1,366 Posted Topics
Re: [QUOTE]I have run a-squared and found nothing I think was worth looking at.[/QUOTE] We NEED to see ALL logs, what may look innocent may be "guilty". Please do the following: Please Download[B][URL="http://www.atribune.org/ccount/click.php?id=1"] ATF-Cleaner.exe by Atribune[/URL][/B](Windows XP, 2K, 2003 & Vista ONLY) • You can put ATF-Cleaner on your Desktop for … | |
Re: It is time some actual clean up steps and scans be run so we can actually determine what is happening on the computer. The steps below are those always recommended here. Please follow these steps and post back with requested logs...when you post back please [B]Copy/Paste log[/B]s do not attach … | |
Re: [QUOTE=Rik from RCE;885589]Your computer is showing signs of a bad infection. Please download and run Mbam from here - [url]http://www.malwarebytes.org/mbam.php[/url] then post it's results along with a fresh HJT log.[/QUOTE] Bear in mind, first this HJT log is incomplete as the upper portion which would look like this: [QUOTE]Logfile of … | |
Re: Please follow PP's instructions and then post back here with the MBA-M log. You don't want that MyWebSearch on there it is considered malware. | |
Re: First of all, update your anti-virus program. Don't run it yet. Please download[B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * … | |
Re: It is not a good idea to post the same problem at two forums. You began at geeks to go you should continue there. A word of warning however, one should [B]NEVER[/B] run Combofix without [B]FIRST being DIRECTED TO DO SO by a helper[/B]. You have not been directed to … | |
Re: You all ready have had multiple threads here requesting help and you never complete the instructions given. | |
Re: [QUOTE]the new version of malaware byte didnt find anything [/QUOTE] Possibly because it was run in Safe Mode. The program is meant to be run in NORMAL mode if at all possible. Know you were instructed to do the scan in safe mode and that is fine. Safe mode doesn't … | |
Re: [QUOTE]program that helps you and when I delete the things it suggests I temporarily am able to edit the registry but even when doing all the fixes I could find within the registry, I am still unable to access folder options. Also after a few minutes at the most, the … | |
Re: Your Malwarebytes' Anti-Malware program is [B]woefully way, way out of date.[/B] Current version is[B] 1.37[/B] and the database is[B] 2227[/B]. You need to[B] update to the most current version[/B] and [B]database[/B]. Then re-scan using [B]NORMAL MODE ONLY [/B]and a[B] FULL SYSTEM SCAN[/B].[B][COLOR="Red"] Remove ALL items found[/COLOR][/B]. [B] Reboot the computer[/B] … | |
Re: The thread you have noted is well over 4 years old so very possible the infection and things done wouldn't be the same. To Update MBA-M you can go to [url]http://www.gt500.org/malwarebytes/database.jsp[/url] download an update. Save it to a disk or flash drive and then when you hit update MBA-M just … | |
Re: This program should be run in [B]NORMAL[/B] mode. Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update … | |
Re: The thread you found here is about 4 1/2 years old, so frankly think you should move forward. How about beginning with a full system scan with[B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"] HiJackThis. [/URL][/B]Do that and copy/paste the log back here. Maybe something will stand out...what other steps have you taken? Judy | |
Re: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download and install the … | |
Re: [QUOTE=seeker9969;874267]Sol means shit out of luck. I do believe that you can lock the Bios. That is a way the computer will not even boot up until a password is setup. good luck :)[/QUOTE] seeker9969, this thread is 4 years old. It is pointless posting something like this in a … | |
Re: You should post the MBA-M log and a NEW HJT log for Crunchie to take a look at. Everything may not be removed and other steps may be required. | |
Re: Can YOU download? If so do the following: Please download [B][URL="http://forum.networktechs.com/showthread.php?t=49"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update … | |
Re: Yes there is an infection or infections on the computer. At least one of those showing is [B]Spyware Protect 2009[/B], which is a [B]Rogue anti-spy program.[/B] The [B]KEY[/B] removal tool for this is [B]Malwarebytes' Anti-Malware [/B]or [B]MBA-M[/B]. One slight problem however it is designed to be run in NORMAL mode. … | |
Re: You are correct about starting your OWN thread, even if there is something maybe similar running no two computers are alike and even though they may be showing similar symptoms the cause may be totally different so fixes would be totally different. This would make it very confusing. What operating … | |
Re: First of all, bad idea to install another program when the cause of the problem is unknown. Uninstall that Google Browser for now....What do you mean when you say...Error on every page? What does the error say? When you say you ran Malware, I certainly hope you mean [B][URL="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?cdlPid=10997763"]Malwarebytes' Anti-Malware[/URL][/B]. … | |
Re: First of all TURN OFF ALL P2P file sharing programs, LEAVE them off. This is very likely how you became infected. Run HJT and put check marks next to the following entries: O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent … | |
Re: This thread is nearly 6 months old. In order to better get help it is advised that you begin your own NEW thread. Please add a scan with [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]HJT[/URL] [/B]and post that log for us in that new thread. | |
Re: [QUOTE=crunchie;876050]You of all ppl should know to use the latest updates. MBA-M is waaaaaaay behind. Tut tut.[/QUOTE] [B]Shame on you Cohen![/B] AND if your MBA-M is that far out of date how far out of date is your Search & Destroy? You have IE8 on there...did the computer "act right" … | |
Re: flipboi15, How about beginning again. Run MBA-M again, this time please run a Full System Scan with it. [COLOR="Red"]REMOVE ALL[/COLOR] items found and save the log. Reboot the computer. Run a New HJT Scan and Save that log, don't FIX anything with it at this time. Post back here with … | |
Re: You are running TWO anti-virus programs and TWO firewalls... AVG, Windows Firewall AND COMODO Internet Security which contains Firewall Protection & AntiVirus Software. That is an ABSOLUTE NO-NO and certainly could account for the freezing on the computer. If you have PAID for Comodo then keep it on there and … | |
Re: What is the NAME of the new downloaded security software? | |
| |
Re: We cannot offer any suggestions until we see some logs. Post a MBA-M log. | |
Re: From your log it appears you are running two anti-virus programs, Symantec/Norton and McAfee. The absolute rule is ONE anti-virus program on a computer. Completely Uninstall ONE of these. Then TURN OFF that Napster program until the computer is fixed, better yet, uninstall it. Very likely one of the causes … | |
Re: [QUOTE]As you see I have plenty of steps to do without putting back the programs on the computer.[/QUOTE] Sorry, but this doesn't appear to be the case. You have installed XP but NOT updated it. You should FULLY update XP before putting anything else, including the printer on the computer … | |
Re: Just posting the log, while it may reveal "something" tells us nothing about what problems you are having and WHEN? We need more than just [QUOTE]Please see all the details from hijackthis:[/QUOTE] We don't KNOW the other necessary details unless you tell us. | |
Re: What you have attached is NOT an HJT scan, frankly I have no idea what it is. Take a look at other posts to see what an HJT scan log should look like. Be sure she has a copy of the correct program from [B][URL="http://download.cnet.com/Trend-Micro-HijackThis/3000-8022_4-10227353.html"]HERE[/URL][/B] She should do a Full … | |
Re: I don't see anything in the log which would give an indication of slowness. Have you done a general clean up...temp files, cookies, etc.? One thing showing that shouldn't be there is MBA-M install program set to auto start. This should only have run once and not at start up. … | |
Re: Hi and welcome to daniweb, Where in the world did the title for your thread come from? I seen nothing like that in your logs. Your computer is woefully out of date. You have NO Windows XP updates showing at all, your java is also way, way out of date … | |
Re: [QUOTE=dtapster;871119]Im having the same problem. Did you ever resolve???[/QUOTE] dtapster, you need to begin your [B]OWN[/B] thread. This thread you posted in is 3 years old. We need more information on [B]YOUR[/B] problem, what steps you have taken, what operating system, anti-virus, etc...AND if you note the original poster was … | |
Re: Hi welcome to daniweb, You obviously have malware of some type on the computer. Have you run any scan with your McAfee Anti-Virus program? If not please UPDATE it and run a Full System scan with it. Have it remove or quarantine anything it finds. If it produces a log … | |
Re: Go to your [B][URL="http://www.daniweb.com/forums/thread175550.html"]original thread[/URL][/B] I posted to you there. | |
Re: We would prefer that you copy/paste logs, not upload them. By not having to open an attached file this protects the helper or others reading the post from possibly opening an infected file. FYI, Your infected O16 files are legitmate files and not infections. Your Unknown O10 listing is also … | |
Re: Since we prefer that logs be copy/pasted and not attached here are the logs as posted by rynd2it Malwarebytes' Anti-Malware 1.36 Database version: 2069 Windows 5.1.2600 Service Pack 3 5/2/2009 5:35:23 PM mbam-log-2009-05-02 (17-35-23).txt Scan type: Full Scan (C:\|D:\|) Objects scanned: 314477 Time elapsed: 31 minute(s), 23 second(s) Memory Processes … | |
Re: You have [B]multiple trojans[/B] on the system for certain and that is what can be seen on the log, there are likely other infections not shown. But I also see you are[B] NOT running ANY protection programs whatsoever[/B], which is why you have a [B]very badly infected computer[/B]. Please do … | |
Re: Hi and welcome to daniweb, Please do the following: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an … | |
Re: Hi welcome to daniweb; begin with this: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is … | |
Re: You definitely have malware on the computer. Please follow these steps EXACTLY. Please download[B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] … | |
Re: Hi and welcome to daniweb, first of all the version of HJT you are using is several years out of date, UNINSTALL it and download the [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]newest version[/URL][/B]. Secondly, HJT should[B] NOT [/B]be considered a "fixer" tool. While some fixes "may be" done at the end using it, it [B]does … | |
Re: [QUOTE=crunchie;866212]Do NOT use combofix unless you are given instructions on it's use.[/QUOTE] Please do the following: Please Download[B][URL="http://www.atribune.org/ccount/click.php?id=1"] ATF-Cleaner.exe[/URL][/B] by Atribune(Windows XP, 2K, 2003 & Vista ONLY) • You can put ATF-Cleaner on your Desktop for easy access. RUN ATF-Cleaner.exe. -- Click on ATF-Cleaner to run it -- Where it … | |
Re: Hi and welcome to daniweb. Can't really comment on the Autorun Eater program as I have never used it. Please turn it off for now. You are running a several years out of date version of HiJackThis, you need to[B] uninstall[/B] it and download the newest version from[B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"] HERE[/URL][/B] [B]BEFORE … | |
Re: Just saying "ole illegal operation for just about everything" doesn't really tell us much. Can you give us some of the exact messages including the files noted in these illegal operation warnings? Do you have the system disks for the computer? Have you run scandisk to check for errors? What … | |
Re: Run HJT again and place check marks next to the following: O1 - Hosts: ::1 localhost O1 - Hosts: 91.121.97.18 mininova.org O1 - Hosts: 91.121.97.18 [url]www.mininova.org[/url] O1 - Hosts: 91.121.97.18 [url]www.thepiratebay.org[/url] O1 - Hosts: 91.121.97.18 demonoid.com O1 - Hosts: 91.121.97.18 [url]www.demonoid.com[/url] When you have placed those check marks click the … | |
Re: You are running a [B]very old version[/B] of HiJackThis. [B]Uninstall[/B] this old version and download this new version [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]HiJackThis version 2.0.2 [/URL][/B]to the desktop and run a new Full System scan with it and then post that new log back here. |
The End.