View Full Version : Help with spybot not running
mrz714x4
2009-10-25, 21:14
I have been using spybot for a long time and have never had a problem until now. I have read the posts about running hjt and other files and can not run anything. Please help me remove whatever i have that has infected my computer.
Dakeyras
2009-10-28, 13:19
Please note that all instructions given are customised for this computer only, the tools used may cause damage if used on a computer with different infections.
If you think you have similar problems, please post a log in the HJT forum and wait for help.
Hi mrz714x4 and welcome to Safer Networking. :)
I'm Dakeyras and I am going to try to assist you with your problem. Please take note of the below:
I will start working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for this issue on this machine!.
The process is not instant. Please continue to review my answers until I tell you your machine is clear. Absence of symptoms does not mean that everything is clear.
If you don't know, stop and ask! Don't keep going on.
Please reply to this thread. Do not start a new topic.
Refrain from running self fixes as this will hinder the malware removal process.
It may prove beneficial if you print of the following instructions or save them to notepad as I post them.
Your security programs may give warnings for some of the tools I will ask you to use. Be assured, any links I give are safe.
Next:
Please download exeHelper (http://www.raktor.net/exeHelper/exeHelper.com) to your desktop.
If you have Windows XP: Double click on exeHelper to start the application.
If you have Windows Vista: Right click on exeHelper and select Run as Administrator to start the application.
Double-click on exeHelper.com to run the fix.
A black window should pop up, press any key to close once the fix is completed.
Post the contents of exehelperlog.txt (Will be created in the directory where you ran exeHelper.com, and should open at the end of the scan)
Note: If the window shows a message that says "Error deleting file", please re-run the program before posting a log - and post the two logs together (they will both be in the one file).
Next:
Please download Rooter.exe (http://forums.whatthetech.com/redirect.php?url=http%3A%2F%2Feric.71.mespages.googlepages.com%2FRooter.exe) to your desktop.
If you have Windows XP: Double click on Rooter to start the application.
If you have Windows Vista: Right click on Rooter and select Run as Administrator to start the application.
A Notepad file containing the report will open, also found at %systemdrive%\Rooter.txt.
Post the contents of Rooter.txt in your next reply.
Next:
Please download to your desktop DDS from one of the links below:
Link1 (http://www.techsupportforum.com/sectools/sUBs/dds)
Link2 (http://download.bleepingcomputer.com/sUBs/dds.scr)
Link3 (http://www.forospyware.com/sUBs/dds)
If you have Windows XP: Double click on DDS to start the application.
If you have Windows Vista: Right click on DDS and select Run as Administrator to start the application.
A black Screen will open, just read the contents and do nothing.
When the tool finish it will open 2 reports.
Copy/paste both reports back here and remove DDS from your desktop.
Note: Two logfiles will be generated with Notepad: DDS.txt and Attach.txt
When completed the above, please post back the following:
Any problems encountered and or further symptoms?
exeHelper Log.
Rooter Log.
Both DDS logs. <-- Post them individually please.
Dakeyras
2009-11-01, 14:58
Due to the lack of feedback this Topic is closed.
If it has been four days or more since your last post, and the helper assisting you posted a response to that post to which you did not reply, your topic will not be reopened. At that point, if you still require help, please start a new topic and include a fresh HijackThis log and a link to your previous thread.
If it has been less than four days since your last response and you need the thread re-opened, please send a private message (pm). A valid, working link to the closed topic is required.