Hi, please can I have an Uninstall List too?

Please re-open HijackThis and click Open Misc Tools section and then click on, Open Uninstall manager.
Click on Save list... and copy paste the log...

Hi Tom,
First off, a warm welcome to DaniWeb.

Download HijackThisTrend Micro (http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe) and save it to your desktop.
Double click on...

Please download Malwarebytes' Anti-Malware (http://www.besttechie.net/tools/mbam-setup.exe) to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At the...

I'll give it one more try before I answer that question.

Please download Combofix (http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe) by sUbs and save it to your Desktop.

Now...

That's it :) I was right about combofix.
MBAM could not find and delete the files combofix could.
I always save combofix as a last resort because it's a very powerful tool.

There are a few...

Hi, please download Malwarebytes' Anti-Malware (http://www.besttechie.net/tools/mbam-setup.exe) to your desktop.

Double-click mbam-setup.exe and follow the prompts to install the program.
At...

No, it's because it's been fixed in HijackThis.

Just copy paste this into notepad and then select File > Save as... and save it as Sidebar.reg

Under Save as type, select, All file(*.*).

...

The Vundo files are regenerating, and yet there appears to be no rootkit.

Please download Combofix (http://download.bleepingcomputer.com/sUBs/Beta/ComboFix.exe) by sUbs and save it to your...

Now download The Avenger (http://swandog46.geekstogo.com/avenger.zip) by Swandog46, and save it to your Desktop.

Extract avenger.exe from the Zip file and save it to your desktop
Run...

Ah, sorry. Yes you must click Fix Checked.
I was in a hurry but I picked up your log on the way.

How is your computer now?

Hi Himanshu,
As you can see in this (http://www.daniweb.com/forums/post676429-3.html) post, the user cannot delete the file, because "It is in use by another application".
But when you look at the...

Please create a new System Restore Point. Press the Windows button(next to Alt) and type System Restore.
Press enter and click, open System Protection.
Now, select C:\ drive and press Create....

I find nothing wrong with your HijackThis log.

Please re-open HijackThis and click on Do a system scan only. Locate the following entries and place a check against them.


O4 - HKCU\..\Run:...

Hi moon,
You're not able to access the internet at all?
Or just certain websites like you had mentioned in your first post?
Please re-open HijackThis and click Do a system scan only and place a...

Ok, there seems to be no rootkit in your system.
Please run MBAM and post back the results.
I don't think the infection has been removed completely, therefore, it is not safe until you are...

Locked - The file cannot be deleted by the user on the system. Even if the user is an Administrator, because of the permissions set on the file by the System.



I'm sorry, I do not understand...

Hi, can you use your computer to download files?
If not, then download the following to another computer and use a flashdrive/USB to transfer it to this computer.

Please download Malwarebytes'...

You need to know the file names and paths to delete them.
However, some files are locked because of the malware infection, in which case we have to go for kernel level deletion.
This is not...

Hi Himanshu,

This is a very vast area we're talking about.
Do you need help, or do you just want to find out more about malware removal?

Hi, it looks like you did not remove the malware files.
Scan again and then select everything and click Remove Selected in MBAM/

Please re-open HijackThis and place a check on the following...

Hi, are you having any problem with your computer now?

MBAM seems to have cleared everything.

Hi, please go to Control Panel and open Network Connections.

Click on File and then click New Connection and click Next.
In the next prompt, select, Set up a home or small office network and...

Please stop the scan, update the files and then re-scan. This is to see if there are any recent infection in your system.

Hi moon, please download the latest updates from here (http://malwarebytes.gt500.org/mbam-rules.exe) to your friends computer and take it to your computer(using a floppy disk/USB Flash drive/CD) and...

Please download F-Secure Blacklight (ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe) to your system and save it in your C:\ drive.

Click Start and then Run.
Type the following :
...

Hi Joshua,
I'm really sorry. The script was my fault.
I forgot to add something. I think it'll work now.

Now, please copy paste the following into a new Notepad file :


REGEDIT4
...

Hi,
Please create a new System Restore point.
Please click Start>Programs>Accessories>System Tools and select System Restore.
Now select the option called "Create a new Restore Point" and click...

Hi, excellent :)!
I've been trying to get this result for a long time. It would have worked before itself, but I have no idea why it did not work.
I think it was because lphclnbj0e57j.exe was...

Ok, I trust you know how to boot into Safe Mode?
Please boot into Safe Mode and then run fsbl.exe

If that doesn't work, then delete that file and then download it from here...

Ok, now.
Need2Find is still there on your system.

Please download F-Secure Blacklight (ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe) to your system and save it in your C:\ drive.

Click...

Hi, that is the correct download.
Please try renaming fsbl.
Now I'm really getting suspicious that there might actually be a rootkit in your system.
My plan was to see what was causing Antivirus...

Hi, looks like we missed your thread.
Please go through this fix exactly in the order it has been posted in.

Please download Malwarebytes' Anti-Malware...

Fine, thanks for the info. I thought I destroyed the access to your computer.

Please download F-Secure Blacklight (ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe) to your system and save it in...

Hi, so sorry for the late reply.
Also, it doesn't matter that you cannot see the Need2Find folder.

Have you fixed the entries I had mentioned earlier in HijackThis?
Can I have a fresh HijackThis...

You're welcome :)
Please do not hesitate to approach should you have any problem.

Happy computing :P!

Hi, yes you have posted the correct logs.
As said by you, you had an Antivirus XP infection.
Also, a fragment of the infection is still left present in your system. This is leading me to think that...

Hi, please download F-Secure Blacklight (ftp://ftp.f-secure.com/anti-virus/tools/fsbl.exe) to your system and save it in your C:\ drive.

Click Start and then Run.
Type the following :
...

Are you still able to log onto your system and see the desktop?
I did not expect this to happen.
I admit it, this is the first time I'm seeing it.

Alright, skip that for now.
Please download the Nailfix utility (http://www.spywareedge.net/nf/nailfix.exe).
DO NOT run it yet.

Reboot into Safe Mode. To do this with Windows XP, you can follow...

Hi, did you delete the delete the folder rather than uninstalling Need2Find from your computer?
Try going to Program Files and then delete the Need2Find folder.

Also, please re-open HijackThis...