Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Microsoft XP problems  (Read 6896 times)

0 Members and 1 Guest are viewing this topic.

makuta2

    Topic Starter


    Rookie

    Re: Microsoft XP problems
    « Reply #15 on: February 21, 2010, 11:20:58 AM »
    ROOTREPEAL (c) AD, 2007-2009
    ==================================================
    Scan Start Time:      2010/02/21 10:00
    Program Version:      Version 1.3.5.0
    Windows Version:      Windows XP SP3
    ==================================================

    Drivers
    -------------------
    Name: dump_atapi.sys
    Image Path: C:\WINDOWS\System32\Drivers\dump_atapi.sys
    Address: 0xEF275000   Size: 98304   File Visible: No   Signed: -
    Status: -

    Name: dump_WMILIB.SYS
    Image Path: C:\WINDOWS\System32\Drivers\dump_WMILIB.SYS
    Address: 0xF8CBC000   Size: 8192   File Visible: No   Signed: -
    Status: -

    Name: PCI_PNP0452
    Image Path: \Driver\PCI_PNP0452
    Address: 0x00000000   Size: 0   File Visible: No   Signed: -
    Status: -

    Name: rootrepeal.sys
    Image Path: C:\WINDOWS\system32\drivers\rootrepeal.sys
    Address: 0xEE52D000   Size: 49152   File Visible: No   Signed: -
    Status: -

    Name: sptd
    Image Path: \Driver\sptd
    Address: 0x00000000   Size: 0   File Visible: No   Signed: -
    Status: -

    Name: spxa.sys
    Image Path: spxa.sys
    Address: 0xF8621000   Size: 1048576   File Visible: No   Signed: -
    Status: -

    SSDT
    -------------------
    #: 041   Function Name: NtCreateKey
    Status: Hooked by "spxa.sys" at address 0xf86220e0

    #: 071   Function Name: NtEnumerateKey
    Status: Hooked by "spxa.sys" at address 0xf8640ca2

    #: 073   Function Name: NtEnumerateValueKey
    Status: Hooked by "spxa.sys" at address 0xf8641030

    #: 119   Function Name: NtOpenKey
    Status: Hooked by "spxa.sys" at address 0xf86220c0

    #: 160   Function Name: NtQueryKey
    Status: Hooked by "spxa.sys" at address 0xf8641108

    #: 177   Function Name: NtQueryValueKey
    Status: Hooked by "spxa.sys" at address 0xf8640f88

    #: 247   Function Name: NtSetValueKey
    Status: Hooked by "spxa.sys" at address 0xf864119a

    Stealth Objects
    -------------------
    Object: Hidden Code [Driver: Ntfs, IRP_MJ_CREATE]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_CLOSE]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_READ]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_WRITE]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_INFORMATION]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_INFORMATION]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_EA]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_EA]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_FLUSH_BUFFERS]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_VOLUME_INFORMATION]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_VOLUME_INFORMATION]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_DIRECTORY_CONTROL]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_FILE_SYSTEM_CONTROL]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_SHUTDOWN]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_LOCK_CONTROL]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_CLEANUP]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_SECURITY]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_SECURITY]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_QUERY_QUOTA]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_SET_QUOTA]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Ntfs, IRP_MJ_PNP]
    Process: System   Address: 0x82f8a1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_CREATE]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_CLOSE]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_READ]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_WRITE]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_FLUSH_BUFFERS]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_INTERNAL_DEVICE_CONTROL]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_SHUTDOWN]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_POWER]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_SYSTEM_CONTROL]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: Cdrom, IRP_MJ_PNP]
    Process: System   Address: 0x82d5d1f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_CREATE]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_CLOSE]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_INTERNAL_DEVICE_CONTROL]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_POWER]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_SYSTEM_CONTROL]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: usbuhci, IRP_MJ_PNP]
    Process: System   Address: 0x82de11f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_CREATE]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_READ]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_WRITE]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_FLUSH_BUFFERS]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_INTERNAL_DEVICE_CONTROL]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_SHUTDOWN]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_CLEANUP]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_POWER]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_SYSTEM_CONTROL]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: Ftdisk, IRP_MJ_PNP]
    Process: System   Address: 0x82f8d1f8   Size: 121

    Object: Hidden Code [Driver: NetBT, IRP_MJ_CREATE]
    Process: System   Address: 0x82b0b1f8   Size: 121

    Object: Hidden Code [Driver: NetBT, IRP_MJ_CLOSE]
    Process: System   Address: 0x82b0b1f8   Size: 121

    Object: Hidden Code [Driver: NetBT, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82b0b1f8   Size: 121

    Object: Hidden Code [Driver: NetBT, IRP_MJ_INTERNAL_DEVICE_CONTROL]
    Process: System   Address: 0x82b0b1f8   Size: 121

    Object: Hidden Code [Driver: NetBT, IRP_MJ_CLEANUP]
    Process: System   Address: 0x82b0b1f8   Size: 121

    Object: Hidden Code [Driver: NetBT, IRP_MJ_PNP]
    Process: System   Address: 0x82b0b1f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_CREATE]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_CLOSE]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_INTERNAL_DEVICE_CONTROL]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_POWER]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_SYSTEM_CONTROL]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: usbehci, IRP_MJ_PNP]
    Process: System   Address: 0x82de91f8   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE_NAMED_PIPE]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CLOSE]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_READ]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_WRITE]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_INFORMATION]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_INFORMATION]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_EA]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_EA]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_FLUSH_BUFFERS]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_VOLUME_INFORMATION]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_VOLUME_INFORMATION]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DIRECTORY_CONTROL]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_FILE_SYSTEM_CONTROL]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_INTERNAL_DEVICE_CONTROL]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SHUTDOWN]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_LOCK_CONTROL]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CLEANUP]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_CREATE_MAILSLOT]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_SECURITY]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_SECURITY]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_POWER]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SYSTEM_CONTROL]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_DEVICE_CHANGE]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_QUERY_QUOTA]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_SET_QUOTA]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: MRxSmb, IRP_MJ_PNP]
    Process: System   Address: 0x82c8e500   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_CREATE]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_CLOSE]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_READ]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_QUERY_INFORMATION]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_SET_INFORMATION]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_QUERY_VOLUME_INFORMATION]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_DIRECTORY_CONTROL]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_FILE_SYSTEM_CONTROL]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_DEVICE_CONTROL]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_SHUTDOWN]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_LOCK_CONTROL]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_CLEANUP]
    Process: System   Address: 0x82cfa1f8   Size: 121

    Object: Hidden Code [Driver: Cdfsȅఅ瑁䅭걈(쀨؁SysICS, IRP_MJ_PNP]
    Process: System   Address: 0x82cfa1f8   Size: 121

    ==EOF==

    evilfantasy

    • Malware Removal Specialist
    • Moderator


    • Genius
    • Calm like a bomb
    • Thanked: 489
    • Experience: Familiar
    • OS: Windows 10
    Re: Microsoft XP problems
    « Reply #16 on: February 21, 2010, 11:22:49 AM »
    * Click START then RUN - Vista users press the Windows Key and the R keys for the Run box.
    * Now type Combofix /Uninstall in the runbox
    * Make sure there's a space between Combofix and /Uninstall
    * Then hit Enter

    * The above procedure will:
    * Delete the following:
    * ComboFix and its associated files and folders.
    * Reset the clock settings.
    * Hide file extensions, if required.
    * Hide System/Hidden files, if required.
    * Set a new, clean Restore Point.

    ----------

    Clean out your temporary internet files and temp files.

    Download TFC by OldTimer to your desktop.

    Double-click TFC.exe to run it.

    Note: If you are running on Vista, right-click on the file and choose Run As Administrator

    TFC will close all programs when run, so make sure you have saved all your work before you begin.

    * Click the Start button to begin the cleaning process.
    * Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. 
    * Please let TFC run uninterrupted until it is finished.

    Once TFC is finished it should restart your computer. If it does not, please manually restart the computer yourself to ensure a complete cleaning.

    ----------

    ESET Online Scan

    Scan your computer with the ESET FREE Online Virus Scan

    * Click the ESET Online Scanner button.

    * For alternate browsers only: (Microsoft Internet Explorer users can skip these steps)
    * Click on the esetsmartinstaller_enu.exe to download the ESET Smart Installer. Save it to your desktop
    * Double click on the esetsmartinstaller_enu.exe icon on your desktop.
    * Place a check mark next to YES, I accept the Terms of Use.

    * Click the Start button.
    * Accept any security warnings from your browser.
    * Leave the check mark next to Remove found threats and place a check next to Scan archives.
    * Click the Start button.
    * ESET will then download updates, install, and begin scanning your computer. Please be patient as this can take some time.
    * When the scan completes, click List of found threats.
    * Next click Export to text file and save the file to your desktop using a name such as ESETScan. Include the contents of this report in your next reply.
    * Click the <<Back button then click Finish.

    In your next reply please include the ESET Online Scan Log

    makuta2

      Topic Starter


      Rookie

      Re: Microsoft XP problems
      « Reply #17 on: February 21, 2010, 03:51:26 PM »
      ESET scan log

      [Saving space, attachment deleted by admin]

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 489
      • Experience: Familiar
      • OS: Windows 10
      Re: Microsoft XP problems
      « Reply #18 on: February 21, 2010, 04:16:15 PM »
      Looks good.

      Sorry SuperDave, I sort of took this over after you had done the hard part.  :P


      Use the Secunia Software Inspector to check for out of date software.

      * Click Start Now
      * Check the box next to Enable thorough system inspection.
      * Click Start
      * Allow the scan to finish and scroll down to see if any updates are needed.
      * Update anything listed.

      ----------

      Go to Microsoft Windows Update and get all critical updates.

      ----------

      If you are using or have installed IE6 you are using an outdated and soon to be unsupported version of Internet Explorer and I strongly suggest you update to the latest version directly from Microsoft Internet Explorer 8: Home page.

      ----------

      I recommend you keep SUPERAntiSpyware and Malwarebytes Anti-Malware for scanning/removal of malware. Unless you purchase them, they provide no realtime protection so will not interfere with each other. They do not use any significant amount of resources (except a little disk space) until you run a scan.

      I suggest using WOT - Web of Trust. WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky website. It's easy and it's free.

      SpywareBlaster - Secure your Internet Explorer to make it harder for ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
      * Using SpywareBlaster to protect your computer from Spyware and Malware
      * If you don't know what ActiveX controls are, see here

      Protect yourself against spyware using the Immunize feature in Spybot - Search & Destroy.
      * Guide: Use Spybot's Immunize Feature to prevent spyware infection in real-time. Note: To ensure you have the latest Immunizations always update Spybot - Search & Destroy before Immunizing. Spybot - Search & Destroy FAQ

      Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

      Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

      makuta2

        Topic Starter


        Rookie

        Re: Microsoft XP problems
        « Reply #19 on: February 22, 2010, 10:49:45 PM »
        Thumbs.db is still on my desktop in see through form can you guys do anything about it? Not sure regular scan will work because the files were in my other folders before, too

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 489
        • Experience: Familiar
        • OS: Windows 10
        Re: Microsoft XP problems
        « Reply #20 on: February 23, 2010, 10:03:00 AM »
        See if this hides it.

        1. Open My Computer
        2. Select the Tools menu and click Folder Options
        3. Select the View tab.
        4. Under the Advanced settings box option select the following:
        5. Select Hide extensions for known file types
        6. Select Hide protected operating system files
        7. Select Do not show hidden files and folders
        8. Click OK

        If not just right click it and choose Delete.

        makuta2

          Topic Starter


          Rookie

          Re: Microsoft XP problems
          « Reply #21 on: February 23, 2010, 10:15:05 PM »
          Its not that i want to hid it, i want to know if it is harmful to my coputer.

          also when i started my computer, AVG firewall was automatically disabled. Usually it starts after 5 minutes, but this time i re-enabled it.  Even so can you find out if this is the work of some malware?

          evilfantasy

          • Malware Removal Specialist
          • Moderator


          • Genius
          • Calm like a bomb
          • Thanked: 489
          • Experience: Familiar
          • OS: Windows 10
          Re: Microsoft XP problems
          « Reply #22 on: February 23, 2010, 10:22:24 PM »
          No Thumbs.db is not dangerous but it also shouldn't be showing up on your desktop.

          We just cleaned the computer. Is the firewall staying on now?

          makuta2

            Topic Starter


            Rookie

            Re: Microsoft XP problems
            « Reply #23 on: February 23, 2010, 10:23:28 PM »
            it is now, but right when i turned on my computer it was off. There seems to be a delay of when my firewall comes up.

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 489
            • Experience: Familiar
            • OS: Windows 10
            Re: Microsoft XP problems
            « Reply #24 on: February 23, 2010, 10:25:17 PM »
            Download Security Check by screen317 from one of the following links and save it to your desktop.

            Link 1
            Link 2

            * Unzip SecurityCheck.zip and a folder named Security Check should appear.
            * Open the Security Check folder and double-click Security Check.bat
            * Follow the onscreen instructions inside of the black box.
            * A Notepad document should open automatically called checkup.txt
            * Post the contents of that document in your next reply.

            Note: If a security program requests permission from dig.exe to access the Internet, allow it to do so.

            makuta2

              Topic Starter


              Rookie

              Re: Microsoft XP problems
              « Reply #25 on: February 23, 2010, 11:08:50 PM »
               Results of screen317's Security Check version 0.99.1    
               Windows XP Service Pack 3 
              ``````````````````````````````
              Antivirus/Firewall Check:

               Windows Firewall Disabled! 
               AVG 8.5     
               ESET Online Scanner v3   
              ``````````````````````````````
              Anti-malware/Other Utilities Check:

               SUPERAntiSpyware Free Edition   
               CCleaner     
               Java(TM) 6 Update 18 
               Java Auto Updater   
               Out of date Java installed!
               Adobe Flash Player 10 
              Adobe Reader 9.3.1
              ``````````````````````````````
              Process Check: 
              objlist.exe by Laurent

               AVG avgwdsvc.exe
               AVG avgtray.exe
               AVG avgrsx.exe
               AVG avgnsx.exe
              ``````````````````````````````
              DNS Vulnerability Check:

               GREAT! (Not vulnerable to DNS cache poisoning)

              `````````End of Log```````````

              Log doesn't seen to find anything.  I'll reply tomorrow if Firewall is still delayed.  I'm just afraid that during that time some malware might be receiving files into my computer and my firewall can't do anything about it because it is disabled.

              makuta2

                Topic Starter


                Rookie

                Re: Microsoft XP problems
                « Reply #26 on: March 01, 2010, 08:27:16 PM »
                ran another security check can some one solve this issue? Avg firewall is disabled even though on my management center it said it is on!

                r Results of screen317's Security Check version 0.99.1    
                 Windows XP Service Pack 3 
                ``````````````````````````````
                Antivirus/Firewall Check:

                 Windows Firewall Disabled! 
                 AVG 8.5     
                 ESET Online Scanner v3   
                ``````````````````````````````
                Anti-malware/Other Utilities Check:

                 SUPERAntiSpyware Free Edition   
                 CCleaner     
                 Java(TM) 6 Update 18 
                 Java Auto Updater   
                 Out of date Java installed!
                 Adobe Flash Player 10 
                Adobe Reader 9.3.1
                ``````````````````````````````
                Process Check: 
                objlist.exe by Laurent

                 AVG avgwdsvc.exe
                 AVG avgtray.exe
                 AVG avgrsx.exe
                 AVG avgnsx.exe
                ``````````````````````````````
                DNS Vulnerability Check:

                 GREAT! (Not vulnerable to DNS cache poisoning)

                `````````End of Log```````````

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 489
                • Experience: Familiar
                • OS: Windows 10
                Re: Microsoft XP problems
                « Reply #27 on: March 01, 2010, 09:06:44 PM »
                It's enabled and everything looks fine.