HJT Log and Kaspersky Report

[little eagle]

Norton is the worst. IMHO not spybots

You can use spywareblaster to stop the Active X.
Use a host file and no of them will slow you PC down.

[shandyleer]

Ok well then ill follow your advice and uninstall Norton
I just dont know what you mean by the following comment (If you could just explain it please, im not that good on the technical stuff of this...)

...Use a host file and no of them will slow you PC down.

Sorry if im being such a nuisance, i just want to make sure everything works right.....
And sorry i know ive asked this question before....and im sounding like a realy paranoid and probably annoying individual but you still havent told me what was wrong with my computer...???

[little eagle]

Here are a few programs that will help you.
They do not run in the back ground.
Let me know what you do not understand.

Block Unwanted Parasites with a Hosts File

Prevent the installation of spyware SpywareBlaster

Restrict crapware pushers inside Internet Explorer with IE-SPYAD

[shandyleer]

Hiya sorry to bother you again, just before we carry on with the fix, i just wanted to run something by you regarding something that i mentioned when i started this thread, it was about a settings modifier which was and still is found repeatedly by my Windows Defender, now what i didnt notice was windows defender actually gave a link to this site: http://www.microsoft.com/security/en...08427027806866

And here it gives a (what looks like a simple) solution to the hosts problem:

How to Recover from Infection
Manual Recovery

To recover manually from Win32/PossibleHostsFileHijack, you can manually recreate a clean HOSTS file, or you can restore a version of the HOSTS file from a backup you made before the file was modified without your consent.

To recreate a clean HOSTS file manually:
Click Start, and click Run.
If your computer is running Windows 95, Windows 98, or Windows ME:
In the Open field, type: notepad %windir%\hosts
If your computer is running a Windows NT-based operating system, such as Windows 2000 or Windows XP:
In the Open field, type: notepad<system folder>\drivers\etc\hosts
-- for example, on Windows 2000:
In the Open field, type: notepad C:\WINNT\system32\drivers\etc\hosts
-- or on Windows XP:
In the Open field, type: notepad C:\Windows\system32\drivers\etc\hosts
Delete all text in the HOSTS file.
On the first line of the HOSTS file, type: 127.0.0.1 localhost
At this point the HOSTS file contains nothing but this one line of text.
Save the file to the same location you opened it from.
Close Notepad.

This information does seem similar to the information that you gave via the link which you gave me, and i just wanted to run this by you, and see if you think i should use this to resolve my problem?

[little eagle]

And easy-er way would be to Download the HostsXpert 3.8 - Hosts File Manager.

* Unzip HostsXpert 3.8 - Hosts File Manager to a convenient folder such as C:\HostsXpert
* Click HostsXpert.exe to Run HostsXpert 3.8 - Hosts File Manager from its new home
* Click "Make Hosts Writable?" in the upper right corner (If available).
* Click Restore Microsoft's Hosts file and then click OK.
* Click the X to exit the program.
* Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.

[shandyleer]

I've just attempted to use the HostsXpert like you said but i got the following message

ERROR cannot create file C:\WINDOWS\system32\DRIVERS\ETC\hosts

What shall i do now???

[little eagle]

Reboot and rescan with HiJackThis and post a new log here.

[shandyleer]

Hi, i was just going to uninstall Norton, when i thought i should first install SpywareBlaster onto my system, so i downloaded the program and then i intalled it, after its tutorial i clicked on the Enable all Protection button, and then my my Spysweeper shield informed me that spywareblaster was changing my IE settings to something called 0900 dialer.com, so i just got really scared and got spysweeper to prevent from the change from occuring and then i uninstalled it.....why would it change my IE settings to a dialer....????

[little eagle]

May have been putting it into the restricted site on IE.

The program has been used by many for prevention it is safe.

[shandyleer]

Thank you for once again clarifying another thing for me, and i just wanted to ask one (i totally promise this will be the last question i ask ) final question before we carry on with the fix , as i mentioned before My Norton actually blocks IP's which have repeatedly tried to attack my computer, it actually blocked them from having any contact with my computer whatsoever which was really good, and because i was attacked repeatedley by the same IP's i thought they must be targetting me for whatever reason......so i was wondering if you could recommend any good IP Blocking Software available on the net, i would look myself, and i have, but i also know (thanks to you guys ) that some of these can be fraudulent and full of spyware websites and software, who are waiting for stupid people like to try and download it , so i was wondering if you would be so kind to recommend or find one for me plz?