Att: Essexboy. Worried about malware & keyloggers

Did the analysis once again and the same window comes up. Do you have any idea why? What kind of sick thing is this…?

Just re-run it on my system and the zip file is in the temporary folders area

However, as it found no infections it may just be that your temp files are fairly full or your paths are not correctly set up

Lets check them out with a different tool

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

  • IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

[*]Double click on ComboFix.exe & follow the prompts.
[*]Accept the disclaimer and allow to update if it asks

http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png

http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png

[*]When finished, it shall produce a log for you.
[*]Please include the C:\ComboFix.txt in your next reply.

Notes:

  1. Do not mouse-click Combofix’s window while it is running. That may cause it to stall.
  2. Do not “re-run” Combofix. If you have a problem, reply back for further instructions.
  3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.

Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

So I’m just gonna disable Avast before I do this? Couldn’t this be harmful as viruses can get in during this time?

No not for the period it will be running as Combofix will monitor that

I turned off Avast;
It started scanning, everything was fine
I found some files that i think it said that it was going to remove
Im gone for 1 minute and when I look again the computer is starting up (looks normal)
Im trying to figure out if the scan is finished or why the computer was shut down and then the Combofix window just starts flickering and moving at the same time like crazy on the screen.
I try to shut Combofix down with the taskmanager but it just flickers in there like it’s turning itself on and off several times per second.
It was going on for 5 minutes until I had to turn the computer off.
The window appeared again when I started the computer now but I managed to shut it down before it started flickering again. HELP!

I’m not sure if this is the right document, found it in; Computer (C) - Combofix

Combofix will run through approximately 50stages as it does its work

was this what you were seeing, each stage counting off ?

How can I upload a film so you can see? Realized I couldn’t do it here. There’s just no other way I can describe it.

I think I might understand what you are saying and I will check it out, meanwhile is the computer behaving itself ?

Im uploading it now on imageshack. Done in a while if it works. Yes, strange as it is, the computer is acting normal right now.

OK I will be off to bed in a bit, but will look at it as soon as I can

Okey. It might take 30 min more as it looks now. If you could look tomorrow it would be great.

http://firmafest.mediashare.com?selectedalbum=firmafest549379

Link doesn’t work for some reason so just copy - paste

They need to be wrapped in the forum URL tags, see code & image example below (click to expand image):

Code Example:
[nobbc]http://firmafest.mediashare.com?selectedalbum=firmafest549379[/nobbc]

Looks like when displayed:
http://firmafest.mediashare.com?selectedalbum=firmafest549379

Looks like a video driver problem, mayhap it is as Combofix is checking the veracity of the file

We can check that out if you wish… Meanwhile how is the computer behaving in general ?

Yes I would like it if you’d wanna check it out. How can you do that?

The computer is actually behaving normally for now but combofix opens everytime I turn the computer on.

OK run the following to stop combofix in its tracks

Remove ComboFix
[*]Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
[*]In the Run box, type in ComboFix /Uninstall
(Notice the space between the “x” and “/”)
then click OK

http://i1224.photobucket.com/albums/ee362/Essexboy3/Misc%20screen%20shots/CF_Uninstall-1.jpg

[]Follow the prompts on the screen
[
]A message should appear confirming that ComboFix was uninstalled

OK for the video driver

Could you go to control panel > Device manager
Right click the display adapters and select properties
Select the driver tab then attach a screenshot of that so I can see what card it is

When Im trying to uninstall combofix Avast searches it and finds harmful codes.
Then it says that I should open Combofix in the sandbox and then I press yes and then it doesnt open.
Does Combofix contain harmful codes?!