Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Comodo detected:Heur.suspicious@1.  (Read 12565 times)

0 Members and 1 Guest are viewing this topic.

Painted Pony

    Topic Starter


    Rookie

    • Experience: Familiar
    • OS: Windows 7
    Comodo detected:Heur.suspicious@1.
    « on: November 10, 2012, 02:30:41 PM »
    Had an alert from Comodo today: [email protected] I searched for that..I found Yahoo. canada has taken over my browser.

    Allan

    • Moderator

    • Mastermind
    • Thanked: 1260
    • Experience: Guru
    • OS: Windows 10
    Re: Comodo detected:Heur.suspicious@1.
    « Reply #1 on: November 10, 2012, 03:12:59 PM »
    Please follow the instructions in the following link and post your logs in the thread you create (NOT in this thread):
    http://www.computerhope.com/forum/index.php/topic,46313.0.html

    Painted Pony

      Topic Starter


      Rookie

      • Experience: Familiar
      • OS: Windows 7
      Re: Comodo detected:Heur.suspicious@1.
      « Reply #2 on: November 10, 2012, 04:01:42 PM »
      Thanks Allan -- I won't be able to go through all steps today, but I do have some questions:
      Step 1: I already have CCleaner installed (v3.24.1850) Can I use this?

      Allan

      • Moderator

      • Mastermind
      • Thanked: 1260
      • Experience: Guru
      • OS: Windows 10
      Re: Comodo detected:Heur.suspicious@1.
      « Reply #3 on: November 10, 2012, 04:11:45 PM »
      yes

      Painted Pony

        Topic Starter


        Rookie

        • Experience: Familiar
        • OS: Windows 7
        Re: Comodo detected:Heur.suspicious@1.
        « Reply #4 on: November 11, 2012, 03:44:29 PM »
        I hope I've done this right:

        # AdwCleaner v2.007 - Logfile created 11/11/2012 at 14:29:46
        # Updated 06/11/2012 by Xplode
        # Operating system : Microsoft Windows XP Service Pack 2 (32 bits)
        # User : Sharon - SHARON-RAS
        # Boot Mode : Normal
        # Running from : C:\Documents and Settings\Sharon\My Documents\Downloads\adwcleaner(1).exe
        # Option [Search]


        ***** [Services] *****


        ***** [Files / Folders] *****


        ***** [Registry] *****

        Key Found : HKCU\Software\APN PIP
        Key Found : HKCU\Software\PIP
        Key Found : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Management\ARPCache\{CD95D125-2992-4858-B3EF-5F6FB52FBAD6}
        Key Found : HKLM\Software\PIP

        ***** [Internet Browsers] *****

        -\\ Internet Explorer v8.0.6001.18702

        [OK] Registry is clean.

        -\\ Mozilla Firefox v16.0.2 (en-US)

        Profile name : default
        File : C:\Documents and Settings\Sharon\Application Data\Mozilla\Firefox\Profiles\nr5aa0az.default\prefs.js

        [OK] File is clean.

        *************************

        AdwCleaner[R1].txt - [970 octets] - [11/11/2012 14:29:46]

        ########## EOF - C:\AdwCleaner[R1].txt - [1029 octets] ##########

        Malwarebytes Anti-Malware 1.65.1.1000
        www.malwarebytes.org

        Database version: v2012.11.11.03

        Windows XP Service Pack 2 x86 NTFS
        Internet Explorer 8.0.6001.18702
        Sharon :: SHARON-RAS [administrator]

        11/11/2012 8:05:35 AM
        mbam-log-2012-11-11 (08-05-35).txt

        Scan type: Full scan (C:\|)
        Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
        Scan options disabled: P2P
        Objects scanned: 290634
        Time elapsed: 41 minute(s), 17 second(s)

        Memory Processes Detected: 0
        (No malicious items detected)

        Memory Modules Detected: 0
        (No malicious items detected)

        Registry Keys Detected: 0
        (No malicious items detected)

        Registry Values Detected: 0
        (No malicious items detected)

        Registry Data Items Detected: 0
        (No malicious items detected)

        Folders Detected: 0
        (No malicious items detected)

        Files Detected: 0
        (No malicious items detected)

        (end)
        DDS (Ver_2012-11-07.01) - NTFS_x86
        Internet Explorer: 8.0.6001.18702  BrowserJavaVersion: 1.6.0_29
        Run by Sharon at 14:33:11 on 2012-11-11
        Microsoft Windows XP Professional  5.1.2600.2.1252.2.1033.18.2002.1280 [GMT -8:00]
        .
        AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
        FW: COMODO Firewall *Enabled*
        .
        ============== Running Processes ================
        .
        C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\system32\brss01a.exe
        C:\Program Files\Avira\AntiVir Desktop\sched.exe
        C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
        C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\Program Files\Common Files\Motive\McciCMService.exe
        C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
        C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
        C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
        C:\WINDOWS\system32\PSIService.exe
        C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
        C:\WINDOWS\System32\alg.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Analog Devices\Core\smax4pnp.exe
        C:\WINDOWS\system32\hkcmd.exe
        C:\WINDOWS\system32\igfxpers.exe
        C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
        C:\WINDOWS\system32\igfxsrvc.exe
        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\LWS\Webcam Software\LWS.exe
        C:\Program Files\Logitech\LWS\Webcam Software\CameraHelperShell.exe
        C:\WINDOWS\system32\notepad.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\Documents and Settings\Sharon\My Documents\Downloads\adwcleaner(1).exe
        C:\WINDOWS\system32\NOTEPAD.EXE
        C:\WINDOWS\system32\wbem\wmiprvse.exe
        C:\WINDOWS\system32\svchost.exe -k netsvcs
        C:\WINDOWS\system32\svchost.exe -k NetworkService
        C:\WINDOWS\system32\svchost.exe -k LocalService
        C:\WINDOWS\system32\svchost.exe -k LocalService
        C:\WINDOWS\system32\svchost.exe -k imgsvc
        .
        ============== Pseudo HJT Report ===============
        .
        uStart Page = hxxp://ca.yahoo.com?fr=fp-comodo
        uSearch Bar = hxxp://www.google.com
        uSearch Page = hxxp://www.google.com
        mStart Page = hxxp://www.google.com
        uSearchAssistant = hxxp://www.google.com
        uURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - <orphaned>
        BHO: Skype Plug-In: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
        uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
        mRun: [SoundMAXPnP] c:\program files\analog devices\core\smax4pnp.exe
        mRun: [HotKeysCmds] c:\windows\system32\hkcmd.exe
        mRun: [Persistence] c:\windows\system32\igfxpers.exe
        mRun: [TELUS_McciTrayApp] c:\program files\telus\telus support centre\bin\McciTrayApp.exe
        mRun: [COMODO Internet Security] "c:\program files\comodo\comodo internet security\cfp.exe" -h
        mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
        mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
        mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
        mRun: [LWS] c:\program files\logitech\lws\webcam software\LWS.exe -hide
        StartupFolder: c:\docume~1\sharon\startm~1\programs\startup\logitech . product registration.lnk - c:\program files\logitech\ereg\eReg.exe
        uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
        mPolicies-Explorer: NoResolveTrack = dword:1
        mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
        IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
        IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
        IE: Send To Bluetooth - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
        IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
        IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
        IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
        IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
        IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
        .
        INFO: HKCU has more than 50 listed domains.
        If you wish to scan all of them, select the 'Force scan all domains' option.
        .
        .
        INFO: HKLM has more than 50 listed domains.
           If you wish to scan all of them, select the 'Force scan all domains' option.
        .
        DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
        DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
        TCP: NameServer = 75.153.176.9 75.153.176.1
        TCP: Interfaces\{AF0E9A00-A6EC-4080-B503-6C25AB9F6F58} : DHCPNameServer = 75.153.176.9 75.153.176.1
        Handler: intu-qt2007 - {026BF40D-BA05-467b-9F1F-AD0D7A3F5F11} -
        Handler: intu-qt2008 - {05E53CE9-66C8-4a9e-A99F-FDB7A8E7B596} -
        Handler: intu-qt2009 - {03947252-2355-4e9b-B446-8CCC75C43370} -
        Handler: intu-tt2010 - {97A0575E-2309-4e75-8509-B1F9390C4DE7} -
        Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
        Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
        Notify: igfxcui - igfxdev.dll
        SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
        SEH: {4F07DA45-8170-4859-9B5F-037EF2970034} - <orphaned>
        SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
        LSA: Authentication Packages =  msv1_0 nwprovau
        mASetup: {EEBF9CA6-567B-41cd-B5F6-EF2C7FEF37B5} - rundll32.exe advpack.dll,LaunchINFSection c:\windows\inf\wmactedp.inf,PerUserStub
        Hosts: 127.0.0.1   www.spywareinfo.com
        .
        ================= FIREFOX ===================
        .
        FF - ProfilePath - c:\documents and settings\sharon\application data\mozilla\firefox\profiles\nr5aa0az.default\
        FF - prefs.js: browser.search.selectedEngine - Google
        FF - prefs.js: browser.startup.homepage - hxxp://ca.yahoo.com?fr=fp-comodo
        FF - prefs.js: keyword.URL - hxxp://ca.search.yahoo.com/search?fr=ytff-comodo&p=
        FF - plugin: c:\program files\microsoft silverlight\5.1.10411.0\npctrlui.dll
        FF - plugin: c:\program files\mozilla firefox\plugins\npPDFXCviewNPPlugin.dll
        FF - plugin: c:\program files\mozilla firefox\plugins\NPTURNMED.dll
        FF - plugin: c:\program files\tracker software\pdf viewer\npPDFXCviewNPPlugin.dll
        FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_265.dll
        FF - ExtSQL: 2012-10-27 11:45; {AB2CE124-6272-4b12-94A9-7303C7397BD1}; c:\program files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
        FF - ExtSQL: 2012-11-04 12:34; {d40f5e7b-d2cf-4856-b441-cc613eeffbe3}; c:\documents and settings\sharon\application data\mozilla\firefox\profiles\nr5aa0az.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3}.xpi
        FF - ExtSQL: 2012-11-04 12:39; {a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}; c:\documents and settings\sharon\application data\mozilla\firefox\profiles\nr5aa0az.default\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
        FF - ExtSQL: 2012-11-04 12:43; {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}; c:\documents and settings\sharon\application data\mozilla\firefox\profiles\nr5aa0az.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
        .
        ============= SERVICES / DRIVERS ===============
        .
        R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2011-2-7 11608]
        R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [2010-9-10 497952]
        R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2010-9-10 32640]
        R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
        R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
        R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2011-8-11 116608]
        R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2011-2-7 136360]
        R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2011-2-7 269480]
        R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-7-12 66616]
        R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2010-9-10 1990464]
        R2 PanService;PandoraService;c:\program files\pandora.tv\panservice\PandoraService.exe [2012-5-19 624856]
        R3 IFXTPM;IFXTPM;c:\windows\system32\drivers\ifxtpm.sys [2007-2-26 36608]
        R3 LgBttPort;LGE Bluetooth TransPort;c:\windows\system32\drivers\lgbtport.sys [2009-9-29 12160]
        R3 lgbusenum;LG Bluetooth Bus Enumerator;c:\windows\system32\drivers\lgbtbus.sys [2009-9-29 10496]
        R3 LGVMODEM;LGE Virtual Modem;c:\windows\system32\drivers\lgvmodem.sys [2009-9-29 12928]
        S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
        S3 RapportIaso;RapportIaso;\??\c:\documents and settings\all users\application data\trusteer\rapport\store\exts\rapportms\39624\rapportiaso.sys --> c:\documents and settings\all users\application data\trusteer\rapport\store\exts\rapportms\39624\rapportiaso.sys [?]
        S3 TMPassthruMP;TMPassthruMP;c:\windows\system32\drivers\tmpassthru.sys --> c:\windows\system32\drivers\TMPassthru.sys [?]
        S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
        .
        =============== File Associations ===============
        .
        FileExt: .reg: regfile=regedit.exe "%1" %*
        ShellExec: BitComet.exe: open="c:\program files\bitcomet\BitComet.exe"
        ShellExec: Foxit Reader.exe: print="c:\program files\foxit software\foxit reader\Foxit Reader.exe"/p "%1"
        ShellExec: Foxit Reader.exe: printto="c:\program files\foxit software\foxit reader\Foxit Reader.exe"/t "%1" "%2" "%3" "%4"
        .
        =============== Created Last 30 ================
        .
        2012-11-11 21:00:35   --------   d-----w-   c:\documents and settings\sharon\local settings\application data\Logitech® Webcam Software
        2012-11-11 20:57:09   53248   ----a-r-   c:\documents and settings\sharon\application data\microsoft\installer\{3ee9bcae-e9a9-45e5-9b1c-83a4d357e05c}\ARPPRODUCTICON.exe
        2012-11-02 22:25:59   --------   d-----w-   c:\windows\system32\wbem\repository\FS
        2012-11-02 22:25:59   --------   d-----w-   c:\windows\system32\wbem\Repository
        2012-10-27 00:50:53   --------   d-----w-   C:\JRT
        2012-10-25 11:12:26   94208   ----a-w-   c:\windows\system32\QuickTimeVR.qtx
        2012-10-25 11:12:26   69632   ----a-w-   c:\windows\system32\QuickTime.qts
        2012-10-22 22:03:03   --------   d-----w-   c:\program files\CCleaner
        .
        ==================== Find3M  ====================
        .
        2012-11-07 23:38:16   32640   -c--a-w-   c:\windows\system32\drivers\cmdhlp.sys
        2012-11-07 23:38:14   497952   -c--a-w-   c:\windows\system32\drivers\cmdGuard.sys
        2012-11-07 23:38:13   18096   -c--a-w-   c:\windows\system32\drivers\cmderd.sys
        2012-11-07 23:37:35   34024   -c--a-w-   c:\windows\system32\cmdcsr.dll
        2012-11-07 23:37:34   301264   ----a-w-   c:\windows\system32\guard32.dll
        2012-09-30 02:54:26   22856   ----a-w-   c:\windows\system32\drivers\mbam.sys
        2012-09-21 19:09:06   542568   ----a-w-   c:\windows\system32\LVUI2.dll
        2012-09-21 19:09:06   538472   ----a-w-   c:\windows\system32\LVUI2RC.dll
        2012-09-21 19:09:06   4261224   ----a-w-   c:\windows\system32\drivers\lvuvc.sys
        2012-09-21 19:09:00   310504   ----a-w-   c:\windows\system32\drivers\lvrs.sys
        2012-09-21 19:09:00   305000   ----a-w-   c:\windows\system32\lvcodec2.dll
        2012-09-21 19:09:00   198504   ----a-w-   c:\windows\system32\lvci1351823.dll
        2012-09-21 19:08:36   338136   ----a-w-   c:\windows\system32\DevManagerCore.dll
        2012-09-21 19:08:36   10919784   ----a-w-   c:\windows\system32\LogiDPP.dll
        2012-09-21 19:08:36   103272   ----a-w-   c:\windows\system32\LogiDPPApp.exe
        2012-09-21 18:48:58   40758   ----a-w-   c:\windows\system32\Repository.reg
        2012-08-22 21:23:49   73416   -c--a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
        2012-08-22 21:23:49   696520   -c--a-w-   c:\windows\system32\FlashPlayerApp.exe
        2012-08-21 20:01:22   26840   ----a-w-   c:\windows\system32\drivers\GEARAspiWDM.sys
        2012-08-21 20:01:22   106928   ----a-w-   c:\windows\system32\GEARAspi.dll
        .
        ============= FINISH: 14:34:02.28 ===============
        .
        UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
        IF REQUESTED, ZIP IT UP & ATTACH IT
        .
        DDS (Ver_2012-11-07.01)
        .
        Microsoft Windows XP Professional
        Boot Device: \Device\HarddiskVolume1
        Install Date: 15/04/2008 1:43:34 PM
        System Uptime: 11/11/2012 7:57:06 AM (7 hours ago)
        .
        Motherboard: Hewlett-Packard |  | 0AA8h
        Processor: Intel(R) Core(TM)2 Duo CPU     E6550  @ 2.33GHz | XU1 PROCESSOR | 2327/1333mhz
        Processor: Intel(R) Core(TM)2 Duo CPU     E6550  @ 2.33GHz | XU1 PROCESSOR | 2327/1333mhz
        .
        ==== Disk Partitions =========================
        .
        C: is FIXED (NTFS) - 74 GiB total, 60.727 GiB free.
        D: is CDROM ()
        .
        ==== Disabled Device Manager Items =============
        .
        Class GUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
        Description: PS/2 Compatible Mouse
        Device ID: ACPI\PNP0F13\4&16E8443F&0
        Manufacturer: Microsoft
        Name: PS/2 Compatible Mouse
        PNP Device ID: ACPI\PNP0F13\4&16E8443F&0
        Service: i8042prt
        .
        Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
        Description: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
        Device ID: ACPI\PNP0303\4&16E8443F&0
        Manufacturer: (Standard keyboards)
        Name: Standard 101/102-Key or Microsoft Natural PS/2 Keyboard
        PNP Device ID: ACPI\PNP0303\4&16E8443F&0
        Service: i8042prt
        .
        ==== System Restore Points ===================
        .
        RP1252: 29/10/2012 10:44:56 AM - System Checkpoint
        RP1253: 30/10/2012 7:26:03 PM - System Checkpoint
        RP1254: 31/10/2012 7:31:58 PM - System Checkpoint
        RP1255: 02/11/2012 12:20:40 AM - System Checkpoint
        RP1256: 02/11/2012 3:24:13 PM - Restore Operation
        RP1257: 03/11/2012 5:44:55 PM - System Checkpoint
        RP1258: 04/11/2012 4:50:28 PM - System Checkpoint
        RP1259: 05/11/2012 5:11:22 PM - System Checkpoint
        RP1260: 06/11/2012 5:14:20 PM - System Checkpoint
        RP1261: 07/11/2012 5:47:16 PM - System Checkpoint
        RP1262: 08/11/2012 6:21:45 PM - System Checkpoint
        RP1263: 09/11/2012 6:25:45 PM - System Checkpoint
        RP1264: 11/11/2012 8:27:13 AM - System Checkpoint
        .
        ==== Installed Programs ======================
        .
        Adobe Flash Player 11 Plugin
        Apple Application Support
        Apple Mobile Device Support
        Apple Software Update
        Avira AntiVir Personal - Free Antivirus
        Bonjour
        CameraHelperMsi
        CCleaner
        COMODO Internet Security
        Compatibility Pack for the 2007 Office system
        Critical Update for Windows Media Player 11 (KB959772)
        erLT
        Hotfix for Microsoft .NET Framework 3.0 (KB932471)
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
        Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
        Hotfix for Windows Internet Explorer 7 (KB947864)
        Hotfix for Windows Media Format 11 SDK (KB929399)
        Hotfix for Windows Media Player 11 (KB939683)
        Hotfix for Windows XP (KB896344)
        Hotfix for Windows XP (KB914440)
        Hotfix for Windows XP (KB915865)
        Hotfix for Windows XP (KB926239)
        Hotfix for Windows XP (KB952287)
        Hotfix for Windows XP (KB954550-v5)
        Hotfix for Windows XP (KB961118)
        Hotfix for Windows XP (KB970653-v3)
        Hotfix for Windows XP (KB976098-v2)
        Hotfix for Windows XP (KB979306)
        Hotfix for Windows XP (KB981793)
        Intel(R) Graphics Media Accelerator Driver
        Intel(R) PRO Network Connections Drivers
        iTunes
        LG Bluetooth Drivers
        LG United Mobile Drivers
        LG USB Modem Drivers
        Logitech Webcam Software
        LWS Facebook
        LWS Gallery
        LWS Help_main
        LWS Launcher
        LWS Motion Detection
        LWS Pictures And Video
        LWS Twitter
        LWS Webcam Software
        LWS WLM Plugin
        LWS YouTube Plugin
        Malwarebytes Anti-Malware version 1.65.1.1000
        Microsoft .NET Framework 1.1
        Microsoft .NET Framework 1.1 Security Update (KB979906)
        Microsoft .NET Framework 2.0 Service Pack 2
        Microsoft .NET Framework 3.0 Service Pack 2
        Microsoft .NET Framework 3.5 SP1
        Microsoft .NET Framework 4 Client Profile
        Microsoft Base Smart Card Cryptographic Service Provider Package
        Microsoft Compression Client Pack 1.0 for Windows XP
        Microsoft Internationalized Domain Names Mitigation APIs
        Microsoft National Language Support Downlevel APIs
        Microsoft Office File Validation Add-In
        Microsoft Office Professional Edition 2003
        Microsoft Outlook Personal Folders Backup
        Microsoft Silverlight
        Microsoft User-Mode Driver Framework Feature Pack 1.0
        Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
        Microsoft Visual C++ 2005 Redistributable
        Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
        Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
        Microsoft Visual C++ 2010  x86 Redistributable - 10.0.30319
        Mozilla Firefox 16.0.2 (x86 en-US)
        Mozilla Maintenance Service
        MSXML 4.0 SP2 (KB927978)
        MSXML 4.0 SP2 (KB936181)
        MSXML 4.0 SP2 (KB954430)
        MSXML 4.0 SP2 (KB973688)
        MSXML 6 Service Pack 2 (KB973686)
        MSXML4SP2
        Octoshape add-in for Adobe Flash Player
        OGA Notifier 2.0.0048.0
        Pandora Service
        PDF-Viewer
        QuickTime
        Safari
        Security Update for Windows Internet Explorer 7 (KB938127)
        Security Update for Windows Internet Explorer 7 (KB950759)
        Security Update for Windows Internet Explorer 7 (KB953838)
        Security Update for Windows Internet Explorer 7 (KB956390)
        Security Update for Windows Internet Explorer 7 (KB958215)
        Security Update for Windows Internet Explorer 7 (KB960714)
        Security Update for Windows Internet Explorer 7 (KB961260)
        Security Update for Windows Internet Explorer 8 (KB971961)
        Security Update for Windows Internet Explorer 8 (KB981332)
        Security Update for Windows Internet Explorer 8 (KB982381)
        Security Update for Windows Media Player (KB911564)
        Security Update for Windows Media Player (KB952069)
        Security Update for Windows Media Player (KB954155)
        Security Update for Windows Media Player (KB968816)
        Security Update for Windows Media Player (KB973540)
        Security Update for Windows Media Player (KB978695)
        Security Update for Windows Media Player 11 (KB936782)
        Security Update for Windows Media Player 11 (KB954154)
        Security Update for Windows Media Player 6.4 (KB925398)
        Security Update for Windows Media Player 9 (KB917734)
        Security Update for Windows Media Player 9 (KB936782)
        Security Update for Windows XP (KB2229593)
        Security Update for Windows XP (KB883939)
        Security Update for Windows XP (KB890046)
        Security Update for Windows XP (KB893066)
        Security Update for Windows XP (KB893756)
        Security Update for Windows XP (KB896358)
        Security Update for Windows XP (KB896422)
        Security Update for Windows XP (KB896423)
        Security Update for Windows XP (KB896424)
        Security Update for Windows XP (KB896428)
        Security Update for Windows XP (KB896688)
        Security Update for Windows XP (KB899587)
        Security Update for Windows XP (KB899588)
        Security Update for Windows XP (KB899591)
        Security Update for Windows XP (KB900725)
        Security Update for Windows XP (KB901017)
        Security Update for Windows XP (KB901190)
        Security Update for Windows XP (KB901214)
        Security Update for Windows XP (KB902400)
        Security Update for Windows XP (KB903235)
        Security Update for Windows XP (KB904706)
        Security Update for Windows XP (KB905414)
        Security Update for Windows XP (KB905749)
        Security Update for Windows XP (KB905915)
        Security Update for Windows XP (KB908519)
        Security Update for Windows XP (KB911562)
        Security Update for Windows XP (KB911567)
        Security Update for Windows XP (KB911927)
        Security Update for Windows XP (KB912919)
        Security Update for Windows XP (KB913446)
        Security Update for Windows XP (KB913580)
        Security Update for Windows XP (KB914388)
        Security Update for Windows XP (KB914389)
        Security Update for Windows XP (KB917344)
        Security Update for Windows XP (KB917422)
        Security Update for Windows XP (KB917537)
        Security Update for Windows XP (KB917953)
        Security Update for Windows XP (KB918118)
        Security Update for Windows XP (KB918439)
        Security Update for Windows XP (KB918899)
        Security Update for Windows XP (KB919007)
        Security Update for Windows XP (KB920213)
        Security Update for Windows XP (KB920214)
        Security Update for Windows XP (KB920670)
        Security Update for Windows XP (KB920683)
        Security Update for Windows XP (KB920685)
        Security Update for Windows XP (KB921398)
        Security Update for Windows XP (KB921883)
        Security Update for Windows XP (KB922616)
        Security Update for Windows XP (KB922819)
        Security Update for Windows XP (KB923191)
        Security Update for Windows XP (KB923414)
        Security Update for Windows XP (KB923561)
        Security Update for Windows XP (KB923689)
        Security Update for Windows XP (KB923694)
        Security Update for Windows XP (KB923789)
        Security Update for Windows XP (KB923980)
        Security Update for Windows XP (KB924191)
        Security Update for Windows XP (KB924270)
        Security Update for Windows XP (KB924496)
        Security Update for Windows XP (KB924667)
        Security Update for Windows XP (KB925454)
        Security Update for Windows XP (KB925486)
        Security Update for Windows XP (KB925902)
        Security Update for Windows XP (KB926255)
        Security Update for Windows XP (KB926436)
        Security Update for Windows XP (KB927779)
        Security Update for Windows XP (KB927802)
        Security Update for Windows XP (KB928255)
        Security Update for Windows XP (KB928843)
        Security Update for Windows XP (KB929123)
        Security Update for Windows XP (KB929969)
        Security Update for Windows XP (KB930178)
        Security Update for Windows XP (KB931261)
        Security Update for Windows XP (KB931768)
        Security Update for Windows XP (KB931784)
        Security Update for Windows XP (KB932168)
        Security Update for Windows XP (KB933729)
        Security Update for Windows XP (KB935839)
        Security Update for Windows XP (KB935840)
        Security Update for Windows XP (KB936021)
        Security Update for Windows XP (KB937894)
        Security Update for Windows XP (KB938127)
        Security Update for Windows XP (KB938464)
        Security Update for Windows XP (KB941202)
        Security Update for Windows XP (KB941568)
        Security Update for Windows XP (KB941569)
        Security Update for Windows XP (KB941644)
        Security Update for Windows XP (KB941693)
        Security Update for Windows XP (KB943055)
        Security Update for Windows XP (KB943460)
        Security Update for Windows XP (KB943485)
        Security Update for Windows XP (KB944338)
        Security Update for Windows XP (KB944653)
        Security Update for Windows XP (KB945553)
        Security Update for Windows XP (KB946026)
        Security Update for Windows XP (KB947864)
        Security Update for Windows XP (KB948590)
        Security Update for Windows XP (KB948881)
        Security Update for Windows XP (KB950749)
        Security Update for Windows XP (KB950760)
        Security Update for Windows XP (KB950762)
        Security Update for Windows XP (KB950974)
        Security Update for Windows XP (KB951066)
        Security Update for Windows XP (KB951376-v2)
        Security Update for Windows XP (KB951376)
        Security Update for Windows XP (KB951698)
        Security Update for Windows XP (KB951748)
        Security Update for Windows XP (KB952004)
        Security Update for Windows XP (KB952954)
        Security Update for Windows XP (KB953839)
        Security Update for Windows XP (KB954211)
        Security Update for Windows XP (KB954600)
        Security Update for Windows XP (KB955069)
        Security Update for Windows XP (KB956391)
        Security Update for Windows XP (KB956572)
        Security Update for Windows XP (KB956744)
        Security Update for Windows XP (KB956802)
        Security Update for Windows XP (KB956803)
        Security Update for Windows XP (KB956841)
        Security Update for Windows XP (KB956844)
        Security Update for Windows XP (KB957095)
        Security Update for Windows XP (KB957097)
        Security Update for Windows XP (KB958644)
        Security Update for Windows XP (KB958687)
        Security Update for Windows XP (KB958869)
        Security Update for Windows XP (KB959426)
        Security Update for Windows XP (KB960225)
        Security Update for Windows XP (KB960715)
        Security Update for Windows XP (KB960803)
        Security Update for Windows XP (KB960859)
        Security Update for Windows XP (KB961371)
        Security Update for Windows XP (KB961373)
        Security Update for Windows XP (KB961501)
        Security Update for Windows XP (KB968537)
        Security Update for Windows XP (KB969059)
        Security Update for Windows XP (KB969898)
        Security Update for Windows XP (KB969947)
        Security Update for Windows XP (KB970238)
        Security Update for Windows XP (KB970430)
        Security Update for Windows XP (KB971032)
        Security Update for Windows XP (KB971468)
        Security Update for Windows XP (KB971486)
        Security Update for Windows XP (KB971557)
        Security Update for Windows XP (KB971633)
        Security Update for Windows XP (KB971657)
        Security Update for Windows XP (KB972270)
        Security Update for Windows XP (KB973346)
        Security Update for Windows XP (KB973354)
        Security Update for Windows XP (KB973507)
        Security Update for Windows XP (KB973525)
        Security Update for Windows XP (KB973869)
        Security Update for Windows XP (KB973904)
        Security Update for Windows XP (KB974112)
        Security Update for Windows XP (KB974318)
        Security Update for Windows XP (KB974392)
        Security Update for Windows XP (KB974571)
        Security Update for Windows XP (KB975025)
        Security Update for Windows XP (KB975467)
        Security Update for Windows XP (KB975560)
        Security Update for Windows XP (KB975561)
        Security Update for Windows XP (KB975562)
        Security Update for Windows XP (KB975713)
        Security Update for Windows XP (KB977165)
        Security Update for Windows XP (KB977816)
        Security Update for Windows XP (KB977914)
        Security Update for Windows XP (KB978037)
        Security Update for Windows XP (KB978251)
        Security Update for Windows XP (KB978262)
        Security Update for Windows XP (KB978338)
        Security Update for Windows XP (KB978542)
        Security Update for Windows XP (KB978601)
        Security Update for Windows XP (KB978706)
        Security Update for Windows XP (KB979309)
        Security Update for Windows XP (KB979482)
        Security Update for Windows XP (KB979559)
        Security Update for Windows XP (KB979683)
        Security Update for Windows XP (KB980195)
        Security Update for Windows XP (KB980218)
        Security Update for Windows XP (KB980232)
        Skype™ 5.0
        Soap 3.0 Toolkit
        SpywareBlaster 4.6
        SUPERAntiSpyware
        TBS WMP Plug-in
        TELUS eProtect Advisor 1.5.12
        TELUS Wireless Connection Manager
        The KMPlayer (remove only)
        UFile 2011
        Uninstall 1.0.0.1
        Uninstall LG PC Suite III
        Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
        Update for Windows Internet Explorer 8 (KB976662)
        Update for Windows Internet Explorer 8 (KB980182)
        Update for Windows Internet Explorer 8 (KB980302)
        Update for Windows XP (KB896727)
        Update for Windows XP (KB898461)
        Update for Windows XP (KB900485)
        Update for Windows XP (KB904942)
        Update for Windows XP (KB908531)
        Update for Windows XP (KB910437)
        Update for Windows XP (KB911280)
        Update for Windows XP (KB916595)
        Update for Windows XP (KB920342)
        Update for Windows XP (KB920872)
        Update for Windows XP (KB922582)
        Update for Windows XP (KB925720)
        Update for Windows XP (KB925876)
        Update for Windows XP (KB925877)
        Update for Windows XP (KB927891)
        Update for Windows XP (KB930916)
        Update for Windows XP (KB931836)
        Update for Windows XP (KB932823-v3)
        Update for Windows XP (KB936357)
        Update for Windows XP (KB938828)
        Update for Windows XP (KB942763)
        Update for Windows XP (KB943729)
        Update for Windows XP (KB951072-v2)
        Update for Windows XP (KB955759)
        Update for Windows XP (KB955839)
        Update for Windows XP (KB967715)
        Update for Windows XP (KB968389)
        Update for Windows XP (KB971737)
        Update for Windows XP (KB973687)
        Update for Windows XP (KB973815)
        VC80CRTRedist - 8.0.50727.6195
        WebFldrs XP
        WIDCOMM Bluetooth Software
        Windows Genuine Advantage Notifications (KB905474)
        Windows Genuine Advantage Validation Tool (KB892130)
        Windows Imaging Component
        Windows Installer 3.1 (KB893803)
        Windows Internet Explorer 7
        Windows Internet Explorer 7 Multilingual User Interface (MUI)
        Windows Internet Explorer 8
        Windows Media Format 11 runtime
        Windows Media Format SDK Hotfix - KB891122
        Windows Media Player 11
        Windows Media Player Firefox Plugin
        Windows Messenger 5.1
        Windows Presentation Foundation
        Windows XP Hotfix - KB873333
        Windows XP Hotfix - KB873339
        Windows XP Hotfix - KB885250
        Windows XP Hotfix - KB885835
        Windows XP Hotfix - KB885836
        Windows XP Hotfix - KB886185
        Windows XP Hotfix - KB887742
        Windows XP Hotfix - KB888113
        Windows XP Hotfix - KB888302
        Windows XP Hotfix - KB890175
        Windows XP Hotfix - KB890859
        Windows XP Hotfix - KB891781
        Windows XP Hotfix - KB893086
        XML Paper Specification Shared Components Pack 1.0
        XnView 1.97.8
        .
        ==== Event Viewer Messages From Past Week ========
        .
        11/11/2012 2:33:45 PM, error: Service Control Manager [7016]  - The BrSplService service has reported an invalid current state 0.
        08/11/2012 9:36:25 AM, error: Dhcp [1002]  - The IP address lease 207.6.209.204 for the Network Card with network address 001E0BA221B9 has been denied by the DHCP server 192.168.1.254 (The DHCP Server sent a DHCPNACK message).
        06/11/2012 9:12:22 AM, error: Service Control Manager [7026]  - The following boot-start or system-start driver(s) failed to load:  i8042prt
        06/11/2012 9:12:22 AM, error: Service Control Manager [7022]  - The PandoraService service hung on starting.
        06/11/2012 9:10:47 AM, error: Service Control Manager [7000]  - The Java Quick Starter service failed to start due to the following error:  The system cannot find the path specified.
        04/11/2012 12:46:34 PM, error: Dhcp [1002]  - The IP address lease 207.6.210.171 for the Network Card with network address 001E0BA221B9 has been denied by the DHCP server 192.168.1.254 (The DHCP Server sent a DHCPNACK message).
        .
        ==== End Of File ===========================

        Dusty



          Egghead

        • I could if she would, but she won't so I don't.
        • Thanked: 75
        • Experience: Beginner
        • OS: Windows XP
        Re: Comodo detected:Heur.suspicious@1.
        « Reply #5 on: November 12, 2012, 02:08:57 AM »
        Hi Painted Pony.  Queries about infections are handled by Authorised Malware Removal Specialists who hang out on the Computer Viruses and Spyware forum to which Allen directed you in his post viz:

        Quote from: Allen
        "Please follow the instructions in the following link and post your logs in the thread you create (NOT in this thread):
        http://www.computerhope.com/forum/index.php/topic,46313.0.html"

        What do you not understand about the instructions?
        One good deed is worth more than a year of good intentions.

        Painted Pony

          Topic Starter


          Rookie

          • Experience: Familiar
          • OS: Windows 7
          Re: Comodo detected:Heur.suspicious@1.
          « Reply #6 on: November 12, 2012, 10:10:44 AM »
          Should I cut & paste my logs there then?

          patio

          • Moderator


          • Genius
          • Maud' Dib
          • Thanked: 1769
            • Yes
          • Experience: Beginner
          • OS: Windows 7
          Re: Comodo detected:Heur.suspicious@1.
          « Reply #7 on: November 12, 2012, 11:14:33 AM »
          I'll move it for you...
          " Anyone who goes to a psychiatrist should have his head examined. "

          Allan

          • Moderator

          • Mastermind
          • Thanked: 1260
          • Experience: Guru
          • OS: Windows 10
          Re: Comodo detected:Heur.suspicious@1.
          « Reply #8 on: November 12, 2012, 11:51:18 AM »
          Are there multiple threads on this topic?

          Painted Pony

            Topic Starter


            Rookie

            • Experience: Familiar
            • OS: Windows 7
            Re: Comodo detected:Heur.suspicious@1.
            « Reply #9 on: November 12, 2012, 12:25:31 PM »
            my apologies Alan -- I screwed up and posted my logfiles here when I shouldn't have. I've posted my combofix log file in the virus removal forum a few moments ago.

            Allan

            • Moderator

            • Mastermind
            • Thanked: 1260
            • Experience: Guru
            • OS: Windows 10
            Re: Comodo detected:Heur.suspicious@1.
            « Reply #10 on: November 12, 2012, 01:10:26 PM »
            Okay - no problem.... So it's okay to lock this thread now?

            Painted Pony

              Topic Starter


              Rookie

              • Experience: Familiar
              • OS: Windows 7
              Re: Comodo detected:Heur.suspicious@1.
              « Reply #11 on: November 12, 2012, 01:20:03 PM »
              Yes & thanks.

              Allan

              • Moderator

              • Mastermind
              • Thanked: 1260
              • Experience: Guru
              • OS: Windows 10
              Re: Comodo detected:Heur.suspicious@1.
              « Reply #12 on: November 12, 2012, 01:32:23 PM »
              Okay. I see DragonMaster Jay is working with you in the other thread. You're in good hands - and hope he can get you back to normal soon.