1,366 Posted Topics
Re: You don't need a US Government agency to infect pc's there are plenty of virus writers out there who do it daily, and from multiple countries. [url]http://www.free-av.com/[/url] AVIRA Antivirus [url]http://www.avast.com/free-antivirus-download[/url] AVAST AV | |
Re: This is the second infection you have had in 30 days. You failed to follow all steps exactly as given previously but said the system was clean, obviously it was not. Follow the steps given in our Read Me Sticky [B]EXACTLY [/B]and post back with all the requested logs. [B][url]http://www.daniweb.com/forums/thread134865.html[/url][/B] | |
Re: Hi, you need to do all the steps given in our Read Me sticky and post back here with all the requested logs. Be sure to follow all the instructions exactly. [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
Re: [QUOTE=neick;1446005]AOL 9.5, VISTA ISSUES: On boot up I get a small blank popup box (no error message) that is tied into AOL. This prevents my welcome screen from loading and any hotlinks etc via AOL pages/content, email etc. I can access email to read and write but that's it. Here's … | |
Re: HiJackThis isn't a removal tool and certain will not remove a Rogue Security program since these type programs show nothing in a HJT log that would cause suspicion.You also ran it from a temp file which is not the way it should be run. How do you KNOW this is … | |
Re: Are you saying that now you CAN get online without difficulty? | |
Re: For one thing I see several programs running while the HJT scan was done which shouldn't be running at the same time; ESET Online Scanner, MBA-M install are two of them. Those two should not be running at the same time. Reboot your computer. Install MBA-M if it isn't fully … | |
Re: We need to see all of the requested logs from our Read Me sticky, not just the one GMER log. [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
Re: [B]"I was unable to run Microsoft® Windows® Malicious Software Removal Tool due to having a 64bit OS."[/B] I don't know what having a 64bit system would have to do with this, the tool IS available for a 64bit system on the Microsoft website and you could have received the correct … | |
Re: Forgive me for being a bit confused but some of your post makes no sense: [I][COLOR="Green"][B]I cannot reboot the computer. Once rebooted the computer signs off and never comes on.[/B][/COLOR][/I] If the computer never comes on then how did you run the scans? By your post below and the logs … | |
Re: No, don't connect. Ignore that recovery partition message and continue running combofix. | |
Re: Hi and welcome to daniweb, We need you to go to our Read Me First sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] Follow all of the instructions given there and post back here with all the requested logs. Then we can better see what else may need to be done. | |
Re: Get rid of AVG entirely. Go with either [B][URL="http://www.free-av.com/"]Avira Free[/URL][/B] or[B][URL="http://www.avast.com/free-antivirus-download"] Avast Free[/URL][/B]. That said, why would you need to disable your anti virus program at all? There is no reason to turn off an av program in order to install a program. The only time this usually "might" be … | |
Re: kalibone, this is not your thread. There are many specific rules for running combofix and running it once is only one of them. If you have problems you should create your own thread. We have no idea what you are talking about concerning Malwarebytes' but if you have used combofix … | |
Re: #1. We do not open attached files here. You must copy/paste the information directly into your thread. #2.You state you do not have an anti-virus program installed on your computer. Then you are lucky you have not previously had an infection. You haven't looked very hard for an anti-virus program … | |
Re: You show Malwarebytes' Anti-malware all ready ON the computer. Did you run any scans with it? HJT isn't a cleaner program, it essentially gives a picture of what is running on the computer and basically what programs are set to run at start up. Turn off the following programs and … | |
Re: Why wasn't everything found by the MBA-M scan removed? Many items show as Not selected for removal. If fact I would say [B]more than half of the items found were not removed.[/B] So the computer is still severely infected. ALL items found by MBA-M should be removed, not just part … | |
Re: wfa, you need to begin your own thread and not post in somebody else's thread. This thread is two years old and you won't receive assistance in anothers two year old thread. Begin you own, stating fully what problems you are having. I don't know who told you to delete … | |
Re: Your HiJackThis is out of date. Uninstall that program. Follow the instructions and use ALL the programs noted in our Read Me sticky and post back with those logs which include the DDS Scanner and Malwarebytes' Anti-Malware. [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
Re: Hi katex, welcome to daniweb. You need to follow the steps given on our Read Me First sticky and post back here with all the requested logs then we can really see what may be going on and offer additional suggestions if needed. [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
Re: Why did you begin a new thread? You all ready have one working here: [url]http://www.daniweb.com/forums/thread331968.html[/url] | |
Re: The reason you are still seeing this Whitesmoke Translater on the computer is that it WAS shown to you in the MBA-M scan but was not marked by you for removal Folders Infected: c:\Users\administrator\AppData\Roaming\whitesmoketranslator (PUP.WhiteSmoke) -> [B]Not selected for removal[/B] Something designated as a PUP means Potentially Unwanted Program. Those … | |
Re: msconfig should really only be considered a trouble shooting tool and shouldn't be used as a permanent way to stop unneeded start ups. I would suggest using CodeStuff starter. A free program and it should tell you what this unknown entry is, it could be perfectly legal. [url]http://www.snapfiles.com/get/starter.html[/url] | |
Re: If I may, Instructions for combofix are incomplete. It must be run in a very specific way and followed exactly. Please follow these instructions: • [B]You must download it to and run it from your Desktop[/B] • Physically disconnect from the internet. • [B]Now STOP all your monitoring programs (Antivirus/Antispyware, … | |
Re: blondie10, this thread is over three years old. You will receive NO answers in this one. You must begin your own thread, stating ALL of your problems, giving all important information about your system and stating all the steps you have taken to solve it. Somebody will be happy to … | |
Re: Hi, welcome to daniweb. Truly sorry for the delay, Santa was visiting so it was hard for anyone to get here before now. I am sorry, hope I can help you. Need to get this Hosts file corrected that's for sure Go to this link for specific instructions for Vista; … | |
Re: Rik is correct, your computer is severely infected. And you are operating under a real misconception, you said;[B][I][COLOR="Green"]i had a similar problem before and i used hijackthis and it resolved the problem! can someone please let me know which files need to be checked in hijackthis, i can only run … | |
Re: We would prefer that logs be copy/pasted and not attached. Have done this with your attached logs and removed the attachments. DDS (Ver_10-12-12.02) - NTFSx86 Run by Adrian at 18:11:07.71 on 18/12/2010 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22 Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.2558.1661 [GMT 0:00] AV: Microsoft Security Essentials *Enabled/Updated* … | |
Re: Well couple of things I see, NO anti-virus program installed on the computer. You are lucky you haven't gotten a severe infection before this. Especially because of the use of programs like this one, µTorrent. Your Hosts file has been changed so we need to get that corrected Do the … | |
Re: [QUOTE=Rik from RCE;1427158]Your log shows lots of problems as well as no antivirus software and that your Hijackthis is out of date. You need to work through the instructions in this thread - [url]http://www.daniweb.com/forums/thread134865.html[/url] and post [B]all[/B] the logs it asks for![/QUOTE] Couple of things here, Rik, HJT used is … | |
Re: Sidewalkwarrior, please follow the instructions given you by PhilliePhan to complete steps here [B][url]http://www.daniweb.com/forums/thread134865.html[/url][/B] A key step on the link does include the install and running of Malwarebytes' Anti-Malware and if biggeo65 had taken the time, which he obviously has not, to read the instructions on that link he would … | |
Re: Follow the steps here and post back with the requested logs [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
Re: Follow the instructions given here and post back with all the requested logs and we will be most happy to help you. [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
Re: If the system is pirated as you say, a "fake Windows 7" then that means it is a pirated or illegal operating system and we cannot offer assistance. You will need to take the computer to a shop and have them do repairs with a legal copy of the operating … | |
Re: I have never seen a log that looks like that, so yes there IS something wrong there. Please follow the steps given on our Read Me sticky and post back with the requested logs. [url]http://www.daniweb.com/forums/thread134865.html[/url] | |
![]() | Re: Download [URL="http://ad13.geekstogo.com/MBRCheck.exe"]MBRCheck[/URL] to your desktop Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator). It will show a black screen with some data on it. A report called MBRcheckxxxx.txt will be on your desktop Open this report and post its content in … ![]() |
Re: Hello April and welcome to daniweb. Thank you for following the steps in our Read Me sticky. You have posted two copies of the same DDS scanner log. We need to see the other log which is the one that shows Disk Partitions, Disabled Device Manager Items, System Restore Points, … | |
Re: When you say MSN won't run...do you mean the MSN browser or MSN Instant Messaging or what? 1. Download combofix from any of these links and save it to Desktop: Link 1 ([url]http://download.bleepingcomputer.com/sUBs/ComboFix.exe[/url]) Link 2 ([url]http://www.forospyware.com/sUBs/ComboFix.exe[/url]) Link 3 ([url]http://subs.geekstogo.com/ComboFix.exe[/url]) **Note: It is important that it is saved directly to your … | |
Re: First of all I have edited your post in order to make the log more readable. Please be certain that logs are single spaced and word wrap is NOT on in notepad. You have used the old version of HiJackThis. Please uninstall this and install the newest version found here; … | |
Re: Hello and welcome to daniweb. You need to follow the steps given in our Read Me first sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] and then post back here with all the requested logs. Please follow all steps exactly as given. Before you do those steps though you need to run HiJackthis again and put … | |
Re: Hello rodrigan, welcome to daniweb. Thank you for following our Read Me sticky and posting the logs. One thing I point out from our Read Me first sticky is this, [B]1A – Please Uninstall or Disable any P2P (peer-to-peer) programs on the infected computer before posting in this forum.[/B] I … | |
Re: I need to see the log done when MBA-M found the infections so I know what was found. I don't see an anti-virus program on the computer just several old anti-spy programs which would not be enough protection and really are out of date. You have some P2P programs or … | |
Re: Why did you run HiJackThis? It is customarily used after all other cleaning tools have been used. [I][COLOR="Green"]I already downloaded a couple of things[/COLOR][/I] Not sure what you mean by you downloaded a couple of things, I thought you wanted to remove things. The absolute thing for sure you need … | |
Re: [QUOTE=Chayenna1000;1172427]Hey all.. i have the same error now and it drives me crazy, i tryed to solve but it wont work:(.... When the error is there and i click '' dont sent'' my comp does nothing anymore and i have shut him down by the start button.[/QUOTE] This thread is … | |
Re: Can you tell me what is [B]"v"[/B] drive? It shows in your HJT log. You also are running two or parts of two anti-virus programs McAfee and Sophos, a big no-no. One of these must be completely uninstalled. Also uninstall Windows Defender. It really isn't "all it's cracked up to … | |
Re: First of all you have used an out of date copy of HiJackThis, current version is 2.0.4. Uninstall that old version and use the new one. [url]http://free.antivirus.com/hijackthis/[/url] But that said, HJT is one of the final steps you would do, not the first one. First thing you need to do … | |
Re: Hi and welcome to daniweb. You have used an out of date version of HiJackThis. Current version is 2.0.4 and can be found here; [url]http://free.antivirus.com/hijackthis/[/url] However in order to assist in identifying your problems you need to follow the steps given on our Read Me first sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] Please complete … | |
Re: You need to update MBA-M. There is a new version now 1.50 Please do the following: Please Run the ESET Online Scanner [url]http://www.eset.com/onlinescan/scanner.php?i_agree=14[/url] * You can use Internet Explorer to complete this scan and you will need to allow an Active X to be installed or you may use Firefox … | |
Re: [QUOTE=NO_CLU_NADA_ZIP;1402288]I have the exact same problem, but I am clueless about spyware/adware etc... Can you help a computer idiot?[/QUOTE] [B]NO_CLU_NADA_ZIP[/B], you need to complete the steps given on our Read Me first sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] and then begin Your Own thread rather than piggyback on another person's thread and we will … | |
Re: Malware is defintiely NOT the cause of your problem. Your GMER log shows only XP Service Pack 2 so you have not fully updated your XP so installing Office 2010 is the least of your worries. You need to go to Windows Updates and complete all updates required for XP. … |
The End.