'Stein

Hmm, have ya tried reinstalling the software?

Falcon eyes, Welcome to Daniweb :)

Moved to Dead Machines forum.

Welcome to Daniweb :) I strongly feel that you're gonna get many more responses if ya post this inside the Windows XP forum, here: [url]http://www.daniweb.com/techtalkforums/forum10.html[/url] Thanks.

I think ya might find alittle more feedback if ya posted here: [url]http://www.daniweb.com/techtalkforums/forum10.html[/url] Yes, it [i]would [/i] be in teh wrong forum, but I don't think anybody'd mind :) THanks.

Fazz, please don't "piggyback" onto other threads. Start a thread of your own. Thanks.

Moved to the Internet Browsers forum.

Heh welcome to Daniweb :) We hope we can help ya. Thanks.

K, First off, welcome to Daniweb :) Secondly, I'd try posting this inside the Mac forum here: [url]http://www.daniweb.com/techtalkforums/forum11.html[/url] Thanks.

Symbol, I'd recommend posting this into the Web Browsers forum here: [url]http://www.daniweb.com/techtalkforums/forum29.html[/url] Lastly, welcome to Daniweb :) Thanks.

Welcome to Daniweb :) First off, I'd recommend posting this in the Spyware Section, as you'll get much more attention there. Spyware forum: [url]http://www.daniweb.com/techtalkforums/forum64.html[/url] Thanks.

Welcome to Daniweb :) Hope you can find much help here. Thanks.

Hmm let's do this to determine whether ya have it or not. Let's begin by downloading [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix[/url]. Extract all the files to your Destop. A folder named [b]SmitfraudFix[/b] will be created on your Desktop. Open the SmitfraudFix folder and double-click [b]smitfraudfix.cmd[/b] Select option [b]#1 - Search[/b] by typing [b]1[/b] and …

Dan, quick question. Are ya currently able to get [i]any[/i] picture at all anywhere? Thanks.

Heh not bad... Welcome to Daniweb :)

By the way guys, you might get a much larger audience if ya posted this in the Geek's Lounge. Here: [url]http://www.daniweb.com/techtalkforums/forum6.html[/url] Thanks.

Jibraeel, you need to start a new thread in this forum, as more people will see it. Please, no piggybacking. Thread closed. Thanks.

Welcome to Daniwb :) Did ya say diving...damn, lucky bastard :mad: Hope you'll stay a bit at Daniweb. Thanks.

Welcome to Daniweb. Guys, try posting in the Web Advertising forum. Thanks.

Now, uninstall the following: [b][color=red]PartyPoker[/b][/color] Then, check the following in HJT: [B]O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyPoker\PartyPoker.exe O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - [url]http://us.chat1.yimg.com/us.yimg.com...45/yacscom.cab[/url] O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll[/B] …

Wohoo, a fellow Tennessean Welcome to Daniweb :)

Let's check for spyware. I'll move ya to the Spyware forum. Someone'll help ya there.

Hmm no, no problem where I'm at....if anything a tad faster (thanks Dani :cheesy: )

Hmm, I could SWEAR there's an option for turning them off somewhere around here...is it in the Control Panel mabe? Thanks.

Welcome to Daniweb :) Well, first off, I see this: [COLOR="Red"]C:\DOCUME~1\Jennifer\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe[/COLOR] In other words, you're running HJT from a *.tmp folder. You need to move this: Begin by creating a new folder inside Program Files, naming it 'HJT'. Now, drag the HJT icon into this newly-created …

Spyware. Moving your thread. Someone there'll assist ya further.

Hah good luck and welcome to Daniweb. For help, look in the 'Dead Machines" forum [url=http://www.daniweb.com/techtalkforums/forum122.html]here.[/url]

Out of curiosity, why would anybody have that on (DisableSR) in the first place? I mean, why wouldn't ya want SysRestore...? Thanks.

Hmm alrite, another clean log. We're gonna try 2 things: 1) Running Ccleaner: Begin by downloading [url=http://www.filehippo.com/download_ccleaner/][color=orange][B]CCleaner[/B][/color][/url], and specifically choosing the most recent version. Then, follow these steps: [color="DeepSkyBlue"]1. Close all programs so that you are at your desktop. 2. Double-click on the [b]"My Computer"[/b] icon. 3. Select the [b]"Tools"[/b] …

Hmm alrite. The Ewido scan looks good except for 1 line: [B]C:\dhhht.exe/userlist.exe -> Backdoor.Iroffer.ac : Error during cleaning[/B] Also, it makes it that much worse that it's a Backdoor infection. We'll try to kill it at the end. ________________ [color=blue]Copy this advise to a Notepad file. Save it to your …

Awsome. Well I hope we can cure ya :) You may want to print out these instructions for reference, since you will have to restart your computer during the fix. Please download FixWareout from one of these sites: [url]http://forums.subratam.org/index.php?act=Attach&type=post&id=43811[/url] [url]http://swandog46.geekstogo.com/Fixwareout.exe[/url] Save it to your desktop and run it. Click Next, …

Hmm, definitely sounds like spyware to me. I'm going to move your thread into the Viruses/Spyware/Nasties forum. In the meantime: Download [url=http://downloads.malwareremoval.com/hijackthis.zip][b]HijackThis[/b][/url] ([color=red]current verison is v1.99.1[/color]) [url=http://downloads.malwareremoval.com/hijackthis_sfx.exe][i]or here (Alternate 1, a self-extracting zip file)[/i][/url] [url=http://downloads.malwareremoval.com/HijackThis.exe][i]or here (Alternate 2, an *.exe file)[/i][/url] [b][color=red]Make a new folder[/color][/b] to put your [b]HijackThis.exe[/b] into. …

Roger that, SpyAxe Infection: Let's begin by downloading [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix[/url]. Extract all the files to your Destop. A folder named [b]SmitfraudFix[/b] will be created on your Desktop. ______________________________ Next, download the trial version of [url=http://www.ewido.net/en/download/]Ewido[/url]. [list][*]Install Ewido. [*]When installing, under [b]Additional Options[/b] [color=red]uncheck[/color] [b]Install background guard[/b] and [b]Install scan via context …

Alrite, let's try a CCleaner/Ewido combination: Begin by downloading [url=http://www.filehippo.com/download_ccleaner/][color=orange][B]CCleaner[/B][/color][/url], and specifically choosing the most recent version. Then, follow these steps: [color="DeepSkyBlue"]1. Close all programs so that you are at your desktop. 2. Double-click on the [b]"My Computer"[/b] icon. 3. Select the [b]"Tools"[/b] menu and click "Folder Options". 4. After …

[quote]P.S. I'll do the hijack thing later. I'm kind of in the middle of something right now.[/quote] Good, that's what I was about to ask for :) But ya, if it's in the System Volume Information (a.k.a System Restore)...the easiset way to clean it is to flush out the System …

Welcome to Daniweb :) Sure thing, I'd love to help ya out..except, there's one problem--you're running HJT from a *.tmp folder. Fix this by: 1) Creating a new folder in Program Files and naming it 'HJT'. Now, drag the HJT icon into this new folder and run a new scan. …

Heh it's alrite, no worries :) Just be sure to post back (after youre back into it) with the HJT log and the Ewido scan log. Thanks.

Be sure to post back with a new log tho, along with the Ewido scan log. It looks like this will take more then 1 post. Thanks.

Hmm, well ya definitely have a SpyAxe infection. And, what I'm thinking is that mabe ya ran SmitFraudFix wrong. SO, what we're gonna do is sorta rerun it, except with a twist. Follow the directions below: Alrite, you're infected with a SpyAxe variant. Let's begin by downloading [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip]SmitfraudFix[/url]. Extract all …

Ok, I see several things. First, let's fix the LSP. Download [url=http://www.bleepingcomputer.com/files/lspfix.php]LSP-Fix[/url] and run it, fixing what it tells you to. Next, continue by downloading [url=http://www.filehippo.com/download_ccleaner/][color=orange][B]CCleaner[/B][/color][/url], and specifically choosing the most recent version. Then, follow these steps: [color="DeepSkyBlue"]1. Close all programs so that you are at your desktop. 2. Double-click …

It might be best to mabe have your thread moved to the Internet Browsers forum. Tell me and Ill move the thread if ya want. Thanks.

Roger that, it's a clean log. However, I just want to be sure of 1 thing--this was run in Normal Mode (not Safe mode), right? Lastly, are ya having any problems? Thanks.

Alrite, fix another entry: [B] O4 - HKCU\..\Run: [Natfupov] C:\WINDOWS\system32\?dobe\?hkdsk.exe [/B] Now, open killbox, check "delete on reboot, and kill the following file: [b][color=red]C:\WINDOWS\system32\Adobe\Chkdsk.exe[/b][/color] Now, let the computer restart, and post back here with a new log. Thanks.

Hmm, that definitely sounds like a midrange virus to me. Let's start with Ewido/CCleaner and see what they take out. Begin by downloading [url=http://www.filehippo.com/download_ccleaner/][color=orange][B]CCleaner[/B][/color][/url], and specifically choosing the most recent version. Then, follow these steps: [color="DeepSkyBlue"]1. Close all programs so that you are at your desktop. 2. Double-click on the …

Er...those entries really [i]are[/i] legit. There's only 1 entry that needs fixing (unless ya recognize the IP): [b]R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1[/b] After this, let's run Ewido: Continue by downloading [url=http://www.ewido.net/en/download/][color=#3366FF]Ewido Security Suite[/color][/url]. [list] [*] Install ewido security suite [*] When installing, under "Additional Options" uncheck.. [list] [*] [b]Install …

Awsome. Download [url=http://downloads.malwareremoval.com/hijackthis.zip][b]HijackThis[/b][/url] ([color=red]current verison is v1.99.1[/color]) [url=http://downloads.malwareremoval.com/hijackthis_sfx.exe][i]or here (Alternate 1, a self-extracting zip file)[/i][/url] [url=http://downloads.malwareremoval.com/HijackThis.exe][i]or here (Alternate 2, an *.exe file)[/i][/url] [b][color=red]Make a new folder[/color][/b] to put your [b]HijackThis.exe[/b] into. (Anywhere on your hard drive is fine [b][i]other than your Desktop or the Temp folder[/i][/b]. Suitable examples are: [list][*]C:\HijackThis\ …

Another possiblity is spyware. If ya want, post another thread in the Spyware forum and Ill take a look at it later tnite. O ya, be sure to post a HJT log too if ya post in the Spyware forum: Download [url=http://downloads.malwareremoval.com/hijackthis.zip][b]HijackThis[/b][/url] ([color=red]current verison is v1.99.1[/color]) [url=http://downloads.malwareremoval.com/hijackthis_sfx.exe][i]or here (Alternate 1, …

Hmm, well a couple things. First, ya need to run HJT from a permenant folder. To do this, go to Program Files and create a new folder there, and name it 'HJT'. Then, move the HJT icon into this folder and run a new scan. And lastly, before we fix …

Welcome to Daniweb :) First, let's begin by downloading [url=http://www.ewido.net/en/download/][color=#3366FF]Ewido Security Suite[/color][/url]. [list] [*] Install ewido security suite [*] When installing, under "Additional Options" uncheck.. [list] [*] [b]Install background guard[/b] [*] [b]Install scan via context menu[/b] [/list] [*] Launch ewido, there should be an icon on your desktop, double-click it. …

Heh enlighten the troll. By multiple desktops, do ya mean where ya have multiple monitors attached to the same computer, and the mouse can go between either screen and such? Thanks.