Solved New to this

Status
Not open for further replies.
Results of screen317's Security Check version 0.99.5
Windows XP Service Pack 3
Internet Explorer 8
``````````````````````````````
Antivirus/Firewall Check:
Windows Firewall Enabled!
Avira AntiVir Personal - Free Antivirus
Avira successfully updated!
```````````````````````````````
Anti-malware/Other Utilities Check:
Malwarebytes' Anti-Malware
Java(TM) 6 Update 22
Out of date Java installed!
Adobe Flash Player 10.0.12.36
Adobe Reader 8.1.4
Out of date Adobe Reader installed!
````````````````````````````````
Process Check:
objlist.exe by Laurent
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
````````````````````````````````
DNS Vulnerability Check:
Unknown. This method cannot test your vulnerability to DNS cache poisoning. (Wireless connection?)

``````````End of Log````````````
 
Update Adobe Reader

You can download it from https://www.techspot.com/downloads/2083-adobe-reader-dc.html
After installing the latest Adobe Reader, uninstall all previous versions.
Note. If you already have Adobe Photoshop® Album Starter Edition installed or do not wish to have it installed UNcheck the box which says Also Download Adobe Photoshop® Album Starter Edition.

Alternatively, you can uninstall Adobe Reader (33.5 MB), download and install Foxit PDF Reader(3.5MB) from HERE.
It's a much smaller file to download and uses a lot less resources than Adobe Reader.
Note: When installing FoxitReader, make sure to UN-check any pre-checked toolbar, or other garbage.
On this page:

FoxitReaderInstallation.png


make sure, you have both boxes UN-checked AND (important!) click on Decline button
 
Try this one....

Download ATF Cleaner by Atribune.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Unselect Cookies.
Click the Empty Selected button.

If you use Firefox browser
Click Firefox at the top and choose: Select All
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Unselect Cookies.
Click the Empty Selected button.

If you use Opera browser
Click Opera at the top and choose: Select All
NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Unselect Cookies.
Click the Empty Selected button.

Click Exit on the Main menu to close the program.
 
Alright i got the TFC loaded and i ran the program but i didnt see any log to copy and paste here ok now im going to start the ESET program
 
C:\Documents and Settings\All Users\Desktop\eBay.url Win32/Adware.ADON application
C:\Documents and Settings\All Users\Start Menu\Programs\eBay.url Win32/Adware.ADON application
C:\Documents and Settings\Daylene Croy\Application Data\Microsoft\Internet Explorer\Quick Launch\eBay.url Win32/Adware.ADON application
 
Your computer is clean

1. We need to reset system restore to prevent your computer from being accidentally reinfected by using some old restore point(s). We'll create fresh, clean restore point, using following OTL script:

Run OTL

  • Under the Custom Scans/Fixes box at the bottom, paste in the following:

Code: 
:OTL
:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[CLEARALLRESTOREPOINTS]
[Reboot]

  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Post resulting log.

2. Now, we'll remove all tools, we used during our cleaning process

Clean up with OTL:

  • Double-click OTL.exe to start the program.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CLEANUP button
  • Say Yes to the prompt and then allow the program to reboot your computer.

If you still have any tools or logs leftover on your computer you can go ahead and delete those off of your computer now.

3. Make sure, Windows Updates are current.

4. If any Trojan was listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

5. Download, and install WOT (Web OF Trust): http://www.mywot.com/. It'll warn you (in most cases) about dangerous web sites.

6. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

7. Run Temporary File Cleaner (TFC) weekly.

8. Download and install Secunia Personal Software Inspector (PSI): https://www.techspot.com/downloads/4898-secunia-personal-software-inspector-psi.html. The Secunia PSI is a FREE security tool designed to detect vulnerable and out-dated programs and plug-ins which expose your PC to attacks. Run it weekly.

9. (optional) If you want to keep all your programs up to date, download and install FileHippo Update Checker.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

10. Run defrag at your convenience.

11. Read How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html

12. Please, let me know, how is your computer doing.
 
There is a problem with my restore system I tried i think a week ago cuz something got messed up and I was unable to restore my computer I figured i should let you know that first sorry about not sayin something sooner
 
That's fine.

At this point, I need you to go through all steps, I posted above.
When you post a log from the very first step, we'll see, if system restore points were reset and a new restore point created.
 
also there is another problem that has started since I started doing this and thats my internet connection will cut off with out no worring but it will reconnect and it never did that before so i have no idea what that means. Again thank you for helping me out here I dont know what I would do if it wasnt for others like you that give there time to helping others thank you and Im going to try the next step you gave me now
 
All processes killed
========== OTL ==========
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: All Users

User: Daylene Croy
->Temp folder emptied: 120007 bytes
->Temporary Internet Files folder emptied: 23788985 bytes
->Java cache emptied: 2362182 bytes
->Flash cache emptied: 456 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Elda Reynolds
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 66016 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 664 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 0 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 634 bytes

Total Files Cleaned = 25.00 mb


[EMPTYFLASH]

User: Administrator

User: All Users

User: Daylene Croy
->Flash cache emptied: 0 bytes

User: Default User
->Flash cache emptied: 0 bytes

User: Elda Reynolds

User: LocalService

User: NetworkService

Total Flash Files Cleaned = 0.00 mb

Restore points cleared and new OTL Restore Point set!

OTL by OldTimer - Version 3.2.17.1 log created on 10252010_204554

Files\Folders moved on Reboot...
File\Folder C:\Documents and Settings\Daylene Croy\Local Settings\Temp\hsperfdata_Daylene Croy\1148 not found!
C:\Documents and Settings\Daylene Croy\Local Settings\Temp\~DF95C2.tmp moved successfully.
C:\Documents and Settings\Daylene Croy\Local Settings\Temporary Internet Files\Content.IE5\JAVSTRC0\sh25[1].html moved successfully.
C:\Documents and Settings\Daylene Croy\Local Settings\Temporary Internet Files\Content.IE5\JAVSTRC0\topic155303-2[3].html moved successfully.

Registry entries deleted on Reboot...
 
also there's an eBay icon that i dont know where it came from i followed your steps just as there were wrote. So can i remove the eBay
 
If you read my final instructions....TFC is a keeper and you should run it weekly.
All others, you mentioned, can go.
 
also there's an eBay icon
Click to expand...
You can remove even more:
C:\Documents and Settings\All Users\Desktop\eBay.url
C:\Documents and Settings\All Users\Start Menu\Programs\eBay.url
C:\Documents and Settings\Daylene Croy\Application Data\Microsoft\Internet Explorer\Quick Launch\eBay.url
 
Status
Not open for further replies.

Similar threads

E
I have been taken over by a software called Astanda using XML to Log everything and roaming to an SQL server.
Replies
0
Views
480
eriksnyman1
E
M
Virus warning popup
Replies
1
Views
543
Mark Fuller
M
D
Google, Apple, Microsoft and Mozilla release Speedometer 3.0 to benchmark browser performance
Replies
10
Views
283
Madbiker1960
M

Latest posts

Back