4,383 Posted Topics
 | Can you please do the following. =============== Can you disable [b]Windows Defender[/b] as it may interfere with the removal process. Please leave it disabled until your PC has been given the all clear. [LIST] [*]Open [b]Windows Defender[/b] [*]Click [b]Tools[/b] [*]Click [b]General Settings[/b] [*]Scroll down to [b]Real Time Protection Options[/b] [*]Uncheck …  |
| | Download [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.zip][b][color=red]SDFix[/b][/color][/url] and save it to your desktop. Please then reboot your computer in [b]Safe Mode[/b] by doing the following :[list] [*]Restart your computer [*]After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; [*]Instead of Windows loading as normal, a … |
| | Download the newest version of [url=http://majorgeeks.com/download.php?det=5554]HiJackThis[/url]; [i]version 2.0.2[/i]. Place it in a permanent folder before scanning. Repost your log after following the steps below. == Please download [url=http://www.atribune.org/ccount/click.php?id=4][color=blue]VundoFix.exe[/color][/url] to your desktop.[list] [*] Double-click [b]VundoFix.exe[/b] to run it. [*]Click the [b]Scan for Vundo[/b] button. [*] Once it's done scanning, click the …  |
| | Hi and welcome to Daniweb forums :). Please right click on hijackthis.exe and select rename and type in analysethis and hit the enter button. == Can you please do the following. =============== Scan with [b]HijackThis[/b] and then place a check next to all the following, if present: [color=#9933cc][b] O3 - … |
| | This is the only one I can see left. O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe Uninstall Mywebsearch from add/remove. Probably will not solve your problem, but it needs to go.  |
| | Hi and welcome to Daniweb forums :). Can you please do the following. =============== Go to [b]Add/Remove programs[/b] and uninstall the following, if present: [b][color=#ff0000]WhenUSave[/color][/b] The above could appear anywhere within the entry. Be careful not to remove any [i]personal[/i] or [i]system[/i] software. =============== Scan with [b]HijackThis[/b] and then place … |
| | Looks ok to me :). Have you tried defragmenting your drive? |
| | Hi and welcome to Daniweb forums :). [b]Download [color=blue]HijackThis[/color] from [url=http://majorgeeks.com/download.php?det=5554][u]here.[/u][/url][/b] Download it to your desktop and NOT a temporary folder. Right click on hijackthis.exe and select [b]rename[/b] and change the name to [b]analysethis[/b] and hit the [b]enter[/b] button. Start HJT & press the "Do a system scan and save … |
| | As far as I can tell, your log is clean, but you are running an outdated version. Can you please do the following. =============== Download the newest version of [url=http://majorgeeks.com/download.php?det=5554]HiJackThis[/url]; [i]version 2.0.2[/i]. Place it in a permanent folder before scanning. =============== Run hijackthis and hit the [b]Open the Misc Tools … |
| | Re: kw_1 HJT log Can you please do the following. =============== Can you disable [b]Windows Defender[/b] as it may interfere with the removal process. Please leave it disabled until your PC has been given the all clear. [LIST] [*]Open [b]Windows Defender[/b] [*]Click [b]Tools[/b] [*]Click [b]General Settings[/b] [*]Scroll down to [b]Real Time Protection Options[/b] [*]Uncheck … |
| | First of all could you click Start>Settings>Control Panel>Add or Remove Programs and uninstall 'Window Search', 'Window Searching', 'Lop.com', 'LOP SEARCH', 'Browser Enhancer', or 'Ultimate Browser Enhancer' if listed. You may be given a code to insert, do so and reboot when done. If not listed there, run the [color=blue]Lop Remover[/color] … |
| | I might be missing something, but I cannot see a reason for running Smitfraudfix there and if you run option #2 on an uninfected machine, you can lose the desktop. You definitely have a Vundo infection though and combofix should go a long way towards removing it. I would advise … |
| | Please download [url=http://www.atribune.org/ccount/click.php?id=4][color=blue]VundoFix.exe[/color][/url] to your desktop.[list] [*] Double-click [b]VundoFix.exe[/b] to run it. [*]Click the [b]Scan for Vundo[/b] button. [*] Once it's done scanning, click the [b]Remove Vundo[/b] button. [*] You will receive a prompt asking if you want to remove the files, click [b]YES[/b] [*] Once you click yes, your … |
| | Please download [url=http://www.atribune.org/ccount/click.php?id=4][color=blue]VundoFix.exe[/color][/url] to your desktop.[list] [*] Double-click [b]VundoFix.exe[/b] to run it. [*]Click the [b]Scan for Vundo[/b] button. [*] Once it's done scanning, click the [b]Remove Vundo[/b] button. [*] You will receive a prompt asking if you want to remove the files, click [b]YES[/b] [*] Once you click yes, your … |
| | That LSP indicates a Smitfraud infection. Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). … |
| | Re: Zlob Trogen... Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that … |
| | Right click on hijackthis.exe and select rename. Rename it analysethis and post another log please. |
| | Also, Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of … |
| | Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that … |
| | Information on that entry can be found here; [url]http://www.castlecops.com/tk32132-htc_8_1_0178_00_dll.html[/url] |
| | Hi and welcome to Daniweb forums :). Try the solutions found here [url]http://support.microsoft.com/kb/326155#[/url] and post back your results. |
| | I don't know if this will help, but it's worth a try. Download [url=http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml]Dial-a-Fix[/url] and run it. Select the 'Check all' (green arrow) and then hit 'GO.' Reboot when done and see how things are now. |
| | hakro. Go to the Zone Alarm folder and look for a file called something like 'uninst.exe' with an icon that looks like a trash can. That should uninstall it. If not, you will have to search google for the missing dll and install it to your pc. |
| | Can you please do the following. =============== Download the newest version of [url=http://majorgeeks.com/download.php?det=5554]HiJackThis[/url]; [i]version 2.0.2[/i]. Place it in a permanent folder before scanning. Repost your log after following the steps below. [color=#ff0000][i]This version has features that might be more helpful in 'cleaning' up your system[/i][/color]. =============== Scan with [b]HijackThis[/b] and … |
| | Can you have Avast Quarantine or delete the file? Please download and install [url=http://free.grisoft.com/doc/20/lng/us/tpl/v5][b][color=blue]AVG antispyware tool[/color][/b][color=blue][/color][/url][list][*][color=red]Close all other Applications[/color] Select language click [b]Ok[/b][*]Click [b]I Agree [/b][*]Click[b] next[/b][*]Click [b]Install[/b][*]Click[b] Finish[/b][*]Wait and AVG antispyware will open to the main screen automatically.[*]Wait again a few minutes and AVG antispyware Should Auto update itself. … |
| | Re: Outerinfo crap Run hijackthis and hit the [b]Open the Misc Tools Section[/b] and then the [b]Open Uninstall Manager.[/b] Then hit the [b]Save List[/b] button. Save to the desktop for easy access. Open the log file and copy the entire list and paste it here please. =========== Copy the bold text below and … |
| | [url]http://www.daniweb.com/forums/thread83821.html[/url] == Download [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.zip][b][color=red]SDFix[/b][/color][/url] and save it to your desktop. Please then reboot your computer in [b]Safe Mode[/b] by doing the following :[list] [*]Restart your computer [*]After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; [*]Instead of Windows loading as … |
| | Can you please do the following. =============== Download the newest version of [url=http://majorgeeks.com/download.php?det=5554]HiJackThis[/url]; [i]version 2.0.2[/i]. Place it in a permanent folder before scanning. Repost your log after following the steps below. =============== Scan with [b]HijackThis[/b] and then place a check next to all the following, if present: [color=#9933cc][b] R1 - … |
| | Can you please do the following. =============== Scan with [b]HijackThis[/b] and then place a check next to all the following, if present: [color=#9933cc][b] O2 - BHO: MSVPS System - {60D3EC53-56A8-46A8-9D01-1AB64410665C} - C:\WINDOWS\nsduo.dll [/b][/color] [color=#9933cc][b] O21 - SSODL: msmdev - {6252C618-3DD5-40F5-9DAA-8647492E8364} - C:\WINDOWS\msmdev.dll [/b][/color] [color=#9933cc][b] O21 - SSODL: msmhost - {5D9F8A87-5A04-4D61-95C9-6A6C6D5581CC} … |
| | Maybe you should continue with the help that has been given you here; [url]http://forums.techguy.org/malware-removal-hijackthis-logs/608611-ive-tried-everything-need-prof.html[/url] rather than just baling out? |
| | Hi and welcome to Daniweb :). Don't worry about purchasing removal tools. Free ones do just as good a job, imho. == [b]Download [color=blue]HijackThis[/color] from [url=http://majorgeeks.com/download.php?det=5554][u]here.[/u][/url][/b] Download it to your desktop and NOT a temporary folder. Right click on the file [b]hijackthis.exe[/b] and rename it to analysethis before scanning. Start … |
| | [QUOTE=gerbil;438288] ==GET AVG antispyware 7.5 here.. [url]http://free.grisoft.com/doc/5390/lng/us/tpl/v5[/url] or here.. [url]http://free.grisoft.com/freeweb.php/doc/5390/lng/us/tpl/v5#avg-anti-spyware-free[/url] -Install it and UPDATE it. Start AVG a-s 7.5; -under Scanner/ Settings please change the default action from Recommended Actions to QUARANTINE, and run the complete system scan. -press Apply all Actions and Save the log file. Post the log … |
| | Re: Help! Download [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.zip][b][color=red]SDFix[/b][/color][/url] and save it to your desktop. Please then reboot your computer in [b]Safe Mode[/b] by doing the following :[list] [*]Restart your computer [*]After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; [*]Instead of Windows loading as normal, a … |
| | Download [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.exe][b][color=red]SDFix[/b][/color][/url] and save it to your desktop. Please then reboot your computer in [b]Safe Mode[/b] by doing the following :[list] [*]Restart your computer [*]After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; [*]Instead of Windows loading as normal, a … |
| | Download [url=http://downloads.andymanchesta.com/RemovalTools/SDFix.zip][b][color=red]SDFix[/b][/color][/url] and save it to your desktop. Please then reboot your computer in [b]Safe Mode[/b] by doing the following :[list] [*]Restart your computer [*]After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually; [*]Instead of Windows loading as normal, a … |
| | Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that … |
| | Unzip HJT into it's own permanent folder before doing anything in order for it to create backups. [color=red](Not a temporary folder or the desktop & not directly on your hard drive).[/color] Close all (browser) windows & rescan with hijackthis. When the scan is finished place a check in the box … |
| | Re: Hacktool.rootkit Please go to [url=http://virusscan.jotti.org/][u]Jotti's[/u][/url] or to [url=http://www.virustotal.com/en/virustotalf.html][u]virustotal[/u][/url] and have this file scanned. Post the results back here. C:\WINDOWS\system32\avpo.exe |
 | Hi. Please update hijackthis to the latest version. Once you have it, right click on the hijackthis.exe file and select [b]rename[/b]. Rename the file [b]analysethis[/b] and rescan your system. Post the new log back here. |
| | Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that … |
| | Hi and welcome to Daniweb forums :). Can you please right click on hijackthis.exe and select [b]rename[/b] and rename the file to [b]analysethis[/b] before going ahead. ======= Go to [b]Add/Remove programs[/b] and uninstall the following, if present: [b][color=#ff0000]Errorsafe,Errorsafefree[/color][/b] The above could appear anywhere within the entry. Be careful not to … |
| | Please download and install [url=http://free.grisoft.com/doc/20/lng/us/tpl/v5][b][color=blue]AVG antispyware tool[/color][/b][color=blue][/color][/url][list][*][color=red]Close all other Applications[/color] Select language click [b]Ok[/b][*]Click [b]I Agree [/b][*]Click[b] next[/b][*]Click [b]Install[/b][*]Click[b] Finish[/b][*]Wait and AVG antispyware will open to the main screen automatically.[*]Wait again a few minutes and AVG antispyware Should Auto update itself. If it doesn't click [b]update[/b] at top of screen.[*][b][color=red]It … |
| | Re: constant adware Please download [url=http://www.atribune.org/ccount/click.php?id=4][color=blue]VundoFix.exe[/color][/url] to your desktop.[list] [*] Double-click [b]VundoFix.exe[/b] to run it. [*]Click the [b]Scan for Vundo[/b] button. [*] Once it's done scanning, click the [b]Remove Vundo[/b] button. [*] You will receive a prompt asking if you want to remove the files, click [b]YES[/b] [*] Once you click yes, your … |
| | Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that … |
| | Can you please do the following. =============== Download the newest version of [url=http://majorgeeks.com/download.php?det=5554]HiJackThis[/url]; [i]version 2.0.2[/i]. Place it in a permanent folder before scanning. Repost your log after following the steps below. [color=#ff0000][i]This version has features that might be more helpful in 'cleaning' up your system[/i][/color]. =============== Scan with [b]HijackThis[/b] and … |
 | Please download [url=http://siri.urz.free.fr/Fix/SmitfraudFix.zip][b][color=red]SmitfraudFix[/color][/b][/url] (by [b]S!Ri[/b]) Extract the content (a folder named [b]SmitfraudFix[/b]) to your Desktop. Open the [b]SmitfraudFix[/b] folder and double-click [b]smitfraudfix.cmd[/b] Select option #1 - [b]Search[/b] by typing [b]1[/b] and press "[b]Enter[/b]"; a text file will appear, which lists infected files (if present). Please copy/paste the content of that … |
| | Please go to [url=http://virusscan.jotti.org/][u]Jotti's[/u][/url] or to [url=http://www.virustotal.com/en/virustotalf.html][u]virustotal[/u][/url] and have these files scanned. Post the results back here. C:\WINDOWS\DiskMan32.exe C:\WINDOWS\upxdnd.exe C:\WINDOWS\AVPSrv.exe C:\WINDOWS\cmdbcs.exe C:\WINDOWS\DbgHlp32.exe Please update hijackthis to version 2.02 |
| | [U]<deleted>[/U][URL="http://www.techsupportforum.com/sectools/combofix.exe"][/URL] |
| | Re: virus help Can you please do the following. =============== Download the newest version of [url=http://majorgeeks.com/download.php?det=5554]HiJackThis[/url]; [i]version 2.0.2[/i]. Place it in a permanent folder before scanning. Repost your log after following the steps below. [color=#ff0000][i]This version has features that might be more helpful in 'cleaning' up your system[/i][/color]. Right click on hijackthis and … |
| | Please download [url=http://www.atribune.org/ccount/click.php?id=4][color=blue]VundoFix.exe[/color][/url] to your desktop.[list] [*] Double-click [b]VundoFix.exe[/b] to run it. [*]Click the [b]Scan for Vundo[/b] button. [*] Once it's done scanning, click the [b]Remove Vundo[/b] button. [*] You will receive a prompt asking if you want to remove the files, click [b]YES[/b] [*] Once you click yes, your … |
The End.