Reply to thread

Message

<blockquote data-quote="asdfdav" data-source="post: 94146" data-attributes="member: 4192">Thank you Fiery, I was now able to run without having combofix flickering. I ran both scans as your instructions - both logs are attached. However, no threats found. Any further advise?TDS Log below, too large to attach for some reason:22:50:01.0164 4584&nbsp; TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:3522:50:01.0345 4584&nbsp; ============================================================22:50:01.0345 4584&nbsp; Current date / time: 2013/01/05 22:50:01.034522:50:01.0345 4584&nbsp; SystemInfo:22:50:01.0345 4584&nbsp; 22:50:01.0345 4584&nbsp; OS Version: 6.1.7600 ServicePack: 0.022:50:01.0345 4584&nbsp; Product type: Workstation22:50:01.0345 4584&nbsp; ComputerName: DAVIDACER-PC22:50:01.0345 4584&nbsp; UserName: Davidacer22:50:01.0346 4584&nbsp; Windows directory: C:\Windows22:50:01.0346 4584&nbsp; System windows directory: C:\Windows22:50:01.0346 4584&nbsp; Running under WOW6422:50:01.0346 4584&nbsp; Processor architecture: Intel x6422:50:01.0346 4584&nbsp; Number of processors: 422:50:01.0346 4584&nbsp; Page size: 0x100022:50:01.0346 4584&nbsp; Boot type: Normal boot22:50:01.0346 4584&nbsp; ============================================================22:50:02.0254 4584&nbsp; Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type &#039;K0&#039;, Flags 0x0000004022:50:02.0258 4584&nbsp; ============================================================22:50:02.0258 4584&nbsp; \Device\Harddisk0\DR0:22:50:02.0258 4584&nbsp; MBR partitions:22:50:02.0258 4584&nbsp; \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1964800, BlocksNum 0x3200022:50:02.0259 4584&nbsp; \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1996800, BlocksNum 0x55BAF6F022:50:02.0259 4584&nbsp; ============================================================22:50:02.0278 4584&nbsp; C: &lt;-&gt; \Device\Harddisk0\DR0\Partition222:50:02.0278 4584&nbsp; ============================================================22:50:02.0278 4584&nbsp; Initialize success22:50:02.0278 4584&nbsp; ============================================================22:50:27.0496 3272&nbsp; Deinitialize success</blockquote>

[QUOTE="asdfdav, post: 94146, member: 4192"] Thank you Fiery, I was now able to run without having combofix flickering. I ran both scans as your instructions - both logs are attached. However, no threats found. Any further advise? TDS Log below, too large to attach for some reason: 22:50:01.0164 4584 TDSS rootkit removing tool 2.8.15.0 Oct 31 2012 21:47:35 22:50:01.0345 4584 ============================================================ 22:50:01.0345 4584 Current date / time: 2013/01/05 22:50:01.0345 22:50:01.0345 4584 SystemInfo: 22:50:01.0345 4584 22:50:01.0345 4584 OS Version: 6.1.7600 ServicePack: 0.0 22:50:01.0345 4584 Product type: Workstation 22:50:01.0345 4584 ComputerName: DAVIDACER-PC 22:50:01.0345 4584 UserName: Davidacer 22:50:01.0346 4584 Windows directory: C:\Windows 22:50:01.0346 4584 System windows directory: C:\Windows 22:50:01.0346 4584 Running under WOW64 22:50:01.0346 4584 Processor architecture: Intel x64 22:50:01.0346 4584 Number of processors: 4 22:50:01.0346 4584 Page size: 0x1000 22:50:01.0346 4584 Boot type: Normal boot 22:50:01.0346 4584 ============================================================ 22:50:02.0254 4584 Drive \Device\Harddisk0\DR0 - Size: 0xAEA8CDE000 (698.64 Gb), SectorSize: 0x200, Cylinders: 0x16441, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040 22:50:02.0258 4584 ============================================================ 22:50:02.0258 4584 \Device\Harddisk0\DR0: 22:50:02.0258 4584 MBR partitions: 22:50:02.0258 4584 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x1964800, BlocksNum 0x32000 22:50:02.0259 4584 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x1996800, BlocksNum 0x55BAF6F0 22:50:02.0259 4584 ============================================================ 22:50:02.0278 4584 C: <-> \Device\Harddisk0\DR0\Partition2 22:50:02.0278 4584 ============================================================ 22:50:02.0278 4584 Initialize success 22:50:02.0278 4584 ============================================================ 22:50:27.0496 3272 Deinitialize success [/QUOTE]

Verification