crunchie

frustratedHELP, Hi and welcome to the Daniweb forums :). =============== We'll need to unload [b]Spybot's Teatimer[/b] before we begin. To do this can you start Spybot and go to [b]Tools > Resident[/b] and uncheck the box next to [b]Tea-Timer.[/b] Make sure that the icon in the system tray is no …

twista21, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

Hi and welcome to Daniweb :). Let's see what we can do. == Please download miekiemoes' LQfix batch here: [url]http://www.downloads.subratam.org/LQfix.zip[/url] Unzip it to the desktop but do NOT run it yet. It may be best to to right click on the link and select 'Save As' and save it to …

hmerritt, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

Also, [b]Clear out your Temporary internet files and other temp files. Go to Start > Settings > Control Panel >Internet Options.[/b] Under the General tab click the Delete temporary internet files, delete all Offline content as well. Clear out Cookies. Also, go to [b]Start > Find/search > Files or folders[/b] …

Looks good :).

Looks pretty clean to me :).

Clean as a whistle :D.

Thank you :). Please read this article at pchell. We appreciate your concern. [url]http://www.pchell.com/virus/bloodhound.shtml[/url]

Hi and welcome Milton :). Download [color=blue][b]CWShredder 2.15[/b][/color] from [url=http://www.intermute.com/products/cwshredder.html][u]here.[/u][/url] Download[url=http://www.derbilk.de/SpSeHjfix112.zip]'SpSeHjfix'[/url] to the desktop and then right click a blank part of the desktop and select new folder, call it spfix unzip the file into that folder. [color=red]Disconnect from the net and Close ALL OPEN PROGRAMS.[/color] Run 'SpSeHjfix'. and click …

Looks like an attempt at humour :).

Try the old version [url]http://www.wilderssecurity.com/attachment.php?attachmentid=138934[/url] Or you can temporarily disable McAfee :).

Please download miekiemoes' LQfix batch here: [url]http://www.downloads.subratam.org/LQfix.zip[/url] Unzip it to the desktop but do NOT run it yet. It may be best to to right click on the link and select 'Save As' and save it to your desk top. Next, please reboot your computer in Safe Mode by doing …

Download the file I have attached by right clicking on it and selecting 'Save As.' Save, then unzip it to your desktop. Reboot into [url=http://www.xtra.co.nz/help/0,,6156-1377929,00.html]Safe Mode[/url] and double click RunThis.Bat. It will do a good cleanup on this. == Download L2mfix from one of these two locations: [url]http://www.atribune.org/downloads/l2mfix.exe[/url] [url]http://www.downloads.subratam.org/l2mfix.exe[/url] Save …

Please post your log :).

Try clearing out your Temporary Internet Files and cookies. Right click on the Internet Explorer icon and select Properties. Select Delete files and check the box for delete all offline content. Then try again.

You have posted an incomplete log. There should be a lot more running processes. On your next post, please ensure the entire log is there :). ==== Please download the trial version of Ewido Security Suite here: [url]http://www.ewido.net/en/download/[/url] Install it, and update the definitions to the newest files. Do NOT …

Try the tips in this thread and see if they help you :). [url]http://www.daniweb.com/techtalkforums/thread13529.html[/url] You can also access your hotmail account through Outlook Express.

You may want to print or save these instructions locally before starting. Please download, install, and update the free version of [url=http://www.ewido.net/en/download/]Ewido trojan scanner[/url]: [list=1] [*]When installing, under "Additional Options" [b]uncheck[/b] "Install background guard" and "Install scan via context menu". [*]Run Ewido --- When you run it for the first …

Mikeymike360, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

Do you have Panda AV on your system? Please go to [url=http://virusscan.jotti.org/][u]Jotti's[/u][/url] and have these files scanned. Post the results back here. [b]C:\pav.reg C:\WINDOWS\System32\pavdr.exe[/b]

Welcome back geoss. - When we're done cleaning off your system, i'd [b]recommend[/b] that you install all the [color=#ff0000][b][i]critical windows updates[/i][/b][/color] available from [b]Microsoft[/b], upto [i]service pack 1[/i]. This will help to make your system more secure and prevent many '[i]problems[/i]' from reoccuring in the future. =============== Run [b]HiJackThis[/b] and …

[QUOTE=swatkat]Download [url=http://www.trendmicro.com/ftp/products/tsc/cpr/sysclean.com]Sysclean Pacakge[/url], create a folder named [b]Sysclean[/b] on Desktop, and put the downloaded file to that folder. Next download the [url=http://www.trendmicro.com/download/pattern.asp]pattern file for Windows OS[/url] (pattern file will have a name like [i]lpt731.zip[/i] ) and [b]extract the contents of the ZIP file to the same Sysclean folder[/b]. Reboot in …

I believe that Cain is/was referring to the scientists as 'retards,' or at least, that is how I read it. Let's keep the name calling out of it and not get personal please :).

Hi and welcome to Daniweb :). You have a heap of nasties on your PC, so please do the following, reboot when done and post me another hijackthis log. == Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] …

Where did you get [b]your[/b] idea from? :D.

Hi. Welcome to Daniweb forums :). You are running hijackthis from a temporary folder. You need to create a new folder in a permanent directory of your choice, (a folder on the desktop is fine) name the new folder [b]hijackthis[/b] and move or unzip hijackthis.exe into that folder. Once you …

Hi and welcome to Daniweb :). Please read [url]http://www.daniweb.com/techtalkforums/thread24085.html[/url] ======== First of all could you click Start>Settings>Control Panel>Add or Remove Programs and uninstall 'Window Search', 'Window Searching', 'Lop.com', 'LOP SEARCH', 'Browser Enhancer', or 'Ultimate Browser Enhancer' if listed. You may be given a code to insert, do so and reboot …

cre8er1, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

Please download Atribune's Find batch from here: [url]http://www.atribune.org/downloads/find.zip[/url] Unzip it to the desktop and run Find.bat. This should create a file in the same folder called [b]report.txt[/b]. Please post the entire text of this file here for me. That does not appear to be a complete hijackthis log. PLease make …

Never heard of it until now. Sure you do not mean [i]Haxdoor?[/i]

Start hijackthis and hit the [b]view the list of backups[/b] button. Find the backup for when you 'fixed' everything and hit the restore button. Reboot and post the unfixed log :). There is [b]zero[/b] chance we can sort your PC otherwise. (Reformat notwithstanding)

You have some entries there that need removing. =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] Housecall …

Try spybot S&D as well, as it can often find stuff that adaware misses. For 'shopnav' removal, download from [url]http://www.adwarecops.com/?Google[/url] & that should remove it.

Try this; Download and run Winsockfix from here [url]http://www.softpedia.com/get/Tweak/Network-Tweak/WinSockFix.shtml[/url]

Download the [url=http://www.downloads.subratam.org/KillBox.zip][color=blue]Pocket KillBox[/color][/url] Unzip the file to your desktop. Run Pocket Killbox and paste the full file path of the below file in the box and click on Standard File Kill and End Explorer Shell While Killing File. Click on the button with the red circle and an X …

Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] Housecall at TrendMicro [url]http://housecall.trendmicro.com/housecall/start_corp.asp[/url] Make sure you tick [b]Auto Clean.[/b] …

Try this; Download and use [url=http://grc.com/stm/shootthemessenger.htm]shootthemessenger[/url] to disable Windows messenger. == [b]Download [color=blue]HijackThis[/color] [b][color=red][SIZE=3]self-extracting[/SIZE][/color][/b] zip version from [url=http://www.malwareremoval.com/downloads.html][u]here.[/u][/url][/b] Once downloaded, double click on the file & it will install into it's own, permanent folder. Start HJT & press the "Do a system scan and save a log file" button. When …

Run the PurityScan [url=http://www.purityscan.com/uninstall.html][u]uninstaller[/u][/url] also.

You can try changing the security settings in IE to the default setting. Internet options\security.

strainjp, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

izzo, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

ulikechicken82, Hi and welcome to the Daniweb forums :). =============== **First of all we have to remove Newdotnet,** either from add/remove programs, or by going [here](http://www.newdotnet.com/removal.html) and scrolling down to the uninstall tool =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free …

AussieMate, Hi and welcome to the Daniweb forums :). =============== First of all could you click Start>Settings>Control Panel>Add or Remove Programs and uninstall 'Window Search', 'Window Searching', 'Lop.com', 'LOP SEARCH', 'Browser Enhancer', or 'Ultimate Browser Enhancer' if listed. You may be given a code to insert, do so and reboot …

Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] Housecall at TrendMicro [url]http://housecall.trendmicro.com/housecall/start_corp.asp[/url] Make sure you tick [b]Auto Clean.[/b] …

Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] Housecall at TrendMicro [url]http://housecall.trendmicro.com/housecall/start_corp.asp[/url] Make sure you tick [b]Auto Clean.[/b] …

Scott, Hi and welcome to the Daniweb forums :). =============== Please visit at least two of the following sites for an online virus scan: BitDefender Free Online Virus Scan [url]http://www.bitdefender.com/scan/licence.php[/url] Make sure you tick [b]AutoClean[/b] under [b]Scan Options.[/b] Panda ActiveScan [url]http://www.pandasoftware.com/activescan/com/activescan_principal.htm[/url] Make sure you tick [b]Disinfect automatically[/b] under [b]Scan Options.[/b] …

Download the attached zip file and unzip fixme.reg. Close all browser windows. Double click to run it and when asked if you want to merge with your registry, answer yes.

All looks good to me. Maybe you should disable messenger from within services? Start>Run and type in [b]services.msc[/b] and locate the messenger service, stop it and set it to disabled. You can also download [url=http://grc.com/stm/shootthemessenger.htm]shoot the messenger[/url] which will do it for you.

Try this; Download the attached zip file and unzip fixme.reg. Close all browser windows. Double click to run it and when asked if you want to merge with your registry, answer yes. == Go to [b][url=http://virusscan.jotti.org/]Jotti Virus Scan[/url][/b] Upload C:\WINDOWS\SYSTEM\[b]wininet.dll[/b] Let it scan and post the results in your next …