jholland1964 650 Posting Expert Team Colleague Featured Poster

Try these online Scanners and do have them remove whatever is found.
http://housecall.trendmicro.com/

http://www.bitdefender.com/scanner/online/free.html

jholland1964 650 Posting Expert Team Colleague Featured Poster

I can't give any instructions until I see the log from MBA-M
What version of Firefox are you running?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Ok, thanks for the info. #1...Under NO circumstances use a registry cleaner. #2. Because you used System Restore this likely will make removal of whatever this is much harder. Next time, and I hope there won't be, please DON'T use System Restore in an attempt to remove any program. Removal should be done via Add/Remove.
You have several questionable programs on there you need to remove, using Add/Remove:
Advanced SystemCare 3 from IOBit, not a very reliable company at this time. Uninstall this.
MemTurbo> this program if for use with Win98/SE/ME not Vista.
Uniblue ProcessQuickLink 2, CNET TechTracker also unnecessary.
If you can, download Malwarebytes' Anti-malware to your desktop
* DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt.
If you cannot get the …

jholland1964 650 Posting Expert Team Colleague Featured Poster

We need more info than what your thread title tells us or the HJT log for that matter. Please be more specific.

jholland1964 650 Posting Expert Team Colleague Featured Poster

thanks for that i will do all that now and hopefully post back in the next few hours(depending on how long the scans take). is there any anti-virus programmes you would recommend that are lighter than norton? i hate the thing lol

The one I use is Avira Free, an excellent free anti-virus program, doesn't have a lot of extra junk in it. Avast is also another good Free program, has a bit more processes than Avira.
The thing with this Norton program it is one of those "all for one/one for all" programs...anti-virus, firewall, anti-spy/anti-malware but my opinion is that the same things can be done with serveral FREE programs without all the extra baggage. Both of those Free anti-virus programs get consistently good reviews and are well respected.

jholland1964 650 Posting Expert Team Colleague Featured Poster

One thing I see which is unnecessary is the PeerGuardian program. This is a firewall for P2P programming mainly. You are running Norton 360 which also contains a firewall, so that means you have TWO firewalls, a major No-No. Uninstall the PeerGuardian.
Now to be honest, the Norton program WILL slow your computer, no doubt about it. This could be part of the problem with the slowness of the computer.
I also note that you only ran the Quick Scan with MBA-M. I would recommend that you update the program and do the Full Scan, removing anything found.
You should run the Panda program again and have it remove everything found. Reboot the computer after both of those scans and then run a new HJT scan. Post back with all three logs.
Judy

jholland1964 650 Posting Expert Team Colleague Featured Poster

We need more information than just a HiJackThis log. What problems were you experiencing which caused you to run HJT in the first place? What OTHER steps have you taken?

jholland1964 650 Posting Expert Team Colleague Featured Poster

First of all, please roll back to Internet Explorer 7. There is no need for Internet Explorer 8 and many people not running Vista have had major problems with it. To do this go to Add/Remove and Uninstall IE 8, this should roll you back to IE 7. Then reboot and run a new HJT scan and post the log here.

jholland1964 650 Posting Expert Team Colleague Featured Poster

This thread is a double post. Help is being given to the poster in THIS THREAD

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hi and welcome to daniweb.
#1. Get rid of the uTorrent Programs. This is violation of forum rules.
#2. Please do the following:
Follow steps 2 through 9 found HERE Reboot the computer after each scan. Save the logs.
Once you have completed those steps then run a new HJT scan and save the log. Post back here with the MBA-M log, the ESET log and the new HJT log and we will decided what needs to be completed next.
Judy

jholland1964 650 Posting Expert Team Colleague Featured Poster

hi,
im no expert by any means but from your log it seems you have quite a few programmes that are very heavy on system resources and memory i,e apple (i-tunes,quicktime) skype etc so that wont help the speed but i would bet that if you downloaded a reg cleaning tool, i use and would recommend registry mechanic, that you would see at least a 70% improvement as it doesnt appear that you have any malware now. i dont know how you feel about downloading torrents but here are a couple of links for what you will need if you dont want to pay for the programme

http://www.utorrent.com/ (download and install 1st)

http://isohunt.com/torrent_details/31593840/registry+mechanic?tab=summary (download wit h utorrent)

also it appears in the log you have had norton installed on your laptop at some point(symantec) but now are using avg if so have you completely removed norton from your laptop as it would definately conflict with avg which would also slow down your laptop
hope some of this info helped

Have to step in here. Using uTorrent or P2P programs is MOST DEFINITELY something we DO NOT CONDONE or recommend here and is a VIOLATION of FORUM RULES...KEEP IT LEGAL
Also the use of Registry Cleaners or Registry Editing programs are also NOT recommended.

We need to see the MBA-M log and a NEW HiJackThis scan before other determinations can be made on the next steps required. rob247 IS correct in …

jholland1964 650 Posting Expert Team Colleague Featured Poster

I know its been a bit but I'm back. I've gotten my hard drive down to 85% full. Most of the space is due to music and video files, which I don't really want to get rid of, about 24 Gigs.
Irregardless I still think its something else that is slowing down my computer. The computer seems to do better when there isn't any program open that connects to the internet: browsers, Outlook, iTunes, etc.
I'm still having a lot of problems with the windows screen saver freezing up. I have it set to scroll through my photo album.

Sorry, but I firmly believe the cause of your slow downs is the fact that the hard drive is 85% full. We know absolutely that the computer is NOT infected so it cannot be infection causing the slow downs. Yes, the computer would work faster not online, it won't have to use so many processes if it is offline.
Here is the statement I found on MULTIPLE websites concerning a hard drive with only 15% remaining space or less:
Your computer will run more slowly with a relatively full hard drive. This is because the free space is used up by your computer as Virtual Memory space, and the smaller amount of free space available, the smaller amount of Virtual Memory space available. The more you fill up a hard drive, especially past the 85% mark, the more the fragmentation, which decreases file access speeds and consequently …

jholland1964 650 Posting Expert Team Colleague Featured Poster

If you are satisfied then mark the thread solved

jholland1964 650 Posting Expert Team Colleague Featured Poster

vallsf, you need to begin your own thread giving all information about your system, your anti-virus program and steps you have taken to remove the problem. Then somebody will help you. We only help one person in each thread.

jholland1964 650 Posting Expert Team Colleague Featured Poster

We need a lot more information that you have given. What is your operating system? What is your anti-virus program? How do you know this is an "msn virus"?
Do the following: With ALL browsers, chat and email programs closed
Update and run a full scan with your anti-virus program. Allow it to clean or quarantine all items found.
Still leaving all unnecessary programs closed EXCEPT your browser, do the following:
Please download Malwarebytes' Anti-Malware (MBA-M) to your Desktop.

* DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt.

REBOOT the computer

Again close all chat programs and email programs.

Please Run the ESET Online Scanner and attach the ScanLog with your post for assistance.

* You will need …

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hi welcome back...:(
When you say you reinstalled XP I presume you mean you formatted the computer and installed XP, correct? When you reformat you wipe the drive, meaning EVERYTHING has to be reinstalled too. So you need to reinstall all drivers and hardware also. Did you do that? It sounds to me either that the reinstall of XP was done incorrectly, OR you only installed the operating system but nothing else to go with it. How did you do the reinstall?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Have asked PhilliePhan to take a look at his one and see what he thinks.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Of course I think System Restore itself is so mis-understood anyway. So many seem to think it is the "end all and be all" of fixing, when in reality many times it does more harm than good. It doesn't restore everything but so many people "boink" their computers by immediately turning to System Restore rather than just doing a simple uninstall of something or maybe an adjustment of some kind. Then they can't figure out why something doesn't work right anymore. Obviously it DOES work in some instances but for my money anyway it shouldn't be the first step.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I know there ARE forums which tell people to turn it off, guess I should have worded it that MY feeling is that it should be left on because of..the "infected point better than none at all" argument. And yes, I would tell them to turn it on....

jholland1964 650 Posting Expert Team Colleague Featured Poster

Have you tried to restore your system?, maybe can help you.

Wouldn't recommend that yet...we need LOTS more info. To have a computer go back...4 operating systems by itself is really almost unheard of so using system restore may not be an option, there was no system restore in Windows 95 so if the computer actually DID go clear back to 95 there wouldn't be any System Restore. We need to hear from the poster FIRST with lots more information.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I was able to get around it and then ran Ad-Aware and other Spyware programs to get rid of it.

HOW did you "get around" Windows Police Pro? There ARE definite steps to take to remove this but you don't say how you did this for certain and running Ad-Aware is definitely NOT one of them. You also are NOT running an antivirus program...why? The only thing I see connected in any way to a security program is SuperANTISpyware and that is what it is...an anti-spyware program period, NOT an anti-virus program, I also don't see a firewll.

Do the following:
Please download Malwarebytes' Anti-Malware (MBA-M) to your Desktop.

* DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt.

REBOOT the computer
Next do this:

jholland1964 650 Posting Expert Team Colleague Featured Poster

havin some issues, windows is slow, cannot access utilities, xp pro reverted back to 95, taskbar dissapeared, no anti virus or malware software will load. Any hair i had left is gone, any ideas??

Not certain how XP Pro could revert back to Windows 95. Did you install XP Pro ON TOP of Windows 95 when you first installed it? If so WHEN did you do this?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hi,
I profess to no particular expertise, however is it possible you could do a system restore to an earlier time before you experienced this problem?
it reminds me of a nasty i got a year ago which prevented me accessing the internet at all, disabled my antivirus software and sadly also in that case deleted all my restore points - i ended up needing a full format and install, but maybe you can still do a system restore?
good luck.

System Restore is NOT going to remove an infection or ANY program for that matter. What it likely would do is remove the "notation" of the program or infection making it that much harder to find and remove. When dealing with an infection System Restore should be left alone until the computer is deemed clean. THEN, and only then, you should set a new and clean restore point by turning off System Restore and turning it back on. But until the computer is clean, leave it alone.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hey , i have 1 question :) , why doesnt my internet work when i connect to a broadband ? i cant go on aNY WEBSITES OR ANYTHING .. PLEASE RESPONSE ;d

This thread is nearly a year old. You need to create your own thread and give much more information than you have given here. Did the computer connect previously using broadband or is this a NEW connection?
What operating system are you using? Are you certain you have a network card in the computer?

jholland1964 650 Posting Expert Team Colleague Featured Poster

Please download Malwarebytes' Anti-Malware (MBA-M) to your Desktop.

* DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt.

Reboot the Computer.
Create a new folder on the desktop and name it HJT
Then download HijackThis and save it in that new folder. Then run a system scan with HiJackThis and save the log
Post back here and copy/paste both the MBA-M log and the HiJackThis log

jholland1964 650 Posting Expert Team Colleague Featured Poster

Try this suggestion from the MBA-M forums;
If you already have MBAM installed on your computer.
Please navigate to the MBAM folder located in the Program Files directory.

Locate MBAM.exe and rename it to winlogon.exe

Once renamed double click on the file to open MBAM and select Full Scan.

At the end of the scan allow MBAM to remove what it had found then reboot.

Post the log here. If you cannot do this either then try running MBA-M in Safe Mode. It IS meant to be run in normal mode since it won't load all of it's drivers in safe mode but if all else fails then this would be the next best thing to try.
Of course have it remove all if you are able to run it in safe mode.
Then reboot to Normal mode and attempt to run another full scan with it. If it works then of course have it remove all it finds and reboot.
Rename HiJackThis to analyze.exe and run the system scan and save the log. Post back here with both logs.
Judy

jholland1964 650 Posting Expert Team Colleague Featured Poster

I'm going to say trust PP here and agree that it looks good.
Let's do it this way, since MBA-M was the program that kept catching and removing this why don't you update MBA-M and do another full scan and see what it shows, hopefully nothing.

If it shows clean then you should be good to go. If it does show up again then do the following;
Run the GMER Rootkit Detector and Removal Tool
Post back and let us know the results.
Judy

jholland1964 650 Posting Expert Team Colleague Featured Poster

Now for the original poster Micah, I asked PhilliePhan one of our experts with combofix to take a look at the log. Here is his suggestion:
Run SysProt AntiRootkit 1.0.1.0 download from here:
http://majorgeeks.com/SysProt_AntiRootkit_d5708.html
Follow these instructions:

-- Extract it from the ZIP
-- Click the "Log" tab.
-- In the Write to log box select ALL items and check the Hidden Objects Only box as well.

Run the tool and the log should be found in the Sysprot Folder.
Post back here with that log.
Judy

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hi I believe I have the same problem/virus on my home computer, or atleast it is doing about the same thing - reoccuring no matter what.

I have attempted all virus scanners suggested on the site (except combofix) so far, and all simple close out after a minute, 2 minutes of runtime, with no error and no message.

MBAM, HJT, Windows Malicious Tool Remover, Etc... Even the ESET or ETES (w.e.) all close after (presumably) they find the infected file.

I am not at home, but would changing the .exe name help with this? as I read in another thread - if this doesn't work I will make a new thread and post a ComboFix log.

I would STRONGLY advise that you NOT run combofix at this time. We need to see scan logs from ALL other scans run AND a HiJackThis scan log also before that determination can be made.
Please DO create your own thread with all pertinent information (including operating system, av & firewall programs, when the problem began, etc. DON'T INCLUDE the part that says

I believe I have the same problem/virus on my home computer, or atleast it is doing about the same thing - reoccuring no matter what.

that part is of no use since no two computers are identical. What may be causing the problem on YOUR computer may not be the same infection causing the problems on this particular computer, even though the symptoms may be similar. Many infections do exhibit …

jholland1964 650 Posting Expert Team Colleague Featured Poster

As you can see this log is very complicated, as it is supposed to be. Give me some time and I will get back with you on other steps.

Meanwhile here is the link for the IE Tab for Firefox.
With it you can use Firefox to go to any page which requires IE. When you do the tab will open with Internet Explorer because it embeds Internet Explorer in tabs of Mozilla/Firefox. Take a look at my attachment showing print screen of my computer on the Windows Update page from Firefox. See the IE tab. Once you are finished with whatever you are doing within that IE tab just close the tab. But you can really exclusively use Firefox but go to and work on any page which requires the use of Internet Explorer.

I will get back with you on the combofix log later.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Sounds like you have a rootkit on there. That's why it keeps coming back.
Do this: Now you can read full instructions for this tool if you wish on http://www.bleepingcomputer.com/combofix/how-to-use-combofix

download ComboFix
Click on the Save button, and when it asks you where to save it, make sure you save it directly to your Windows Desktop.
DO NOT RUN it YET
You must take some preventative measures so that there are no conflicts with other programs when running ComboFix. At this point you should do the following:

* Close all open Windows including this one.
* Close or disable all running Antivirus, Antispyware, and Firewall programs as they may interfere with the proper running of ComboFix.

Once these two steps have been completed, double-click on the ComboFix icon found on your desktop. Please note, that once you start ComboFix you should not click anywhere on the ComboFix window as it can cause the program to stall. In fact, when ComboFix is running, do not touch your computer at all and just take a break as it may take a while for it to complete.
Windows may issue a prompt because ComboFix does not have a digital signature. This is perfectly normal and safe and you can click on the Run button to continue.
ComboFix is now preparing to run and when it has finished you will see the Disclaimer screen you should press the number

jholland1964 650 Posting Expert Team Colleague Featured Poster

Is this vundo trojan the one that keeps coming back? You know you can get an IE plug in for Firefox, works fine.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Our computer detected a speedhack, but we dont know where it came from. The internet connection became faster but as i want to play an online game like freestyle. It always say "speedhack is detected on pc" .

How can i disable that speedhack?

Please help me. I don't know what to do!

Generally a speedhack doesn't come onto the computer by itself, it would have to be installed by somebody. There are a wide range of programs used for this and it can also be done manually. You need to check your Add/Remove to see if there is such a program listed, if so, uninstall it.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Did you all ready run the MBA-M program? If so post the log here. We still don't know the NAME of the trojans which are being found, and this is an important thing for us to find out. Sometimes different removal steps are needed.

You also said you began having problems when you updated the Flash Player, have you tried just Uninstalling that and leaving it off for now?
One key thing is NOT updating files which are not key files, and for now the Flash Player isn't key, when you possibly have infection on the computer. If you have not uninstalled that then I would recommend that you do for now.

jholland1964 650 Posting Expert Team Colleague Featured Poster

try this > ComboFix, MalwareBytes Anti-Malware, SuperAntiSpyware

It is NEVER advisable to use combofix without running other tools first. Combofix is a very powerful tool and used only in specific situations and then only should be used when those circumstances warrant, this is NOT one of those circumstances at this time. Since the poster has not replied back here with information requested Combofix is not recommended at this time.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Update MBA-M and do a FULL SCAN with it. Have it remove everything found.
Reboot the computer. Then do the following:
Run the ESET Online Scanner

* You will need to use Internet Explorer to to complete this scan.
* You will need to temporarily Disable your current Anti-virus program.

* Be sure the option to Remove found threats is checked and the option to Scan unwanted applications is Checked.
* When you have completed that scan, a scanlog ought to have been created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please post that log for us as directed below.

Reboot the computer. Then run a new HJT scan. Post back here with the MBA-M log, the ESET log and the new HJT log.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Is it possible that it is a connection problem as I don't really see anything in the logs though one thing I did notice are remainders of an old Norton program on there, don't know that these would cause these problems but they do need to go.
Have no idea what version of Norton you ran but they do have an Uninstaller program that can be run, use the one which is made for whatever program you had on there.

http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

jholland1964 650 Posting Expert Team Colleague Featured Poster

Well you have a couple programs on there I am not familiar with...one is this one
C:\Program Files\Executor\ I have found virtually no information on this one so I cannot assess even what it may do or cause. What IS it and what does it do?

The other one is this one;
C:\Program Files\Zamaan's Software\Browser Hijack Retaliator 4.5
I frankly had never heard of this one either or seen it recommended on any of the forums I am associated with, this doesn't mean it's bad, I had never heard of it so I had to do some research on it and what I DID find on their own website said this:

No Support for Vista
* We have discontinued the development of the product.

Plus what this program CLAIMS to do is also done, and done quite well, by several other well recommended and highly respected programs, SpyBot and SpywareBlaster are two of them often recommended right here.
I would advise that you UNINSTALL that program, see if that makes any difference and report back.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Avast and Kaspersky are both anti-virus programs. You can only have ONE installed on the computer. Just go with Avast.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Actually depends on WHERE this file is located. csrss.exe can be a legitimate file IF located in C:\Windows\System32. It stands for Client Server Runtime.

when I download files from my email to my desktop, they are not appearing on the desktop, however I am able to save them in other folders. However, if I try to re-download a file that was already downloaded to the desktop, i get an error saying "that the file exists", which means the file is there on the desktop, but invisble.

This is a bit confusing, you say you want to download to the desktop but it won't go to the desktop but is saved to another file. Meaning it IS in the other file. It is all ready on the computer, just not on the desktop.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I will not nor cannot say the system is clean until I see logs. The choice is yours. If you feel it is clean mark this solved.

jholland1964 650 Posting Expert Team Colleague Featured Poster

We have no way of knowing unless we see the log from the MBA-M scan and an HJT log to begin with.

jholland1964 650 Posting Expert Team Colleague Featured Poster

I believe the offending entry stopping IE from working is:
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
If this is the BHO stopping IE from working then you are going to suspect websites. This is AVG LinkScanner which will block sites with possible exploit codes.
ran a scan with AVG. AVG could not pick up anything,

Most anti-virus programs are not set up to pick up Trojans so this would be normal for it not to pick up a trojan. Spybot will, but not all of them Due to the fact that after that AVG flagged a virus says there is all likely hood there is still infection on the computer. If you have been running the computer without any security programs until now consider yourself very lucky.
One thing you must do is disable the TeaTimer portion of SpyBot as it CAN interfere with any fixes done.
To do this do the following:

  • Run Spybot-S&D in Advanced Mode
  • If it is not already set to do this, go to the Mode menu
    select
    Advanced Mode
  • On the left hand side, click on Tools
  • Then click on the Resident icon in the list
  • Uncheck
    Resident TeaTimer
    and OK any prompts.
  • Restart your computer

Next you need to do the following:
Please download Malwarebytes Anti-Malware (MBA-M) to your Desktop.

  • mbam-setup.exe and follow the prompts to install MBA-M.
  • Be sure a checkmark is placed …
jholland1964 650 Posting Expert Team Colleague Featured Poster

Restart in normal mode and post that MBA-M log here.

MBA-M is meant to be run in normal mode UNLESS this is impossible. Since this was the case for you you need to next do the following in NORMAL mode:

Update MBA-M and run another FULL SCAN and have it REMOVE ALL FOUND. REBOOT again and post THAT log here.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Firefox version 3.0.4 and yes firefox is allowed and not offline. I did reboot and uninstalled the program then reinstalled, it now seems that it won't work from google.ie/.com but will work for yahoo or some other search engine.

I am not certain what you mean here "IT" won't work from google.ie? What won't work? If you mean you cannot use google but you can use other search engines? You are using an old version of Firefox, current version is 3.5.3.

jholland1964 650 Posting Expert Team Colleague Featured Poster

What version of Firefox are you using? Are you certain that you have Firefox allowed in your firewall?
Are you certain you have Firefox set to operate ONLINE. Go to File and click and make sure there is NO checkmark next to Work Offline
We need more info on your computer itself and the programs you are using; Operating System, Anti-Virus program, Firewall and any other security programs you may have running.
Have you rebooted the computer and tried again to use Firefox?

jholland1964 650 Posting Expert Team Colleague Featured Poster

I am going to go through the logs but first thing you MUST do is get that Spyware Nuker programs OFF the computer. That is NOT a good program, in fact it IS considered spyware/malware itself. So uninstall it.
By not having an anti-virus program on your computer you are putting all other computers you are in contact with in jeopardy you have to get an anti-virus program IMMEDIATELY.

Antivir Server WILL work on your sytem. No, it isn't free but it is NOT expensive at all.

If you won't put an antivirus program on your computer because it isn't free then you shouldn't be operating the computer online. Sorry but that's the way I believe.

jholland1964 650 Posting Expert Team Colleague Featured Poster

Hi, I keep having problems installing iolo System Mechanic Professional 9 . The Anti-Virus won't install and I get a window that says there is a problem with something called Real Time. Can anyone help me?

Probably has to do with the real time email settings. I suggest you check out their website for answers.

jholland1964 650 Posting Expert Team Colleague Featured Poster

The first thing I notice is you do not have an anti-virus program on the computer. Please do the following:
Download and install Avira. Update the program and have it do a Full System scan. Allow it to delete or Quarantine anything it finds.


Second you most certainly DO have malware on the computer.

Please download Malwarebytes' Anti-Malware (MBA-M) to your Desktop.
* DoubleClick mbam-setup.exe and follow the prompts to install MBA-M.
* Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version if one is available. There are always new updates to the definitions.
* Once the program has loaded, select Perform full scan, then choose the drive(s) then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected if malware is found.
* When MBA-M finishes, Notepad will open with the log. Please save it where you can find it easily.The log can be retrieved by opening up MBAM and clicking on the Logs Tab at the top of the program .

Reboot the computer.

Run a new HiJackThis scan and save the log. Post back here with the MBA-M scan, the HJT scan and if possible the results of …

jholland1964 650 Posting Expert Team Colleague Featured Poster

First I believe you have way to many processes running. Next I see you are running Firefox. I had a similar problem. Are you able to get on the web? I found out that Mozilla firefox had been attacked with the Trojan Horse Downloader.Banload .APJF. I rerand a virus check and it picked it up and deleted it. All is well now. But before I did this I had to do a Winsock reset. Hope this helps.

good4golf, I am going to have to say, you need to read an ENTIRE thread before posting, this one is over 4 pages long, 32 replies counting yours and covers an 8 day period. Obviously you didn't since it appears your reply covers items noted in the first HJT log and doesn't take into account the various scans which were run. All virus and trojans scan run have come up clean. Several of us regulars have looked at these logs and do not feel the computer is infected. The poster makes no mention of NOT being able to get onto the internet and obviously can as various programs requested were downloaded and used.
If you look at the LAST HiJackThis scan log you will see that many of those processes showing in the first log are no longer running since the unnecessary auto start programs have been turned off and the Norton listings in services have been removed AND at the time of the last scan Firefox was NOT running but as …