1,366 Posted Topics
 | [QUOTE=cujobujo;1225459]Think I fixed it... ran in safe mode and did a system restore. I am able to open windows and am online on the bad computer as of now. I can now run a virus scan. Thanks!![/QUOTE] Using System Restore [B]will NOT remove[/B] infections. The only thing it MAY have …  |
| | Re: Help Assistant My Bugfree PC by eSunsoft Technologies is likely a very dangerous program. Even their home website gets a google warning that the website may be dangerous to your computer. Certainly wouldn't trust ANY software whose home website is considered dangerous, in fact I am totally blocked from even checking out … |
| | You need to update MBA-M again and run another Full Scan with it and this time have it REMOVE all found and then Reboot the computer. Where are you located? The Tcpip listings in the HJT log show the location to be Ukraine. If this is not the correct location … |
 | The only way to receive assistance here is to follow all the steps given here [url]http://www.daniweb.com/forums/thread134865.html[/url] in exactly the order given. When all scans are complete then post back here with a copy/paste of all the requested logs. Then we will better be able to offer assistance. |
 | Those requesting assistance should begin by following all the steps given here; [url]http://www.daniweb.com/forums/thread134865.html[/url] and then post back in your thread with all the requested logs. Then somebody will be happy to offer assistance. |
| | Haven't used this but you might try this; [url]http://www.windows7download.com/win7-autorun-eater/xmhnpxet.html[/url] |
| | Re: Malware remnant Found several things worth noting in your logs. #1. If the computer really IS clean the MBA-M scan would show clean. It doesn't, items were found. It would help to see the logs from the original MBA-M scans to see what infections were removed. #2. You are running McAfee Security … |
| | [QUOTE=colinperman;1206868]Hi i had this problem 3 days ago,just run a full security scan with your internet security,and run full scan on windows defender,they should pick it up the second time round,mine did (norton)and removed it for me. This is what norton found. Updated: April 20, 2010 4:20:07 PM Also Known … |
| | Does this even belong in this forum?  |
| | Hello and welcome to daniweb, sorry it has taken so long for you to receive a reply. Can you give us a more detailed explanation of what happens, when and how? We also ask that you begin by reading and doing the steps laid out in this link [url]http://www.daniweb.com/forums/thread134865.html[/url] and … |
| | Hello, sorry it has taken you so long to receive a reply. Two things about your post give me cause for concern, 1st is the use of spyware hunter not a highly recommended program and their own home website has a [B][URL="http://www.mywot.com/en/scorecard/enigmasoftware.com"]very poor reputation[/URL][/B]. My second concern is your statement,[QUOTE] … |
| | Hi, sorry it has taken you so long to receive a reply. You might try running HiJackThis again, place check marks next to the following listings; R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [url]http://go.microsoft.com/fwlink/?LinkId=69157[/url] R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - … |
| | Obviously you have one of the Rogue anti-virus trojans on the computer. Please do the following, since you cannot access the internet via the infected computer you likely will have to use a flash drive to install the program. First of all, turn off Windows Defender as it may interfere. … |
 | Have you tried running Firefox in the Firefox safe mode...without any add-ons? Do you have any themes installed? Here is exact advice given on [B][URL="http://www.mozilla.com/en-US/firefox/3.6/releasenotes/"]Firefox Help[/URL][/B] [QUOTE]Poorly designed or incompatible extensions can cause problems with your browser, including make it crash, slow down page display, etc. If you encounter strange … |
| | Why do you believe something needs fixed? HiJackThis is not really a fix program, it is a scan program to give a snapshot of the system and what may be running, auto starting, toolbars added, etc. We need to know what problems you are having, what you have done to … |
| | [QUOTE]did just about everything mentioned before asking for help, doing, hopefully, a very through cleaning[/QUOTE] We need to see the logs from all other programs you ran. We cannot offer help until we see those and know what the infection was/is. If there are multiple computers involved disconnect all and … |
| | Very possible some key services are not set to automatic: Click Start and type Services.msc in the dialog box to open the services snap-in. Then check if the following services are started: --SSDP Discovery --TCP/IP NetBIOS Helper --Computer Browser --Server If not, set the startup type to automatic and click … |
| | Hi, welcome to daniweb. Can you give us the names and logs from the programs you ran? This would be a big help before we try other things. Also, where are you located and how do you connect to the internet? Also, you have an out of date version of … |
| | You should be able to scan the "D" drive only using MBA-M. If you feel the drive is infected in any way then no, I wouldn't even attempt to move files from it to the computer until you are certain the entire drive is clean. |
| | Re: AntiVirus 2010 [QUOTE]ran the exe fix[/QUOTE] What fix is that and where did you find it? Post the MBA-M log so we can see what was removed. Your HJT log does show there are more infected files on there. Also that version of HijackThis is not the most current version. Uninstall it. … |
| | Hello and welcome to daniweb. Sorry you are having these problems but we cannot offer assistance until we know more about your operating system, anti-virus programs, what spyware programs you ran and see the logs from those programs. I suggest that you do the steps given in our [B][URL="http://www.daniweb.com/forums/thread134865.html"]Read Me … |
 | Re: Help Since your thread title tells us nothing and we have absolutely no information about your computer, your operating system, your security programs, what you have done to attempt to remove this problem so we really cannot offer any assistance until we have more information. Please follow the steps given in … |
| | What is your operating system? Just run Disk Clean up and empty all temp files and all temporary internet files.  |
| | Hi and welcome to daniweb, Sorry you are having these problems, let's see if we can get things cleaned up. First though you will need to [B]Turn Off the TeaTimer[/B] portion of SpyBot as it can interfere with any fixes attempted. To do this do the following: * Run Spybot-S&D … |
| | Hi and welcome to daniweb. Can I ask, where are you located? Ukraine? |
| | Hi and welcome to daniweb, Follow the steps given [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] and report back with the requested logs. |
 | jlukomski, This thread is [B][COLOR="Red"]4 years old[/COLOR][/B] and [B][COLOR="Green"]belongs to another person[/COLOR][/B]. You won't receive assistance in a 4 year old thread and by hijacking another's thread. You need to begin your own thread, stating all the problems you are having and what steps you have taken thus far to … |
| | Did you turn off your anti-virus program while running ESET? The scan does take at least an hour to run. I would suggest that you turn off everything you don't need running when doing the scan, you have a lot of extras running which are unneeded. Might turn off that … |
| | Re: Can't send email What happens when you do try to send mail? Do you get an error message in either program? Are you able to use a webmail? Not that I mean you have to just wonder if you are able to do so. Are both of your email programs set up to … |
| | |
| | Re: need help Hi and welcome back, One problem for certain is that you ran System Restore. System Restore as you have found out is not the end all and be all of repairs and in the case of an infected system it is the LAST thing you should use, AFTER the infection … |
| | Hi and welcome, Please download[B][URL="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?cdlPid=10997763"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick [B]mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.[/B] * If an update is found, it will download …  |
| | Re: autorun eatr It is the computer you have to tell not to auto run, not the flash drive. I have no idea what operating system you have. If running XP a good program to use is [B][URL="http://download.microsoft.com/download/f/c/a/fca6767b-9ed9-45a6-b352-839afb2a2679/TweakUiPowertoySetup.exe"]Microsoft PowerToys for Windows XP[/URL][/B]. It's a free download, directly from Microsoft. Once you install it … |
| | [QUOTE]I have a flash drive with some backup data plugged in. Could that be the reason?[/QUOTE] Yes, most definitely the backup data may very well be infected. I hate to tell you but you really should clean out that flash drive completely, even though you will lose backup data, there … |
| | xo_baby_0x<3, this thread is nearly 2 years old. In order to receive assistance you must begin your own thread, stating all of your problems rather than hijacking another's. Two computers will not be worked on in the same thread. |
| | Re: RunDLL error You need to follow instructions given [B][URL="http://www.daniweb.com/forums/thread134865.html"]HERE[/URL][/B] Paying close attention to the [B]#1 [/B]Requirement you must do when asking for help; [B][QUOTE]Please Uninstall or Disable any P2P (peer-to-peer) programs on the infected computer before posting in this forum. Rather than write a long piece on the dangers of P2P, I’m … |
| | sanny1000 this thread is [B][COLOR="Red"]5[/COLOR][/B] years old. You won't receive help within somebody else's thread and especially not in one that is 5 years old. Problems aren't even likely related. Please begin your own thread, state your problems and the steps you have taken thus far to solve them. Then … |
| | [QUOTE=PoignantStory;1180011]Both norton and avg gets stuck at this file and my whole pc just go hang mode when it reaches here C:\Program Files\InstallShield Installation Information\{DC24971E-1946-445D-8A82-CE685433FA7D}..=([/QUOTE] What do you mean Norton and AVG? Those are both anti-virus programs. The absolute rule is ONE anti-virus program should run on a system NEVER … |
| | Re: I need help! Hello Tara_m, sorry you had to wait so long. First thing I notice in your HJT log is you are running multiple anti-virus programs... Microsoft Security Essentials IObit Advanced SystemCare 3 and WebrootSecurity (this one may or may not contain an anti-virus program as I am not certain which version … |
| | Hello and welcome back to daniweb, sorry you have had to wait for a reply. Post the MBA-M log so we can actually see what we are dealing with here. It can be found by opening the program and clicking on the Logs Tab. They are listed by date with … |
| | Re: Please help!!! By installing that Advanced SystemCare 3 you have compounded the problem it's own website is untrusted and it certainly is NOT going to remove ANTISPYWARE XP. Another thing this HiJack report it uses is not the legitimate HiJackThis program from Trend Micro. [B]Uninstall it ASAP[/B]. There also is at least … |
| | rogerdasher, this thread is 4 years old. You will not receive help by posting in somebody else's thread and one this old. Follow the steps given here [url]http://www.daniweb.com/forums/thread134865.html[/url] You need to create your own thread and please post full information on your computer, how long the problem has been happening … |
| | Hi and welcome to daniweb, First of all I feel obliged to ask who told you to run Combofix? This is not a normal, everyday program that should be run. It is for very specific infections and should be run only when directed to do so by a helper. If … |
| | Your problem is more than likely caused by the fact that you have THREE anti-virus programs running on the computer...at least a portions of Ewido Security Suite, and also Norton and Avast. The absolute rule is ONE anti-virus program on a computer. Pick ONE and totally UNINSTALL the others. Your … |
 | Hi welcome to daniweb, You said that [QUOTE]it runs real slow so I tried running a few different softwares on it.[/QUOTE] Exactly what software did you try on it? Aside from some unnecessary start ups I don't see anything "bad" on the computer. How long has he had the Norton … |
 | Hi, sorry you have waited so long for a response. Windows Defender is not the tool recommended to remove this XP Security infection, Malwarebytes' Anti-Malware is the one most recommended and the one most successful in doing so. Follow these instructions from [B][URL="http://www.bleepingcomputer.com/virus-removal/remove-antivirus-vista-2010"]bleepingcomputer[/URL][/B]: [QUOTE]1.For the first part of this removal … |
| | The HiJackThis version you used is at least two years out of date. Uninstall it immediately. Please follow these instructions as given on [URL="http://www.bleepingcomputer.com/virus-removal/remove-antivirus-vista-2010"]bleepingcomputer[/URL]. This is the accepted way to remove this infection followed on many, many forums: They have worked very well and hopefully they will work for you. … |
| | Follow the other steps given on the Read Me thread, including MBA-M and the DDS scanner. Post the logs here. |
| | Try rebooting to Safe Mode with Networking and then try updating your McAfee and doing a full scan with it and then try MBA-M. Download [B][URL="http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?cdlPid=10997763"] Malwarebytes' Anti-Malware (MBA-M)[/URL][/B] to your Desktop. * DoubleClick[B] mbam-setup.exe[/B] and follow the prompts to install MBA-M. [B] * Be sure a checkmark is placed … |
| | Hello, welcome to daniweb, As you can see I have removed your attachments and copy/pasted the logs into your post as we prefer. The lone exception is the Attach log which remains attached as per instructions in the Read Me Post. You did Not run the Malwarebytes' Anti-Malware program as … |
The End.