Hi,
Log looks clean :) Good to hear that the PC is working fine. By the way, please download and install the latest Java Runtime from here --> http://www.java.com/en/download/manual.jsp . Older...

Hi,

Log's looking good. There's one more thing to remove now! Reboot in Safe Mode:-
Restart (or switch ON) the PC. Then, keep tapping the F8 Key. From the menu that will be displayed, out of...

Hi,
Please download VirtumundoBeGone.exe (http://secured2k.home.comcast.net/tools/VirtumundoBeGone.exe):
1. Save it to your Desktop.
2. Locate and double-click VirtumundoBeGone.exe to run it.
3....

Hi,
It's the nasty Vundo adware! We will now remove it for good! Please download
VundoFix.exe (http://www.atribune.org/ccount/click.php?id=4) to your desktop.
Double-click VundoFix.exe to run it....

Hi,
There are still some malware that needs to cleaned! Download and install AVG Anti-Spyware v7.5 (http://free.grisoft.com/doc/20/lng/us/tpl/v5)
(This is Ewido 4.0 renamed. If you already have...

Hi,
Download KillBox (http://www.bleepingcomputer.com/files/spyware/KillBox.zip), extract it to your desktop.
Open Killbox.exe. Check the following box:-
Delete on Reboot

Highlight/select all...

Hi,
Download CCleaner (http://www.filehippo.com/download_ccleaner.html) and install it. Do not run it now!

Make Windows to show all files:-
Go to Start > My Computer.
Go to Tools menu, click...

Hi,
Sorry for my late reply. I recently shifted to a new city, and it took some time to get the Internet connection.

Please run HijackThis and click "Open Misc Tools Section". Next, click "Open...

Hi,

Kaspersky log looks clean, except these malware files in the System Restore folders. These are the backups of the files taken by the Windows System Restore feature. These files do not pose any...

Hi,

Open a new file in NotePad and copy the contents of the below "Quote" box to NotePad:-

Now, in NotePad, go to File Menu > Save AS and type the filename as Fix.REG and save the file. Close...

Hi,
Do you have HP Director/Digital Imaging Monitor/PhotoSmart software installed in the PC? TrayApp and Fax are related to any of these HP hardware/software. If you have the CD, then please insert...

Hi,

Sorry, it took me long time to reply. I wasn't able to come offline yesterday. By the way, the log looks clean :) Is the PC running fine?

Hi,
Download CCleaner (http://www.filehippo.com/download_ccleaner.html) and install it. Do not run it now!

Make Windows to show all files:-
Go to Start > My Computer. Go to Tools menu, click...

Hi,
Look2Me's gone! Log looks clean :D Please post back if you still get any popups or have any problems with the PC.

Hi,
Ok, most of the "bad" files are gone. Please download L2M9XFix (http://swandog46.geekstogo.com/l2m9xfix.exe) and extract it to a folder. Now, inside this extracted folder, there will be a file...

Hi,
Those files are still there! Now, we have to remove them manually! Open a new file in NotePad and copy the contents of the below "Quote" box to NotePad:-

In NotePad, go to File Menu > Save AS...

Hi,
The Look2Me DLLs are still there. Please download Kill2Me (http://download.bleepingcomputer.com/Merijn/kill2me.zip) and extract it to a folder. Next run Kill2Me.exe and follow the onscreen...

Download KillBox (http://www.bleepingcomputer.com/files/spyware/KillBox.zip), extract it to your desktop.

Run KillBox.exe and check the following box:-
Delete on Reboot

Highlight all the...

Hi,
Please download F-Secure Blacklight (blbeta.exe) (http://www.f-secure.com/blacklight/try.shtml) and save to your C:\ drive.
1. Open a command window by going to Start > Run and typing: cmd
2....

Hi,
Glad to hear it! SpySweeper has found some really tough baddies! Have you downloaded the Hosts file and placed it in the required folder? Please post back if you get any popups.

Hi,
Ok. Also, download the Hosts file from here (http://www.mvps.org/winhelp2002/hosts2.htm). Put it in the C:\WINNT\SYSTEM32\DRIVERS\ETC folder.

Hi,
Please download the 2-week trial version of WebRoot SpySweeper from HERE (http://www.webroot.com/shoppingcart/tryme.php?bjpc=64011&vcode=DT14&WRSID=f7ac6027d5a39c97794291a8547bee72).
Alternate...

Hi,
Let's remove the files manually. Please post a new WinPFind log.

Hi jd51edwin,
WinPFind log looks clean. Can you run a full system scan of Webroot SpySweeper in Safe Mode? And, please download CCleaner (http://www.filehippo.com/download_ccleaner.html) and install...

Hi jd51edwin,
Do the popups look like the one shown in this page?
http://swatrant.blogspot.com/2005/08/messenger-spam.html

Hi,
Welcome to Daniweb.
By the way, you can try the Nullsoft Install System (http://nsis.sourceforge.net/Main_Page) to create the installer.

Hi,
There are still some files to delete. Let's use Avenger.
Copy the below quoted text (which is a script for Avenger) into your clipboard by highlighting it and pressing CTRL C keys:-

Now,...

Hi,
Open NotePad and copy the contents of the below "Quote" box to it:-

In NotePad, go to File Menu > Save AS and type the filename as Test.BAT and save the file in any desired location. Exit...

Hi,
Ok. Then it seems that everything's alright in this PC :)

Hi,
Please post a new WinPFind log. Let's what it shows.

Hi,

Make Windows to show all files:-
Go to Start > My Computer. Go to Tools menu, click Folder Options. Uncheck Hide protected operating system files. Then, click to select the option Show hidden...

Hi,
Log looks clean :) Do you get any alerts from Windows Defender now?

Hi,
Can you run BlackLight in this PC also?

Hi,
Please download F-Secure Blacklight (blbeta.exe) (http://www.f-secure.com/blacklight/try.shtml) and save to your C:\ drive.
1. Open a command window by going to Start > Run and typing: cmd
2....

Hi,
Download WinPFind.ZIP (http://www.bleepingcomputer.com/files/winpfind.php) and completely extract it to a folder. Then run WinPFind.exe and click "Start Scan". When the scan completes, click...

Hi,
Please follow the instructions provided in this thread (http://www.daniweb.com/techtalkforums/thread47029.html). I will be locking this thread :D

Hi,
Perform an online virus scan at Kaspersky Online Scanner (http://www.kaspersky.com/virusscanner) (Click the "Kaspersky Online Scanner" button). Save the log it gives after the scan.

Run...

Hi,
No, Kaspersky Online Scan doesn't provide the removal facility. But, it's one of the best scanner out there.


Reboot in Safe Mode:-
Restart (or switch ON) the PC. Then, keep tapping the F8...

Hi,
Glad to hear that everything's alright now :D Actually, that "red circle with cross" in System Tray and the changed wallpaper are due to the Smitfraud/Spyfalcon family of malware. When you see...

Hi,
WinUpdate.fld is related to an adware. Please delete it. And, the Snowball Wars is also a adware/spywar, delete it too!lly yet.


Reboot in Safe Mode:-
Restart (or switch ON) the PC. Then,...