he was tryign to bott into safe mode because you suggested doing teh prework.... which instructs yuo to bott into safe mode to do teh avg and superanto spyware scans

Oh, ok. No problems. There's two alternatives in this case. When he comes to logon in safe mode, try using the username administrator instead of his own account (providing that this account password is either blank, or if it's been changed, hopefully he remembers it). Otherwise both AVG and hijackthis will still work in normal to at least get the logs back here without any problems.

__________________

Links: myFavoritesHomepage, Submit your URL to cyberJuice USA / UK online shopping links and blogs

ok his first avg scan report didnt save for some reason and the second scan tuns up clean (cause the first one already deleted/quarantined whatever needed to be) so the second scan would have been useless. So here are the superantispyware and hjt logs

Attached Files

	hijackthis(2).log (6.7 KB, 1 views)
	SUPERAntiSpyware Scan Log - 03-21-2008 - 07-25-50.log (558 Bytes, 0 views)

hello antoine, the log is pretty clean. You can fix this:

O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -

Let's dig deeper, but I think it's good to go.

Go here: http://www.bleepingcomputer.com/comb...o-use-combofix
Follow the instructions for ComboFix, then paste the results along with a new HJT log.

Thanks,

v

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

heers the combofix and new hjt log

Attached Files

	hijackthis 3-31-08.txt (6.3 KB, 1 views)
	ComboFix.txt (12.2 KB, 2 views)

still need to fix this with HJT:

O16 - DPF: {DBA230D1-8467-4e69-987E-5FAE815A3B45} -

Other than that, how's the rig running? Everything looks pretty good, but we can dig deeper if necessary.

thanks,

v

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

well after doing all that i tried uploading a video again... this time the upload froze (the net stayed connected though) i tried again and the upload was successful, however i tried uploading the next video the upload froze twice then the third attempt i lost net connection (just like stated in the above post) and had to estart, still havent gotten it to upload yet, so im guesing getting that first video up was pure luck. looks like we still have some work to do lol

Using Internet Explorer, visit Free Virus Scan - Kaspersky Lab

Answer Yes, when prompted to install an ActiveX component.

• The program will then begin downloading the latest definition files.
• Once the files have been downloaded click on NEXT
• Locate the Scan Settings button & configure to:
  • Scan using the following Anti-Virus database:
    • Extended
  • Scan Options:
    • Scan Archives
    • Scan Mail Bases
• Click OK & have it scan My Computer
• Once the scan is complete, it will display if your system has been infected. It does not provide an option to clean/disinfect. We only require a report from it.
• Click the Save as Text button to save the file to your desktop so that you may post it in your next reply
• Turn off the real time scanner of any existing antivirus program while performing the online scan

Thanks,

v

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

hmm i just tried it and got this message "update process failed. you must be online to update virus signatures...." even though i am online

do you have a firewall running?

__________________

M.C.S.A.
M.C.P. - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

ok heres the log

Attached Files

kaspery_scan_log.html (47.6 KB, 2 views)