Page 6 of 14 FirstFirst ... 2345678910 ... LastLast
Results 51 to 60 of 136

Thread: Can't run HJT

  1. #51
    Senior Member
    Join Date
    Jul 2009
    Posts
    101

    Default

    By the way, is it normal to have 59 processes listed under window task manager everytime my computer is turned on? There are so many with names I don't recognize that I have no idea what's running on my computer! Maybe it's normal?

  2. #52
    Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,300

    Default

    By the way, is it normal to have 59 processes listed under window task manager everytime my computer is turned on? There are so many with names I don't recognize that I have no idea what's running on my computer! Maybe it's normal?
    Yes, that's normal.



    Open notepad and copy/paste the text in the quotebox below into it:

    Code:
    Driver::
    gel90xne
    File::
    c:\docume~1\mary\locals~1\temp\gel90xne.sys

    Save this as
    CFScript

    A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine. This tool is not a toy and not for everyday use.



    Close all browser windows and refering to the picture above, drag CFScript into ComboFix.exe
    Archive resultant log (c:\ComboFix.txt) into zip file first and then attach the file to your reply. Instructions for zip creation here, if needed.


    Uninstall your current Adobe shockwave player and get the fresh one here if needed.

    Check here to see if your Flash is up-to-date (do it separately with each of your browsers). If not, uninstall vulnerable versions by following instructions here. Fresh version can be obtained here.


    Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update to the latest version...

    Updating Java:
    • Download the latest version of Java Runtime Environment (JRE) 6 Update 16.
    • Click the
      Download
      button to the right.
    • Select Windows on platform combobox and check the box that says:
      Accept License Agreement. Click continue.
    • The page will refresh.
    • Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
    • Close any programs you may have running - especially your web browser.
    • Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
    • Check any item with Java Runtime Environment (JRE or J2SE) in the name.
    • Click the Remove or Change/Remove button.
    • Repeat as many times as necessary to remove each Java versions.
    • Reboot your computer once all Java components are removed.
    • Then from your desktop double-click on jre-6u16-windows-i586-p.exe to install the newest version. Uncheck Carbonite online backup trial if it's offered there.




    Download ATF (Atribune Temp File) Cleanerę by Atribune to your desktop.

    Double-click ATF Cleaner.exe to open it

    Under Main choose:
    Windows Temp
    Current User Temp
    All Users Temp
    Cookies
    Temporary Internet Files
    Prefetch
    Java Cache

    *The other boxes are optional*
    Then click the Empty Selected button.

    If you use Firefox:
    Click Firefox at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

    If you use Opera:
    Click Opera at the top and choose: Select All
    Click the Empty Selected button.
    NOTE: If you would like to keep your saved passwords, please click NO at the prompt.

    Click Exit on the Main menu to close the program.


    Please run an online scan with Kaspersky Online Scanner as instructed in the screenshot here.


    Post back its report & a fresh dds.txt log. How's the system running?
    Microsoft Windows Insider MVP 2016-2019
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

  3. #53
    Senior Member
    Join Date
    Jul 2009
    Posts
    101

    Default

    How do I find out if I use Firefox or Opera? I hate not knowing that kind of stuff!

  4. #54
    Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,300

    Default

    According to the list posted earlier in this topic neither one is installed. Means that you can ignore those steps
    Microsoft Windows Insider MVP 2016-2019
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

  5. #55
    Senior Member
    Join Date
    Jul 2009
    Posts
    101

    Default

    I'm good at ignoring...or my java would be up-to-date!

    This may take me a while in my read-it-twice-before-I-push-the-button-and-then-hold-my-breath-until-I-know-I-haven't-broken-anything way.

    I'll post back as soon as I'm through.

    Thanks!

  6. #56
    Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,300

    Default

    No problem. Take your time
    Microsoft Windows Insider MVP 2016-2019
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

  7. #57
    Senior Member
    Join Date
    Jul 2009
    Posts
    101

    Default

    Hi!

    Here's how it went with combofix. I copied the text to notepad and then dropped the file into combofix. Combofix started and then a box popped open that asked if I would like to update to the newest version of Combofix. I clicked okay and combofix restarted. Hopefully this wasn't a mistake, but I hated to back out in case that caused more trouble.

    It seemed to run fine and I zipped the log it created and I have attached it to this post. At least I think I attached it.

    On to the next thing...

  8. #58
    Senior Member
    Join Date
    Jul 2009
    Posts
    101

    Default

    I've found adobe under "all programs" in the start menu. It says it is empty. I went to add/remove and found something called "adobe air". There is no option to delete it. How do I do it?

  9. #59
    Senior Member
    Join Date
    Jul 2009
    Posts
    101

    Default

    I have found shockwave 11 and other shockwave files under c:\documents and settings\Mary\Appliation Data\Adobewhile performing a search for shockwave.

    When I right click on the folder, I see Delete as an option, but I'm unsure as to whether this will delete the entire thing or not. There are about 13 files and folders listed under c:\documents and settings\Mary\Appliation Data\Adobe and one file is a quarantined one from the TriJinx game. Any ideas on how to delete all of this? I could try to download a new shockwave and maybe it would ask if I wanted to delete the old one?

  10. #60
    Emeritus Blade81's Avatar
    Join Date
    Oct 2006
    Location
    Finland
    Posts
    25,300

    Default

    Hi,

    Don't delete any of those in application data folder. Let's create one more log containing details of your installed programs list.

    • Download random's system information tool (RSIT) by random/random from here and save it to your desktop.
    • Double click on RSIT.exe to run RSIT.
    • Click Continue at the disclaimer screen.
    • Once it has finished, two logs will open. Please post the contents of info.txt (<<will be minimized, if not you'll find it in c:\rsit folder)
    Microsoft Windows Insider MVP 2016-2019
    Microsoft MVP Consumer Security 2008-2015
    UNITE member since 2006

    If you have problems create a thread in the forum, please.

    Malware removal instructions are for the correspondent user's case only.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •