Firefox problems

By lazerman3000
Oct 22, 2008
Topic Status:
Not open for further replies.
  1. Hi, I never worried too much about viruses before, I have some basic protection in windows defender and XoftspySE. Firefox started to take ages to open and only after clicking the icon 4 or 5 times would it work and then it would open as many windows as I had clicked it. So I got avast and AVG and thought I would scan my system to be on the safe side, I found a Win32/Heur infection. It removed it but from reading other posts I understand it can be hidden all over your system. So I followed your 6 point process and also ran a kaspersky and vundo fix, malware bytes found 4 vundo's in my registry when I ran it in safe mode the rest found nothing. My question is does this mean I am clean or should I still be worried?

    Thank you so much in advance
  2. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +32

    I check your logs and they look clean. You have 2 antivirus programs running though> please decide which you want to keep and have HijackThis remove all the processes for the other: These are not all of the processes- just to show you which two programs are installed.
    About security:
    Since the system has slowed down, consider this: you are running two similar translating programs:
    If it my understanding that one of these programs would be sufficient, but I'll leave that up to you.

    As far as all of the ELSA processes: as far as I found, these are work manuals for Volkawagen and there are many processes as well as Services running. If you don't need all of them all of the time, have HijackThis remove those you don't need, open the program and make the appropriate changes, and change the Startup Type for the Service to Manual instead of Automatic. This is best done in Safe Mode.
    To remove processes, re-open HiJackThis and scan.*Check* the boxes next to all the entries to be removed, then close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis and reboot into Safe Mode:
    You should also use the msconfig utility to take EVERYTHING off of Startup EXCEPT the AV& firewall. Other programs can be started manually if needed.

    To stop Startups:Start> Run> type in 'msconfig' without quotes> enter> Selective Startup> Startup tab> UNCHECK the appropriate processes> Apply> OK

    To change the Services: Start> Run type in services.msc> enter> right click on the Service> Properties> change Startup type to either Disabled or Manual (the AV you aren't keeping should be set to Disabled, the other left at Automatic)
    Uninstall Programs: Control Panel> Add/Remove Programs> UNINSTALL any programs you don't or won't use.

    Reboot into Normal Mode. You will get a nag message you can close after checking 'don't show this message again.

    To remove the cleaning tools:
    * Download OTCleanIt (http://download.bleepingcomputer.com/oldtimer/OTCleanIt.exe)
    * Click the CleanUp! button.
    * It will go thorough the list and remove all of the tools it finds and then delete itself (requiring a reboot).

    Clear your existing System Restore points and establish a new clean restore point: (malware can get into the restore points. They are protected files so the cleaning doesn't remove them.
    Go to Start > All Programs > Accessories > System Tools > System Restore> Select Create a restore point> OK.
    Next, go to Start > Run and type in cleanmgr> Select the More options tab> Choose the option to clean up System Restore and OK it.
    This will remove all restore points except the new one you just created.

    Let me know if you have any questions>
  3. lazerman3000

    lazerman3000 Newcomer, in training Topic Starter Posts: 16

    Thank you

    Wow that is all very detailed I really appreciate the time you spent sorting me out.
  4. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +32

    You're welcome. Let us know if you need more help.
  5. lazerman3000

    lazerman3000 Newcomer, in training Topic Starter Posts: 16

    Again :(

    Hi I'm not sure if I have a problem or not after I followed all your instructions my computer definitely seemed more lively, getting rid of the language and VW programs was well worth it. But today the antivirus I left installed (AVG) detected something again whilst running in the background: Win32/Heur
    the path to file is: C:\System Volume Information\_restore{C1A2F5EA-764B-42CD-8167-E1F9A8DC721B}\RP223\A0105620.dll

    It has put it in the virus vault but I just wonder if it is going to keep coming back and whether I should just format the hard drive. Any ideas how it got back the only thing I did wrong was I cleaned my restore points before I used the fix process on HJT but I assumed that would make no difference since the computer was already virus checked?

    Thanks again
  6. Bobbye

    Bobbye Helper on the Fringe Posts: 16,392   +32

    Did you forget to do this? The above indicates System Restore files.

    Clear your existing System Restore points and establish a new clean restore point: (malware can get into the restore points. They are protected files so the cleaning doesn't remove them.
    If you have any problem removing as above, do this instead:
    Control Panel> System> System Restore tab> CHECK 'turn off System Restore'> Apply> OK
    Reboot
    Go back in and UNCHEECK 'turn off System Restore' Apply> OK.

    Set new restore point.
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.