mal-the-falconer

Hi again sorry for not getting back sooner I have had a lot on with sorting my Birds I have 2 baby Barns which has taken up most of my time this weekend!I have taken on board what ' Starbuck' has said but am reluctant to 'Format My PC as I have lost a lot of my Product keys over the years (Not very organised) and don't know how to retreave them before I do the , although it is running very slow! I do have another problem though which concerns both my laptop (this One I am on now) and my PC that is that I can't access IPCONFIG in the 'Run window it just flashes on the screen for a second then disapears, This problem has been around for quite some time, just never bothered my before!

For once I have some GOOD news!!!! I have run the MBAM and run it and run it as I said in my last post but not realising it, although I thought that nothing was happening after the initial Find it must have been sorting something as I Now have the mouse so I have started to run the MBAM in the Normal Mode and will run it a number of time But it seems THANK TO ALL YOUR HELP!!!! I am starting to get somewhere ! Will keep you informed of my progress. Thanks again for all your help!!

Hi Ken. Here is the report from the very first Scan I did after finally getting the program onto the PC (Thanks again to your help) Hope thi help!! Malwarebytes Anti-Malware (Trial) 1.60.0.1800 www.malwarebytes.org Database version: v2011.12.24.05 Windows XP Service Pack 3 x86 NTFS (Safe Mode) Internet Explorer 7.0.5730.11 Mal :: [administrator] Protection: Disabled 23/01/2012 01:26:03 mbam-log-2012-01-23 (01-26-03).txt Scan type: Full scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 354439 Time elapsed: 3 hour(s), 11 minute(s), 45 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 12 HKCR\Interface\{937A764E-*****-4FD5-A431-2B*****AEF3E} (PUP.FunWebProducts) -> No action taken. HKCR\DictionaryBossInstaller.Start.1 (PUP.FunWebProducts) -> No action taken. HKCR\DictionaryBossInstaller.Start (PUP.FunWebProducts) -> No action taken. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{*****-EF97-4A4E-BFC2-8C*******D0CA} (PUP.FunWebProducts) -> No action taken. HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{*********-499C-A11F-23*******7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98D9753D-************-42D5-8C85-******A897AB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SETUP.EXE (Trojan.Dropper) -> Quarantined and deleted successfully. HKCR\CLSID\{********4a4e-bfc2-8c89fa69d0ca} (PUP.FunWebProducts) -> Quarantined and deleted successfully. HKCR\TypeLib\{d4c38221-*********-609ef0793902} (PUP.FunWebProducts) -> Quarantined and deleted successfully. HKLM\SOFTWARE\ReFog Software (Refog.Keylogger) -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Detected: 2 HKCU\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search| (Adware.Hotbar) -> Data: http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk278JXGB -> Quarantined and deleted successfully. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|PremierOpinion (Adware.PremierOpinion) -> Data: c:\program files\premieropinion\pmropn.exe -boot -> Quarantined and deleted successfully. Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 5 C:\Program Files\PremierOpinion (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\PremierOpinion\components (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RegTool (Rogue.RegTool) -> Quarantined and deleted successfully. C:\RECYCLER\S-**********-1085031214-7253*******-500 (Backdoor.Bot) -> Quarantined and deleted successfully. Files Detected: 41 C:\Documents and Settings\Mal & Dee\My Documents\software\Dictionary.exe (Adware.FunWeb) -> Quarantined and deleted successfully. C:\Documents and Settings\Mal & Dee\My Documents\software\aol rEPIRE\setup.exe (Trojan.Dropper) -> Quarantined and deleted successfully. C:\Program Files\DictionaryBossEI\Installr\1.bin\v4EZSETP.dll (PUP.FunWebProducts) -> Quarantined and deleted successfully. C:\Program Files\PremierOpinion\pmph.dll (Adware.PremierOpinion) -> Quarantined and deleted successfully. C:\Program Files\PremierOpinion\pmservice.exe (Adware.PremierOpinion) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-******45-1085031214-*******543-500\a_friend.exe (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-******145-108503******-725345543-500\svchost.exe (Worm.Autorun.B) -> Quarantined and deleted successfully. C:\System Volume Information\_restore{D94******-0216-4CE0-A03E-1C*******CED4}\RP2229\A0641080.dll (Adware.PremierOpinion) -> Quarantined and deleted successfully. C:\WINDOWS\010***********103.xxe (KoobFace.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\010112464850.xxe (KoobFace.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\0101120101465755.xxe (KoobFace.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\fdgg343*******gdfdf (KoobFace.Trace) -> Quarantined and deleted successfully. C:\WINDOWS\(Worm.Koobface) -> Quarantined and deleted successfully. C:\WINDOWS\(Worm.Koobface) -> Quarantined and deleted successfully. C:\WINDOWS\(Worm.Koobface) -> Quarantined and deleted successfully. C:\WINDOWS\(Worm.Koobface) -> Quarantined and deleted successfully. C:\Program Files\PremierOpinion\pmoci.bin (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\PremierOpinion\pmxf.dll (Trojan.Agent) -> Quarantined and deleted successfully. C:\Program Files\RegTool\definitions.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Program Files\RegTool\privacy.db (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Program Files\RegTool\RegTool.exe (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RegTool\RegTool Help.lnk (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RegTool\RegTool on the Web.lnk (Rogue.RegTool) -> Quarantined and deleted successfully. C:\Documents and Settings\All Users\Start Menu\Programs\RegTool\RegTool.lnk (Rogue.RegTool) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21************085031214-725345543-500\aliases.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-606747145********-500\control.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-*********-725345543-500\Desktop.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-**********-725345543-500\fullname.txt (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-*********-725345543-500\hallmark.gif (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-********-725345543-500\ident.txt (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-********-725345543-500\identd.txt (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-********-725345543-500\instsrv.exe (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-**********-725345543-500\mirc.ico (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-*********-725345543-500\mirc.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-*********-725345543-500\nicks.txt (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-************085031214-725345543-500\notify.txt (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-**********-725345543-500\popups.txt (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-*************-725345543-500\remote.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-***********-725345543-500\script.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-605-108**********5031214-725345543-500\servers.ini (Backdoor.Bot) -> Quarantined and deleted successfully. C:\RECYCLER\S-1-5-21-***********-725345543-500\users.ini (Backdoor.Bot) -> Quarantined and deleted successfully. (end)

Hi Ken Just an update!!Have Now (after following your distructions) downloaded MBAM and am running the 'Scan' will lett you know if it resolves the problem!! Fingers and Toes Crossed!! lol

I can't access the internet on the PC with the problem on it soo I can't get the programme you have advised I go for! any other suggestions

Thanks Randyl to bring you up to date, I am running the mouse on the 'Widows Gineric software' now! they are All standard 'Mouse Hardware that I have tried and bin unsing pror to this happening been using and none of them hve didn't come with any software. But thanks fore the suggestion any helpis welcome!! I am getting desprate now as I have to regester my Baby Barns and I can't access the Forms which is one reason I don't want to format the PCAs a point as soon as I get this sorted and sell my Baby Barns I can regester a donation to the site too!! (so we all win lol)

since this problem started I have switched and spoped the mouse with an SP2 with a wheel, without a wheel, changed it for a USB and used a 'optical mouse' (if you mean a light type) each time getting the same result I am going to try and video what is happening on my Mobile phone, If you send me your email address I will send you the result so you can see for youself. It might give you some idea of what is coursing it I can't think of any thing else to do short of Formating My PC and I don't really want to do that! just yet!

I have tried both and the something happens each time I boot up in "Normal Mode" It works great till I get passed the Account page and then half way through the rest of the boot sequence then 'Mouse shoots to the top of the screen and bounces around eratically and I have No control over it!! I have carryout your instruction in 'Safe Mode' where the mouse works perfectly!! I have tried your instruction 3 times and each time I have booted the PC up in normal mode but the same thing happens I has totally stumped me!! I don't really want to Format my PC but am begining to think that is my only option!! Someone has suggested that it could be a a shortage of 'Ram' that is coursing the problem is this true as I have never heard of that before!

can only access this in 'Safe Mode' as this is the only place where I can use the 'Mouse' and there are No Exclamation marks or Red Xs thank for this it proves I was doing the right thing, cos I had alread done this before lol!!

Yes It is great!! But I am ashamed to say from the photo I can't recognise what it is!! Is it a Peragrin or a Goshawk, but then again it could posibly be a a Sea Eagle but somehow I doubt the later!! lol

Hi To start I am new to this site so please bare with me!!I am running a PC on "Windows XP Pro" the other day My mouse started to play up after I had booted the PC up! half way through the Booting the mouse shot to the 'Top middle' of the sreen and stated bounsing around, I can not take control of the mouse, it seems to have a mind of it's own! I have tried booting up in "Safe Mode" an the mouse works perfectly well! I have checked the setting in the control panel and tried resetting the Drivers I have also tried changing the mouse 3 times (I now have a USB Mouse attached) but the Probel continues each time I boot up in 'Normal' mode. I have run a Virus check using Norton 360 gold but that has not resolved the problem although it did find and fix some High rated Virouses (must add I am not on the pc now!!)Can anyone help please as I can't use that PC while it is like this and ther is information on there that I need urgently!!

Hi all as you have probabley gathered i keep "birds of prey" In addition to this hobby, I do enjoy messing with (and mostly braking lol) My PC. I have built my own PC and have also resolved some of the problems in the past but am aware I am not an expert (by any means) I have some knowledge of how PC's work and can usually follow most of what I am told although I do sometimes need extra help (sorry)