating System:
    Linux Based
    Computer Brand or Motherboard:
    Compaq H3900 (Windows 2002)
    CPU:
    Intel (R) PXA250
    Memory:
    64 MB RAM 48 MB ROM
    Hard Drive:
    Yes
    Graphics Card:
    4 D
    Power Supply:
    Solar
    This is what I got trying to post.

    Untitled.png
     
  3. Kenny94

    Kenny94 Registered Members

    Joined:
    Jan 21, 2016
    Messages:
    417
    Location:
    SC
    Operating System:
    OS X
    Computer Brand or Motherboard:
    iPad Air, HP Chromebook and Compaq laptop with xp
    Thank you for the screenshot you posted Rusty. This helped me see what's going on here. This happen to me sometimes. But when I check "stay logged in" I never have this issue. It might be best to start another thread in Browser Issues or in
    Duffy's Tavern just get some other ideals.. Rich might know as I talk to him to get some ideals on this issue last week. But I can tell from yours logs you know what you're doing with your set up.

    Okay, other than CHF site are you having any other problems with IE? If not, do you feel when Microsoft .NET Framework 4.6 was installed helped?
     
  4. Rustys

    Rustys Registered Members

    Joined:
    Feb 29, 2016
    Messages:
    1,656
    Location:
    127.0.0.1
    Operating System:
    Linux Based
    Computer Brand or Motherboard:
    Compaq H3900 (Windows 2002)
    CPU:
    Intel (R) PXA250
    Memory:
    64 MB RAM 48 MB ROM
    Hard Drive:
    Yes
    Graphics Card:
    4 D
    Power Supply:
    Solar
    CHF is the only one that this happens with.

    Not my system and all I do is online gaming on it. Does not do this with any other browser on this system.
     
  5. Kenny94

    Kenny94 Registered Members

    Joined:
    Jan 21, 2016
    Messages:
    417
    Location:
    SC
    Operating System:
    OS X
    Computer Brand or Motherboard:
    iPad Air, HP Chromebook and Compaq laptop with xp
    I would start a new topic on this Rustys

    Okay some final items I know you have a router-based firewall. You should enable Windows Firewall. Firewall: frequently asked questions

    Here is some useful information on keeping your computer clean:
    1. Most important thing is to make sure Windows is kept up to date with the latest patches and updates from Windows Update.
    2. Here are two great Preventive programs
    :
    • SpywareBlaster protects you from malicious ActiveX controls and cookies. Make sure and check for updates twice a month.
    • Surf Safe with McAfee's SiteAdisor. SiteAdisor will work with Internet Explorer and Mozilla Firefox. SiteAdisor is a browser plugin that assigns a safety rating to domains listed in your search engine. SiteAdvisor uses the following color codes to indicate the safety level of each site.
    • Red for Warning
    • Yellow for Use Caution
    • Green for Safe
    • Grey for Unknown


    it was a pleasure working with you Rusty

    8e91b5a5deedb06b0acdf9765c9838c8.png
     
  6. Kenny94

    Kenny94 Registered Members

    Joined:
    Jan 21, 2016
    Messages:
    417
    Location:
    SC
    Operating System:
    OS X
    Computer Brand or Motherboard:
    iPad Air, HP Chromebook and Compaq laptop with xp
    left this one out..........:)

    .Clean up of Malware Removal Tools
    Now that we are through using these tools, let's clean them off your system so that should you ever need to have malware removed again (we hope not) fresh, updated copies will be downloaded.

    • Download Delfix from here to your desktop and double click it to start the program
    • Ensure Remove disinfection tools is ticked
      Also tick:
    • Activate UAC
    • Create registry backup
    • Purge system restore
    • Reset system settings
    • 99b53d1a3c2e3a6a51dea538296876c7.png
    • Click Run
    • The program will run for a few moments and then notepad will open with a log. Please paste the log in your next reply.
    You can delete any log files left on your desktop as these are no longer needed.
     
  7. Rustys

    Rustys Registered Members

    Joined:
    Feb 29, 2016
    Messages:
    1,656
    Location:
    127.0.0.1
    Operating System:
    Linux Based
    Computer Brand or Motherboard:
    Compaq H3900 (Windows 2002)
    CPU:
    Intel (R) PXA250
    Memory:
    64 MB RAM 48 MB ROM
    Hard Drive:
    Yes
    Graphics Card:
    4 D
    Power Supply:
    Solar
    # DelFix v1.012 - Logfile created 16/04/2016 at 20:07:23
    # Updated 04/03/2015 by Xplode
    # Username : Loretta - LORETTA-PC
    # Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)

    ~ Activating UAC ... OK

    ~ Removing disinfection tools ...

    Deleted : C:\Qoobox
    Deleted : C:\ComboFix.txt
    Deleted : C:\Users\Loretta\Downloads\ComboFix.exe
    Deleted : C:\Users\Loretta\Downloads\MiniToolBox.exe
    Deleted : C:\Users\Loretta\Downloads\RGSA.exe
    Deleted : C:\Users\Loretta\Downloads\SALog.txt
    Deleted : C:\Windows\grep.exe
    Deleted : C:\Windows\PEV.exe
    Deleted : C:\Windows\NIRCMD.exe
    Deleted : C:\Windows\MBR.exe
    Deleted : C:\Windows\SED.exe
    Deleted : C:\Windows\SWREG.exe
    Deleted : C:\Windows\SWSC.exe
    Deleted : C:\Windows\SWXCACLS.exe
    Deleted : C:\Windows\Zip.exe
    Deleted : HKLM\SOFTWARE\Swearware
    Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\combofix.exe

    ~ Creating registry backup ... OK

    ~ Cleaning system restore ...

    Deleted : RP #814 [Windows Update | 04/09/2016 03:07:03]
    Deleted : RP #815 [ComboFix created restore point | 04/11/2016 17:19:57]
    Deleted : RP #816 [Windows Update | 04/12/2016 21:31:11]
    Deleted : RP #817 [Windows Update | 04/12/2016 23:00:32]

    New restore point created !

    ~ Resetting system settings ... OK

    ########## - EOF - ##########

    Thanks Kenny94
     
  8. Kenny94

    Kenny94 Registered Members

    Joined:
    Jan 21, 2016
    Messages:
    417
    Location:
    SC
    Operating System:
    OS X
    Computer Brand or Motherboard:
    iPad Air, HP Chromebook and Compaq laptop with xp
    Glad we could be of assistance......:)
     

Share This Page