Hi :)
Sorry for the delay.
Well that is one option that you can try. That's a lot of work - I don't know how important data you have on that hard drive...
Well I can't be sure about the...
Type: Posts; User: Mr_JAk3; Keyword(s):
Hi :)
Sorry for the delay.
Well that is one option that you can try. That's a lot of work - I don't know how important data you have on that hard drive...
Well I can't be sure about the...
Hi :)
Well you'd need to ground yourself, open the case, remove the hard drive, set it as slave and install it to the other pc (and you'd need to choose the correct hd cable etc.) so it isn't an...
Hi :)
Well you could attach the harddrive to another pc as a slave and copy files that way. Or you could try if the computer boots from a linux cd.
It could be hardware related but I think...
Hiya red60man and welcome to the Forums :)
Please post a HijackThis log to this topic and I'll have a look.
Instructions for posting
Hello ArcheyFB :)
Okey sounds bad.
So you've tried to restart with all of those options?
If none of the above work - I'm afraid that you'll need to do a repair install -> Instructions for Xp...
Hiya :)
There are some hidden leftovers from one infection.
Please download ComboFix from one of these locations:
Link 1
Link 2
Link 3
Ok. Please post the logs I requested and we'll have a look.
Hi :)
Ok nothing bad in that log.
Please try running the GMER scan in safe mode.
Post the log to here along with a fresh HijackThis log.
Ok the pc being slow might not be malware related but let's run 2 more scans to be sure...
Download Silent runners by Andrew Aronoff from here
Unzip/extract it to a folder on your desktop
...
Hello and sorry for the delay.
I've had some problems with my Internet service provider...
Do you know anything about these?
C:\WINDOWS\system32\KewlButtonz.ocx ...
Hi :)
Spybot S&D is a great tool and I'd recommend to use it for scanning in future.
Those files aren't on your pc anymore.
Yes you should install and run a scan with malwarebytes. Post the log...
Hi again, that’s nice to hear. :)
Have you fixed any HijackThis entries by yourself?
Let’s begin the cleanings.
You should print these instructions or save these to a text file. Follow these...
Hello 1995ad and welcome to the Forums :)
At first, please read these:
File Sharing, otherwise known as Peer To Peer. (P2P)
We do not support the use of illegal Pirated/Warez/Cracked software.
...
Nice to hear that the problem is solved :bigthumb:
Hello Nightb1ade :)
If you still require help - please post a fresh HijackThis log and the contents of C:\ComboFix.txt
This topic is closed due to lack of a response :spider:
If you need it re-opened please send a private message (pm) to a forum staff member and provide a link to the thread.
Applies only to the...
:bigthumb:
Okey let's try something else then...
Download gmer.zip and save to your desktop.
alternate download site
Unzip/extract the file to its own folder. (Click here for information on how to do...
Ok great :)
Hello jsmitty.
Okay sounds interesting. Let's run one scan first :)
Run Kaspersky Online AV Scanner
Right click on your favourite web browser (Internet Explorer, Firefox, etc) and select Run...
This topic is closed due to lack of a response :spider:
If you need it re-opened please send a private message (pm) to a forum staff member and provide a link to the thread.
Applies only to the...
Hiya :)
Do the redirects only happen weith FireFox browser?
Please download GooredFix from one of the locations below and save it to your Desktop
Download Mirror #1
Download Mirror #2
...
:oops: :fear::confused:
Hello sbolton.
I was on a vacation this week but I guided your case to a friend who should have helped you when I was gone.
Now I don't know what happened but seems...
Ok in that case we'll do some digging...
Please run a GMER Rootkit scan:
Download GMER's application from here:
http://www.gmer.net/gmer.zip
Unzip it and start the GMER.exe
Click the...
Okay looks good now. How is the pc running now? Any symptoms?
Okey...
Backup Your Registry with ERUNT:
Download erunt.zip to your Desktop from here:
http://aumha.org/downloads/erunt.zip
Right-click erunt.zip, select Extract All... and follow the prompts...
Ok this is going to look like a replay but something came back....
We will begin with ComboFix. (again :))
Please download ComboFix from one of these locations:
Link 1
Link 2
Link 3
Hiya :)
Okay let's see what we have there. Please post a fresh HijackThis log...
Ok the Kaspersky findings are just leftovers.
Delete everything inside this folder:
C:\Documents and Settings\Steve\Application Data\Sun\Java\Deployment\cache
Delete this file if found:...
Hi again, looking much better :)
You should print these instructions or save these to a text file. Follow these instructions carefully.
Download ATF Cleaner by Atribune to your desktop.
Do...
Hello :)
Looks better but not clean yet.
1. Close any open browsers.
Hi and welcome to the Forums :)
You're infected.
Disable Spybot S&D Teatimer.
Run Spybot-S&D in Advanced Mode
If it is not already set to do this, go to the Mode menu select "Advanced...
Hello Demii and welcome to the Forums :)
You got something there....
We will begin with ComboFix.
Please download ComboFix from one of these locations:
Link 1
Link 2
Link 3
Hiya!
Better late than never :D Don't worry, no harm done.
I understand your situation and that a little panic may occur when your pc is at risk (no backups). If you'd told me that you buy a...
Hi again, I'll respect you decicion to do a clean install.
Please make sure that you know what to do before beginning the operation.
Here are a few links that propably help.
When should I...
Hi :)
I must warn that one or more of the identified infections is a backdoor trojan.
This allows hackers to remotely control your computer, steal critical system information and Download and...
Hiya :)
Okay sounds interesting...
Let's try renaming the HijackThis
Rename HijackThis.exe to skanneri.exe by doing the following;
Navigate here using Windows Explorer (windows button +...
Hi again, I'll respect you decicion to do a clean install.
Please make sure that you know what to do before beginning the operation.
Here are a few links that propably help.
Reformatting...
Hi :)
Sure we can but I can't promise that it will be 100% clean.
Text, images, sound should be safe to backup. Don't take any system/program files like exes or dlls. And scan the backups with...
As the problem appears to be resolved this topic has been archived.
If you need it re-opened please send a private message (pm) to a forum staff member and provide a link to the thread; this...
Hi :)
It is part of Microsoft's SQL Server Suite.
More info -> Link
Link 2
We can disable it if you want.
Hi again :)
I must warn that one or more of the identified infections is a backdoor trojan.
This allows hackers to remotely control your computer, steal critical system information and Download...
Hi again, looks good :)
Okay we may remove the SpywareDoctor (leftovers) manually.
Disable the services
Start
Run
Type services.msc to the field and press enter.
A window opens, scroll...
Hiya :)
Ok that's great to hear. Yes take backups - you never know what might happen.
If there are no problems - we'll remove all used tools.
Please download OTCleanIt and save it to...
Hi :)
Ok let's try safe mode.
Restart your computer to the safe mode:
Restart your computer
Start tapping the F8 key when the computer restarts.
When the start menu opens, choose...
Hi :)
Okay that could mean that malware has corrupted the image files. Nasty buggers.
There is a tool called Anti FileFix
Download it.
You should be able to scan/fix entire directories...
Hi :)
Ok I did some digging (I have not encountered this problem before).
So you haven't changed the filetype? No?
You could try copying one of these images and changing the filetype to jpeg....
Hi :)
Hmm. Does this happen with every image files?
Have you tried opening the images with some other program?
Hi :)
Okay let's try to restore the file associations for the jpeg files....
Download xp_jpg_jpe_jpeg_file_assoc_fix.zip to your desktop.
Extract it on your desktop.
Doubleclick on file...
Hi :)
Okay. Please check if a file C:\ComboFix.txt exists and post that to here.