Toolbar 888

[Gigamesh]

Yes I contracted Toolbar888 and It is a pain in the butt. Please help me remove it. I will not be happy if I can not get it removed. If you need any more Information just ask and it will be posted. Thank you

[pskelley]

Welcome to Safer Networking, if you still need help and are not receiving it elsewhere, it appears you have missed some important instructions our administrator has posted at the top of the forum, especially this: "BEFORE you POST" (READ this Procedure before Requesting Assistance)
http://forums.spybot.info/showthread.php?t=288
All advice given is taken at your own risk.
Please read and follow all instructions and post all required logs or reports, anything less will slow your process.
Use "Post Reply" to post the information in the instructions and stay in the same topic.

Please read this information: http://forums.spybot.info/showthread.php?t=8668
You may have malware problems but that is not it, from the limited information you provided I can not tell if I can help or not. If you would like to read and follow the directions, I would be glad to take a look.

Thanks

[Gigamesh]

eRT.jar-14e46f0-27f9456c.zip>HiPointInstallShieldRT.class Java/Shinwow.BH infected C:\Documents and Settings\10jkershaw\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\
eRT.jar-4b6298a9-6c61a8ae.zip>HiPointInstallShieldRT.class Java/Shinwow.BH infected C:\Documents and Settings\10jkershaw\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\
nRT.jar-4e3272d0-11836d03.zip>HiPointInstallShieldRT.class Java/Shinwow.BH infected C:\Documents and Settings\10jkershaw\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\
nRT.jar-50316a3b-3d6ee0dc.zip>HiPointInstallShieldRT.class Java/Shinwow.BH infected C:\Documents and Settings\10jkershaw\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\
pmnkkji.dll.vir Win32/Chisyne!generic infected C:\WINDOWS\system32\

There is part of the things you asked for. I am not done. I am just doing this to save what I have done

[Gigamesh]

Ok I have another poblem that I could not delete something. I forgot what it was but it would not go away. Also I can not figure out where the file for the Hijackthis report went. I don't know where it is. If you tell me what name it would have I could find it. Thanks.

[pskelley]

The stuff you posted looks like and infected Java cache, follow these instruction to clean that cache:
http://support.f-secure.com/enu/home/virusproblem/howtoclean/cleanjavacache.shtml

Have you read these instruction?
http://forums.spybot.info/showthread.php?t=288

In those instructions this >>> 4) HiJackThis log
gives you details as to how to download HijackThis and post a HijackThis log. At the very least I need to see that log. I can tell you this is probably a Vundo infection and they are tough to remove, so do not expect easy. If you are stuck at this point, you may want to ask someone with more computer experience to lend you a hand.

Thanks

[tashi]

This topic has been archived due to lack of a response.

If you need it re-opened, please send me a private message (pm) and provide a link to the thread. Applies only to the original poster, anyone else with similar problems please start a new topic.