Temporary disabling problem

[iceinsun]

when i looked at temporary disabling problem

it suggested to rename hijackthis.exe to crusty
but the problem for me is that
i could not find hijackthis.exe in that given location

?t should i do
should i jump to other step or wait?
plz help

also can u tell me ?t does system tray mean
and where can i find it to disable spyware programs as stated in that page

 

[kimsland]

HijaackThis can be renamed to "Crusty" either at the time of downloading (ie in the download save box) or once it is downloaded (place of download preferably your Desktop, but by default all downloads go to My Documents)

System Tray is referring to the icons on the bottom right of your screen, near where your system clock is.
Many running programs can be closed from there, by right clicking on the icon, and then selecting exit, or close

 

[iceinsun]

hey i have updated the java of version 1.6.0 of 7mb
and now when i went to control panel to delete the older versions

there was only one java program and it was of 111.0 mb
what should i do?
either to delete it or ?t

plz tell me as earlier as u can

sory for the previous post
because the problem is that the java hasn't been installed properly

because i have downloaded twice from the given page

but during the installation it sys

'the system administrator has set policies to prevent this installation'
how can i overcome this installation problem

plz help me as earlier as u can

since i have done the process more than one time so i have got more log files

so i m posting in three replies
firstly all the malware log files

in this second reply im posting all the spyware logs that i have obtained while scanning previously

lastly the hijack log is posted below

 

[kimsland]

Run JavaRa
This will remove all your old Java stuff (that is not required)
It will also help you check for new Java updates

Uninstall:

PC Tools AntiVirus (seeming you have Avira already)
Spyware Doctor (this should have been disabled during the scans, but now un-install it)

Startup HijackThis scan only, and tick and then select Fix on the following entries:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
O4 - HKLM\..\Run: [zzzCamInSuiteIII] E:\SETUP.EXE 24***
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [SYS2] C:\WINDOWS\system32\bad1.exe
O4 - HKLM\..\Run: [SYS3] C:\WINDOWS\system32\bad2.exe
O4 - HKLM\..\Run: [SYS4] C:\WINDOWS\system32\bad3.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [WindowZones] C:\Program Files\WindowZones\WindowZones.exe -startminimize
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCTAVApp] "C:\Program Files\PC Tools AntiVirus\PCTAV.exe" /MONITORSCAN
O4 - HKUS\S-1-5-18\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\SCVVHSOT.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [Yahoo Messengger] C:\WINDOWS\system32\SCVVHSOT.exe (User 'Default user')
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Admin/LOCALS~1/Temp/msohtml1/05/clip_image002.jpg

Restart (to a cleaner system )

Then download Combofix
Lots of info on its use h e r e
Direct download h e r e

Save it to a location that you can easily find later (in Safe Mode) ie directly to C drive

Restart your computer to Safe Mode (by repeatedly pressing F8 on your keyboard before Windows starts)
Log into your Administrator account
Locate the previously downloaded Combofix
Double click on it to run, answering any prompts along the way
Note: during Combofix scan (lasting up to 10mins) your Desktop and clock may reset (all normal)

Once Combofix has finished, save the log file to be attached to a new reply
Restart back to Normal mode, and attach the Combofix log

Also in Normal mode still, run another HijackThis log and scan, and attach that scan log as well

 

[iceinsun]

since i am doing this first time so i am asking more steps to clear me

1.should i uninstall avira anti virus alongwith spyware doctor?
2.'restart( to a cleaner system)'?t does that mean and how to do it?
3.also to be clear i have got two accounts viz 'admin' and 'administrator' ?ere should i go
previously i have been doing it in 'admin' account

plz make me clear

ok forget the previous post

now tell me uninstalling spyware doctor means
uninstalling the spyware that i have i.e superantispyware free edition

 

[kimsland]

since i am doing this first time so i am asking more steps to clear me

1.should i uninstall avira anti virus alongwith spyware doctor? No way
2.'restart( to a cleaner system)'?t does that mean and how to do it? I was being presumptuous, just restart
3.also to be clear i have got two accounts viz 'admin' and 'administrator' ?ere should i go
previously i have been doing it in 'admin' account either one, ie just select 1 Admin account

plz make me clear ok

ok forget the previous post oh yeah, no replying to yourself, use the edit button

now tell me uninstalling spyware doctor means Please uninstall this program
uninstalling the spyware that i have i.e superantispyware free edition Yes even uninstall SuperAntispyware

I answered in Red above

 

[iceinsun]

hey i still get the same installing problem

i have downloaded java form given link but the same problem arises
andi cannot install it.
and thus i can't uninstall super spyware also

but i uninstalled avira antivirus

 

[kimsland]

Here is another update link for Java: (you may need to use Internet Explorer to check this)
http://java.com/en/download/installed.jsp?detect=jre&try=1

Regarding programs not uninstalling. You could use CCleaner to:
1. Clean all temp files
2. Uninstall the program through "Tools" section
3. Run a "Registry" scan and repair

Whilst your system seems to be clean (including Avira uninstalled) you could update to XP SP3 (for free ) at Windows Update

 

[iceinsun]

logs attached

hey finally i uninstalled avira antivirus and antispyware
and also installed java.

also i've done combofix processes but in process the system restarted from the safe mode.but there is log file of combofix and hijackthis is attached.

 

[kimsland]

1.should i uninstall avira anti virus ...No way

But you did anyway

Not to worry
It would be ideal to do a Windows Update now and download and install SP3
Once that's all complete, then re-install Avira Antivirus

 

[iceinsun]

can you tell me any softwares to download so that virus couldnt attack through UsB drive