Search:

Type: Posts; User: miekiemoes; Keyword(s):

Page 1 of 6 1 2 3 4

Search: Search took 0.19 seconds.

  1. Hi, Sorry to jump in for a second.. Do you...

    Hi,

    Sorry to jump in for a second..

    Do you know what program the C:\Program Files\BChanger is?
    Did you install it? If so, can you provide us the info and link where you can download it?
    If...
  2. Good everything is Ok now. Guess the damage was...

    Good everything is Ok now. Guess the damage was worse than expected.

    I just hope you keep in mind not to visit cracksites or other illegal sites anymore.. because that's what I already said in my...
  3. I am sorry to hear that more and more problems...

    I am sorry to hear that more and more problems appear..

    Looks like a lot got corrupted - and I guess this is mainly because services are failing to start - most probably because of a corrupted...
  4. I see you posted in between.. Hmm, just found...

    I see you posted in between..

    Hmm, just found this thread:

    http://www.errorforum.com/security-firewall-error/4684-windows-firewall-system-restore-services-desktop-problems.html

    It looks like...
  5. But is the service started? What does it say next...

    But is the service started? What does it say next to status of the service? It should be started. In case if it's not started, click the start button under it.

    Yes, but as I already said, I don't...
  6. And since when did this all happen? Because it's...

    And since when did this all happen? Because it's quite confusing since I don't know what other steps you have performed in between. I know you have been fixing entries in HijackThis in between as...
  7. What other problems do you mean here?

    What other problems do you mean here?
  8. Well, the malware is gone here now. Now it's a...

    Well, the malware is gone here now.
    Now it's a matter of restoring getting rid of that error in Internet Explorer after you have been fixing these legitimate entries.

    What I suggest is, Uninstall...
  9. Anyway, what I also suggest is, from the computer...

    Anyway, what I also suggest is, from the computer you're on now - where you can get on the Internet with Internet Explorer, download Firefox: http://www.mozilla-europe.org/nl/products/firefox/
    Then...
  10. Also restore these please: O8 - Extra context...

    Also restore these please:

    O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1082\en-gb\msntb.dll/search.htm
    O8 - Extra context menu item:...
  11. Well, actually you did delete some entries I...

    Well, actually you did delete some entries I didn't ask to delete though...

    From your first HijackThislog:

    O2 - BHO: dsWebAllowBHO Class - {2F85D76C-0569-466F-A488-493E6BD0E955} - C:\Program...
  12. This is really strange... Have you been...

    This is really strange...

    Have you been deleting anything else I didn't ask? Because I see you have been fixing entries in your HijackThislog already while I didn't instructed it yet.

    You have...
  13. Ok, since you don't know this SearchTool and I...

    Ok, since you don't know this SearchTool and I see the folder was created recently, it should go, because that's why I asked a sample in the first place, since it looked suspicious.
    There's also...
  14. Sidenote.. Ever wondered why you got infected? ...

    Sidenote.. Ever wondered why you got infected?

    I see you're not afraid of visiting cracksites and other illegal sites, because some cracks are being flagged as malicious.
    If you visit cracksites,...
  15. Hi, Do you have any idea with what this...

    Hi,

    Do you have any idea with what this C:\Program Files\SearchTool\SearchTool.dll is related? Did you install it?
    It has references to this forum in its strings:...
  16. Hi, Go to this page...

    Hi,

    Go to this page.
    Enter the url of this thread in the first field.
    Where it says, browse to the file that you want to submit, click the browse button next to it and browse to next file:
    ...
  17. Replies
    20
    Views
    5,090

    Hi, Logs still look clean :) Read here how...

    Hi,

    Logs still look clean :)

    Read here how to defragment: http://helpdesk.its.uiowa.edu/windows/instructions/defrag.htm
    In your case, it may take a long time to defragment since you have...
  18. Replies
    20
    Views
    5,090

    Clean logs again. Delete the C:\Qoobox folder....

    Clean logs again.

    Delete the C:\Qoobox folder.

    Let me know how things are now. :)
  19. Replies
    20
    Views
    5,090

    Hi, Only leftovers here... Navigate to the...

    Hi,

    Only leftovers here...
    Navigate to the following folder:

    C:\Program Files\Common Files

    In there, there will be a folder called "?pPatch".
    It will most probably look like appPatch....
  20. Replies
    20
    Views
    5,090

    Hi, Please delete the version of combofix you...

    Hi,

    Please delete the version of combofix you are having, because since we are already 3 weeks further, it has been updated and now it should normally run (since I guess it's a FAT32 in your case...
  21. Replies
    11
    Views
    3,333

    Glad I could help. :) Please read my...

    Glad I could help. :)

    Please read my Prevention page with lots of info and tips how to prevent this in the future.
    And if you want to improve speed/system performance after malware removal, take...
  22. Replies
    11
    Views
    3,333

    Hi, Your log looks clean again. How are things...

    Hi,

    Your log looks clean again. How are things now?
  23. Replies
    20
    Views
    5,090

    Looks like we are running around in circles here....

    Looks like we are running around in circles here.

    Anyway, Can you rename Hijackthis.exe to Analyse.exe
    Then scan with Analyse.exe and post the log in your next reply (which will be a...
  24. Replies
    11
    Views
    3,333

    Hi, Please reboot your computer, because I see...

    Hi,

    Please reboot your computer, because I see a process is still loaded which is actually "moved" by Combofix. A next reboot should move the file properly.

    So reboot your computer.

    After...
  25. Replies
    11
    Views
    3,333

    Hello, This is much better, but we're not...

    Hello,

    This is much better, but we're not finished yet...

    Open notepad and copy/paste the text in the quotebox below into it:



    Save this as ComboFix-Do.txt
  26. Replies
    11
    Views
    3,333

    Hi, As far as I can see, Avira certainly...

    Hi,

    As far as I can see, Avira certainly already deleted a lot of other malware that was present before.
    Let's deal with the rest now..

    * Start HijackThis, close all open windows leaving only...
  27. Replies
    11
    Views
    3,333

    Hello, I notice that you do not seem to be...

    Hello,

    I notice that you do not seem to be running Antivirus software and a Firewall. This is somewhat suicidal in today's digital world.
    That's why I want you to install them first!!

    Avira,...
  28. Replies
    20
    Views
    5,090

    Funny things going on there... Anyway, let's...

    Funny things going on there...

    Anyway, let's see if Combofix runs in Windows Safe mode, but first, I want you to remove the current Version of Combofix and redownload it again from here:...
  29. Replies
    20
    Views
    5,090

    Ok, do next please.. Download and Save...

    Ok, do next please..

    Download and Save blacklight to your desktop.
    F-Secure Blacklight: https://europe.f-secure.com/blacklight/try.shtml
    (fsbl.exe - graphical user interface)
    Double-click...
  30. Replies
    20
    Views
    5,090

    Hi, I see from your log that Combofix was...

    Hi,

    I see from your log that Combofix was still running after reboot. You really have to wait till the logfile opens.
    Look on your C:\ if there's a combofix.txt present and copy and paste the...
  31. Replies
    14
    Views
    2,974

    Glad I could help. :) Please read my...

    Glad I could help. :)

    Please read my Prevention page with lots of info and tips how to prevent this in the future.
    And if you want to improve speed/system performance after malware removal, take...
  32. Replies
    14
    Views
    2,974

    Hello, Just some leftovers now... * Start...

    Hello,

    Just some leftovers now...

    * Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following:

    O8 - Extra context menu item:...
  33. Replies
    14
    Views
    2,974

    Hello, I see you were dealing with a...

    Hello,

    I see you were dealing with a flashdrive infection previously as well, so perform next step first..

    * Download next removal tool to your desktop:...
  34. Replies
    14
    Views
    2,974

    The combofix.txt should be on your F:\ though....

    The combofix.txt should be on your F:\ though.
    Did you run Combofix.exe from your desktop as instructed? Did it actually run and then rebooted your system?
    Anyway, please try again please...
  35. Replies
    20
    Views
    5,090

    Hello, * Download Combofix...

    Hello,

    * Download Combofix to your desktop.
    Doubleclick combofix.exe
    Follow the prompts.
    Don't click on the window while the fix is running, because that will cause your system to hang.

    When...
  36. Glad I could help. :) Please read my...

    Glad I could help. :)

    Please read my Prevention page with lots of info and tips how to prevent this in the future.
    And if you want to improve speed/system performance after malware removal, take...
  37. Replies
    11
    Views
    3,285

    Good to hear. Yes, it's always better to have...

    Good to hear.

    Yes, it's always better to have your Windows Firewall enabled even though you have a hardware firewall.

    Glad I could help. :)

    Please read my Prevention page with lots of info...
  38. Replies
    11
    Views
    3,285

    Hi, Your logs look clean again. Just a few...

    Hi,

    Your logs look clean again.
    Just a few more things to do though..

    Delete the folder C:\Qoobox

    Your version of Java is outdated and needs to be updated to take advantage of fixes that...
  39. Replies
    11
    Views
    3,285

    Hi, we'll have to give this another run.....

    Hi,

    we'll have to give this another run..
    Open the ComboFix-Do.txt you created previously and edit out its contents.
    Then modify it with the contents below:

    Open notepad and copy/paste the...
  40. Replies
    11
    Views
    3,285

    Hello, Let's deal with the rest now......

    Hello,

    Let's deal with the rest now...
    perform my next steps in the right order please...

    I see you have Viewpoint installed...
    Viewpoint Manager is considered as foistware instead of malware...
  41. Replies
    11
    Views
    3,285

    Hi, * Download Combofix...

    Hi,

    * Download Combofix to your desktop.
    Doubleclick combofix.exe
    Follow the prompts.
    Don't click on the window while the fix is running, because that will cause your system to hang.

    When...
  42. Replies
    14
    Views
    2,974

    Hi, If you can't find it, don't worry. This...

    Hi,

    If you can't find it, don't worry. This means that it was most probably already uninstalled previously, but registry entries remained.
    Just proceed with next steps then.. :)

    And I'll read...
  43. Replies
    14
    Views
    2,974

    Hi, Please uninstall MyWebSearch via software...

    Hi,

    Please uninstall MyWebSearch via software > add/remove programs.

    Then reboot.
    After reboot, * Download Combofix to your desktop.
    Doubleclick combofix.exe
    Follow the prompts.
    Don't click...
  44. Replies
    20
    Views
    5,090

    Hello, I notice that you do not seem to be...

    Hello,

    I notice that you do not seem to be running Antivirus software and a Firewall. This is somewhat suicidal in today's digital world.
    That's why I want you to install them first!!

    Avira,...
  45. Replies
    11
    Views
    3,285

    Hello, * Go to start > controlpanel > software...

    Hello,

    * Go to start > controlpanel > software > Add or Remove Programs and uninstall next if present:

    Winpop
    DeluxeCommunications
    winantispyware 2007

    Then reboot. Really important.
  46. It looks like the malware should be gone now.......

    It looks like the malware should be gone now.... But as I said previously, especially with this variant of infection, you cannot trust this computer anymore for 100%.
    If everything works OK and you...
  47. As far as I can see, the SRENG log looks OK. ...

    As far as I can see, the SRENG log looks OK.

    C:\WINDOWS\system32\spmsg2.dll is OK as well.
    But.. the other two files are related with the malware you were dealing with, so delete next files:
    ...
  48. Hi, The good news is, Catchme doesn't list any...

    Hi,

    The good news is, Catchme doesn't list any hidden files anymore.

    Check and fix next leftover in HijackThis:

    O2 - BHO: (no name) - {2DB59DF5-544D-4A1C-8A74-1FD054950140} - (no file)
    ...
  49. Hi, Now only your Temporary Internet Files are...

    Hi,

    Now only your Temporary Internet Files are hidden... This malware is acting weird and now I cannot see from that log if the infection is still present or not..

    First of all, as you said...
  50. Hi, So you didn't perform the steps with the...

    Hi,

    So you didn't perform the steps with the Avenger yet? No need to do this now. What I guess what happened here is, the haxfix never properly finished its job. So I guess it ran after reboot and...
Results 1 to 50 of 252
Page 1 of 6 1 2 3 4