also @ TechSpot: TechSpot Giveaway: Win an Acer Timeline 14" Laptop
TechSpot Giveaway: Win an Acer Timeline 14

Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Tech Support > Virus and Malware Removal

Winzix adware

Closed Thread
Page 2 of 2 1 2
Bookmark Thread Tools
  #21  
Old 04-23-2009
touch's Avatar
TechSpot Addict
 
Member since: Feb 2009, 978 posts
Ok. Post new hijackthis log
  #22  
Old 04-23-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
Never mind, that folder was deleted after a reboot and i've just rebooted again.
Here's a new Hijack This log
Attached Files
File Type: log hijackthis.log (9.1 KB, 3 views)
To remove this ad, sign in. To register for a new account, click here.
  #23  
Old 04-23-2009
touch's Avatar
TechSpot Addict
 
Member since: Feb 2009, 978 posts
Great

Run a scan in HijackThis. Check each of the following and hit 'Fix checked' (after checking them) if they still exist (make sure not to miss any):
O4 - HKLM\..\Run: [Hope Draw Obj Funk] C:\Documents and Settings\All Users\Application Data\LICENSE FORD HOPE DRAW\Idle Dumb.exe
O4 - HKCU\..\Run: [ForkHide] C:\DOCUME~1\Zihao\APPLIC~1\DEFAUL~1\ref vga sixth.exe


Reboot, post fresh hijackthis log, and let us know how things are running ?
  #24  
Old 04-23-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
Yep, i'm finished
Currently, there are no more multiple iexplorer.exe in taskmanager anymore nor random pop-ups when using ie instead of firefox
Here's my new hijack this log.
However, CiD Help is still in 'Add or Remove Programs'...
Should i do anything about it?
Attached Files
File Type: log hijackthis.log (8.6 KB, 2 views)
  #25  
Old 04-23-2009
Bobbye's Avatar
TechSpot Evangelist
 
Location: Clearwater, FL
Member since: Mar 2007, 7,144 posts
Question: Check the Computer Management for "language"

Control Panel> Administrative Tools> Computer Management> click on each entry on the left, then look on the right screen> check each category for language.

If part of your system is on one language and another part in a different language,, it's likely your operating system can't understand itself! There is no separate setting in Computer Management in which you will find the Event Viewer, to set a language. That is set in the Control Panel> Regional settings.

You have three Asian language programs loading on boot:
Quote:
[PHIME2002A]>>> Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word

[IMJPMIG8.1]>>> Belongs to the Microsoft Input Method Editor. Used to simplify input of Asian characters in MS Office- needed when typing Chinese characters...Its a process that is installed when you turn on Asian Language packs. Only needed if you require to view them.

[IMEKRMIG6.1]>>> Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
Is this intentional?
  #26  
Old 04-23-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
@Bobbye
this is not intentional.
In control panel, somethings are english and some are chinese and i couldn't know which one means administrative tools. I did manage to guess where Regional settings are and i think i changed to english - australia (all the choices of the languages were written in chinese).
This happened when my parent's chinese friends reinstalled windows for me when there was a problem and we didn't have the cd for windows.
here's a picture of my control panel and mabye you could show me the position of Administrative Tools> Computer Management?


Also, the 3 asian lanuage program you told me about, I really don't know anything about them.

I do often search the web for changing the system's default language but couldn't find the right one.

Back to the virus, to you think my computer is clean now? And should i just click remove in Add or Remove Programs for CiD Help?
To remove this ad, sign in. To register for a new account, click here.
  #27  
Old 04-23-2009
Bobbye's Avatar
TechSpot Evangelist
 
Location: Clearwater, FL
Member since: Mar 2007, 7,144 posts
Quote:
This happened when my parent's chinese friends reinstalled windows for me when there was a problem and we didn't have the cd for windows.
You need to do a reinstall/reformat with a Windows CD in English. Right now there are at least two different languages 'talking'- or maybe I should say 'not talking'! If they can't understand each other, whatever you try isn't going to work. The Control Panel is just that- a place where you go to control parts of the operating system. Clicking on the icon that you think might be the right one for the function you want does not guarantee the function will work.

I do not know any other way around this. Maybe Touch has a suggestion.

As for the Asian translation programs, they should be uninstalled if you're not using them:
Quote:
[PHIME2002A]>>> Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE, Outlook and Word

[IMJPMIG8.1]>>> Belongs to the Microsoft Input Method Editor. Used to simplify input of Asian characters in MS Office- needed when typing Chinese characters...Its a process that is installed when you turn on Asian Language packs. Only needed if you require to view them.

[IMEKRMIG6.1]>>> Part of MS Input Method Editor which is used to ease the input of Asian characters in MS Office (Chinese, Japanese and this one is Korean)
I cannot tell you if you are virus free, but if you do find CID Help, uninstall it.
  #28  
Old 04-23-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
@Bobbye
Ok, i'll try and borrow an english windows xp cd off someone and then i'll reinstall windows.
For the 3 Asian translation programs, i don't know where they are located and how to uninstall them since they are not in Add or Remove Programs.
And right now i'll just wait for Touch to see about the virus
  #29  
Old 04-23-2009
touch's Avatar
TechSpot Addict
 
Member since: Feb 2009, 978 posts
I can only agree with Bobbye about reinstall Windows, if you canīt change settings here ->

Start -> Control Panel

Regional and Language settings

Quote:
Start HijackThis
Click on the Config button
Click on the Misc Tools button
Click on the Open Uninstall Manager button.
You can click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Attach the contents of that notepad into your next reply.
  #30  
Old 04-24-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
Quote:
Originally Posted by touch View Post
I can only agree with Bobbye about reinstall Windows, if you canīt change settings here ->

Start -> Control Panel

Regional and Language settings
Huh? i'm confused now
Do u mean that i should use Regional and Language settings? Or just use Hijack This?
I looked on HiJack This and couldn't know which one to delete.
By the way, i see conime.exe in task manager. What does it do, because i dont usually see that process in task manager? Could it be a virus?
Here's a new HJT log which was created after i discovered conime.exe
Attached Files
File Type: log hijackthis.log (8.4 KB, 2 views)
  #31  
Old 04-24-2009
touch's Avatar
TechSpot Addict
 
Member since: Feb 2009, 978 posts
You were supposed to see if you change language settings as described above, also post a Uninstaller list from hijackthis
  #32  
Old 04-24-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
oh ok... sorry about that
i did use regional and language settings to change the settings however there were no different results.(still have chinese as shown on the previous picture of control panel)
here's the HJT log of uninstall list
Attached Files
File Type: txt uninstall_list.txt (6.6 KB, 3 views)
  #33  
Old 04-24-2009
Registered User
 
Member since: Dec 2007, 18,314 posts
Here's the best advice for you
Although I commend Bobbye and touch for continually trying to help you


Microsoft's Windows XP Professional Repair Install step by step
[url]http://www.windowsxpprofessional.windowsreinstall.com/sp2sp3installxpcdrepair/indexfullpage.htm[/url]

Microsoft's Windows XP Home Repair Install step by step
[url]http://www.windowsxphome.windowsreinstall.com/sp2sp3installxpcdrepair/indexfullpage.htm[/url]

Just do that (which ever your version is)
But make sure the Windows disc is in your language, and is authentic

Have a nice day
  #34  
Old 04-24-2009
dayslayer8's Avatar
Newcomer, in training
 
Location: New South Wales, Australia
Member since: Apr 2009, 26 posts
@kimsland
thanks for all your all support!!!
I did look at the guide for Windows XP Home Edition and i though it was great! It was simple and clear with screenshots that are very well organise. Anyone, even new to computers, will absolutely understand it.
However, i still haven't found a friend who will allow me to borrow their WIndows XP disc and it is really being a pain in the neck when looking at chinese characters in control panel and the options when changing the settings.
Anyways, i am in the need for buying a new computer since my current one is really bad
--------------------------
IBM Corporation
Intel (R) Rentium (R) processor
1.40 GHz
256MB RAM
--------------------------
Haha!! pretty crap right? and it was one of the best computers in store when it was bought in 2002
Anywayz, i might buy another one when Windows 7 releases, because Vista is not very good according to my parents....
So basically, i really appreicate all your help and esp. the time you've spend involving my problem. I'm pretty sure the infection is fixed because there are no more multiple explorer.exe in taskmanager nor random pop-ups.
I will still try and get involved in TechSpot forums because its a great community
Thanks very much!!
  #35  
Old 04-24-2009
Registered User
 
Member since: Dec 2007, 18,314 posts
Quote:
Originally Posted by dayslayer8 View Post
I will still try and get involved in TechSpot forums because its a great community
Yes I know, that's why I replied

Anyway glad it's solved
Next time best to have a Windows CD too (legal part and all )
I was going to quote newegg's prices but I wouldn't give a 10yr old a computer with those specs So best to update as soon as possible

Anyway, I see you have posted in many different places
And you also seem to have an interest in the password thread
Yes it is good community here, always [B]free[/B] support
  #36  
Old 04-24-2009
Bobbye's Avatar
TechSpot Evangelist
 
Location: Clearwater, FL
Member since: Mar 2007, 7,144 posts
When you get your new computer, be sure to get any RAM upgrade available. Many companies install the very minimum RAM. For instance, your 256MB should have been increased to at least 512MB for Windows XP to run smoothly. All of the Dell systems I've gotten over the years came with too little RAM so I upgraded at time of purchase.
To remove this ad, sign in. To register for a new account, click here.
  
Closed Thread
Page 2 of 2 1 2

Thread Tools


Similar Topics
Topic Category Replies Last Post
Winzix/iexplore.exe malware issue Virus and Malware Removal 2 12-17-2008 05:07 AM
Help Adware Virus and Malware Removal 1 11-26-2006 05:08 PM
My HJT Log - Need help getting rid of adware Virus and Malware Removal 1 04-17-2006 11:54 AM
aurora.adware Virus and Malware Removal 0 09-27-2005 04:32 PM
Help with Adware Virus and Malware Removal 3 07-01-2005 03:22 AM


All times are GMT -4. The time now is 10:34 AM.