Solved Do I have the w32 Blaster?

[cottonball]

A more recent version? What is more recent than IE 10?

Open IE

Go to Help (at the top)

Click: About Internet Explorer

What version does it say?

 

[cottonball]

When you selected the McAfee Phishing Filter under Add-ons, and it is Disabled, when you right-click it, do you get a Remove option?

If not, that means it cannot be removed from Internet Explorer 9, only disabled.

Guess it is not in Control Panel > Programs and Features > Uninstall programs, or have you not checked?

How about Revo, did it show the McAfee Phishing Filter?

 

[Jacee]

IE 10 is installed on this machine ..

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:32:54 AM, on 5/16/2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16576)
Boot mode: Normal

I don't know about anyone else, but I'm going 'batty' with this topic

 

[cottonball]

I went by the results of Security Check, which you requested:

Results of screen317's Security Check version 0.99.63
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 9


So, somewhere in the process IE 10 got in the picture (maybe a Windows update), and it still keeps getting the darn "...xxx contained a virus" message.

So, that means that it either kept some the same settings or the problem is outside of IE.

Have looked for answers and looked for answers, but, so far, no joy...

Ever heard of a conundrum? (this has nothing to do with birth control)

 

[Prescottbob]

10.0.9200.16761c
updateversion10.5KB2829530

no remove option for the Phish add-on

Phish was in Control Panel-we removed it

M y mind is a blank on what Revo showed

 

[Prescottbob]

I looked at Revo again to refresh my memory. Nothing of McAfee is on the Revo list but I really don't remember removing it!!

 

[VistaKing]

Prescottbob

Just an idea . Why not just do a clean installation of Windows ?

 

[Prescottbob]

It appears that may be the best option--there may not be a horse at the end of this rope!

 

[VistaKing]

I'd do a scan on the flash drive just to see if anything is hiding in there . You don't want to install anything on a clean installation . Use gregrocker's OEM clean installation tutorial .

 

[Prescottbob]

It's going to take a few days to prepare for this clean install. Meanwhile, if y'all want to pull some more rope just post it.

 

[VistaKing]

It's like the movie The Never Ending Story where the horse is sinking and we are pulling and at the end of the movie the horse is back

 

[Prescottbob]

" this is another story and shall be told at another time "

 

[Jacee]

From what I see looking at your "autoruns" log ... you have a lot of backup programs running. If you are backing up malware, then it will continue to regenerate itself.

 

[Prescottbob]

How do I identify them on the log and shut them off?

 

[cottonball]

Another suggestion:
http://www.sevenforums.com/tutorials/3413-repair-install.html

Have seen quite a few threads throughout all sorts of forums with the same problem.
A solution may be found in the next couple of weeks.

You also have the option of hanging in there for a short while.

 

[cottonball]

Another thought...

Are you game for creating another user account to see if the problem occurs there?

http://www.sevenforums.com/tutorials/181024-user-account-create.html

 

[Prescottbob]

I'm in no great rush. A going to my other home and bring back an XP which is working fine for my needs at the present time.

 

[Prescottbob]

I' m game- just reading a book!

 

[cottonball]

Just use Method 1 of the tutorial...

Also, will you look for the last C:\Qoobox\ComboFix-quarantined-files.txt

Please post its results. CF ran after the CFScript. Not sure whether anything else was placed in Quarantined files.

 

[Prescottbob]

View attachment ComboFix-quarantined-files.txt

new user account got SAME result