[Resolved]Boot time scan result

General Topics
1

I have done a boot time scan a couple of times and got this result:

FILE C:\bundle\works\REDIST\IE6\TEMPFILE.CAB|>msoe.chm|msoe.hhk Error 42136{CHM archive corrupted}

Also:

FILE C:\bundle\works\REDIST\IE6\tempfile.CAB|>msoe.chm ERROR 42127{CAB archive is.}
corrupted}

Sometimes when i search for sites,my browser takes me to a different site then the one i had clicked on,i had found and isolated a trojon.Could anyone advise me as to what to do about this?,thanks.

2

You can also run a scan with malwarebytes to see what it pick’s up, i would recomend though that once you solve this problem it would be wise to update your browser to ie8 as ie6 is very unsafe and not supported anymore.

3

Hi.thanks for the reply.I have run a Malwarebyte scan,that and the Avast both come up clean apart from the above message.I was surprised by the IE6 bit as i thought it had been updated to IE8 ages ago. ???

4

Make sure that MBAM is updated to the latest before running, program version 1.50.1.1100- data base version 5384.
If you click tool’s in internet explorer then click about internet explore that will tell you your version.

5

Do you have Microsoft Works on your computer ???
If so, this is left over from the initial install.

6

Thanks for the replies,yes,we do have microsoft works.i checked and ie did need changing,it couldnt have updated before.When i run the boot scan now,it doesnt show any problems but i am still having the problem that sometimes when i search for something or click on a site,i am taken to a completely different one.i have run full scans with Avast and Malwarebyte,both of which i have updated and they are both showing up clean. ???

7

Try running this, if you have a redirct bug this often removes it

Kaspersky TDSSkiller
http://support.kaspersky.com/viruses/solutions?qid=208280684

report back, if it does not work then we send you to Essexboy :wink:

8

Hi Pondus.thanks for the reply.I have just downloaded and tried the scan,that is coming up clean as well. ???

9

Follow this guide form our expert malware remover Essexboy and post the log`s here
http://forum.avast.com/index.php?topic=53253.0

To avoid using multiple post with copy and paste you have to attach the log`s
Lower left corner: Additional Options > Attach ( OTL.Txt and Extras.Txt. and Malwarebytes scan log)

Essexboy usually arrives in the forum late UK time

10

Subscribed ;D

11

Downloaded the newer OTL,done scan.Now,im probably going to sound stupid,but i cant figure out how to post the results as even one of the logs is too long to post ???

12

So are you saying this does not work ???

( Lower left corner: Additional Options > Attach ( OTL.Txt and Extras.Txt. and Malwarebytes scan log)

have you tried using separate post for each log ?

13

Will try again,

14

Yay,it worked lol,should i upload a Malwarebytes scan report,that just shows up clear?

15

No don`t have to if clean

You can start looking for Essexboy in something like 5 hours

16

On completion of this run can you check for re-directs

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

:OTL O2 - BHO: (no name) - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - No CLSID value found. O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - BigBitmap - No CLSID value found. O3 - HKLM\..\Toolbar: (no name) - SmallBitmap - No CLSID value found. [2008/08/14 11:45:00 | 000,000,406 | -HS- | C] () -- C:\WINDOWS\System32\gvafejyr.ini [2010/12/30 07:43:10 | 000,000,316 | -HS- | M] () -- C:\WINDOWS\Tasks\IMCNED.job @Alternate Data Stream - 24 bytes -> C:\WINDOWS:48A941917FC4C2A0

:Files
ipconfig /flushdns /c

:Commands
[purity]
[resethosts]
[emptytemp]
[EMPTYFLASH]
[CREATERESTOREPOINT]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

17

Hi Essexboy,thanks for your responce and help,here are the results,the fix produced one log,the scan another,here they are,will have a few goes at searches this morning,then out untill tomorrow night.

18

Let me know if the redirects are cleared

19

So far so good,no directs! ;D.Hopefully that has done it,a few times it directed my wife to rather dodgy sites lol,luckily that didnt happen to my daughter.What caused it by the way?

20

So you are still getting intermittent redirects ? Are they in FF or IE ?

I removed some proxy settings and then the task that reset them C:\WINDOWS\Tasks\IMCNED.job