Inactive AVG Antivirus problem. Please help!

[Bobbye]

Note this entry in the Combofix log:
- - - - ORPHANS REMOVED - - - -

HKLM-Run-c:\windows\ltumps.exe - (no file)

Please reopen HijackThis to 'do system scan only.' Check each of the following if present:

O4 - HKLM\..\Run: [t`~y?:MBVhfk?{)C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\ltumps.exe
O4 - HKLM\..\Run: [" ??DnR???OV?C:\Program Files\ISTsvc\istsvc.exe] C:\WINDOWS\ltumps.exe

Close all Windows except the HijackThis and click on "Fix Checked

Reboot the computer and let me know how the system is.

 

[jo122]

Would I have to do the combofix scan again and then once the log pops up, just enter Orphans removed etc at the bottom of the log?

 

[Bobbye]

Just follow my directions in Reply #26. You don't do anything with 'Orphans'. That is a comment to show they were removed- nothing more.

 

[jo122]

I am able to go into sites by copy and pasting the link but I can't click directly on the link or I'll be sent to another page. Desktop is still invisible.

How do I get my desktop back? or is that another matter altogether?

I'm just happy to have found a way to go into a site without being redirected finally.

 

[Bobbye]

You reply is confusing> you say you can't click on a link because you get redirected. Then you say you're happy that you aren't being redirected. Can you clear this up for me please.

O24 - Desktop Component 0: (no name) - http://www.cheesecake-recipes.com/images/bg.gif

I had you remove the above. I don't think you mean your desktop is missing- that would mean there are no icons, no taskbar, etc. If you're referring to the background, go into Display in the Control Panel and choose a background.

 

[jo122]

Sorry for the confusion. I can click on any link and it doesn't redirect me anymore! Thanks for the help with that. Before I had to copy and paste the link directly into the browser otherwise, I'd get redirected.

As for the missing desktop, my desktop backround is there but there are no icons, no taskbar etc. It just disappeared after I downloaded Avira. It disappeared when I downloaded AVG but it appeared again when I lowered the sensitivity (er, practically shut the antivirus off). On Avira, it doesn't have that option so I've had to use Cntl/Alt+Delete and click 'start new task' to do everything including shutting off my computer etc. Even if I shut off Avira and restart my computer, my desktop still ceases to appear.

 

[Bobbye]

I don't know of anything in an antivirus program that would cause icons and taskbar to go missing! Let's check the properties and make sure the settings are right:

Right click on the Taskbar> Taskbar tab< make sure there is a check in each of the following:
Lock Taskbar
Keep Taskbar on top
Show Quick Launch toolbar
If you had to make changes click on Apply> OK when finished.

Of you can't find the Taskbar to do this: Right click on the Desktop> Choose Refresh

Let me know if either of these solver the problem,

 

[jo122]

When I right click, nothing appears. If I click and drag the mouse, usually, it forms the square that allows me to highlight the icons but, highlighting doesn't work either. It's a mystery what happened to my desktop.

The only way I can get to anything in my computer is through Ctrl/Alt+Delete 'task manager' and click on 'new task' then 'browse'.

 

[Bobbye]

I'd like you to do the following: If doing one restores the icons and Taskbar to the Desktop, you do not need to do the others.

1. Click on the Control Panel> System> Hardware tab> Device Manager> Click on + sign to left of IDE ATA/ATAPI Controller> Right click on Secondary IDE Channel> Scan for hardware changes.> Do you get an error- yellow triangle w/black ! over it? Is there any change noted?

2. Run the Error Check:Can you start Windows Explorer from the Task Manager? IF so, do that. Once Windows explorer is open: Click on My Computer> Right click on Local Drive (C)> Properties> Tools tab> Error Checking> Check both boxes on the screen that appears> Apply> OK> Close the message that comes up and Reboot. The Error Checking will start in a few seconds. The system will reboot when finished.

NOTE: This will take a while. It's important to let it finish.

3. Check for current Windows updates. Control Panel> Add/Remove Programs> Check Show updates> See if there was an auto-update on the same date your desktop icons and Taskbar went missing. If there is and if neither of the above has restored the desktop, make note of the update number, then uninstall it. Reboot the computer.

 

[jo122]

I did #2 but w/o resolution. As for #1 and 3, I'm not sure how to access Control Panel through the Task Manager.

 

[Bobbye]

Open the Task Manager> click on the Applications tab> New Task> type Control Panel in the box. That will take you there.

 

[jo122]

Sorry for the delay.

So I went to new task and typed in Control Panel and it doesn't allow me to do that. It says "windows cannot find explorer.exe. Make sure you have typed the name correctly..." etcetc. Also, I tried syncing my computer and it says I don't have any offline files to sync.

My computer has gotten unusually slow as well over the past week and a half or so. Every time I try to access the web, my computer starts (not responding) particularly when I stream tv shows. It's as if my desktop got wiped out or something. The programs I can access are limited. On the 'My Computer' option, there's no computer icon but one of those pictures that represents the 'file no longer existing' icons.

Do you think it might be the antivirus software? As I stated earlier, my desktop disappeared each time I downloaded a new antivirus software and reappeared if I either
a) technically turned off the protection
b) deleted the program

But the last program I downloaded and deleted before Avira is when the desktop just permanently disappeared..

 

[Bobbye]

You started this thread about 6 weeks ago. I should have closed it when you didn't reply in 5 days. I reread the early posts and it sounds like you don't know the difference between the antivirus program and a search engine. AV programs don't redirect you. You get redirected using a search engine, such as Google. You either get taken to a site not a subject of what you put in the search box, or you search, pick a site to go to but are directed somewhere else.

So you kept changing the antivirus programs because you though they was the cause of the redirects and in doing so, you left the system more vulnerable. We cannot just pick up a month later without new logs.


Run Eset NOD32 Online AntiVirus scan HEREhttp://www.eset.eu/online-scanner

1. Tick the box next to YES, I accept the Terms of Use.
2. Click Start
3. When asked, allow the Active X control to install
4. Disable your current Antivirus software. You can usually do this with its Notification Tray icon near the clock.
5. Click Start
6. Make sure that the option "Remove found threats" is Unchecked, and the option "Scan unwanted applications" is checked
7. Click Scan
8. Wait for the scan to finish
9. Re-enable your Antivirus software.
10. A logfile is created and located at C:\Program Files\EsetOnlineScanner\log.txt. Please include this on your post.

=====================================
Uninstall ComboFix and all Backups of the files it deleted

• Click START> then RUN
• Now type Combofix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.

=====================================
Download Combofix again from one of these locations:and save to your desktop
Link 1
Link 2

• Double click combofix.exe & follow the prompts.
• As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. It is strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode if needed.
• Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
• Query- Recovery Console image
  
  
  
  

  WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

• Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:
  
  
• .Click on Yes, to continue scanning for malware
• .If Combofix asks you to update the program, allow
• .Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
• .Close any open browsers.
• .Double click combofix.exe
  
  & follow the prompts to run.
• When the scan completes it will open a text window. Please paste that log in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. ComboFix may reset a number of Internet Explorer's settings, including making I-E the default browser.
3. Combofix prevents autorun of ALL CD, floppy and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you -- please tell your helper.
4. CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
=========================================
Download HijackThis http://download.bleepingcomputer.com/hijackthis/HijackThis.zipand save to your desktop.

• Extract it to a directory on your hard drive called c:\HijackThis.
• Then navigate to that directory and double-click on the hijackthis.exe file.
• When started click on the Scan button and then the Save Log button to create a log of your information.
• The log file and then the log will open in notepad. Be sure to click on Format> Uncheck Word Wrap when you open Notepad
• Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
• Come back here to this thread and paste (Ctrl+V) the log in your next reply.

NOTE: Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.

 

[jo122]

You started this thread about 6 weeks ago. I should have closed it when you didn't reply in 5 days. I reread the early posts and it sounds like you don't know the difference between the antivirus program and a search engine. AV programs don't redirect you. You get redirected using a search engine, such as Google. You either get taken to a site not a subject of what you put in the search box, or you search, pick a site to go to but are directed somewhere else.
_________________
Yeah, I was going to make another thread but was surprised my original thread was still up. I'm not too good at 'computer speak' so you may have misunderstood me.

I do know the difference between an antivirus program such as AGV, Avira, Spyware Dr and so forth VS search engines like Internet explorer and Firefox. Because most computers get infected via search engines/e-mails etc, it's my (limited) understanding that the newer antivirus protection software (the ones I downloaded and tried deleting) obstructs the ability to go into infected sites or atleast it's intended to then catches and quarantines viruses.

Just to make sure that I'm understanding what you're saying, it sounds like you're telling me that there are no parallels between the fact that my search engine never once redirected me to another page nor my desk top ever disappear before I downloaded these antivirus programs for added protection because my Norton Antivirus had expired which everything was perfectly fine with Norton. If I got it skewed feel free to correct me.

I'll do the logs and post again.
Thanks for the help.

 

[Bobbye]

VS search engines like Internet explorer and Firefox. Because most computers get infected via search engines/e-mails etc, it's my (limited) understanding that the newer antivirus protection software (the ones I downloaded

This might help clarify a browser, search engine and how your security works:

• Internet Explorer, Firefox, Opera, Chrome are browsers, not search engines.
  The browser is what you use to access the internet.
  
• Google, Yahoo, Bing, Dogpile and a whole bunch of others, are search engines
  You use a search engine from within the browser to look for sites about a particular subject.
  
• Computers do not get infected through a search engine: if there is malware on a system, it can cause what you choose for a URL in the search engine to be directed to a different site. There are different ways that malware can do this.
  
• Computers don't get infected through email itself. They get infected if some malicious code has been included in the body of the email, or in an attachment that comes with the email, if you open it.
  
• The security programs on the computer attempt to block loading if a malicious site or alert you to some type of malware on the site, in addition to preventing malware on the internet from accessing your computer..
  
• The security has to be layered to protect you. It is not just an antivirus program alone that does this. The security should include a firewall and at least 2 antimalware programs in addition to the AV program.
  
• Security programs that maintain a database of current malware infections is only as good as it's latest update. If you had Norton but let the subscription expire, then it was only as good as the last time if updated- which stops when the subscription expires.
  

  because my Norton Antivirus had expired

• While some AV programs are rated better than others, an antivirus program alone is not enough to protect the system. Trying multiple AV programs after the system has become infected leaves it more at risk.

I hope this help clarify how things work.