also @ TechSpot: Leaked next generation iPhone casing photos validate multiple rumors

TechSpot

[Solved] New computer and OS (Vista) causing me troubles

Discussion in 'Virus and Malware Removal' started by Kaelkitty, Oct 30, 2010.

Thread Status:
Not open for further replies.
  1. Kaelkitty Newcomer, in training

    HI Bobbye,

    I've done the HijackThis fix - for some reason it threw my desktop background off (I've had endless trouble getting it to stick even though I've saved my custom desktop theme about 20 times, so that may not be the fault of HijackThis.) any way I've put it back AGAIN! and moved on.

    ComboFix was already un-installed because we couldn't get the script to run. If there are any backups from the earlier attempts I might have to remove them manually.but I don't think so because we never removed anything. I did a search for "combofix" with Superfinder XT and didn't find anything - would there be a different pathname for any backups?

    Next, I had a look at http://mvps.org/winhelp2002/hostsvista.htm - I will do that but I'll do it later on after we are done so as not to take up any more of your time than I have to. It sure seems like a good Idea to me! (adservers are the pits) In the meantime though, is it ok to delete all the earlier "Hosts.20080727-062731.backup" files and just keep the most recent (biggest) one?

    I don't seem to have this path in my Control Panel

    I am running a modified Windows Classic Theme and I never browse in IE - would this make a difference to your instructions?

    I'm going to stop at this point and wait for you reply. I will check in first thing tomorrow, that will be about 12 hours from now.
  2. Bobbye Helper on the Fringe

    About the Host files: MVPS Hosts files This replaces your current HOSTS file with one containing well know ad sites etc. So you can delete the previous backup.

    About HijackThis: you were asked to reopen it to 'do system scan only. I don't know what the Repair or Uninstall options were for. Possibly doing some kind of repair is what messed you up. HijackThis itself does do anything but run the scan. Then, if needed, individual entries can be checked for removal.
    I know it was already on the system: that's why you just do the system scan only.

    About Combofix:
    It did run. It did make a log. Just because you couldn't get the script to run doesn't mean Combofix wasn't on the system. So please follow the uninstall directions. Do not try to remove it by deleting. Follow the uninstall direction.

    Sorry> this is different: Accessing the Control Panel in Classic View:
    Click on Start> Settings> Control Panel> Display> Desktop tab> Customize> delete anything in the box except your home page> Uncheck 'Lock Desktop items'> OK> Apply> OK

    You also need to check this please:
    Click on Start> Settings> Control Panel> Folder Options> View tab> Check 'do not show hidden files and folders'> Check 'Hide protected operating system (Recommended) > then click on Apply> OK

    I've given you the instructions to remove the cleaning tools and logs we used. If you have any of the program still on the computer, please uninstall the using Add/Remove in the Control Panel.
  3. Kaelkitty Newcomer, in training

    1/ Old Hosts file backups removed and replaced with MVPS Hosts

    2/ HijackThis:
    In post 40 you said
    I did EXACTLY this and my desktop background disappeared! This is NOT a virus issue - I think it is one of those things I have to work on later with someone else, somewhere else, as I still have several theme issues which I fully understand are not your problem. I just mentioned it because the original anti virus instructions say you should mention anything unusual which happens.

    3/ Combofix is ALREADY uninstalled - you told me to do so in post 40 and I followed your instructions exactly viz .
    4/ I have no option called "> Display> Desktop tab> Customize>" in my control panel - see:
    [IMG]

    Image not showing up? url is http://www.techspot.com/gallery/member-galleries/p4086-my-control-panel.htm
    Link not working? text of url is: "techspot.com/gallery/member-galleries/p4086-my-control-panel" you'll have to cut and paste the url back together to to see it I guess. I don't know WHAT I have done wrong here - other people have images in their posts, so it must be do-able! I hope you can see the image somehow. You will have to forgive the colours in the screenshot, I know they are offensive to others but this is the range in which my appalling eyesight works the best.

    5/ I normally have "Do not show hidden files and folders" Checked but it is currently unchecked while I am working on my system updating project. I will change it back when I am done. 'Hide protected operating system (Recommended)" is already checked.

    I'm off to double check I have uninstalled everything else. I'll be back later,
    Ciao, KK.
  4. Bobbye Helper on the Fringe

    This is my last post:

    The reason I told you to go hide the files is because the desktop.ini icon is on your desktop. They 'should/need to be' hidden at all time except when you are intentionally trying to find a hidden file. This protect you from accidentally removing a system file. Leave open at your own risk. Did it occur to you that things like this might be part of the problems you're having?

    Please choose whatever background you want on your desktop. Yes, I removed is due to the 024 entry in the HJT log. That's how it's suppose to be handled.
Thread Status:
Not open for further replies.