Symbianize Forum
Most of our features and services are available only to members, so we encourage you to login or register a new account. Registration is free, fast and simple. You only need to provide a valid email. Being a member you'll gain access to all member forums and features, post a message to ask question or provide answer, and share or find resources related to mobile phones, tablets, computers, game consoles, and multimedia.
All that and more, so what are you waiting for, click the register button and join us now! Ito ang website na ginawa ng pinoy para sa pinoy!
╔► ★ Mobilarian Lab ★ ◄╗
- Thread starter superreggaemaniaks
- Start date
- Replies 907
- Views 41,719
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #442
Re: Symbianize Lab
Run ComboFix in safemode and post the log here. .
Run ComboFix in safemode and post the log here. .
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #443
Re: Symbianize Lab
Download spybot search and destroy sa http://www.safer-networking.org/dl/ at run mo rin ang LSP Fix makukuha mo yan dito sa http://www.cexx.org/lspfix.htm
sir yan po sa akin.. madalas po kasi magpopup ng notification ang eset ng unable to clean na file.
tapos minsan naghang laptop ko
Download spybot search and destroy sa http://www.safer-networking.org/dl/ at run mo rin ang LSP Fix makukuha mo yan dito sa http://www.cexx.org/lspfix.htm
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #444
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #445
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #447
- Messages
- 28
- Reaction score
- 0
- Points
- 26
Re: Symbianize Lab
pa help po sa pc ko sa tingin ko may virus na kumakaen ng spce sa hard drive ko ska hinde ko po manually ma-delete ung mga hindi kylangan na sofware.. thnx po! newbie here!
eto po ung log nung sakin:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:50:40 AM, on 8/23/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
G:\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {707db484-2428-402d-afb5-d85b387544c7} - (no file)
O2 - BHO: FileServeManager - {00000001-AB3B-4334-9DA2-EC6B2A02AFC6} - (no file)
O2 - BHO: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll (file missing)
O2 - BHO: TBSB01457 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O3 - Toolbar: AllGamesHome Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - (no file)
O3 - Toolbar: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll (file missing)
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Kurei\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O8 - Extra context menu item: Download with FileServe Manager - C:\Program Files\FileServe Manager\GetUrl.htm
O9 - Extra button: AllGamesHome Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - (no file)
O9 - Extra 'Tools' menuitem: AllGamesHome Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Autorun CDROM Monitor - Unknown owner - C:\Windows\system32\SupportAppXL\cdrom_mon.exe
O23 - Service: Globe Tattoo Broadband. OUC (Globe Tattoo Broadband. RunOuc) - Unknown owner - C:\Program Files\Globe Tattoo Broadband\UpdateDog\ouc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HWDeviceService.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe (file missing)
--
End of file - 4177 bytes
pa help po sa pc ko sa tingin ko may virus na kumakaen ng spce sa hard drive ko ska hinde ko po manually ma-delete ung mga hindi kylangan na sofware.. thnx po! newbie here!
eto po ung log nung sakin:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:50:40 AM, on 8/23/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16448)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\ProgramData\DatacardService\DCSHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
G:\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {707db484-2428-402d-afb5-d85b387544c7} - (no file)
O2 - BHO: FileServeManager - {00000001-AB3B-4334-9DA2-EC6B2A02AFC6} - (no file)
O2 - BHO: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll (file missing)
O2 - BHO: TBSB01457 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - (no file)
O3 - Toolbar: AllGamesHome Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - (no file)
O3 - Toolbar: Wincore Mediabar - {28387537-e3f9-4ed7-860c-11e69af4a8a0} - C:\PROGRA~1\IMESHA~1\MediaBar\Datamngr\ToolBar\wincoreimdtx.dll (file missing)
O4 - HKLM\..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Kurei\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O8 - Extra context menu item: Download with FileServe Manager - C:\Program Files\FileServe Manager\GetUrl.htm
O9 - Extra button: AllGamesHome Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - (no file)
O9 - Extra 'Tools' menuitem: AllGamesHome Toolbar - {5FC86FB3-A8B1-400B-8BE7-0EAF0D857F5D} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Autorun CDROM Monitor - Unknown owner - C:\Windows\system32\SupportAppXL\cdrom_mon.exe
O23 - Service: Globe Tattoo Broadband. OUC (Globe Tattoo Broadband. RunOuc) - Unknown owner - C:\Program Files\Globe Tattoo Broadband\UpdateDog\ouc.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HWDeviceService.exe - Unknown owner - C:\ProgramData\DatacardService\HWDeviceService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\Windows\system32\GameMon.des.exe (file missing)
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2012\TuneUpUtilitiesService32.exe (file missing)
--
End of file - 4177 bytes
Last edited:
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #449
Re: Symbianize Lab
Ok run mo malwarebytes na makikita mo sa first page ng thread na ito . . UPDATE mo muna yung malwarebytes at i run mo ng FULL SCAN mode then post the log here. .
Ok run mo malwarebytes na makikita mo sa first page ng thread na ito . . UPDATE mo muna yung malwarebytes at i run mo ng FULL SCAN mode then post the log here. .
- Messages
- 28
- Reaction score
- 0
- Points
- 26
Re: Symbianize Lab
sir eto na po ung result ng malware scan:
Malwarebytes Anti-Malware (Trial) 1.62.0.1300
www.malwarebytes.org
Database version: v2012.08.23.02
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Kurei :: KUREI-PC [administrator]
Protection: Enabled
8/23/2012 10:20:36 AM
mbam-log-2012-08-23 (11-26-01).txt
Scan type: Full scan (C:\|D:\|G:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 255575
Time elapsed: 1 hour(s), 3 minute(s), 34 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 2
C:\Users\Kurei\AppData\Local\Temp\Rar$EX00.864\NOOB.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
C:\Users\Kurei\AppData\Local\Temp\Rar$EX01.975\NOOB.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
sir eto na po ung result ng malware scan:
Malwarebytes Anti-Malware (Trial) 1.62.0.1300
www.malwarebytes.org
Database version: v2012.08.23.02
Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Kurei :: KUREI-PC [administrator]
Protection: Enabled
8/23/2012 10:20:36 AM
mbam-log-2012-08-23 (11-26-01).txt
Scan type: Full scan (C:\|D:\|G:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 255575
Time elapsed: 1 hour(s), 3 minute(s), 34 second(s)
Memory Processes Detected: 0
(No malicious items detected)
Memory Modules Detected: 0
(No malicious items detected)
Registry Keys Detected: 0
(No malicious items detected)
Registry Values Detected: 0
(No malicious items detected)
Registry Data Items Detected: 0
(No malicious items detected)
Folders Detected: 0
(No malicious items detected)
Files Detected: 2
C:\Users\Kurei\AppData\Local\Temp\Rar$EX00.864\NOOB.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
C:\Users\Kurei\AppData\Local\Temp\Rar$EX01.975\NOOB.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #451
Re: Symbianize Lab
Kita mo sir? meron na detect sya at HackTool.DDoS
Files Detected: 2
C:\Users\Kurei\AppData\Local\Temp\Rar$EX00.864\NOO B.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
C:\Users\Kurei\AppData\Local\Temp\Rar$EX01.975\NOO B.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
Kung kayang i delete mo ito kasi nakikita mo naman na infected ang system mo sir. .
Run Combofix in safemode and post the log here. .
Kita mo sir? meron na detect sya at HackTool.DDoS
Files Detected: 2
C:\Users\Kurei\AppData\Local\Temp\Rar$EX00.864\NOO B.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
C:\Users\Kurei\AppData\Local\Temp\Rar$EX01.975\NOO B.KILLER.leerz.exe (HackTool.DDoS) -> No action taken.
Kung kayang i delete mo ito kasi nakikita mo naman na infected ang system mo sir. .
Run Combofix in safemode and post the log here. .
Last edited:
- Messages
- 28
- Reaction score
- 0
- Points
- 26
Re: Symbianize Lab
sir hindi ko na po nagawang irun sa safe mode, nag autorun na sya kusa. eto na po result:
sir hindi ko na po nagawang irun sa safe mode, nag autorun na sya kusa. eto na po result:
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #457
Re: Symbianize Lab
Ok run again HJT and post the log here. .
pacheck ulet sir if ok na.thanks
Ok run again HJT and post the log here. .
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #458
- Messages
- 237
- Reaction score
- 0
- Points
- 26
Re: Symbianize Lab
sir nag BSOD ako kapag mag safe mode ako...d ako makainstall ng mga anti-virus
sir nag BSOD ako kapag mag safe mode ako...d ako makainstall ng mga anti-virus
- Messages
- 2,876
- Reaction score
- 846
- Points
- 818
- Thread Starter
- #460
Re: Symbianize Lab
Whew daming URL's entries huh. . at proxy hmmmnnn. .something fishy? OK run mo ang malwarebytes na makikita mo sa first page nitong thread at paki update sya , Kindly run it in FULL SCAN MODE and remember DAPAT updated ang malwarebytes mo then post the log here. .
Whew daming URL's entries huh. . at proxy hmmmnnn. .something fishy? OK run mo ang malwarebytes na makikita mo sa first page nitong thread at paki update sya , Kindly run it in FULL SCAN MODE and remember DAPAT updated ang malwarebytes mo then post the log here. .
Similar threads
