jholland1964

We need to see the actual logs plus a [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]HiJackThis[/URL][/B] log so try Safe Boot with Networking.

These are the steps we would prefer that you follow to begin: Please go [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] Please do ALL steps with the exception of the Deckard Scanner, it is NO LONGER AVAILABLE. Run each recommended program. If the instructions say to REMOVE ITEMS found, please do so. Reboot after each scan, …

Why is this 4 year old thread coming up?

To be honest, if it were my choice, and I have to tell you I don't use either, the programs I use are all FREE, but if I had to get rid of one of these paid programs then I would Uninstall Windows Live OneCare. It doesn't rank in the …

[QUOTE=falcon802;801999]How does Malwarebytes compare to Adaware or Spybot?[/QUOTE] MBA-M is currently the top of the line. Crunchie clearly stated [B][QUOTE]* Post the log back here. & Post new HJT log.[/QUOTE][/B] He will need to see those logs.

Please download [B][URL="http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download and install the …

Your Malwarebytes' program is out of date. You should always remember to UPDATE before each scan. If updates quite frequently, sometimes multiple times in one day. They released the newest version on 2/11 the newest version is 1.34 and as of 5 minutes ago the database version is 1756. Please …

Are you absolutely certain this is the name of the missing file? Check to be absolutely certain. As a beginning here let's get rid of those O18 Logitech entries in your HJT log just to make for easier reading. Run HJT again and put a check mark next to all …

Give us some more info on the computer itself...how many hard drives, how full are they, how much RAM is installed? Have you done general clean up of the computer...removal of temp files, defrag and that type of thing? Have you done scans with your antivirus program AND with SpyBot? …

Please download[B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download and install the …

A question first, you said this; [QUOTE]I've ran Ad-Aware and Malwarebytes, but I'm still getting the pop ups. I realized that I was using old version, down loaded the new and still are getting pop-ups.[/QUOTE] Old version of WHAT? We need to see the MBA-M log in order to see …

First of all when you say [B]S[COLOR="Red"]k[/COLOR]ybot[/B] I hope I am safe to assume that you mean[B] S[COLOR="Red"]P[/COLOR]YBOT[/B] Though if you actually mean SKYBOT my browser and firewall would not allow connection to the links given for the one link I found. The other references gave me links to information …

We really need some more info here. Do you mean you tried to use MBA-M and couldn't or that you DID use it and it didn't find anything? Have you tried a simple reboot of the system? Sometimes this will be enough. Give use a [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]HiJackThis[/URL][/B] Full System scan log …

How do you KNOW you have these trojans? Nothing is showing in the MBA-M log, which is WAY out of date by the way. Current version is 1.33 and the database version is 1736. Where is the HJT Full System Scan log, all you have posted is the Uninstall list. …

REally sorry to have missed your post. Are you still having problems? Did you ask ESET scanner to REMOVE items found?

If I may comment here, I believe that your log shows no entries after O22 because you don't seem to have any XP services running. Several other things I note, your O4 entries, which are the auto starting programs that start when the computer starts shows AVG7 antivirus but it …

Just pick ONE machine and let's run through entire clean up with that one machine. Start with MBA-M, allow it to clean everything found. Reboot Then run [B][URL="http://www.eset.com/onlinescan/"]ESET Scanner[/URL][/B] and do the same. Reboot. Then run an new HJT scan and save the log. Also run HJT and give us …

You are running TWO anti-virus programs on the computer, AVG8 and McAfeethis would cause a MAJOR slow down for certain PLUS lessen the protection on the computer since they will compete against each other rather than looking at what is coming onto the computer. If McAfee is up to date, …

You say you are waiting to install McAfee...your log shows that there are remaining Symantec/Norton entries in Services. When did you uninstall this program? And WHY was HiJackThis run in Safe Mode with Networking? It should be run in normal mode? Whoops! Sorry Crunchie, didn't see you there.

[QUOTE]Malwarebytes and It's picked up over 80 things. Is it reliable to use it?[/QUOTE] There is NO WAY we would recommend something that was not reliable. This is the most commonly recommended removal tool here today. If it found 80+ items then they need to be removed by that program. …

There is NO NEED to purchase a good anti-virus program there are some superior FREE ones available. I myself use [B][URL="http://www.free-av.com/en/download/1/avira_antivir_personal__free_antivirus.html"]Antivir [/URL][/B]and am very pleased with it. [B][URL="http://www.download.com/Avast-Home-Edition/3000-2239_4-10019223.html?part=dl-AvastHome&subj=dl&tag=button&cdlPid=10998297"]Avast[/URL][/B] is another good free one many use as well as AVG 8. Download, install and update one of those and then do …

Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download and install the …

You are running an out of date version of HiJackThis. Newest version is 2.0.2 Get rid of that old one and download the new one[B][URL="http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download"] HERE[/URL][/B] You have a tremendous number of programs running all the time in the background which certainly could cause high resource usage. Turn off the …

Please do the following; download [B][URL="http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download …

Sounds as if the hard drive is failing or corrupt. When you did the reinstall did you totally wipe the drive or just reinstall on top of what was there?

Please do the following: Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware[/URL][/B] to your desktop. * Double-click [B]mbam-setup.exe[/B] and follow the prompts to install the program. * At the end, be sure a checkmark is placed next to the following: [B] o Update Malwarebytes' Anti-Malware o Launch Malwarebytes' Anti-Malware[/B] * Then click[B] Finish.[/B] * …

Your HiJackThis program is the old version. Get rid of that one and download the new one from [B][URL="http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe"]HERE[/URL][/B]. Save it to the desktop for now. Also do the following; Please download [B][URL="http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B]* Be …

Don't see anything suspicious in the logs. Is the computer running all right? Judy

Please do the following: download [B][URL="http://www.majorgeeks.com/Malwarebytes_Anti-Malware_d5756.html"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B]* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download and …

[QUOTE]So I ran Super Anti-Spyware, Malwarebytes, and Norton Malware.They found problems but not of them removed this problem. [/QUOTE] Did you tell these programs to remove what they found? They won't just do it automatically, you have to tell them to do so and very often the computer must be …

Reformat is extremely drastic. There is NO reason to reformat at this time. [B][COLOR="Red"]Turn off the AIM program completely[/COLOR][/B] until the computer is deemed clean. It cannot spam if it isn't turned on. There were multiple Trojans on the computer; Vundo(which is the same family of trojans as Virtumonde) Trojan.Spambot …

See if you can do the following; download [B][URL="http://www.besttechie.net/tools/mbam-setup.exe"]Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick mbam-setup.exe and follow the prompts to install MBA-M. * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish. * If an update is found, it …

What program were you trying to install? Sounds like this may have caused something.

What is the exact name and version of the program that you are having problems with? I would suggest that you begin by following steps 2, 7, 8 and 9 (though in this step please allow the ESET scanner to remove whatever is found) Please REBOOT after both the MBA-M …

The O24 entries are Windows Active Desktop Components. Active Desktop Components are local or remote html files that are embedded directly onto your desktop as a background. When fixing these entries, HijackThis will only remove the Desktop Component in the registry. [B]The actual HTML file being referenced, though, will not …

We need to see the HJT scan run in normal mode.

[QUOTE=Gtrtech;780102]I got the same virus on one of the workstations. I did the antivirus thing got rid of what I thought was all but now the only problem is right after you log in (I tried safe mode too) it logs you off. tried doing a windows repair but no …

No, I don't believe the computer is clean there are definitely some suspicious entries in your HJT log. But the first thing you need to do is [B]UNINSTALL[/B], via Add/Remove, one of the two anti-virus programs you are running. I see both Avast4 and McAfee. The absolute rule is ONE …

We need to see the logs of the programs you ran. I hope you mean Malwarebytes' Anti-Malware (MBA-M) when you say Malware along with the HJT log. Be sure it is the latest version which is 2.0.2 We also need to know the symptoms which were/are going on with the …

First of all you are running Spybot TeaTimer. This can interfere with fixes done. Spybot itself is a great program but the TeaTimer portion of the program really is more trouble than it is worth. Turn that off. Disable Spybot's TeaTimer * Run Spybot-S&D in Advanced Mode * If it …

What was the name of the trojan found?

First of all please do the following: Disable Spybot's TeaTimer as it can interfere with any fixes done. * Run Spybot-S&D in Advanced Mode * If it is not already set to do this, go to the Mode menu select Advanced Mode * On the left hand side, click on …

Your MBA-M program is WAY, WAY out of date. Current version is version 1.32 and the current database is 1649. You ALWAYS must update the program BEFORE each scan. MBA-M has daily updates, sometimes even more often. Do the update and then run the new Full System Scan and REBOOT …

Follow the instructions given [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] Ignore the section about Deckard Scanner and use instead HiJackThis post back with all requested logs.

For one thing, turn off that Spybot TeaTimer. It truly causes more trouble than it is worth. Please check the following are started: 1.Automatic Updates 2.Background Intelligent Transfer Service (BITS) 3.Cryptographic Services 4.Remote Procedure Call (RPC) 5.System Restore Service To verify that BITS is correctly configured : 1.Double-click `Background Intelligent …

[QUOTE]HELP a 37 yr old Lady who can't afford a guy to come in to fix this......[/QUOTE] You don't need a "guy" to come in and fix this, believe me, you can do it yourself with the steps you'll get here. Judy (not a guy):)

Run ESET Scanner again this time have it fix what it finds. Your java program is WAY,WAY, WAY out of date. Current version is 6 update 11. Go[B][URL="http://www.java.com/en/download/manual.jsp"] HERE [/URL][/B]download the Offline Install to your desktop. Then go into Add/Remove and uninstall ALL the java programs you find there. Once …

[QUOTE]Standard buttons are changed[/QUOTE] Not sure what you mean by this exactly. One thing, disable that Spybot TeaTimer. It is more trouble than it is worth and can interfere with fixes you may do. Disable Spybot's TeaTimer * Run Spybot-S&D in Advanced Mode * If it is not already set …

First of all your [B]MBA-M[/B] program is[B] way, way out of date.[/B] The current version is [B]1.31[/B] and the most recent database is [B]1475.[/B] You need to update it, which will give you the newest version and also bring the database up to date for today. This program has updates …

There "could" still be something there. Do these steps you will find [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] using the directions you will find in that link; The [B]MBA-M [/B]full system scan, [B]removing all that is found[/B], [B]Reboot[/B] and do the[B] ESET Online scan[/B], [B]removing all that is found.[/B] [B]Reboot [/B]and run a new [B]HJT[/B] …