1,366 Posted Topics
 | Re: Please help Hello Ronnie, PP has to be away for several days and he has asked me to help finish up your clean up. First thing you need to do is Uninstall HiJackThis via Add/Remove. Next you need to download a new copy but please do it this way: First of all … |
| | Hi Joe, welcome to daniweb. First of all...where is your anti-virus program? This is a MUST. You need to turn off the SpyBot TeaTimer as it can interfere with any fixes to do this do the following: Disable Spybot's TeaTimer * Run Spybot-S&D in Advanced Mode * If it is …  |
| | Just saying you "tried a lot of things" tells us nothing. What EXACTLY have you done? We need logs from programs that you have run. How do you know you have this specific infection? |
| | What operating system? What anti-virus program? What were you doing before this happened? Download anything new or install anything new? |
| | [QUOTE=amchom;1099077]hey i have the same problem i got a virus im sure is a virus turning my sound off and changing taskbar to grey also stop connectig to the local area network i had the last update of nod32 but whatever didnt find something i wounder how to solve this … |
| | [QUOTE=amchom;1099074]hey i have the same problem i got a virus im sure is a virus turning my sound off and changing taskbar to grey also stop connectig to the local area network i had the last update of nod32 but whatever didnt find something i wounder how to solve this … |
| | [QUOTE=amchom;1099086]hey i have the same problem i got a virus im sure is a virus turning my sound off and changing taskbar to grey also stop connectig to the local area network i had the last update of nod32 but whatever didnt find something i wounder how to solve this … |
| | Try running your anti-virus in Safe Mode. You know you all ready have two threads which are not complete: [url]http://www.daniweb.com/forums/thread237635-2.html[/url] [url]http://www.daniweb.com/forums/thread242629.html[/url] Is this the same computer? If so you absolutely MUST complete all steps given to you, post back with results and then wait for the computer to be deemed … |
| | Re: Avast or Avg? Of course all is a matter of personal opinion on most things, however Avast rates higher generally on protection than AVG and also in speed. Also consider [B][URL="http://www.free-av.com/"]Avira Free.[/URL][/B] Excellent, doesn't cause slowdowns either. I have used it myself for several years and am quite pleased. You might check out …  |
| | [QUOTE=elroyjetson;874757]The things that randomly appear when it goes nuts on processes are msc.exe, 10888.exe, and 14297.exe[/QUOTE] Give look in scheduled tasks, Start, All Programs, Accessories, System Tools. See what is in there, good chance you might find any or all of those. If so, delete them, if you can't delete … |
| | First of all, you do have a major problem...you are running TWO anti-virus programs, AVG9 and Avast. This is an absolute No-No. The very first thing you must do is uninstall one of them, totally. I would recommend that you uninstall AVG9. When I say Uninstall, I mean Uninstall NOT … |
| | We need a lot more info than what has been provided, what operating system, what anti-virus are you trying to install? Where are you getting it? Do you have an anti-virus program on the system now? |
| | Hello and welcome to daniweb. You are using a [B]WAY OUT OF DATE[/B] version of HiJackThis. Please uninstall this version and download the new version from [B][URL="http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10781312.html"]HERE[/URL][/B] You are running[B] XP SP3[/B] yet your log shows multiple programs listed as [B]Windows 7[/B]. Please UNINSTALL all of those. Exactly WHAT problems … |
| | |
| | [QUOTE=Luwie;1092704]I'm having bit of problems with trojans. Malwarebytes deleted alg.exe from register, which i'm almost sure is something windows 7 needs for internet (application layer gateway service) See attachments thanks![/QUOTE] Depends on the location of the file. It could have been a trojan as there are many which use this … |
| | Go ahead and post the HJT log. Also download [B][URL="http://download.bleepingcomputer.com/grinler/rkill.com"]rkill.com[/URL][/B]. Once it is downloaded, double-click on the rkill.com in order to automatically attempt to stop any processes associated with the infection. When it has finished, the black window will automatically close and you can continue with the next step. You … |
| | You haven't given us much information really, we don't know what operating system you are using, what anti-virus program you are using, the names of these infections or their locations on the computer. Since we don't know what was found, what files you removed or where you uploaded these files … |
| | Hi, welcome to daniweb. First of all turn off or better yet [B]UNINSTALL[/B] that uTorrent program. P2P File sharing is a KNOWN cause of multiple infections. It must be turned off and remain off throughout this clean up. If this is not done we cannot help you here. Next do … |
| | Hi Welcome to daniweb, You need to follow the steps found [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B]. Please complete steps given there and post back here with the requested logs. Judy |
| | [QUOTE=erstatz;1091458]my searches redirect to random sites and spam popups pop up! how may i fix it!?[/QUOTE] In order for the few volunteers who offer a bit of their free time and expertise in this forum to assist you in a timely manner, please complete the following steps before posting a … |
| | I agree with Crunchie, why stop the av scan? You have no idea if something is still on the machine so it was absolutely of no use to even run it. You need to complete the scan, that is the only way to be certain. You also should run [B][URL="http://www.eset.com/onlinescan/"]ESET … |
| |  |
| | Re: Slow internet Hello, other than the large amount of running processes which could definitely show the computer the main thing is you are running parts of an old Norton program along with Avast. Two anti-virus programs running on one machine is a big no-no. Having looked through a previous thread you had … |
| | Hi welcome to daniweb, Run HiJackThis again and put check marks next to the following entries: R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = [url]http://internetsearchservice.com[/url] R1 - HKLM\Software\Microsoft\Internet Explorer,SearchURL = [url]http://internetsearchservice.com[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [url]http://internetsearchservice.com[/url] R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [url]http://internetsearchservice.com[/url] R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://google.com/[/url] R1 - … |
| | [QUOTE=scraddock;1046874]Thank you r1pperZ, If you noticed the HJT log, you will see that I have used Malwarebytes, Spyware Doctor, SuperantiSpyware, Ad-aware, CCleaner, Spybot, Bitdefender online and Panda online and AVAST antivirus scans and the infection is still there. The HJT log posted was after I had done all the aforementioned … |
| | It would help if we could see some logs here. We have no idea what was removed, or the locations of items removed, especially since you cannot remember the name of the last file you removed. Random letters and then saying it might be incorrect really doesn't give us a … |
| | Hi Tessy, What anti malware program did you run? You should do the following: Please download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] mbam-setup.exe [/B]and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to [B]Update Malwarebytes' Anti-Malware[/B] and [B]Launch Malwarebytes' Anti-Malware[/B], then click … |
| | Hello Heyzaneretro, welcome to daniweb. First of all your HiJackThis log is incomplete. We need to see the full log, including that top portion which tells version number, your operating system, IE version, and WHEN the scan was run. We have to be able to see all that before giving … |
| | Hi, I looked at your other thread and one thing you said makes me curious: [QUOTE]am not able to make out any suspicious task which might be running that causes this regular restart.[/QUOTE] You know it wouldn't HAVE to be a suspicious task, it could be something legal. But we … |
| | First of all Combofix is [B]NOT[/B] available right now due to a problem with the program. [B]DO NOT[/B] attempt to download it at all. Please heed this warning from [B][URL="http://download.bleepingcomputer.com/sUBs/ComboFix.html"]BleepingComputer[/URL][/B] [QUOTE] ComboFix is not available for download until an issue with the program has been resolved. Please be patient while … |
| | Please try this 1. Uninstall Malwarebytes' Anti-Malware using Add/Remove programs in the control panel. 2. Restart your computer (very important). 3. Download and run this utility. [B][URL="http://www.malwarebytes.org/mbam-clean.exe"]mbam-clean.exe[/URL][/B] 4. It will ask to restart your computer (please allow it to). 5. After the computer restarts, install the latest version from [B][URL="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button"]here[/URL][/B] …  |
| | First of all get rid of this HiJackThis. The version is way out of date, at least two years old. Current version is[B][URL="http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10781312.html"] version 2.0.2[/URL][/B] But please follow these steps exactly, run all the programs, save the logs, reboot when advised and then last run a HiJackThis scan with the … |
| | Hello and welcome to daniweb. First of all you need to [B]TURN OFF Spybot TeaTimer[/B] as it can interfere with any fixes attempted. Open Spybot. At the top click Mode. Choose Advanced Mode. Then at the bottom click Tools. When that opens on the left click on Resident. When that … |
| | [QUOTE=ckompman;1076509]try to reprogram your computer,maybe some of your important files were corrupted by a virus .. whats your anti virus software? not all anti virus softwares can detect malwares that you can get in using the internet..[/QUOTE] [QUOTE=oA9999;1076520]Hey..what "skip" are you talking about? I can't picture what are you talking … |
| | Re: CS-19 Subject Best advice is to begin with steps given here; [url]http://www.daniweb.com/forums/thread134865.html[/url] |
| | We need to see all logs you have. |
| | |
| | Hi and welcome to daniweb, The KEY to this is your own statement below: [QUOTE]I'm currently on a network and it has a LAN P2P spreader that has infected all 6 computers on my network, including media center PCs. Needless to say, when I reinstall my OS I simply get … |
| | Can you please post the MBA-M log? |
| | Hi and welcome to daniweb, First of all do this: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your [B]Desktop.[/B] * DoubleClick [B]mbam-setup.exe [/B]and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If … |
| | Re: TrojanDownloader [QUOTE=Bawb;1067831]HELP !!! How do I remove TrojanDownloader:BAT/Ftper.gen ??? Thanx ... Bawb.[/QUOTE] Begin with the instructions [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] and post back here with the requested logs. How do you know that you have this infection? We need all info on the computer also, operating system, anti-virus program, firewall, what tools have you … |
| | The other logs need to be posted. We need to know exactly what was removed and from where. MBA-M log is very important...the full log, not just names of removed items. |
| | We can make no judgments or recommendations without seeing some logs. Post the MBA-M log, even though it showed clean. Also download and run [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]HiJackThis[/URL][/B] and save the log and post it here along with the MBA-M log. |
| | Hi, welcome to daniweb. First of all it would help if you posted that MBA-M log for us so we can see exactly what was removed. The log can be found in the program under the Logs Tab. Secondly, what problems WAS she having and what is she continuing to … |
| | Re: Trojan detected Hi, welcome to daniweb. First of all it appears you still have portions of AVG 7 on the machine. You must Uninstall this completely. Go first to Add/Remove and make sure everything listed there for AVG is uninstalled. Then run this [B][URL="http://download.avg.com/filedir/util/avg_arm_sup_____.dir/avgremover.exe"]Tool[/URL][/B] to be sure it is gone. Download and … |
| | Hi and welcome to daniweb; Please download [B][URL="http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it … |
| | Hi and welcome to daniweb, Can you post the MBA-M log and also the Combofix log? Also the HJT log. |
| | Re: Browser issues Hi Mike, welcome to daniweb, First of all your MBA-M was out of date during the scan. Even though it found a removed a lot can you please update and do another Full Scan just to be safe? Of course if it finds something be sure and remove it like … |
| | Hi and welcome to daniweb, Please Download [B][URL="http://www.atribune.org/ccount/click.php?id=1"]ATF-Cleaner.exe by Atribune[/URL][/B] • You can put ATF-Cleaner on your Desktop for easy access [B]RUN ATF-Cleaner.exe.[/B] -- Click on ATF-Cleaner to run it -- Where it says Select Files To Delete, Check the Select All Option -- Click Empty Selected > OK Please … |
| | Hi welcome to daniweb, First of all, you said you all ready had Trend Micro so installing another anti-virus program was a mistake. Rule #1. ONE anti-virus program should run on a machine. Uninstall Avast. It is a great program but you can't run two. #2. Registry Easy is not … |
The End.