Windows users click on advert offering to infect PC for free Hardware and Software Networking by happygeek … stupidity by running a Google Adwords campaign which offers to infect your PC for free. The advert actually read: [B]Drive… Infect with nasties? Hardware and Software Information Security by jd51edwin Hello, I think my PC might be infected with something again. ...moving real slow....here's my HJT log. BTW, I finally switched to Firefox....so hopefully I won't be asking for help as much on these nasties...thanks for the help in advance.....JD Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:17, on 8/10/2008 Platform: Windows XP… Re: Infect with nasties? Hardware and Software Information Security by jholland1964 You may be using Firefox, but where is your full antivirus program? I see some Norton files but it doesn't appear to be the full program running, am I wrong? Re: Infect with nasties? Hardware and Software Information Security by jd51edwin No, you are correct Norton (nor any other antivirus) is currently running Re: Infect with nasties? Hardware and Software Information Security by jholland1964 [QUOTE=jd51edwin;667646]No, you are correct Norton (nor any other antivirus) is currently running[/QUOTE] Believe in taking chances do you? You know by not running an antivirus program you of course risk your own computer but also put others computers at risk, without their knowing by the way, also when you send email, etc. Follow the … Re: Infect with nasties? Hardware and Software Information Security by jd51edwin Thanks for the help.....I have since put on Shield Deluxe 2008.....here are the logs as well as another HJT......no problems running them...I removed some games and other software that has not been used in a while.....please let me know the next steps....JD Malwarebytes' Anti-Malware 1.27 Database version: 1127 Windows 5.1.2600 Service … Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Did you have ESET FIX items found? Re: Infect with nasties? Hardware and Software Information Security by jd51edwin no...per the instructions I left that box "unchecked"....should I redo it and have it fixed? Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Just wanted to check for sure. Yes, please run it again and have it fix. Then reboot and run a new HJT scan and post both logs. Be sure you remember to turn off your Norton program while doing the ESET scan as instructed. Judy Re: Infect with nasties? Hardware and Software Information Security by jd51edwin OK - I ran them again.....please see the logs below....thanks - JD ESET # version=4 # OnlineScanner.ocx=1.0.0.635 # OnlineScannerDLLA.dll=1, 0, 0, 79 # OnlineScannerDLLW.dll=1, 0, 0, 78 # OnlineScannerUninstaller.exe=1, 0, 0, 49 # vers_standard_module=3477 (20080927) # vers_arch_module=1.064 (20080214) # vers_adv_heur_module=1.066 (20070917) # … Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Hi jd51edwin, sorry it has taken me so long to respond. Just missed your post for some reason. Looks much better. I do have a question about one entry in your HJT log, this one; [B]O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe[/B] This appears to be from the McAfee VirusScan On-line. This is something that you don'… Re: Infect with nasties? Hardware and Software Information Security by jd51edwin oops...I made a mistake trying to upgrade Java...I aborted the install since I had not rebooted per the instructions - but some of it installed...I tried to "remove" but I am getting an "Internal Error 2753" - suggestions? thanks...JD Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Try the install again and see if that works. Judy Re: Infect with nasties? Hardware and Software Information Security by jd51edwin Hi Judy....trying to install again gave me the same error "Internal Error 2753 RegUtils" ...any suggestions? thanks...JD Re: Infect with nasties? Hardware and Software Information Security by jholland1964 [B][URL="http://support.microsoft.com/kb/290301"][URL="http://download.microsoft.com/download/e/9/d/e9d80355-7ab4-45b8-80e8-983a48d5e1bd/msicuu2.exe"]Download the Windows Installer Cleanup Utility[/URL][/URL][/B] Here from Microsoft is what this program does; [QUOTE]Windows Installer CleanUp Utility might be able to help. You … Re: Infect with nasties? Hardware and Software Information Security by jd51edwin Hi Judy....the Installer CleanUp worked and I was able to reinstall Java....re: the HJT fixes, I did not "fix" the following: O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_12\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\… Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Looks somewhat better, though you have a lot of unnecessary items running at start up, PLUS I see parts of several antivirus programs in there...which one is your ONBOARD antivirus program? I see the following; The Shield Deluxe 2008 ewido security suite Symantec So which is it? Pick ONE, and UNINSTALL the others totally. Re: Infect with nasties? Hardware and Software Information Security by jd51edwin Judy, The Shield Deluxe 2008 is the active virus software. I uninstalled Ewido. I could not find a way to delete the Symantec software; it did not show up on the Add/Remove list or the Program Menu to Uninstall. There is a Symantec folder under the "Program" directory on the C drive with some files but I did not find an "… Re: Infect with nasties? Hardware and Software Information Security by jholland1964 [QUOTE]There is a Symantec folder under the "Program" directory on the C drive with some files but I did not find an "uninstall program".[/QUOTE] Go ahead and manually delete that folder. Also go to Start, Search, Files and Folders and look for Norton. If you find anything, delete it. Reboot the computer. Run a new HJT log and… Re: Infect with nasties? Hardware and Software Information Security by jd51edwin All set...here's the new HJT....how does it look? thanks...JD Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 21:15, on 10/8/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\… Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Run HJT again. Place check marks next to the following; O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe" O4 - HKLM\..\Run: [SSC_UserPrompt] C:\Program Files\Common Files\Symantec Shared\Security Center\UsrPrmpt.exe O23 - … Re: Infect with nasties? Hardware and Software Information Security by jd51edwin Judy.....I checked the boxes and ran it again......here's the HJT....any other changes? thanks for the help....JD Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 22:40, on 10/29/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16705) Boot mode: Normal Running processes: C:\WINDOWS\… Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Looks better, is the computer running ok? Re: Infect with nasties? Hardware and Software Information Security by jd51edwin It's still very slow in general; I think I may have some other issues....with hardware.....the on/off button has been giving me trouble....it doesn't want to power on...need to try it several times....also, I'm thinking I may need more RAM - have 504 MB ......I wanted to rule out the nasties first....any suggestions? I was thinking about taking … Re: Infect with nasties? Hardware and Software Information Security by jholland1964 You have a huge number of items running at start up which are unnecessary, which in turn can most definitely slow down the computer. I can give you a list if you wish and see if that helps with the slowness, it should. Adding more RAM is also a good, and generally inexpensive way, to speed the computer. What you have is not enough. Go to crucial.… Re: Infect with nasties? Hardware and Software Information Security by jd51edwin Judy....thank you for all of your help here......I would like to take you up on your offer to give me a list of the programs I should take off the "start up" list....I'll close out this thread afterwards....Jim Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Ok, give me a bit to make up the list and I will also link to a Free program to help control them too. Re: Infect with nasties? Hardware and Software Information Security by jholland1964 Your amount of RAM is somewhat low. You should consider adding more RAM, this would certainly speed the computer and additional RAM is not that expensive and generally easy to add. To stop unnecessary starting programs and services which will certainly release necessary resources I recommend that you use this FREE program [B][URL="http://www.… Re: Windows users click on advert offering to infect PC for free Hardware and Software Networking by Infarction Small wonder there's so many problems with malware spreading these days... Re: Windows users click on advert offering to infect PC for free Hardware and Software Networking by Dani I think it was clicked on more for the curiosity factor than people who were just too click happy for their own good.