jholland1964 650 Posting Expert Team Colleague Featured Poster

I didn't visit the godaddy website and don't recall visiting any sites explicitly hosted by godaddy.

GoDaddy seems to be a recurring theme with Avast flagging something from them. Have found numerous threads where the culprit has either been a perfectly legitimate web site hosted by them that gets flagged by Avast, one persons's email signature avatar came from one of their hosted sites or actual programs downloaded directly from them.
So obviously there is something wrong over there.
Problem is, you may never, ever go specifically to the GoDaddy site and also "think" you have never been to a site hosted by them, but most of the time you aren't going to know what server hosts a website. It just says to you, bob's chicken shack.whatever. but bob's chicken shack uses GoDaddy as his host server. You really have to "dig deep" sometimes to find that out.
It probably is something very simple, and something you haven't thought about.
Here is an example, at another forum guy posted a link for a website with spring wall papers and screen savers. That 1st website was fine, but all of the pictures offered were actually hosted at other websites. So if you chose one picture and clicked to download it then it didn't come from the first website, but from another.Sometimes you would realize this because you would actually be taken to that other site to get the picture, but on others if you clicked to download, …

jholland1964 650 Posting Expert Team Colleague Featured Poster

Those aren't two different logs, they are the same log:
1.ComboFix 11-02-27.01 - Wolf 02/27/2011 16:23:00.5.2 - x86 NETWORK
2.ComboFix 11-02-27.01 - Wolf 02/27/2011 16:23:00.5.2 - x86 NETWORK

But there must be another because of this listing:
ComboFix3.txt 2011-02-26 15:17 showing a run before the 27th, on the 26th.

So, now I don't feel as bad about the instruction to run Combofix mistakenly being put into that post here, I will tell you why, because the damage likely was all ready done before the thread was created.

First of all the program from last year obviously wasn't uninstalled correctly, if it had been it references to it show here, and it does. When uninstalled properly the uninstall takes away all logs, quarantines, and the executable file itself.

Then I see that Combofix wasn't just run once before you created this thread and said nothing, it was run twice, once on the 26th and again on the 27th of February and then again here in this thread
ComboFix-quarantined-files.txt 2011-02-27 21:33
ComboFix2.txt 2011-02-27 17:33
ComboFix3.txt 2011-02-26 15:17
ComboFix4.txt 2010-02-19 23:40

And it never should have been run at all for two or four very good reasons depending on how you want to read it, 2 full security programs or 2 av programs and 2 firewalls enabled on the same machine:
Because all the logs show:
AV: AVG Internet Security 2011 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: McAfee Anti-Virus and Anti-Spyware …

jholland1964 650 Posting Expert Team Colleague Featured Poster

I need to see that log from the 27th before you do anything. I am truly sorry about those instructions for Combofix appearing in your post, however, it never would have been requested, even by accident, and I am still not certain how that happened, if it was known the program had all ready been run, especially without having first removed the previous one then that would not even have been on the list of considerations, though I honestly don't recall that it was, but somehow it got there.
This is only one of the reasons that Combofix is never supposed to be used without a helper telling you to use it. One reason is that it is only for very specific infections and use for another not covered by the tool may cause serious problems. Another reason is there are special steps that sometimes are needed AFTER the first run and it is used again for those steps but unless you know how to do those steps, and do them correctly, only part of an infection is removed.

For the latest run did you use the copy of the program that you used on the 27th, which would have made it way out of date, or did you download a new copy and run that? It is updated extremely often, sometimes multiple times a day, that is why the only legal download page is only good for downloading for 10 minutes after you arrive there and has …

jholland1964 650 Posting Expert Team Colleague Featured Poster

You can wait if you want and see if anything comes up during or after the reinstall.
We tried and guess that's all we can say.

jholland1964 650 Posting Expert Team Colleague Featured Poster

If the post was edited I am sorry. Not sure exactly what happened, it certainly wasn't intentional and it shouldn't have been run again since it had been run before. It must have remained on the system from the first run because it wouldn't have been noted in the log if it had been uninstalled. The quarantine from that run doesn't remain does it? It sure would be nice to see that log to see what was removed then.
Go ahead and restore the one you found from the 24th.. Maybe we can start over.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hi J...you actually told me to run combofix 13 days ago according to the thread. I did run it it in Feb 2010 and uninstalled it. This time I did not uninstall it.

I rolled back to the 24th. Now I can't get system restore to appear at all and I cannot get on the internet. I checked the LAN setting and proxy server is not set...all settings are set to detect IP automatically.

I don't see a post where I told you to run Combofix, I only see one where you say "Try this one:
Please download ComboFix by sUBs" etc., and then your log is posted in the next post.

The combofix log shows that nothing was removed except an old HiJackThis program.
You rolled back to before combofix was run, because that is what combofix does, sets a restore point first before it begins the scan and before it removes any infection.

Why did you run it on February 27, 2011? That is the first run shown in the log. ComboFix2.txt 2011-02-27 Were things removed then?

You can look for the Combofix Quarantine folder. It is called C:\Qoobox\
Though by using System Restore that would take the system back to before the program had completed it's scan so I don't know that it would be there.

Look for it and see what is in there.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I will suggest that you should use some recovery software like easyrecovery because there is no solution to find a deleted file.
Regards
JhonMoney

JhonMoney, the poster doesn't want to retrieve a deleted file, the poster wants to be sure it IS deleted and IS NOT recoverable.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Another question, since the Malicious Removal tool stopped or errored out when scanning Windows Media Player, just happened to think, had you recently viewed or saved a video that uses WMP to view? This could be where the GO Daddy warning came from. I don't mean that it was from the GoDaddy site itself but some site that is hosted by GoDaddy, there are a lot of them.
It might not say GoDaddy, it would likely have the name of the site it came from but that site, if you trace back, would be hosted by GoDaddy. If so, try scanning that particular video with your Avast.

jholland1964 650 Posting Expert Team Colleague Featured Poster

That is Comodo, don't know for sure if that is what gerbil wanted but the guard32.dll is Comodo

jholland1964 650 Posting Expert Team Colleague Featured Poster

Tell you what, I am a bit confused here concerning the running of Combofix? Who told you to run Combofix? I didn't, at least I don't believe I did on this thread. But you had all ready run it once a month before creating this thread who told you in February to run Combofix?

The combofix you most recently ran shows it didn't delete anything. But as I said, this is the second time this year that you ran Combofix, the first time was one month ago. Who told you to run it then? You have not posted here in over a year. At that time, Feb. 2010 you did use Combofix and were supposed to uninstall it. Did you?
Which run of Combofix did you roll back to, the one run on March 24 or the one run on February 27th?

A year ago in your previous thread you were running Microsoft Security Essentials not AVG,or McAfee. When and why did you make the switch to AVG?

To check your internet connection, open Internet Options, go to Connections, LAN Settings and make sure there is NO check mark in Proxy Server. If there is, take that out and see if you can connect.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I must check that it it is not his sptd, judy. They rename every time... sp--.sys. It possibly is that.

Ok, you're losing me here...

jholland1964 650 Posting Expert Team Colleague Featured Poster

And your DNS lookup is via Comodo, not your ISP. Gee, they are taking over your internet.

That's like a virus all it's own if that is the case. All of this is really odd, no other word for it!!!
PhilliePhan isn't going to believe all this when he comes back to look around. He left thinking java was working and all was well. He will be stunned to find nothing is working as it should.

jholland1964 650 Posting Expert Team Colleague Featured Poster
jholland1964 650 Posting Expert Team Colleague Featured Poster

I think you have really fought this long enough, each day it is going to get worse and worse. A reformat/reinstall will really take a few hours IF you have the disks to reinstall everything.
Looking at the DDS log I see these programs that likely need install disks:

Of course your reinstall/rescue disks that you got from Sony.
These should have the drivers on them too. Most of those would likely need updating AFTER everything is on there that brings the computer back to factory.
What you would do is reformat, which would wipe the drive and then reinstall the operating system.

Then reinstall the drivers.You have to do that before the windows updates because for one thing your display will look very odd and also you don't want the Windows Updates offering you generic drivers and it will when it scans for updates and doesn't see them on there.

THEN you would go to Windows Updates and install All the updates that have been released since the computer was manufactured.

THEN update the drivers.

THEN reinstall these programs from their disks:
Microsoft Office Home and Student 2007
Adobe Photoshop CS2
Corel Painter 11
and any others you have disks for, those are just the ones I noticed, especially the Office program. You likely would have to "re-register" that one with Microsoft which is very easy to do online.
Then you would update the Office program.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I really hate to say this but honestly think your only option is reformat/reinstall. There are either major infections on there that are stopping anything from seeing them or major damage to very necessary system files probably going back to 2009.
Obviously things are now falling like dominoes and if you look back over the last, I am not sure how long, maybe going clear back to your original thread, which would the a year, things have not really worked correctly probably since then.
You obviously had the TDSS rootkit back then. Thought it was gone, though now I wonder. You installed Avira and Comodo. Then Avira quit, though that honestly could be Comodo doing that. You installed Comodo Av but you have said Windows updates didn't work right and for sure the ones done on March 7th didn't work, that error shows in one of the logs you did for PP. You have had java on, java off, totally uninstalled multiple times, installed multiple times. You said you had Comodo on and off at least one other times. Now since last week Word has become corrupted, or at least some of it's created documents. When opening Word you are getting an error saying Windows live sign in isn't working, that doesn't even have anything to do with Word so even if it isn't working that shouldn't make a difference with Word. You don't even have to have internet connections installed on a computer to use Microsoft Office …

jholland1964 650 Posting Expert Team Colleague Featured Poster

So, I updated to the newest version of firefox today and java is now updated and working. So weird right? Why wouldn't it work in any other browser if it was a firefox issue? I always update firefox when it tells me to... Wow, :o maybe it won't stop again! fingers crossed

Here's another "oddity". You posted the above yesterday, note you say, Java is working and UPDATED but in the most recent DDS scan that you just did it says;
J2SE Runtime Environment 5.0 Update 22
No way that it updated if that is what is on the machine. Current version IF it updated should be version 6 Update 24

This is like being in "The Twilight Zone"!!!

The release date for that version in October 29, 2007!

jholland1964 650 Posting Expert Team Colleague Featured Poster

I think the combofix was last time.

Yes, it was in 2009. Never run here at all. This one has centered on Java install problem. PP never asked for it and I didn't. I only asked for TDSSKiller because of the old logs in the other thread, since it was found then and that was before TDSSKiller was available. Didn't think it would find anything but you never know. Heck with THIS computer we evidently know nothing!
Now the new "stuff" with the Word program. Boy! I just don't know!
The only thing I do know at the moment I wouldn't do ANY work using this computer that you aren't willing to lose, the Word problem shows that.

jholland1964 650 Posting Expert Team Colleague Featured Poster

We did the TDSSKiller, nothing. GMER was run of course to begin and posted in the first post. PP was working here then with her. Combofix wasn't run in this one..was it? I don't think so. That was run in her previous thread in 2009.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Ouch. a hard lesson for one so young. Yes, People do need to be aware that on the net is forever. Comes down to misplaced trust.. for your young friend, in a stranger [and that is so often fraught], and a lack of regard for other people {I wish that was not a growing thing, but I fear it is; it's possible to understand why]. We take so much pleasure in someone else's misfortune... that is, after all, a solid basis for humour [did you never burst out laughing when a friend fell in a puddle?], as well as some other disturbing feeling... them, not us.
But anyway...

Oh you are so right. Yes, of course I have laughed when a friend has fallen into a puddle or something similar, because of course it's funny, and as you said, "them not us". But, unless the person knocks out a tooth, it isn't permanent it is temporary but the net is forever. Even the now 15 year old I spoke of still hasn't quite "gotten it". Just a couple weeks ago she made a sort of "snarky" remark about somebody on her Facebook wall, but this time her grandmother, my friend, saw it almost immediately and posted the comment to the remark, "Your grandmother is reading this"...her granddaughter immediately removed it.
There are just so many "creeps" out there today, are there more? I don't know,maybe not, maybe they are just more visible today with the net. They certainly …

jholland1964 650 Posting Expert Team Colleague Featured Poster

You ran the wrong program, you were supposed to run the DDS Scanner, from the Read me sticky, not the TDSSKILLER, that can be removed you don't need that program anymore.

and did I mention that my microsoft word files from last week are corrupt?

That makes no sense, if Word files are corrupt then there are major problems with the computer that has a lot more to do with the system itself than Comodo.
How do you know they are corrupt? Nothing was requested here by PP or myself that would have corrupted Word files. Is it only those Word files or All Word files? Have you looked at others to be sure? What date were those files created?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Yes, I've wanted to chuck this one across the room and give it a swift kick many times. I'm going to uninstall comodo and will get back to you. Thank you!

Yeah...that is one danger of using a laptop, you CAN pick it up and throw it out a window, not as easy with a desktop...without throwing your back out too!:D

jholland1964 650 Posting Expert Team Colleague Featured Poster

I know how totally annoying it is when something on a computer doesn't work the way it is supposed to, makes you want to throw it out the window!
As PP well knows...these things drive me totally nuts! I want them solved! And this isn't even my computer!:D

jholland1964 650 Posting Expert Team Colleague Featured Poster

I am not talking a week or even a day. I am talking an hour or two, max. But I just don't think Comodo, any part of it should be on there ever. It does cause problems with some Vista systems and I honest to god think yours is one of them.
The way I would want it done is uninstall using Add/Remove, reboot, then use Revo Uninstaller to be sure everything is gone. Reboot again.
Then another run of DDS scanner to actually SEE if it is not mentioned anywhere at all.
Then go from there.To try the Java in a very specific way see if it works, if it does then add NEW security.
We are talking a very short time.

jholland1964 650 Posting Expert Team Colleague Featured Poster

What it is that I was hoping to try was to do an offline install, after all of comodo was 100% gone.
If it worked then I was going to have you install Avira, which is currently the top Free Antivirus program, it ranks the same as the paid program from F-Secure which received top honors in independent testing in December for paid programs.
Also SpywareBlaster, which gives superb protection and is 100% compatible with all security programs and operating systems.

I had another question too, in the list of installed programs is NVIDIA Drivers.
That would be video drivers but if you don't have NVIDIA video card then these would be the wrong drivers. I wondered where those came from if you don't have one of their cards on the system.

jholland1964 650 Posting Expert Team Colleague Featured Poster

No, I am just trying to help, I am not frustrated and I certainly wouldn't leave you without protection. I just really and truly feel a part of the problem is Comodo. I found posts on other forums from people running Vista with similar problems with Comodo. That was why I suggested removing it.
Thanks for the clarification on the Elluminate program because I sort of panicked when I didn't see anything noted for it on the installed programs list.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Did you ever get the reinstall disks mentioned in your other thread? Reformat/reinstall may then be your only option, that was what I was hoping to avoid.
As I said, I wouldn't have left you with nothing but since you would rather keep the Comodo then perhaps it would be better to wait until the end of the school year if you can and then do a reformat and reinstall. That may be your best bet anyway.

I also don't see that Elluminate program even listed in the installed programs, do you run that from a separate drive or something?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Sorry, I hope it DOES "make her paranoid". I am just hoping to avoid what happened to good friend's granddaughter, 12 years old when it began, right here in my county. She recorded a "sexy" message to a boy she didn't know, but thought was "cute" at another middle school here, got his email address and sent it to him, hoping he would reply. He didn't, instead he sent it to some of his friends and within a week it had been sent multiple times to different students at all the other middle and high schools (there are 9 middle schools and 7 high schools) in the county. Kids who knew her recognized her voice, she didn't give her name in the recording, but one of them played it for his mother, because he thought it was wrong to send something like that. His mother contacted her mother and all "h" broke lose. They got the name of the original receiver and contacted his parents, he confessed he had sent it to a "couple" others. It went around our area for about a month and stopped, for awhile. Then it began again only this time somebody had added pictures to illustrate what the recorded message said. It is still going around and not only here in our state because the original girl who sent it out has now received it back from people she knows out of state with a message that says, "this girl sounds like you." It should …

jholland1964 650 Posting Expert Team Colleague Featured Poster

Ok, good enough. I am going to ask that you totally Uninstall the Comodo program, all of it, via Add/Remove. When given the options box on whether to Modify, Repair or Remove, choose Remove.

You can always download and install it later if you decide but just turning it off to attempt to either install Java or use that Elluminate program obviously doesn't do the job.

We have to really see if that is the culprit or not and just having it turned off just doesn't seem to do it. It has to be off the computer entirely to see. As long as you don't surf around or open other programs, other than those I tell you to then you're safe.

After you do that, reboot the computer and do another DDS scan, post back with the logs, both logs should be copy/pasted.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I was working on the other computer, so I wasn't watching it. It took several hours. Would there be a log that I could pull up?

Not sure if there is one but try this:
Go to Start, Control Panel,
Administrative Tools, Event Viewer, Windows Logs, Application. Scroll down
the Application Events looking for Wininit in the Source Column.

It's not a big deal really, I just wondered.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Could you tell, were there errors found and fixed?

jholland1964 650 Posting Expert Team Colleague Featured Poster

ummm, sorry, I read the disk check before it was edited and already did it, it took all morning, hope I didn't mess up... :(

Want me to go back and do the TDSS now? I'm waiting to see what you say since I got ahead of myself earlier.

That was my fault, added the TDSS after posting the disk check because I read through your other thread and saw that in there.

Yes, do the TDSS Killer and post back with the results. If it isn't there, it won't hurt anything and if it is there it should remove it.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Depends on the web page, if it is a public page then he would not be the only one who could listen. Unless it is a private, and maybe encrypted page, that only you own, that would require a special password to enter it in the first place, that only you could create and give to him, and nothing can be downloaded FROM that page without following specific multiple steps, then he could still save it on his computer at the same time he listened to it. In fact, depending on his computer configuration, his computer might require download of the file to his computer before he even could listen to it.
I would never chance it myself, especially something that there is no way I want others to see or hear. There is almost always a way to get around things in order to use them or keep them. That doesn't make it legal, it often isn't, but it is done probably millions of times daily on the internet.

As I said, once it is "out there", it is "out there" and you absolutely have no control on where it goes and who has it will have NO WAY to get it back, EVER, it is out there FOREVER.

You could even set something up like that so that only viewing or listening on the computer can be done by doing all the steps above, BUT that does not stop somebody from using a tape recorder, …

jholland1964 650 Posting Expert Team Colleague Featured Poster

Not if you have sent it on to somebody else. Once it's on their computer, facebook, cellphone, whatever, then it is "out there" and even deleting it from your computer or phone makes no difference, somebody else has it and they can do whatever they want with it.
Number one rule about the internet...Don't say or send anything to anybody that you don't want the world to see or hear, because after you it send to another, then it is out of your hands for good.

That person can delete the file from his computer and it's gone from his, but you have absolutely no guarantee that person will do that, even if they say they will. Don't send it to somebody else.

jholland1964 650 Posting Expert Team Colleague Featured Poster

These programs, especially Avira should not just stop working and Java should install without difficulty using all the steps you have tried. I think you have some key files damaged

On your previous thread you had the TDSS rootkit on there. That could have damaged key files or else some of it may remain on there.
Do this first:
Please read carefully and follow these steps.

* Download TDSSKiller and save it to your Desktop.
http://support.kaspersky.com/downloads/utils/tdsskiller.zip
* Extract its contents to your desktop.
* Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

* If an infected file is detected, the default action will be Cure, click on Continue.

* If a suspicious file is detected, the default action will be Skip, click on Continue.

* It may ask you to reboot the computer to complete the process. Click on Reboot Now.

* If no reboot is required, click on Report. A log file should appear. Please copy and paste the contents of that file here.
* If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of "TDSSKiller.[Version]_[Date]_[Time]_log.txt". Please copy and paste the contents of that file here.

I am going to want you to run check disk later, but don't do it now.
Have gone all the way through your previous thread …

jholland1964 650 Posting Expert Team Colleague Featured Poster

Glad that Windows Firewall is off. I asked about the Comodo because I went through your other thread and I saw that the Java problems seemed to begin after the install of Comodo.At that time you were using Avira with it, which is top of the line but now instead you are using Comodo Sucurity Suite instead of just the firewall and of course that has your av program also.
Yes, Avira is gone. But I am leaning towards the Comodo program causing much of your difficulties, though I cannot say for certain, plus the Comodo av program isn't considered top of the line either.
In that last thread you were having multiple difficulties caused by a rootkit and the Java problems came along at the end after the install of Comodo Firewall

jholland1964 650 Posting Expert Team Colleague Featured Poster

Are you required to use Comodo Security Suite for some reason? I know it is a paid program, how long before it expires? Have you ALWAYS used Comodo with this computer?

jholland1964 650 Posting Expert Team Colleague Featured Poster

You never, ever use two firewalls at the same time on the computer. If you have a 3rd party firewall on the computer then the Windows firewall absolutely must be turned off and never turned back on, unless you Uninstall the other firewall.Same as you never have two anti-virus programs installed.
An anti-virus program can also block the install of some programs and occasionally the use of some programs.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Sorry, for the Godaddy question -- I didn't visit the godaddy website and don't recall visiting any sites explicitly hosted by godaddy. I definitely did not install any software (web downloaded or otherwise) while I was at work on Friday. Saturday when I booted up my machine at home, I started to get the message as soon as the laptop booted up.

For the proxy setting -- it was in IE --> Internet Options --> Connections --> LAN settings --> automatically detect settings

Thanks so much for your help!

You have a lot of unnecessary autostarting items try turning those off and see if that makes a difference.
Most recently installed was
AmazonGSDownloaderTray and it also has this service auto starting;
AmazonGSDownloaderService.exe

Others not needed to run when the computer starts up are:
Google Update
Adobe Acrobat Speed Launcher
Acrobat Assistant 8.0
Adobe Reader Speed Launcher
Adobe ARM

to stop all these I suggest using Code Stuff Starter.Available from here;
http://www.snapfiles.com/get/starter.html

Download and install it. Then open the program you will see three tabs, Start ups is one and all the programs I noted except the one service will be found there. Take the check marks out of all those. They ALL can very easily be run manually if you need them.
Then go to the Services tab and scroll through the services there, it is alphabetical order so this one will be near the top

jholland1964 650 Posting Expert Team Colleague Featured Poster

I just wondered if maybe the router firewall was blocking. You DO have the Windows Firewall turned off don't you?
I have searched around and have found a lot of posts concerning the Comodo Internet Security causing problems with java installs, and other programs also. Have no idea if this has anything to do with all of this or not but that Belarc program should run easily too. Makes no sense to me at all.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I hate to say this but there appears to be a lot more going on there than you actually know. There is something blocking all of these things.For one thing you should easily be able to right click that Belarc and run as administrator.

OR in Internet Explorer you should, when you click that Download button get the option to Run, and it should install and run.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Are you connected directly to the internet or wirelessly via a router? If using a router, can you disconnect that and connect the internet cable directly to the laptop?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Where do you see automatically detect Proxy settings? You didn't answer my question about GoDaddy.com.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Here is the Java test page, click the download button, it will run the test and tell you if you need a different version. Current version is update 6 version 24

http://www.java.com/en/download/index.jsp


This is the driver download page I was viewing

http://downloadcenter.intel.com/SearchResult.aspx?lang=eng&ProductFamily=Internet+Devices&ProductLine=Netbooks&ProductProduct=Mobile+Intel%C2%AE+945GM+Express+Chipset+Family

jholland1964 650 Posting Expert Team Colleague Featured Poster

If you are using IE you need the plugin, if you are using Firefox you shouldn't need it.

Do this, download this free computer audit and run it. It will give you, in the browser window a complete audit of your PC. It will tell you what your graphics card is and driver installed and when.

http://www.belarc.com/free_download.html

jholland1964 650 Posting Expert Team Colleague Featured Poster

Is this a laptop?
The latest one I see on there is one dated 7/3/2008 and is driver number 15.​8.​3.​1504 and it's for Vista 32bit Laptop
don't know that is the correct one for you though.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I thought your Java was working in Firefox

jholland1964 650 Posting Expert Team Colleague Featured Poster

It says I have the latest version.

What says that? Who is the manufacturer of your display card? What driver version do you have? When was it installed?

jholland1964 650 Posting Expert Team Colleague Featured Poster

You can delete the extra IE icon, you would only need one. Here is the Adblock for IE
http://simple-adblock.com/

You might consider Firefox, it is a more secure browser, slightly different from IE but generally faster, easily configured. I have used it for years, rarely use IE anymore unless I have to use it. http://www.mozilla.com/en-US/firefox/new/

You do need to make certain you have proper security settings for IE. You want to be certain that 3rd party cookies are blocked, those are ones that are from ads on a web page and you don't want those, you only want the ones from the site you are visiting.
In IE go to Tools, Internet Options, Privacy, Advanced button. Make sure there is a dot in Allow 1st party cookies and a dot in the Don't Allow 3rd Party cookies and a check mark in allow session cookies.
Ok, your way out.

cathy crossbuck commented: Great step-by-step help through this thread. Thanks! +1
jholland1964 650 Posting Expert Team Colleague Featured Poster

I don't use, and have never used the Comodo Firewall so I can't give directions for that since I don't know it at all. I use the built in Windows firewall.
If you have the Java working in Firefox then you have done it right. The elluminate website said, use the browser that it works in and not the others, so...that tells me they probably don't know either and they don't want to find out how to tell people to configure each browser. I can't say that for certain that is just my opinion.

Now as far as the Video Driver, you probably need to update it, but you need to know exactly what brand of video card you have on your computer because you need the driver made specifically for that card, another one for another brand wouldn't work or could cause problems.

The Windows, "check for new driver" is always going to say the most current driver is on there, if that is what you did, you have to check the manufacturer of the card to get the right one.

Right Click My Computer, Choose Properties. When that opens go to the Device Manager and look for the Display Adapter. click on that to open and then double click to see what driver is on there.
Then you should go to the display adapters manufacturers page and look for a more recent driver. Download it and then install it and see if you …

jholland1964 650 Posting Expert Team Colleague Featured Poster

Good, got rid of that RegistryReviver and look at the files removed from System Restore.
Ok, let's remove combofix:
Uninstall Combofix:
Go Start > Run
Type in:
Combofix /Uninstall
Note the space between the "Combofix" and the "/Uninstall"
Click OK.
Restart computer.
Your installed programs list doesn't show any Java installed, it shows a Java Updater, which is useless really but no Java.
You do need Java to view many websites correctly.
Go to this site and install the most recent version

http://www.java.com/en/download/index.jsp

Then;
You also need to set a new, clean Restore point.
To do this Right Click My computer.
Choose Properties
When System Properties opens choose the System Restore Tab.
Place a check mark in Shut down System Restore.
You will probably get a message telling you it will be shut down, click ok or yes.
Allow it to shut down.
Wait a moment. Then go back in and take that check mark Out so that System Restore will turn back on.
Also reduce the size to about 5% by moving the slider so that the size is reduced.

I would also recommend that you add this superb protection program
SpywareBlaster
from Javacool

SpywareBlaster doesn't scan for and clean spyware--it prevents it from being installed in the first place. SpywareBlaster prevents the installation of ActiveX-based spyware, adware, dialers, browser hijackers, and …