1,366 Posted Topics

Member Avatar for pseudorandom21

You don't need a US Government agency to infect pc's there are plenty of virus writers out there who do it daily, and from multiple countries. [url]http://www.free-av.com/[/url] AVIRA Antivirus [url]http://www.avast.com/free-antivirus-download[/url] AVAST AV

Member Avatar for jholland1964
0
72
Member Avatar for raz09

This is the second infection you have had in 30 days. You failed to follow all steps exactly as given previously but said the system was clean, obviously it was not. Follow the steps given in our Read Me Sticky [B]EXACTLY [/B]and post back with all the requested logs. [B][url]http://www.daniweb.com/forums/thread134865.html[/url][/B]

Member Avatar for jholland1964
0
380
Member Avatar for jessiecole

Hi, you need to do all the steps given in our Read Me sticky and post back here with all the requested logs. Be sure to follow all the instructions exactly. [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for stef32
0
190
Member Avatar for neick

[QUOTE=neick;1446005]AOL 9.5, VISTA ISSUES: On boot up I get a small blank popup box (no error message) that is tied into AOL. This prevents my welcome screen from loading and any hotlinks etc via AOL pages/content, email etc. I can access email to read and write but that's it. Here's …

Member Avatar for neick
0
105
Member Avatar for JNT

HiJackThis isn't a removal tool and certain will not remove a Rogue Security program since these type programs show nothing in a HJT log that would cause suspicion.You also ran it from a temp file which is not the way it should be run. How do you KNOW this is …

Member Avatar for crunchie
0
273
Member Avatar for toast4lunch
Member Avatar for Jaenelle

For one thing I see several programs running while the HJT scan was done which shouldn't be running at the same time; ESET Online Scanner, MBA-M install are two of them. Those two should not be running at the same time. Reboot your computer. Install MBA-M if it isn't fully …

Member Avatar for jholland1964
0
169
Member Avatar for leeisok

We need to see all of the requested logs from our Read Me sticky, not just the one GMER log. [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for jholland1964
0
231
Member Avatar for Dragewood

[B]"I was unable to run Microsoft® Windows® Malicious Software Removal Tool due to having a 64bit OS."[/B] I don't know what having a 64bit system would have to do with this, the tool IS available for a 64bit system on the Microsoft website and you could have received the correct …

Member Avatar for crunchie
0
462
Member Avatar for Catalana

Forgive me for being a bit confused but some of your post makes no sense: [I][COLOR="Green"][B]I cannot reboot the computer. Once rebooted the computer signs off and never comes on.[/B][/COLOR][/I] If the computer never comes on then how did you run the scans? By your post below and the logs …

Member Avatar for Catalana
0
161
Member Avatar for Froot_loop04

No, don't connect. Ignore that recovery partition message and continue running combofix.

Member Avatar for Froot_loop04
0
354
Member Avatar for Wkb9008

Hi and welcome to daniweb, We need you to go to our Read Me First sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] Follow all of the instructions given there and post back here with all the requested logs. Then we can better see what else may need to be done.

Member Avatar for Wkb9008
0
195
Member Avatar for erniestl

Get rid of AVG entirely. Go with either [B][URL="http://www.free-av.com/"]Avira Free[/URL][/B] or[B][URL="http://www.avast.com/free-antivirus-download"] Avast Free[/URL][/B]. That said, why would you need to disable your anti virus program at all? There is no reason to turn off an av program in order to install a program. The only time this usually "might" be …

Member Avatar for Avatar_ICEMAN
0
127
Member Avatar for raspberrysauce

kalibone, this is not your thread. There are many specific rules for running combofix and running it once is only one of them. If you have problems you should create your own thread. We have no idea what you are talking about concerning Malwarebytes' but if you have used combofix …

Member Avatar for gerbil
0
782
Member Avatar for cliftonhall

#1. We do not open attached files here. You must copy/paste the information directly into your thread. #2.You state you do not have an anti-virus program installed on your computer. Then you are lucky you have not previously had an infection. You haven't looked very hard for an anti-virus program …

Member Avatar for jholland1964
0
1K
Member Avatar for Tehaxx

You show Malwarebytes' Anti-malware all ready ON the computer. Did you run any scans with it? HJT isn't a cleaner program, it essentially gives a picture of what is running on the computer and basically what programs are set to run at start up. Turn off the following programs and …

Member Avatar for jholland1964
0
284
Member Avatar for sampson

Why wasn't everything found by the MBA-M scan removed? Many items show as Not selected for removal. If fact I would say [B]more than half of the items found were not removed.[/B] So the computer is still severely infected. ALL items found by MBA-M should be removed, not just part …

Member Avatar for sampson
0
319
Member Avatar for delphine

wfa, you need to begin your own thread and not post in somebody else's thread. This thread is two years old and you won't receive assistance in anothers two year old thread. Begin you own, stating fully what problems you are having. I don't know who told you to delete …

Member Avatar for jholland1964
0
460
Member Avatar for mesamb1

Your HiJackThis is out of date. Uninstall that program. Follow the instructions and use ALL the programs noted in our Read Me sticky and post back with those logs which include the DDS Scanner and Malwarebytes' Anti-Malware. [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for jholland1964
0
199
Member Avatar for katex

Hi katex, welcome to daniweb. You need to follow the steps given on our Read Me First sticky and post back here with all the requested logs then we can really see what may be going on and offer additional suggestions if needed. [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for jholland1964
0
136
Member Avatar for raspberrysauce

Why did you begin a new thread? You all ready have one working here: [url]http://www.daniweb.com/forums/thread331968.html[/url]

Member Avatar for crunchie
0
97
Member Avatar for sharkie002

The reason you are still seeing this Whitesmoke Translater on the computer is that it WAS shown to you in the MBA-M scan but was not marked by you for removal Folders Infected: c:\Users\administrator\AppData\Roaming\whitesmoketranslator (PUP.WhiteSmoke) -> [B]Not selected for removal[/B] Something designated as a PUP means Potentially Unwanted Program. Those …

Member Avatar for crunchie
0
389
Member Avatar for fuggles

msconfig should really only be considered a trouble shooting tool and shouldn't be used as a permanent way to stop unneeded start ups. I would suggest using CodeStuff starter. A free program and it should tell you what this unknown entry is, it could be perfectly legal. [url]http://www.snapfiles.com/get/starter.html[/url]

Member Avatar for jholland1964
0
136
Member Avatar for r8er4ever

If I may, Instructions for combofix are incomplete. It must be run in a very specific way and followed exactly. Please follow these instructions: • [B]You must download it to and run it from your Desktop[/B] • Physically disconnect from the internet. • [B]Now STOP all your monitoring programs (Antivirus/Antispyware, …

Member Avatar for jholland1964
0
869
Member Avatar for Freefall123

blondie10, this thread is over three years old. You will receive NO answers in this one. You must begin your own thread, stating ALL of your problems, giving all important information about your system and stating all the steps you have taken to solve it. Somebody will be happy to …

Member Avatar for jholland1964
0
286
Member Avatar for sinic

Hi, welcome to daniweb. Truly sorry for the delay, Santa was visiting so it was hard for anyone to get here before now. I am sorry, hope I can help you. Need to get this Hosts file corrected that's for sure Go to this link for specific instructions for Vista; …

Member Avatar for jholland1964
0
328
Member Avatar for raz09

Rik is correct, your computer is severely infected. And you are operating under a real misconception, you said;[B][I][COLOR="Green"]i had a similar problem before and i used hijackthis and it resolved the problem! can someone please let me know which files need to be checked in hijackthis, i can only run …

Member Avatar for raz09
0
169
Member Avatar for ajcb

We would prefer that logs be copy/pasted and not attached. Have done this with your attached logs and removed the attachments. DDS (Ver_10-12-12.02) - NTFSx86 Run by Adrian at 18:11:07.71 on 18/12/2010 Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_22 Microsoft Windows XP Home Edition 5.1.2600.3.1252.44.1033.18.2558.1661 [GMT 0:00] AV: Microsoft Security Essentials *Enabled/Updated* …

Member Avatar for ajcb
0
270
Member Avatar for maykay

Well couple of things I see, NO anti-virus program installed on the computer. You are lucky you haven't gotten a severe infection before this. Especially because of the use of programs like this one, µTorrent. Your Hosts file has been changed so we need to get that corrected Do the …

Member Avatar for maykay
0
593
Member Avatar for moraira73

[QUOTE=Rik from RCE;1427158]Your log shows lots of problems as well as no antivirus software and that your Hijackthis is out of date. You need to work through the instructions in this thread - [url]http://www.daniweb.com/forums/thread134865.html[/url] and post [B]all[/B] the logs it asks for![/QUOTE] Couple of things here, Rik, HJT used is …

Member Avatar for Rik_
0
407
Member Avatar for Sidewalkwarrior

Sidewalkwarrior, please follow the instructions given you by PhilliePhan to complete steps here [B][url]http://www.daniweb.com/forums/thread134865.html[/url][/B] A key step on the link does include the install and running of Malwarebytes' Anti-Malware and if biggeo65 had taken the time, which he obviously has not, to read the instructions on that link he would …

Member Avatar for crunchie
0
260
Member Avatar for kettennis

Follow the steps here and post back with the requested logs [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for jholland1964
0
1K
Member Avatar for abilroth

Follow the instructions given here and post back with all the requested logs and we will be most happy to help you. [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for crunchie
0
248
Member Avatar for chellebelle

If the system is pirated as you say, a "fake Windows 7" then that means it is a pirated or illegal operating system and we cannot offer assistance. You will need to take the computer to a shop and have them do repairs with a legal copy of the operating …

Member Avatar for chellebelle
0
136
Member Avatar for larlar900

I have never seen a log that looks like that, so yes there IS something wrong there. Please follow the steps given on our Read Me sticky and post back with the requested logs. [url]http://www.daniweb.com/forums/thread134865.html[/url]

Member Avatar for jholland1964
0
187
Member Avatar for Moe1981

Download [URL="http://ad13.geekstogo.com/MBRCheck.exe"]MBRCheck[/URL] to your desktop Double click MBRCheck.exe to run (Vista and Windows 7 users, right click and select Run as Administrator). It will show a black screen with some data on it. A report called MBRcheckxxxx.txt will be on your desktop Open this report and post its content in …

Member Avatar for Moe1981
0
376
Member Avatar for april1028

Hello April and welcome to daniweb. Thank you for following the steps in our Read Me sticky. You have posted two copies of the same DDS scanner log. We need to see the other log which is the one that shows Disk Partitions, Disabled Device Manager Items, System Restore Points, …

Member Avatar for jholland1964
0
251
Member Avatar for onebetter

When you say MSN won't run...do you mean the MSN browser or MSN Instant Messaging or what? 1. Download combofix from any of these links and save it to Desktop: Link 1 ([url]http://download.bleepingcomputer.com/sUBs/ComboFix.exe[/url]) Link 2 ([url]http://www.forospyware.com/sUBs/ComboFix.exe[/url]) Link 3 ([url]http://subs.geekstogo.com/ComboFix.exe[/url]) **Note: It is important that it is saved directly to your …

Member Avatar for jholland1964
0
341
Member Avatar for Cirrus0007

First of all I have edited your post in order to make the log more readable. Please be certain that logs are single spaced and word wrap is NOT on in notepad. You have used the old version of HiJackThis. Please uninstall this and install the newest version found here; …

Member Avatar for jholland1964
0
179
Member Avatar for Arekhon

Hello and welcome to daniweb. You need to follow the steps given in our Read Me first sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] and then post back here with all the requested logs. Please follow all steps exactly as given. Before you do those steps though you need to run HiJackthis again and put …

Member Avatar for Arekhon
0
369
Member Avatar for rodrigan

Hello rodrigan, welcome to daniweb. Thank you for following our Read Me sticky and posting the logs. One thing I point out from our Read Me first sticky is this, [B]1A – Please Uninstall or Disable any P2P (peer-to-peer) programs on the infected computer before posting in this forum.[/B] I …

Member Avatar for jholland1964
0
478
Member Avatar for hatespy

I need to see the log done when MBA-M found the infections so I know what was found. I don't see an anti-virus program on the computer just several old anti-spy programs which would not be enough protection and really are out of date. You have some P2P programs or …

Member Avatar for jholland1964
0
459
Member Avatar for karenjune

Why did you run HiJackThis? It is customarily used after all other cleaning tools have been used. [I][COLOR="Green"]I already downloaded a couple of things[/COLOR][/I] Not sure what you mean by you downloaded a couple of things, I thought you wanted to remove things. The absolute thing for sure you need …

Member Avatar for jholland1964
0
236
Member Avatar for derekbka

[QUOTE=Chayenna1000;1172427]Hey all.. i have the same error now and it drives me crazy, i tryed to solve but it wont work:(.... When the error is there and i click '' dont sent'' my comp does nothing anymore and i have shut him down by the start button.[/QUOTE] This thread is …

Member Avatar for jholland1964
0
407
Member Avatar for BettinaW

Can you tell me what is [B]"v"[/B] drive? It shows in your HJT log. You also are running two or parts of two anti-virus programs McAfee and Sophos, a big no-no. One of these must be completely uninstalled. Also uninstall Windows Defender. It really isn't "all it's cracked up to …

Member Avatar for jholland1964
0
266
Member Avatar for donut166

First of all you have used an out of date copy of HiJackThis, current version is 2.0.4. Uninstall that old version and use the new one. [url]http://free.antivirus.com/hijackthis/[/url] But that said, HJT is one of the final steps you would do, not the first one. First thing you need to do …

Member Avatar for gerbil
0
128
Member Avatar for sopmadtig

Hi and welcome to daniweb. You have used an out of date version of HiJackThis. Current version is 2.0.4 and can be found here; [url]http://free.antivirus.com/hijackthis/[/url] However in order to assist in identifying your problems you need to follow the steps given on our Read Me first sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] Please complete …

Member Avatar for jholland1964
0
305
Member Avatar for Korushi

You need to update MBA-M. There is a new version now 1.50 Please do the following: Please Run the ESET Online Scanner [url]http://www.eset.com/onlinescan/scanner.php?i_agree=14[/url] * You can use Internet Explorer to complete this scan and you will need to allow an Active X to be installed or you may use Firefox …

Member Avatar for Korushi
0
314
Member Avatar for NO_CLU_NADA_ZIP

[QUOTE=NO_CLU_NADA_ZIP;1402288]I have the exact same problem, but I am clueless about spyware/adware etc... Can you help a computer idiot?[/QUOTE] [B]NO_CLU_NADA_ZIP[/B], you need to complete the steps given on our Read Me first sticky [url]http://www.daniweb.com/forums/thread134865.html[/url] and then begin Your Own thread rather than piggyback on another person's thread and we will …

Member Avatar for PhilliePhan
0
100
Member Avatar for MCH2SWT23

Malware is defintiely NOT the cause of your problem. Your GMER log shows only XP Service Pack 2 so you have not fully updated your XP so installing Office 2010 is the least of your worries. You need to go to Windows Updates and complete all updates required for XP. …

Member Avatar for jholland1964
0
189

The End.