1,366 Posted Topics
Re: A decompression bomb is a file that unpacks to an enormous amount of data - thus "flooding" the unpacking engine. It's quite hard to detect such files reliably, so it's possible that it gives some false alarms ocassionally. Since it is the Nero BackItUp program then it would be extremely … | |
Re: Malwarebytes' Anti-Malware program WILL remove this. Do the following: Please download [Malwarebytes' Anti-Malware (MBA-M)](http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html) to your Desktop. Close ALL other windows and programs. - DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. - Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then … | |
Re: <blockquote>Hi there - I am having the exact same problems as Sisaly is - I cannot run the programs on my computer, google search is hijacked. I have MBAM installed - I cannot run it at all. It will , however, run from setup file but once the scan starts … | |
Re: First of all, welcome to daniweb to you both; [B]twolfcorner2009[/B], you need to create your own thread. This one is rusluckplay64's thread and though you may have the same problem you do not have the same computer. It is impossible to work with two different posters and computers within the … | |
Re: [B]Respect2Glory[/B] You need to begin your own thread. This thread is 5 years old and honestly much of what is written here is probably way out of date. Please begin your own thread stating all your problems and what you have done thus far to remedy them. Give full info … | |
Re: [QUOTE=aquiroma;963740]I erased ctfmon.exe from startup but as I work in my laptop, it start slowing down again. When I check Startup, ctfmon.exe is there again[/QUOTE] If you have Microsoft Office set to run at start up then it will show up if you have the Text Services and Speech applets … | |
Re: Do you have the ask toolbar installed? If so uninstall it. You have to close the browsers and stop other activity to do this. Look in Add/Remove and see if it is there. If it is not found there then do a search...Start, Search, Files and Folders and search for … | |
Re: Hi welcome to daniweb, Various conditions are usually the cause of this error. This link gives various reasons and you should check out all of them; [url]http://support.microsoft.com/kb/330182[/url] The possible causes given are these; [QUOTE]If this issue occurs after the first restart during Windows Setup, or after the Setup program is … | |
Re: This isn't new. It has been around since 2007 in various forms. [url]http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?ThreatId=-2147369118[/url] | |
Re: [B][URL="http://www.free-av.com/"]Avira Free[/URL][/B] or [B][URL="http://www.avast.com/eng/programs.html"]Avast Free[/URL][/B] | |
Re: [QUOTE]I am afraid I have that exact same virus I've seen discussed here, system32\SKYNETlog.dat (Trojan.Agent) on my computer! I looked at hijack this and combofix,[/QUOTE] First of all, How do you know that THIS is the exact same infection? I don't see any logs that say that. All I see … | |
Re: You need to post those logs, the MBA-M log and a NEW HJT log. Just because MBA-M removed the infected items doesn't mean yet that the computer is fully clean or that other steps don't need to be taken. Post the logs as requested in Crunchie's instructions. [QUOTE]* Post the … | |
Re: The culprit is obviously that Windows Live Polygamy executable. Remove that from the computer ASAP. Where did you get that program, exactly where? Do the following: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.ex[/B]e and follow the prompts to install MBA-M. [B]* Be sure a checkmark is … | |
Re: You say nothing of running MBA-M so please do the following: Please download [B][URL="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?cdlPid=10997763"]Malwarebytes' Anti-Malware (MBA-M) [/URL][/B]to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * … | |
Re: If I may Rik, the poster IS correct, these Winsock entries are related to Stopzilla. Their "home company name is [B]iS3[/B] I think the poster should Uninstall Stopzilla. This is a program with a "so-so" reputation. This other files you are looking for; C:\Program Files\GetModule\GetModule27.exe Does not show as running, … | |
Re: We would really need to know the full information provided when one of these blue screen errors occurs. One thing I notice is I don't see any or very few system files in the Running Processes, only Program files. The ones I see are Desktop Window Manager, Explorer, and Task … | |
Re: [QUOTE=sionnyn;957077]I think it has hijacked this as well! I get - malwarebyr5ews.org does not exist.[/QUOTE] sionnyn, you need to begin your own thread. This one is solved. Create your own thread with all your information, including any scan logs that you have and one of us will be happy to … | |
Re: You are not running an anti-virus program and you have at least one Rogue program on your computer, AntispywareBot. You need to do the following: Go to Add/Remove and see if that program is listed, if it is UNINSTALL it. Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] … | |
Re: Sorry to tell you but [B]Exterminate It [/B]is considered a ROGUE program so it is actually worthless and can actually cause damage to your computer. [B][URL="http://www.mywot.com/en/scorecard/exterminate-it.com"]See all this info[/URL][/B] You need to get that off of there ASAP. Uninstall it if possible. DON'T just delete it. That will leave much … | |
Re: The file has the proper location. Can you do the following: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * … | |
Re: [QUOTE]Hello crunchie, i have already done a full system scan with MBAM before i posted this thread and it came up with nothing.[/QUOTE] We still need to see that. | |
Re: You [B]don't go to internet properties [/B]to empty files. You either use Disk Clean up or do this from within the browsers. Open IE, go to Tools, Browsing History, Settings button. When that opens Click View Files, when that opens go up to Edit, Select All, Then Delete Selected Items … | |
Re: How do you know you have spyware on your computer? | |
Re: [QUOTE=ipradip;953463]don't use more than one anti virus at a time in laptop/desktop, it may hang your laptop/desktop. if you want to use different anti virus then remove the previous anti virus and install the other one. here if you have more than one anti virus then remove it and if … | |
Re: Ok, first of all, Do the following, With all browsers [B]CLOSED[/B]. Go to [B]Add/Remove[/B] Look for and [B]Uninstall ALL[/B] of the following that you may find there: [B]FunWebProducts[/B]. * [B]My Web Search[/B] (Smiley Central or FWP product as applicable) * [B]My Way Speedbar[/B] (Smiley Central or other FWP as applicable) … | |
Re: I note several things immediately in the HJT log. [B]#1.[/B] SpyBot TeaTimer is running. This needs to be disabled as it WILL interfere with any fixes done. * Run Spybot-S&D in Advanced Mode * If it is not already set to do this, go to the Mode menu select Advanced … | |
Re: I honestly don't see any major problems in your HJT log, just mainly some deactivated entries which are deactivated because of your removal of AVG. Just run HJT again and place check marks next to these; R3 - URLSearchHook: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file) R3 - URLSearchHook: (no … | |
Re: [QUOTE=lynnjohn;949949]In my task manager a process called System runs at around 74,000K all the time. When I'm in a facebook game called farm town the fan on my tower like roars to life. Is that normal? And is the system file thing suppose to run that high.[/QUOTE] No, I don't … | |
Re: Please do the following: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will … | |
Re: [QUOTE=Stanley_Krute;938562]I've got the same homeantivirus2010 invasion. It keeps disarming any tool I bring to bear against it: Avast, RunScanner, MBAM, Sophos Anti-Rootkit, HijackThis, SpywareDoctor (which keeps claiming to have removed all the infective agents, even though they keep reappearing). One nasty piece of work. Nastiest I've seen in years. -- … | |
Re: #1. This is really a warning to ALL others who may be reading this thread; [B]Never, ever use Combofix unless FIRST instructed to do[/B] so by a helper on a forum like this one. Combofix is NOT a "regular" clean up tool. It is a very specialized tool used only … | |
Re: We need to see the Malwarebytes' Anti-Malware log and a [B][URL="http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10781312.html"]HiJackThis[/URL][/B] log. [B]Leave the registry ALONE[/B]. | |
Re: We can make no recommendations until we see all the logs, including the MBA-M log, even if it didn't find anything. | |
Re: I can see in running processes, EQ2VoiceService.exe which is a voice chat service. If it is running all the time you would hear voices I would think. Not sure what you mean by Firefox shuttering, can you explain that more fully? Have you run standard clean ups...temp files and the … | |
Re: The log is incomplete. It doesn't show any start up programs for one thing. You must have some running at start up. Please check the log again and be sure you have fully copied it here. | |
Re: Please download[B][URL="http://forum.networktechs.com/showthread.php?t=49"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download and install the … | |
Re: The top part of your HJT scan is missing. That is the part that gives us info on your operating system, browser, HJT version, when the scan was run and how it was run. We do need to see that. It looks similar to this: Logfile of Trend Micro HijackThis … | |
Re: Since Crunchie isn't here at the moment, I note you have two or parts of two anti-virus programs on the computer, AVG8 and Symantec/Norton. Since you stated that you DO use AVG then you must[B] UNINSTALL[/B] all Symantec/Norton files. First go to [B]Add/Remove [/B]and [B]Uninstall[/B] ALL Symantec/Norton listings that you … | |
Re: Hi Zelly, welcome to DaniWeb, Can you do the following please? Please download[B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * … | |
Re: Please do the following: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will … | |
Re: This thread is [B]5 years old.[/B] Doubt the poster will be back. | |
Re: One thing. Be sure to DISABLE SpyBot TeaTimer before proceeding. It interferes with fixes done. To disable TeaTimer do the following: * Run Spybot-S&D in Advanced Mode * If it is not already set to do this, go to the Mode menu select Advanced Mode * On the left hand … | |
Re: That is an incomplete log. You need to post the entire log, not just the beginning and the end. We can tell nothing from this at all. Also, what websites are you unable to see? Do you get an error message when this happens or just "This page cannot be … | |
Re: killer64, This thread is 4 years old. Instructions to the original poster are very likely out of date and[B] shouldn't be followed[/B]. Please begin your own thread, stating your own problems. Give us info on the computer...operating system, etc., and help will be offered directly to you. | |
Re: You've got some malware on there for sure. Do the following: Please Download [B][URL="http://www.atribune.org/ccount/click.php?id=1"]ATF-Cleaner.exe by Atribune[/URL][/B](Windows XP, 2K, 2003 & Vista ONLY) • You can put ATF-Cleaner on your Desktop for easy access RUN ATF-Cleaner.exe. -- Click on ATF-Cleaner to run it -- Where it says Select Files To Delete, … | |
Re: You definitely have a hijacker on the computer. Please do the following: Run HJT again and put a check mark next to these entries: F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\sdra64.exe, O1 - Hosts: ::1 localhost O1 - Hosts: 94.232.248.66 antivirsystem-pro.microsoft.com O1 - Hosts: 94.232.248.66 antivir-system-pro.com O1 - Hosts: 94.232.248.66 [url]www.antivir-system-pro.com[/url] There ARE … | |
Re: [QUOTE=chand.;936934]Thanks RIC, But Anti-Malware is not an opensource program, it is shareware, so how I can use it to scan and get results from my computer.[/QUOTE] It is not shareware but a free to use program. Where did you get the idea it is shareware? Follow Rik's advice and run … | |
Re: If you already have MBAM installed on your computer try Uninstalling in, in Safe Mode if necessary. Then try to install it again the same way you did before only you are going to rename it before you run it. Please navigate to the MBAM folder located in the Program … | |
Re: Not to interfere here, but our usual [B]instructions for MBA-M usage[/B] on a [B]definitely infected machine[/B] is to do a [B]FULL SCAN[/B], not the Quick Scan. Otherwise instructions are correct. If you are unable to update MBA-M from the infected computer you can download a manual update file from[B] [URL="http://www.gt500.org/malwarebytes/database.jsp"]HERE[/URL][/B] … | |
Re: [QUOTE=united4real;917989]Nope. it doesn't work. Its just the same after a full system scan. How does using the program on another computer help on this one? Thanks for trying to help anyways. =] Please if you can keep looking for solutions.[/QUOTE] No, you wouldn't run the scans on another computer I … |
The End.