TechSpot

lop toolbar

By ramdo
Aug 30, 2007
  1. Me Too!

    Hello,

    I Have the same exact problem you have, plus I'm running Vista, apprently we are the only two people stuck on this annoying secound by secound alert, please...HELP!
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

    Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.

    Also, let me know the results of the AVG Antirootkit scan.

    Regards Howard :wave: :wave:

    This thread is for the use of ramdo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  3. ramdo

    ramdo TS Rookie Topic Starter

    hello,

    Forgot to tell you that im a vista 64 bit user, most of the programs listed are not supported by vista 64, its eating away my disk space for some reason
    :( , please advise proper action...even if it means a fresh OS. thank you.
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Just follow as many of the instructions as you can and post the requested log files.

    Regards Howard :)

    This thread is for the use of ramdo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
  5. ramdo

    ramdo TS Rookie Topic Starter

    Logs

    Hello,

    I tried following the steps s much as i can, Here are the logs you requested, Combofix.exe couldnt run on my computer, Thank you for your help.
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    All items in your AVG Antispyware log say "No Action Taken". That`s because you haven`t told AVG Antispyware to quarantine it`s results as per the instructions. See this pictorial guide.

    You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

    Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

    Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

    O4 - HKCU\..\Run: [OneDent] "C:\ProgramData\junkhopehope.ke623dn"

    O4 - HKCU\..\Run: [vc log bows face] "C:\ProgramData\16 HOLD FRAG.t3rrvmi"

    Click on the fix checked button.

    Close HJT.

    Locate and delete the following bold files and/or directories(if there).

    C:\ProgramData\16 HOLD FRAG.t3rrvmi
    C:\ProgramData\junkhopehope.ke623dn

    Reboot your computer and post a fresh HJT log.

    Let me know if you`re still having any problems.

    Regards Howard :)

    This thread is for the use of ramdo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...