Any help would be appreciated. Logs attached

[wasewell]

We have two problems that may or may not be related. The browsers re-direct to random websites. The other problem is repeated "AXWIN Frame Window: svchost.exe-Application Error"s that shut down the computer and require reboots.

We have completed the 8-step Viruses/Spyware/Malware Preliminary Removal Instructions and are attaching the logs.

Thank you for your help.

Wasewell

 

[Tmagic650]

Remove/Fix these Hijackthis entries:

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:5555
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

We will try the ESET On-Line Scanner next:
Scanner

 

[wasewell]

Thank you for your response Tmagic650.

How do I remove/fix the Highjack this entries?

Wasewell

 

[Archean]

1. You have to be logged in as Administrator
2. Click on start, then Run
3. type regedit and press Enter.
4. You can press Ctrl+F and type in the registry key you are looking for; then delete it by pressing Del or Right click on it and select delete.

once done exit regedit and you should be alright.

Goodluck

 

[wasewell]

Thank you, Archean. It appears that I have removed the two entries that Tmagic650 listed. Now should I run the ESET on-line scanner?

Wasewell

 

[Archean]

Sure you can do that anytime; and goodluck for future

 

[wasewell]

Hello
We removed the Hijackthis enties that were listed by Tmagic650 and we ran the ESET on-line scanner with nothing found. We still have our problems.

Any more suggestions?

Wasewell

 

[Tmagic650]

Run Combofix:
Combofix Instructions

 

[Archean]

Combofix is a good option also you can try these, this first one is pretty decent, also this one.

 

[wasewell]

Is it better to run Combofix first or the other programs you've suggested? Svchost.com and RepairSvchost.org.

Thanks,
Wasewell

 

[Archean]

Try combofix first, and please keep us posted. thanks

 

[wasewell]

When I try to download Combofix, first McAfee jumps in, finds and deletes an "Artimis" trojan. Then I get an "Error copying file or folder" Cannot copy ComboFix[1]: Access is denied.

Wasewell

 

[Archean]

That is very strange; anyhow have you tried the other utils I've suggested?

 

[wasewell]

No. I want to deal with the redirect. The other can wait.

I tried to download Combofix with another computer and had the same results.

"Error copying file or folder" Cannot copy ComboFix[1]: Access is denied.


Any suggestions?

Wasewell

 

[Archean]

I am downloading it from the download link right now; no such issues, when you click on download link are you selecting to save the file on your desktop?

 

[wasewell]

I had to disable McAfee to download and use ComboFix. I am attaching the ComboFix log.

Wasewell

 

[wasewell]

Hi

I just wanted to bump my thread hoping someone will see my ComboFix log from my previous message and comment.

Thank you,

Wasewell

 

[wasewell]

How does my ComboFix log look?

The computer seems to be behaving presently but the ComboFix instructions said the log should be looked over for further problems.

Thank you,

Wasewell

 

[Tmagic650]

Everything's cool. Practice safe computing by deleting cookies and temp files regularly... Use a good free antivirus program

 

[wasewell]

Thank you all, very much, for your help and your advice.

Wasewell