Posts by cohen

Beautiful,

Alright, are you still having problems???

From what i can see, everything is fine....

Cohen

Looks good to me. You seriously need to be thinking about uninstalling AVG7 and either going with AVG 8 or another anti-virus program. AVG 7 support will very soon be discontinued.

Yes i agree, AVG 8 has to better features...

Otherwise go for Avast.

Cohen

Maybe try this - http://community.mcafee.com/showthread.php?t=212367

Cohen

OK, Can you pls do the following:

* Run HJT
* Select Do a system scan only
* Find O20 - AppInit_DLLs: avgrsstx.dll and put a check next to it.
* Click Fix Checked
* Hit Scan & Save the log
* Post the log in a reply.

Thanks,

Cohen

Manually shut it down, end the process in task manager. It is possible to shut it down.

So try ending the process in task manager.

Cohen

No, repost the MBA-M Log.... and post a fresh HJT log.

The MBA-M log are located:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Thanks,

Cohen

Can you pls post the MBA-M log.

Thanks,

Cohen

Did you reboot after running MBA-M??? because i don't think you have....

Can you pls reboot, posting the MBA-M log again, and posting another HJT log.

Thanks,

Cohen

Alright, how is your PC now???

Is it better??? still have any problems???

Thanks,

Cohen

Alright,

Try this,

Please download ComboFix by sUBs from HERE or HERE

• You must download it to and run it from your Desktop
• Physically disconnect from the internet.
• Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
• Double click combofix.exe & follow the prompts.
• When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Cohen

Alright, your MBA-M is not up to date, can you pls update it, under the update tab to the latest database version.

Then, redo the scan, removing everything it finds and rebooting and then posting the log. Once that is done, run HJT and post both the MBA-M and the HJT log.

Thanks,

Cohen

Hi,

I followed the suggestions that you provided and was unable to delete the file.

I have uploaded an image of the error message. Please see below:

[IMG]http://i256.photobucket.com/albums/hh179/v1raj/Misc/system32error.jpg[/IMG]

Hope this helps..

Try hitting SHIFT + DEL on the file, and see if it does the same thing....

Cohen

Run MBA-M and then we can continue, it's one step at a time.

Thanks,

Cohen

Alright, Now can you follow my instructions above, regarding the MBA-M and see if you can do that.

Thanks,

Cohen

Hello,

What is your Anti Virus Software????
Can you access the internet???
What is your Operating System???

Thanks,

Cohen

So after the CombixFix was ran i opened IE and searched for hotmail, strange thing happend.. on my first search the correct results displayed, i then refreshed the page and the results stayed the same, i refreshd for the third time and the results changed.

Yes they will, it depends on a few things somtimes.... it's not always a virus causing anything.... could be the server... number of things.

Nothing that you should be worried about.

Can you pls post back with a fresh HJT log.

Thanks,

Cohen

:-O

Is there any way you can post the normal clear log?? or is the best you can come up with??

Cohen

When you post your log, post it in a reply.

Thanks,

Cohen

Great, at least it has solved a few things.

Can you pls update your Anti Virus and run a scan...

Also, can you pls run HJT again and post a fresh log, just so we can clear a few things up.

Thanks,

Cohen

WOW thanks guys, can't belive I am all done, thanks to all who put their time and effort into helping me. Yes I will play much more carefully from now on, and I locked my router so only I can use it and not the whole world.

That's Good,

Just a tip, regularly run MBA-M, like weekly, and make sure you update it each time before scanning.

If you have any future problems, create a new thread with a HJT log, and then we can continue to help you, again.

Cohen

P.S. - Solved Thread

Hello,

Pls do the following:

1. - Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

2. - Download hijackthis and post the log.

In your reply, post the logs (in this order):
1. - Malware Bytes Log
2. - Hijackthis Log

Thanks,

Cohen

Hello,

Can you pls do the following:

1. - Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

2. - Download hijackthis and post the log.

In your reply, post the logs (in this order):
1. - Malware Bytes Log
2. - Hijackthis Log

Thanks,

Cohen

Pls do the following:

1. - Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

2. - Run HJT again and post the log.

In your reply, post the logs (in this order):
1. - Malware Bytes Log
2. - Hijackthis Log
Thanks,

Cohen

GOOD! That's done some really good work.

OK, well from what i can, there is nothing wrong with your hijackthis log..... but wait for one of the other members to come and confirm that it is clean.

Are you still have problems???

Cohen

Hello,

Can you pls do the following:

1. - Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

2. - Download hijackthis and post the log.

In your reply, post the logs (in this order):
1. - Malware Bytes Log
2. - Hijackthis Log

Thanks,

Cohen

OK, try this

Please download ComboFix by sUBs from HERE or HERE

• You must download it to and run it from your Desktop
• Physically disconnect from the internet.
• Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
• Double click combofix.exe & follow the prompts.
• When finished, it will produce a log. Please save that log to post in your next reply along with a fresh HJT log

Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.

CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.

Then see if MBA-M will work.

Thanks,

Cohen :)

Lol, yeah, i'm normally in bed and off the forum by at least 10:30 Aust Time.

:)

Cohen

OK, Remove all the malware bytes exe files and download MBA-M again, and rename it.. and try installing it that way.... and then see what happens.

Cohen :)

Hello and Welcome to Daniweb,

Can you pls do the following:

1. - Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

2. - Download hijackthis and post the log. - Pls download this version, so it is up-to-date.

In your reply, post the logs (in this order):
1. - Malware Bytes Log
2. - Hijackthis Log

Thanks,

Cohen

Beautiful, well the processes in the first hijackthis log that were causing problems are gone, which is good.

Just wait for Crunchie or judy, or even gerbil, and either of them, if not all of them will confirm if the log is clean. If not, they will recommend necessary actions needed to be taken.

At least it has fixed the previous problem :)

Cohen :)

Hello,

Pls do the following:

1. - Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

2. - Download hijackthis and post the log.

In your reply, post the logs (in this order):
1. - Malware Bytes Log
2. - Hijackthis Log

Thanks,

Cohen

Alright, that's fine.....

Well if there are any future problems with any computers, pls do the above programs and post them in a new thread.

Make this thread as solved :)

Cohen

Everything looks Clean.

Reformatting removes EVERYTHING, so you will not have an infected system after reformatting.

sure, I'll have to wait until monday to do so. Does it matter the user profile I run from?

Preferably a administrator account.

OK, can you pls post the MBA-M log, and also trying running it in normal mode.....

if you can get it to run in normal mode, post that log along with a fresh hijackthis log.

Thankyou,

Cohen

OK,

Can you pls follow the ATF cleaner instructions in this thread.

once you have done that, see if you can download and run MBA-M

and then post a fresh hijackthis log.

Thanks,

Cohen

OK, Beautiful, MBA-M has done some good work.

Can you pls post a fresh hijackthis log.

Thanks,

Cohen

Hello woost,

Can you pls post the malware bytes logs....

they are located C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Or you can get them out of the logs tab within Malware Bytes...

Then we can continue....

Thankyou,

Cohen

No problems, just to make sure things are gone, can you pls check that you can access things now, and post a hijackthis log...

Thanks Cohen

P.S. - + 1 Reputation :D:D:D:D :twisted:

OK, well at least the pics are fixed.... i don't see any problems in your Hijackthis (someone else might)... but i recommend running ccleaner weekly... just to keep everything happy :)

Cohen

cornholio157 - Pls create your own thread :)

Thankyou

Alright, try Malware Bytes Anti-malware....

follow the instructions below for that:

Download Malwarebytes' Anti-Malware (http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?part=dl-10804572&subj=dl&tag=button) to your desktop.

* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure to checkmark the Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.

Make sure that you restart the computer.

The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\log-date.txt

Cohen

1. - Pls run hijackthis after you have logged on and post the log
2. - Pls download CCleaner and run it....

Run ccleaner first, and then run hijackthis :)

Thanks,

Cohen

I read somewhere that the Karna.dat was a virus or spyware... is that true? I still see it in the log...hopefully its nothing.

It most cases, dat files are very bad, and Anti Virus software picks them up and always removes them.....

But view more information here :)

Cohen

yeah, i have the same problem, but mine has the ability to use 2 USB ports..... so that is good.... otherwise i wouldn't be able to do it.....

But the thing i find is... it varies from laptop to laptop.... same model, same everything, and it still varies....

Anyway, overall, it is a common problem.

Cohen

Beautiful work wotis - it has done a lot of work!

Pls post a fresh HJT (hijackthis log)

Thanks,

Cohen

Hi,

Thank you so much for all your advice, I install Norton 360 6 months ago, but my PC went really slow over a period, so some one suggested to get rid and install Avast! which I did, since the Trojan episode earlier, a friend uninstalled Avast also and put on AVG this evening, so, I didn't realise I still had anything to do with Norton left on my PC, am I better sticking with the AVG programme? which is what the friend put on this evening, he works in IT, but gone home now, and Im absolutely useless with technology, Im sorry to be a nuisance.

AVG is fine, i use it and it's fine :)

PS Do I need to check any of these items off in the window "Trend micro" thats open before I delete or do anything with it?

No, don't do anything.

Once you have uninstalled the anti-virus software, pls post a fresh hijackthis log :)

I use FF3, and i have had no problems since i have joined :)

OK,

Nice, well.. is it still playing up??? are you still having problems???

Pls run hijackthis and post the log :)

Have you tried Shift + Delete???

Do you need that MOV file???

Otherwise, copy everything off your USB and reformat it.... start fresh.