joshdnelson

ComboFix.txt

Ok. That went well. ComboFix.txt

It's asking me to disable avast and spybot. I set avast to 'silent mode'. Is this okay? How should I disable Spybot?

That worked. The only reason I continue to bring up the Sophos hits is that it can't seem to remove them. I originally sent in a log to Sophos and they assumed that the programs inability to remove the files was due to some other piece of hidden malware. Sorry to keep bothering you. I'm sure these questions appear elementary to you. Thanks for humoring me.

I can access the same email with the chrome browser.

Thank you very much for your time. I really appreciate the work that you are doing for the PC community. Everything appears to be running well. I installed the majority of your suggestions. The email still seems to be an issue, even after I reinstalled Firefox. Would I have to delete personal settings for this fix to work? I didn't want to delete my bookmarks, favorites etc, but perhaps this is required.

The updates worked fine. I did try to access my email account again and was still not able to. This doesn't really matter to me and if its not a sign of an active infection and you're not worried by it then I won't be either. I also tried running Sophos Anti-Rootkit again. It still comes up with the following positive hits: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H3MGPZ34\tile=2;dc_ref=http%3A%2F%2Fwww.craveonline[1].com%2Fmusic%2Farticles%2F542295-finally-the-kanye-west-video-game;type=;ord=7716718621593029; C:\Users\Josh Nelson\AppData\Roaming\Mozilla\Firefox\Profiles\netq7pz9.default\sessionstore.js.tmp C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KBUB21UE\line[1].com%2Fmusic%2Farticles%2F542295-finally-the-kanye-west-video-game;type=;ord=7716718621593029;dcopt=ist;type=pop;type=int;type=boom; C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KBUB21UE\tile=3;dc_ref=http%3A%2F%2Fwww.craveonline[1].com%2Fmusic%2Farticles%2F542295-finally-the-kanye-west-video-game;type=;ord=7716718621593029; C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\70WDZCUI\tile=4;dc_ref=http%3A%2F%2Fwww.craveonline[1].com%2Fmusic%2Farticles%2F542295-finally-the-kanye-west-video-game;type=;ord=7716718621593029; Is Sophos a reliable piece of software? The only reason I ran it again is because it was the only anit-rootkit program that still came up with positive hits before I contacted you.

ComboFix.txt

ComboFix.txt Rkill.txt

Would you like me to run rkill again?

Rkill.txt Is this a particularly nasty infection?

ComboFix.txt

That worked. Thanks!

I just realized something new. When I try to boot Dark Souls on steam I get this error: Illegal operation attempted on a registry key that has been mark for deletion. I get the same error while attempting to run other games on steam and MSI Afterburner.

log.txt