DMR

Hello tseyigai, welcome to DaniWeb :) Ad Aware and SpyBot alone aren't going to be able to cope with at least one of the infections that you have. Please do the following: [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the …

[b] O21 - SSODL: SysTray.Exys - {7368D5FC-6F5C-4f5b-B964-E67214F67852} - C:\WINDOWS\system32\ggqafpck.dll [/b]The above log entry is indicative of a [url="http://www.avira.com/en/threats/TR_Drop_Small_afo_2_details.html"]trojan infection[/url]. Also, your HijackThis log looks a bit strange. It is missing all of the "O4" entries, and those entries are pretty helpful in determining exactly what malicious files are loading when …

Wretched log you've got there. [img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/puke3.gif[/img]

1. There are no obvious problems in your HJT log. Please give us a link to the thread which had the solution you tried or tell us exactly what you've tried so that we don't duplicate your efforts. 2. Give us the names of some of ht problematic site. Are …

Hi Jon Silen, welcome to DaniWeb :) Let's start with some general disinfection: [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so you should print out these instructions or save them into a text file with Notepad.[/color] 1. Open …

Hi emmie, welcome to DaniWeb :) Before proceeding with the main fixes, uninstall the "Surf Accuracy" program via your Add/Remove Programs control panel; the program is spyware. [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for much of the following, so you should print …

Download L2MFix from one of these two locations: [url="http://www.atribune.org/downloads/l2mfix.exe"]http://www.atribune.org/downloads/l2mfix.exe[/url] [url="http://www.downloads.subratam.org/l2mfix.exe"]http://www.downloads.subratam.org/l2mfix.exe[/url] Save the file to your desktop and double click l2mfix.exe. Click the Install button to extract the files and follow the prompts. Then open the newly added l2mfix folder on your desktop. Double click l2mfix.bat and select option #1 for …

Hi TheGu3st, welcome to DaniWeb :) Before we start to remove the infection, there is one thing you have to take care of first: [b] C:\DOCUME~1\SADHWA~1\LOCALS~1\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe [/b]The log entry above indicates that you are running HijackThis from within a Temp/Temporary folder. Please do the following: Create …

[QUOTE=jaishankar]did he miss something :?:[/QUOTE]Oooooh yeah. Let's just say that I wouldn't let [i]that[/i] HJT log take [i]my[/i] daughter out on a date....

[QUOTE=gumby008]... and who knows what else. [/QUOTE]Indeed.... :( I know that you said you've done some of the following, but let's go through the general cleaning process again; there are entries in your HJT log that [i]should[/i] have already been removed by ewido, SpyBot, etc.: [color=Blue]You will need to close/quit …

Overheating won't be a problem; quite the opposite, I'd imagine. The Wattage rating of the new fan is almost 4 times that of the old one, so (assuming that the fan is efficient) that puppy should move a heck of a lot more air than the old one did. Being …

1.[QUOTE=frostx]I tired so many thing , my brother tried a few things...[/QUOTE]To begin with, please tell us [i]exactly[/i] what you've done so far. 2. Please describe the connection problem in more detail. If you get error messages, tell us exactly what they are. 3. You posted this in our virus/spyware …

If you can tell us the exact name of the PUP, we can tell you what it is/does, and whether or not it should be removed.

"Your computer is infected spyware..." messages are a common scare tatic used by disreputable companies to sell you their "antispyware" products. If nothing else, you [i]are [/i]infected- by their pop-up warnings! Please do the following: Download the (free) HijackThis utility: [url]http://www.stevewolfonline.com/Downloads/DMR/Spyware%20Tools/HJT/HijackThis.exe[/url] Once downloaded, follow these instructions to install and run …

Hi kali2005, [b] Started from : C:\DOCUME~1\Will\LOCALS~1\Temp\Temporary Directory 1 for hijackthis-1.zip\HijackThis.EXE[/b] The above entry in your startup log indicates that you are currently running HijackThis from within a temporary folder. Temp/temporary folders are not places where items of a permantent nature should be stored, and given that, you need to …

The "lockx.exe" entries in your log are definitely indicative of the infection, but there are probably other hidden components of the infection as well. Please do the following so that we can see if that's true: - Run Hijackthis. - In HJT's main window, click on the Config button. - …

* Right-click on "My Computer" and choose "Properties" from the resulting menu. * Click on the Hardware tab and then click the Device Manager button. * In the resulting list of devices, click on the "+" sign next to Network Adapters to expand that category. Is a wireless adapter listed …

VNC would do the trick. Here's a good (and free) VNC program: [url]http://www.tightvnc.com/[/url]

[b]1. [/b]Did you try cleaning the infection by running Defender in Safe Mode as jaishankar suggested? Before going in to Safe Mode, use Defender's online update feature to make sure you have the absolutely most current virus detection database installed. [b]2.[/b] [QUOTE]I found the file it was believed to be …

There could be a few reasons for that. I'd start by using the Event Viewer utility in your Administrative Tools folder to review your System and Application log files. Look through the logs to see if there are any errors or warning messages which might relate to the program hangs. …

Thanks for reposting, ; I'll delete your post in the other thread. :) Please perform the cleaning procedures below: [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for the following, so you should print out these instructions or save them into a text file …

Hi wwwusuario1, welcome to DaniWeb :) Using DOS is still one easy way of doing what you want to do: 1. Open an MS-DOS box: - Click on the "Run..." option in your Start menu - In the resulting "Open:" box, type the following and then click "OK": [b]CMD [/b] …

[QUOTE=dano68]I have new hard drive...[/QUOTE]No, you have a [i]used[/i] hard drive :mrgreen: What you're seeing is a message from a utility which is used to perform "secure" wipes of hard drives. Large companies often use such tools to thoroughly erase sensitive data from computers' drives before disposing of them. In …

[QUOTE=jsaniuk]finally f8 worked but not always it only works once in a blue moon.[/QUOTE]You only have a small window of time during the boot-up sequence (usually a couple of seconds) in which to press F8 and access the Boot Menu. If you hit F8 too early or too late, the …

[QUOTE=jaishankar]also post the [url="http://www.majorgeeks.com/download3155.html"]http://www.majorgeeks.com/download3155.html[/url] Log[/QUOTE]As [url="http://www.daniweb.com/techtalkforums/announcement10-1.html"]the Announcement[/url] posted at the top of this forum indicates, HijackThis logs should [u][i]only[/i][/u] be posted in our [url="http://www.daniweb.com/techtalkforums/forum64.html"]Viruses, Spyware, and other Nasties forum[/url].

[QUOTE=frogtree]where is the spyware, viruses and other nasties forum?[/QUOTE][url="http://www.daniweb.com/techtalkforums/forum64.html"]Here[/url]. [QUOTE=frogtree]so I should download hackthis! and post the log on that forum right?[/QUOTE]Yes.

Hi pathfinderb, welcome to DaniWeb :) A) Try completely uninstalling and reinstalling AdAware. B) If the My Way entry remains in your Add/Remove Programs control panel even after uninstalling the program and rebooting, follow [url="http://support.microsoft.com/kb/314481"]these instructions[/url] to remove the entry from the control panel. C) Your log shows no signs …

You still have a variant of the Home Search Assistant/CoolWebSearch family of infections. Please do the following: [color=Blue]You will need to disconnect from the Internet for some of the following, so you'll need to print out the following instructions, or save them into a text file with Notepad.[/color] 1. Download …

I see no signs of infections in your log, nor do I see anything else which looks like it might be the source of the problems. Open the Event Viewer utility in your Administrative Tools control panel and have a look through your System and Application logs for entries flagged …

You have a number of malicious components listed in your log, but you need to take care of one thing first: [b] C:\DOCUME~1\Mike\LOCALS~1\Temp\Temporary Directory 4 for hijackthis.zip\HijackThis.exe [/b] The log entry above indicates that you are running HJT from within a Temp/Temporary folder. Please do the following: Create a folder …

1. You posted your question in our viruses and spyware forum; is there any reason that you specifically suspect those to be the cause of your slowdowns? 2. Your description of the problems is pretty general; can you give us more specific details that might help us? 3. Please tell …

[QUOTE=chook]Is it back from the dead??[/QUOTE]In full glory. It also brought a few of its zombie friends along with it. :( Follow [url="http://www.bleepingcomputer.com/forums/topict22402.html"]these SpySheriff removal instructions[/url] fully and completely. - In section #10 of the instructions, where you uninstall SpySheriff through the Add/Remove Programs control panel, also uninstall the following …

[QUOTE=Catweazle]... it doesn't necessarily mean that they're constantly sitting there staring at the monitor screen :)[/QUOTE]Well, unless that's my account you're looking at... :mrgreen:

You have [i]quite[/i] a few malicious entries in your log, and I also see no indication of any installed anti-virus or anti-spyware programs. If you really don't have an A-V program, download and install the [url="http://free.grisoft.com/doc/Get+AVG+FREE/lng/us/tpl/v5"]free edition of AVG anti-virus[/url] [i]now[/i]. Next, please do the following: [color=Blue]You will need to …

Hi hateviruses123, welcome to DaniWeb. A) [b]C:\DOCUME~1\JOHNMI~1\LOCALS~1\Temp\Rar$EX00.578\HijackThis.exe [/b] The log entry above indicates that you are running HijackThis from within a Temp/Temporary folder. Please do the following: Create a folder for HJT outside of any Temp/Temporary folders and move the HijackThis.exe file to that folder now. A folder such such …

Use Microsoft's [url="http://www.microsoft.com/resources/howtotell/ww/windows/default.mspx"]Windows Validation Assistant[/url].

The log is clean, but are you sure you pasted the whole thing into the post? I'm pretty sure there should be a bit more info beyond the last " O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) -"

[QUOTE=mastermind_SEO]I think you have to post this problem into Tech Thread :idea: .[/QUOTE]Already done; a thread has been started in the viruses and spyware forum. :)

You have a version of the VX2/Look2Me infection. Please download L2mfix from: [url="http://www.atribune.org/downloads/l2mfix.exe"]http://www.atribune.org/downloads/l2mfix.exe[/url] Save the file to your desktop and double click [b]l2mfix.exe[/b]. Click the [b]Install[/b] button to extract the files and follow the prompts, then open the newly added l2mfix folder on your desktop. Double click [b]l2mfix.bat[/b] and select …

[QUOTE=Com8Com-tech]I tried the usual f2 ...[/QUOTE]I [i]think[/i] F10 is the BIOS access key on the 1500 series; try that. Remember that you only have a window of a couple seconds to hit that key. if you don't press the key in time, the system will continue booting normally and you'll …

[QUOTE=jaishankar]First of all get rid of that Norton Antivirus U have Windows XP with SP2 then why do u need Google toolbar[/QUOTE]:rolleyes: madspook, I see no signs of malicious infections or other problems in your log. Can you describe your connection issue(s) in more detail please? The more information we …

[QUOTE=jaishankar]i couldnt get u plz b more clear[/QUOTE]Alex is saying that your question was originally posted in our Networking forum for some reason, but he moved it to this forum because the question/problem is not related to networking.

Hi Smokey29, welcome to DaniWeb :) 1. Yes- many of the malicious infetions [i]do[/i] have the ability to "morph" the names of their files. 2. Unfortunately, the traditional anti-virus/SpyBot/Ad Aware trio is often not enough to rid your system of some of the more nasty infections that exist today. Microsoft …

What the.... ?! Enough already. [img]http://www.stevewolfonline.com/Downloads/DMR/Visuals/DWThreadLock.jpg[/img]

Hi pinkbee, welcome to DaniWeb :) You have quite a few "unwanted guests" listed in your hijackThis log. Please perform the following general cleaning procedures; they should clean up most, if not, of the infections: [color=Blue]You will need to close/quit all web browser programs and disconnect from the Internet for …

Your log is clean. As far as the toolbar change goes, does SpywareGuard tell you anything more specific than the fact that it relates to the Goolge toolbar?

Are the drives listed in Device Manager, and if so, are they reported to be working properly? Also- there is a documented problem with "disappearing" CD/DVD devices in Windows. Please see [url="http://www.daniweb.com/techtalkforums/post103188-2.html"]this post[/url] for more info and a possible solution.

What [i]exact[/i] version of Word were the old documents create with?

- Close Internet Explorer. - Open your Internet Options control panel. - Click on the Security tab. - Select/hilight the "Internet" zone. - Click the "Custom Level..." button to open the Security Settings window. - Scroll down the list of Settings to the "ALLOW META REFRESH" option and make sure …

I agree with chrisbliss18's diagnosis; the clicking noise is the telltale sign. If you [i]really[/i] need to recover data fom the drive, but cannot get it to come alive, you can [url="http://www.daniweb.com/techtalkforums/thread9069.html"]try this[/url].