Search:

Hi,



Sorry, not sure how to fix that. You can register here: www.castlecops.com and post in their General computer problem forum.

Open HijackThis > choose Scan Only > Place a checkmark in...

Hi,

Disable Spybot's TeaTimer. This is a two step process.
First step: Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
If you have...

They have been removed already.



Best way is to install it again then uninstall it.



What you did was right. You should've pasted the whole thing.

Due to inactivity this thread is now closed:spider:

If you wish to reopen this thread, please send me or a moderator a private message (pm). Please include a link to this topic.

This only...

Glad we could be of assistance :bigthumb:

Since the problem has been resolved, this topic is now closed and archived. If you need it re-opened please send me a private message (pm) and provide a...

Hi,



Don't worry about that. It's avast!'s false positive.

Sometimes, a corrupt IE cache causes problems with it.

It's also not likely that the rootkit came from Microsoft.

Ok. Make sure you download SP2 with IE7 from here: http://www.microsoft.com/downloads/details.aspx?FamilyID=049c9dbe-3b8e-4f30-8245-9e368d3cdb5a&DisplayLang=en

and install it. If you don't,...

Hi,

Thanks for posting the Spybot log, it shed me some light!

I actually expected something like this to come out in the gmer log, not sure why it didn't..

Download combofix.exe

1....

Hi,

Not sure why validation won't work but I want you to be honest with me..Is this a legit copy of Windows XP?

bhahn20?

buffoon?

Hi,

Your gmer log was ok. It looks liek the rootkit isn't there anymore.

You can delete these 2 folders using windows explorer:

C:\Documents and Settings\Alan\.housecall6.6\Quarantine...

Hi, the kaspersky log isn't very bad. Most of what it found were the infections that housecall quarantined.

I need to see the whole gmer log. You can either post the whole gmer log by using...

Hi, welcome to Safer Networking!



Not true. Spybot should be more powerful in safe mode because most of the infections are inactive there.

Download Gmer
Disconnect from internet and close...

Hi, welcome to Safer Networking!

There are indications in your log that your computer may possibly have a validation issue. Therefore, your system's status needs to be clarified prior to cleaning...

Hi, welcome to Safer Netowrking!

Deleting the two files would suffice. Just make sure that you reformat and backup all files (except .exe and .scr) that you have on the infected machine.

Virut...

Glad we could be of assistance :bigthumb:

Since the problem has been resolved, this topic is now closed and archived. If you need it re-opened please send me a private message (pm) and provide a...

Congratulations! Your log looks clean!

One last thing I want you to do is to update your machine to Sp2 but before we do that, can you do this first:

Download a diagnostic tool (MGADiag.exe)...

The pm was ok, I understand.

Just read my all clean speech above and you should be ok.

You're most welcome.

No need to post it in the false positives thread. It's already been posted.

http://forums.spybot.info/showthread.php?t=18479

I'm sure they're working on it already.
...

You're right. It's a flase positive from Spybot.

Hi,

Using windows explorer, delete the following folders:

C:\Documents and Settings\Dave\Desktop\SmitfraudFix
C:\qoobox <<Combofix's quarantine.

Empty your recycle bin.

Reboot, post a...

Hi,

No need for the whole log.

*You have remnants of Norton AntiVirus in your system..Please run the tool HERE to clean all the leftovers of your Norton Antivirus..

*Go to Start > Control...

Hi, next time, you need not pm me anymore. I was prompt in my reply (within a day). FYI, I don't work here and I don't get paid. In fact, all of the helpers here are all volunteers and we use up our...

Hi,

Remove MS Java
The Microsoft Java Virtual Machine, or MS Java VM, is used to run Java applets that can be found on web sites. When you visit a web site that has a Java applet, the MS JVM will...

Can you check if a log was created at one of these locations:

C:\combofix.txt or here: C:\combofix\combofix.txt

Glad we could be of assistance :bigthumb:

Since the problem has been resolved, this topic is now closed and archived. If you need it re-opened please send me a private message (pm) and provide a...

Due to inactivity this thread is now closed:spider:

If you wish to reopen this thread, please send me or a moderator a private message (pm). Please include a link to this topic.

This only...

Hi, welcome to Safer Networking!

Yes, please post the scan results.

Download combofix.exe

1. Save it to your desktop.
2. Double click combofix.exe & follow the prompts.
3. When...

Hi, Welcome to Safer Networking!



Your logs shows 2 Hijackthis running, use only the new version.

Download combofix.exe

1. Save it to your desktop.
2. Double click combofix.exe &...

You're welcome!


It will improve your security. The programs I have suggested will not conflict with kaspersky, they work by layers:bigthumb:

Hi,

Qoobox is combofix's quarantine. :)
_____

Congratulations! Your log looks clean!

This is a good time to clear your existing system restore points and establish a new clean restore...

Hi,

Using windows explorer, please delete the following folder:

C:\qoobox

empty your recycle bin.

Please post a fresh hijackthis log and tell me how is your machine running.

Hi, Bitdefender only scanned your document files.

Please repeat the scan and this time, follow the instructions carefully.

Are you still there?

Due to inactivity this thread is now closed:spider:

If you wish to reopen this thread, please send me or a moderator a private message (pm). Please include a link to this topic.

This only...

Glad we could be of assistance :bigthumb:

Since the problem has been resolved, this topic is now closed and archived. If you need it re-opened please send me a private message (pm) and provide a...

Yes I know that but I'm not sure if they're related.

Let's try another scanner:

Please perform an online scan using Internet Explorer at this website - http://www.bitdefender.com/scan8/ie.html...

Did you run the online scanner?

Hi,

What you provided were enough.

Congratulations! Your log looks clean!

This is a good time to clear your existing system restore points and establish a new clean restore point:
Go to...

You're welcome!:bigthumb:

Hi,

Open notepad.
Copy and paste the text inside the Code Box below into Notepad
Choose File > Save As and under "Save as type", choose "All Files".
Type clean.bat in the File name and save...

Hi,

Did you try to clean your own machine while waiting for my instructions?

Click start > control panel > add/remove programs:

Uninstall the following item:

J2SE Runtime Environment 5.0...

Hi,



I see. That would explain the huge amount of infections..



If you're the one who downloaded those cracks, I suggest that you stop doing it. I'm sure that the infections you have...

Hi,

Download combofix.exe

1. Save it to your desktop.
2. Make sure you save and close ALL open windows and programs that you are running in the taskbar as combofix will attempt to end...

Hi,

You can just empty the contents of this folder:

C:\Program Files\Norton Internet Security\Norton AntiVirus\Quarantine

Empty your recycle bin.
____

Congratulations your log looks...

Hi, welcome to Safer Networking!

Is your Avira up to date? I can't believe it's allowing this mess...


You are strongly advised to do the following immediately:

1. Disconnect infected...

Hi, welcome to Safer Networking!

Please download Navilog1 by IL-MAFIOSO:
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip

Extract its contents to the desktop.
Double click on...

Hi, welcome to Safer Networking!

Not actually a good looking guy but I'm willing to take you to some place you haven't seen before:laugh:

You have an older version of HijackThis.

Please...

Glad we could be of assistance :bigthumb:

Since the problem has been resolved, this topic is now closed and archived. If you need it re-opened please send me a private message (pm) and provide a...