1,366 Posted Topics

Member Avatar for amerje

Hi welcome to daniweb, Definite infections showing in the HJT log. Let's try first to get rid of some of those. Please download [Malwarebytes' Anti-Malware (MBA-M)](http://www.besttechie.net/tools/mbam-setup.exe) to your Desktop. - DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. - Be sure a checkmark is placed next to Update Malwarebytes' …

Member Avatar for jholland1964
0
169
Member Avatar for DanM.412

Hi Dan, welcome to daniweb. First thing I would like you to do is Open your Spybot program. Click Mode and choose Advanced. One the Advanced mode opens you should see three buttons at the bottom right of the program. Click Tools. When tools opens you will see a row …

Member Avatar for jholland1964
0
148
Member Avatar for chess77

First of all looks like from your log that Malwarebytes' Anti-Malware program needs the computer to reboot as indicated from this entry here; O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript In order to remove some infections sometimes the program must have the computer reboot so that the …

Member Avatar for jholland1964
0
170
Member Avatar for atarischad

Hi atarischad, I hesitate to say welcome back, thought we had this all corrected:( Your log is again showing multiple infections. I need to see that MBA-M log too. I want you to run the [ESET Scanner](http://www.eset.com/onlinescan/) - You will need to use Internet Explorer to to complete this scan. …

Member Avatar for jholland1964
0
200
Member Avatar for Dorita

Hi Dorita, You should NEVER run two antivirus programs on one computer there would definitely be an incompatibility issue [B]no matter which two would be on there.[/B] If you all ready have Eset's NOD32 on the machine then it could very well be interfering with the Norton downloads. If you …

Member Avatar for jholland1964
0
71
Member Avatar for robertcarl

Hi robertcarl, welcome to daniweb. One definite reason for slowness on the computer is your log shows you are running TWO antivirus programs. This is an absolute No-No. The absolute rule is ONE antivirus program and ONE firewall running on a computer. Your log shows both Norton and Avast fully …

Member Avatar for jholland1964
0
213
Member Avatar for ThisGirlRox

Hi and welcome to daniweb. Sorry it has taken so long for you to receive a response. [QUOTE] She says OneCare is her virus scanner and it came installed????[/QUOTE] What version is she running? I may be wrong but I believe this is a Pay For Antivirus program. Did she …

Member Avatar for jholland1964
0
133
Member Avatar for punisher593

You've left off the top of the log, we need to see that also. The part that reads like this; [QUOTE]Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 3:15 AM, on 4/23/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal mode [/QUOTE] You …

Member Avatar for punisher593
0
144
Member Avatar for kat141

Hi Kat, Welcome to daniweb. To begin you need to go to [B][URL="http://www.daniweb.com/forums/thread134865.html"]this link[/URL][/B] Follow the directions given by PhilliePhan. There are links to various programs and scans you need to do, be sure to save the logs requested and post them back here. If PP says have the program …

Member Avatar for jholland1964
0
158
Member Avatar for Nappygq27

Hi, Welcome to daniweb! What I see looks pretty good. From these logs it looks as though you have done a very thorough job of cleaning up. Only program I would suggest you remove is the SweetIM Toolbar for Internet Explorer 3.1. This one is listed as "Open to debate" …

Member Avatar for jholland1964
0
69
Member Avatar for pete25

Hi Pete welcome to daniweb, You have multiple posts here over the last 15 minutes. You have to give us time to respond. There are many people asking for help and it takes awhile to get to everyone. You noted in two posts you have used Ad Ware, do you …

Member Avatar for jholland1964
0
168
Member Avatar for jholland1964

Just wonder how this is allotted or determined. I have 324 posts, 12 solved threads and my numbers read like this; [QUOTE]Community Reputation Points: 15 Reputation-Altering Power: 1[/QUOTE] But another member with just 27 posts, no solved threads has these numbers; [QUOTE]Community Reputation Points: 10 Reputation-Altering Power: 3[/QUOTE] Can somebody …

Member Avatar for Ancient Dragon
0
85
Member Avatar for marjan_m

Hi, welcome to daniweb. You cannot just "delete" a rootkit or even most viruses or trojans, you must use specialized tools in order to do so. Begin this by going [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] Follow all the steps given. Pay close attention to the instructions and follow each to the letter. If you …

Member Avatar for jholland1964
0
118
Member Avatar for pauluac

Hi paul, welcome to daniweb. That red circle with a white x is a sign of infection. Please begin by doing the steps given [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B]. Please note the instructions closely, if they are to have a specific program clean or delete what is found then please be sure to do …

Member Avatar for crunchie
0
253
Member Avatar for Watson306

[QUOTE]and message on a blue screen flashes up and says something that begins with "a problem was detected.......".[/QUOTE] Can you give us the full wording of this blue screen message? This may give us a clue as to what we are looking for here. Judy

Member Avatar for jholland1964
0
99
Member Avatar for gctbob

If you intend to install AVG it should be [B]done as a replacement[/B] to your currently installed and running antivirus program ESET NOD32. The absolute rule is only one antivirus program on a computer. You should UNINSTALL ESET NOD32 first before installing another antivirus program. Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] …

Member Avatar for jholland1964
0
118
Member Avatar for Moe1981

Hi moe, welcome to daniweb. Did your antivirus scan find anything? I would like you to do the followingl Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and …

Member Avatar for jholland1964
0
170
Member Avatar for Nick10

Hi welcome to daniweb, Please download[B][URL="http://www.besttechie.net/tools/mbam-setup.exe"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download …

Member Avatar for jholland1964
0
217
Member Avatar for ckretmsage
Member Avatar for 20NickC11

Did you scan the entire computer...all users included? Where are the scan logs and others you may have done? We really need to see, and know, what was found, where it was found and how it was removed.

Member Avatar for jholland1964
0
215
Member Avatar for praveen_dusari

Hi welcome to daniweb, I would suggest that you begin with the steps given [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] but don't use the step concerning the DSS scanner as it is unavailable at this time. Finish instead with a scan with[B][URL="http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download"] HiJackThis[/URL][/B] Post back here with all the requested logs and remember, if the …

Member Avatar for jholland1964
0
92
Member Avatar for JB153

Please download[B][URL="http://www.besttechie.net/tools/mbam-setup.exe"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest …

Member Avatar for jholland1964
0
165
Member Avatar for randal booker

Can you tell us the reason you ran combofix in the first place? You really shouldn't run that [B]unless directed to do so[/B] [B]after[/B] running the steps in the link below. You need to go[B][URL="http://www.daniweb.com/forums/thread134865.html"] HERE[/URL][/B] and complete the steps given there. Including [B]ATF-Cleaner[/B], to get rid of all those …

Member Avatar for jholland1964
0
214
Member Avatar for atarischad

Hi welcome to daniweb, Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download …

Member Avatar for jholland1964
0
183
Member Avatar for birdking

You do have some questionable entries in your log. I recommend that you begin by following the steps given [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] Be sure to allow Malwarebytes' Anti-Malware to fix whatever it finds. Once you have completed those steps then post back here with the MABM log, ESET scanner log and a …

Member Avatar for birdking
0
328
Member Avatar for Panchos

Hi, welcome to daniweb. First thing I see is that you are running at least two antivirus programs and a huge number of security programs. You must UNINSTALL AVG 7.5 completely. For one thing it is out of date, but the KEY thing here is absolutely only ONE antivirus program …

Member Avatar for jholland1964
0
168
Member Avatar for geniusamita

Hi welcome to daniweb, Follow the instructions and run ALL the programs noted[B][URL="http://www.daniweb.com/forums/thread134865.html"] HERE[/URL][/B] WITH THE EXCEPTION of DSS scanner as it is NOT available at this time. Instead once you have completed all the instructions then download and run[B][URL="http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download"] HiJackThis[/URL][/B] After that then post back here with all the …

Member Avatar for jholland1964
0
81
Member Avatar for Vidaria

You should scan that USB device to be certain there are no infections on that. Frankly I would have advised using the programs recommended by several forums, including here to remove this antivirus xp 08. I would still recommend that you download, install and update [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes'Anti-Malware.[/URL][/B] Then do a scan …

Member Avatar for jholland1964
0
179
Member Avatar for skiborder25

Hi and welcome to daniweb, My advice would be to follow the steps given[B][URL="http://www.daniweb.com/forums/thread134865.html"] HERE[/URL][/B] Follow all steps, especially make note about cleaning out with ATF-Cleaner before beginning. Complete all steps but ignore the step with DSS scanner as it is having issues at this time. Substitute instead a run …

Member Avatar for jholland1964
0
161
Member Avatar for clementine719

Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest …

Member Avatar for jholland1964
0
155
Member Avatar for Velius2820
Member Avatar for lukiepukie123

We need to see that Malwarebytes' log also. Go into the program and click on the Logs tab. Copy that and post it here. Also, why is this computer so out of date? It should, at the very least be updated to XP SP2

Member Avatar for jholland1964
0
253
Member Avatar for thebigman

[B]Reboot your computer[/B]. Your log shows Spybot needs to run at Start up in order to remove infections. Then go back up [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] and download, install, update and run Malwarebytes' Anti-Malware program. Please allow it to fix everything found. REBOOT the computer again and run a NEW HJT scan and …

Member Avatar for jholland1964
0
145
Member Avatar for patrickgormally

Hi and welcome to daniweb, Why did you run it in the first place? Running HiJackThis is a last step you take after cleaning the computer of viruses and malware. It is not really a cleaner program. If you are having problems we recommend that you begin with the steps …

Member Avatar for Doctor Inferno
0
146
Member Avatar for Eastern

Hi welcome to daniweb, I would suggest that you go [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] and follow all the steps given by PhilliePhan, with the exception of running the Deckard Scanner. Once you get to that portion just run a new HJT scan. With the Malwarebytes' Anti-Malware program be sure to follow his exact …

Member Avatar for jholland1964
0
157
Member Avatar for sys life

Go to[B][URL="http://www.daniweb.com/forums/thread134865.html"] THIS STICKY[/URL][/B] Follow the steps given there, very simple and easy to do by the way. Once you have completed the steps given by PhilliePhan, with the exception of the Deckard Scanner which isn't available at this time, then download [B][URL="http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download"]HiJackThis [/URL][/B] Run a full system scan, save …

Member Avatar for jholland1964
0
122
Member Avatar for johnny_deville
Re: wtf?

Hi, welcome to daniweb. > i couldn't do a system restore either. You don't need to do a system restore. That file was IN your system restore. If you turned off system restore then that should have removed the file. You need to [update your java program](http://www.java.com/en/download/manual.jsp) your program is …

Member Avatar for johnny_deville
0
125
Member Avatar for geesixty

Please Download [B][URL="http://www.atribune.org/ccount/click.php?id=1"]ATF-Cleaner.exe by Atribune [/URL][/B](Windows XP, 2K, 2003 & Vista ONLY) • You can put ATF-Cleaner on your Desktop for easy access. RUN ATF-Cleaner.exe. -- Click on ATF-Cleaner to run it -- Where it says Select Files To Delete, Check the Select All Option -- Click Empty Selected > …

Member Avatar for jholland1964
0
3K
Member Avatar for JuliaD

What operating system are you using? Is the IE7 an update from IE6 or is it the original browser? Do you know the actual cause of the crash? When you say that you got your system up and running again, how did you do this?

Member Avatar for jholland1964
0
142
Member Avatar for donkeydal

What are the various scans that you have run? Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update …

Member Avatar for jholland1964
0
131
Member Avatar for dupaswim

Hi, Welcome to daniweb. I see you have also posted an identical thread in the Firefox Support Forum. I believe those two messages are probably related to the infected files you have removed but they probably are still listed to start up when Windows starts. I would advise that you …

Member Avatar for jholland1964
0
120
Member Avatar for roguephoenix

Don't want to interfere here but roguephoenix are you rebooting the computer AFTER the mbam scans? If you note the scan log says [QUOTE]Delete on reboot.[/QUOTE] meaning [B]you must reboot the computer[/B] for mbam to complete it's work on deleting the offending files. You must do this BEFORE running any …

Member Avatar for jholland1964
0
344
Member Avatar for Lacville88

put, you need to begin YOUR OWN thread with all of this information. No two computers or problems are exactly alike.

Member Avatar for crunchie
0
203
Member Avatar for snefmoo

Hi welcome to daniweb, We need to see the FULL HiJackThis log not just this lower part. We have to have it all and it should look like this; [QUOTE]Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 07:10:04, on 9/1/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer …

Member Avatar for jholland1964
0
85
Member Avatar for cricketislife

Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it will download and install the latest …

Member Avatar for jholland1964
0
209
Member Avatar for loobyloox

There is no one program which will detect everything. Sorry that you had this happen, however, depends on what the exact problem was, when and how it came onto the computer AND if your particular programs were the [B]very latest versions [/B]and had [B]all ready had updates[/B] which would have …

Member Avatar for jholland1964
0
264
Member Avatar for ibwe

Can you try the steps [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE?[/URL][/B]. Especially the [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes[/URL][/B] program. Have it fix everything found. Ignore the DSS scanner program in that sticky for now, it is not available. See if you can get us a scan with [B][URL="http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download"]HiJackThis[/URL][/B] too

Member Avatar for jholland1964
0
291
Member Avatar for randal booker
Member Avatar for zap21

download [B][URL="http://download.bleepingcomputer.com/sUBs/ComboFix.exe"]ComboFix[/URL][/B] When you begin the download you may see a security warning. Click Save and save it to the desktop. Once Combofix appears on the desktop then FIRST do the following; Close all open Windows including this one. Close or disable all running Antivirus, Antispyware, and Firewall programs as …

Member Avatar for jholland1964
0
196
Member Avatar for randal booker

What difficulties are you having with the computer? You are running the older version of HiJackThis. You should download and run the [B][URL="http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis"]newest version[/URL][/B] and give us an idea of what problems you are experiencing.

Member Avatar for jholland1964
0
163

The End.