Darrenbilly
Posts: 163 +2
A few ads are slipping through and pop ups, it is a bit laggy also. Please check the attached combofix, by golly, it's a long one. Hmm infact, its way too big for the forum, i'll try it in two sections View attachment 33009
Computer running a bit strangely
- Thread starter Darrenbilly
- Start date
- Status
Darrenbilly
Posts: 163 +2
Bobbye
Posts: 16,313 +36
I looked at the first log. You are badly infected with malware. For starters:
Adzgalore Games Collection: known to have adware. Labeled as PUA> potentially unwanted application.
You need to run the full malware cleanup on:
https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
This will include a hijackthis log to post.
Adzgalore Games Collection: known to have adware. Labeled as PUA> potentially unwanted application.
You need to run the full malware cleanup on:
https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/
This will include a hijackthis log to post.
Darrenbilly
Posts: 163 +2
.
And the second log?
And the second log?
Darrenbilly
Posts: 163 +2
.
Not been able to get SAS log, that scan takes a long time and was unable to complete. But please check this hjt and combofix just for my security.
this log was only 25kb A hell of a lot smaller eh?!
View attachment 33037
View attachment 33038
Thanks for your help so far
Not been able to get SAS log, that scan takes a long time and was unable to complete. But please check this hjt and combofix just for my security.
this log was only 25kb A hell of a lot smaller eh?!
View attachment 33037
View attachment 33038
Thanks for your help so far
Darrenbilly
Posts: 163 +2
Bobbye
Posts: 16,313 +36
Run HJT with no other programs open. Click the scan button. Have HJT fix the following, by placing a tick in the little box next to:
Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode.
Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.
Please go to Start > Control Panel > Add/Remove Programs and remove the following :
Please note any other programs that you don't recognize in that list in your next response.
Open SuperAntiSpyware and have it remove:
Update the Java to v6u6:
https://www.techspot.com/downloads/6463-java-se.html
Run HijackThis and post new log.
Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode.
Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.
Please go to Start > Control Panel > Add/Remove Programs and remove the following :
Please note any other programs that you don't recognize in that list in your next response.
Open SuperAntiSpyware and have it remove:
Do NOT use your System Restore. It is infected. We will drop off the old points when you're clean.
Update the Java to v6u6:
https://www.techspot.com/downloads/6463-java-se.html
Run HijackThis and post new log.
Darrenbilly
Posts: 163 +2
Follow up
View attachment 33081
I removed all of the items in hijackthis.
When i started in safe mode and went to control panel > add/remove i could not find what you were asking for so i searched for it and deleted it.
I have the java update.
These are the programs im not too sure about:
Openmg limited patch 4.1-05-13-31-01
Openmg limited secure module 4.1.00
Metaframe presentation server
Web client for win32
Mvision
Microsoft IEAK
Winpcap
Also how can i arrange the programs in my all programs list, there are way too many?
Thanks
View attachment 33081
I removed all of the items in hijackthis.
When i started in safe mode and went to control panel > add/remove i could not find what you were asking for so i searched for it and deleted it.
I have the java update.
These are the programs im not too sure about:
Openmg limited patch 4.1-05-13-31-01
Openmg limited secure module 4.1.00
Metaframe presentation server
Web client for win32
Mvision
Microsoft IEAK
Winpcap
Also how can i arrange the programs in my all programs list, there are way too many?
Thanks
I'm just answering that single partDarrenbilly said:
Download Tidy Start Menu
I've used this a few times myself
Darrenbilly
Posts: 163 +2
Thanks kimsland
Darrenbilly
Posts: 163 +2
Any update?
Hey Bobbye i've had a few ads slip through, Is there still any sign of infection?
Hey Bobbye i've had a few ads slip through, Is there still any sign of infection?
Blind Dragon
Posts: 3,774 +4
Looks like a left over from norton -> run the removal tool
I don't see a firewall ->
Use a Firewall - It is very important that you use a Firewall on your computer. If you use the Windows Firewall you might think that's enough but it only controls inbound traffic. Simply using a Firewall in its default configuration can lower your risk greatly. Here are some firewalls which are free for personal use and most commonly used:
Comodo (Vista Compatible)
Kerio
Online Armor
Zonealarm (Vista Compatible)
Please run an online scan to look in more locations and to verify what's been done so far.
Run Kaspersky Online AV Scanner
Order to use it you have to use Internet Explorer.
Go to Kaspersky and click the Accept button at the end of the page.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.
Also attach a new hijackthis log after the above is done
I don't see a firewall ->
Use a Firewall - It is very important that you use a Firewall on your computer. If you use the Windows Firewall you might think that's enough but it only controls inbound traffic. Simply using a Firewall in its default configuration can lower your risk greatly. Here are some firewalls which are free for personal use and most commonly used:
Comodo (Vista Compatible)
Kerio
Online Armor
Zonealarm (Vista Compatible)
Please run an online scan to look in more locations and to verify what's been done so far.
Run Kaspersky Online AV Scanner
Order to use it you have to use Internet Explorer.
Go to Kaspersky and click the Accept button at the end of the page.
Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%.
- Read the Requirements and limitations before you click Accept.
- Allow the ActiveX download if necessary.
- Once the database has downloaded, click Next.
- Click Scan Settings and change the "Scan using the following antivirus database" from standard to extended and then click OK.
- Click on "My Computer"
- When the scan has completed, click Save Report As...
- Enter a name for the file in the Filename: text box and then click the down arrow to the right of Save as type: and select text file (*.txt)
- Click Save - by default the file will be saved to your Desktop, but you can change this if you wish.
Also attach a new hijackthis log after the above is done
Bobbye
Posts: 16,313 +36
Well, I no longer see the Live Messenger process- usnsvc.exe-that's good. Blind Dragon will take you through the rest of the scans.
I'd like to make a comment for you to keep in mind> you have a lot of game sites on the system. It's not unusual for those types of sites to send a little extra by way of ads and possible bundled spyware. So beware of that.
I'd like to make a comment for you to keep in mind> you have a lot of game sites on the system. It's not unusual for those types of sites to send a little extra by way of ads and possible bundled spyware. So beware of that.
Blind Dragon
Posts: 3,774 +4
I didn't mean to cut you off if you would like to continue with the fix. I just hadn't seen a reply
Darrenbilly
Posts: 163 +2
Thanks
Thankyou for all of your help bobbye. Blinddragon i will do all of those instructions by the end of today hopefully, thanks.
Thankyou for all of your help bobbye. Blinddragon i will do all of those instructions by the end of today hopefully, thanks.
Darrenbilly
Posts: 163 +2
Expired
The removal tool you had on that link has expired so i found the new one http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2006050909471013
The removal tool you had on that link has expired so i found the new one http://service1.symantec.com/SUPPORT/sharedtech.nsf/docid/2006050909471013
Blind Dragon
Posts: 3,774 +4
Same thing, and good job finding the correct one. :grinthumb
Darrenbilly
Posts: 163 +2
Bobbye
Posts: 16,313 +36
Blind Dragon, I appreciate your help. You are able to take users though subsequent cleaning programs after HijackThis, better than I. Thank you. Please continue.
But I did look at the latest log and see C:\Program Files\Windows Live\Messenger\usnsvc.exe is back! I thought you removed this.
But I did look at the latest log and see C:\Program Files\Windows Live\Messenger\usnsvc.exe is back! I thought you removed this.
Darrenbilly
Posts: 163 +2
So did i? I removed windows live messenger which i always use.. But it auto reinstalls
I forgot to mention, i downloaded comodo firewall, but it says: "comodo firewall pro is being initialized" and then says: "the network firewall is not functioning properly, please run the diagnostics utility to fix the problem" which i do, but to no avail, please help?
Darrenbilly
Posts: 163 +2
?
My internet works fine, just the firewall is not, i will get one of the other ones blind dragon suggested. Please look at the attached ad aware log, i did the scan and it found 4 infections, im not sure if they are still on here and one of them mentions comodo firewall. Thanks
View attachment 33189
My internet works fine, just the firewall is not, i will get one of the other ones blind dragon suggested. Please look at the attached ad aware log, i did the scan and it found 4 infections, im not sure if they are still on here and one of them mentions comodo firewall. Thanks
View attachment 33189
Darrenbilly
Posts: 163 +2
Ok i've uninstalled it and run cleaner. Now im installing kerio ( sunbelt personal firewall) hopefully it works! In a previous post bobbye said to list any programs i was unsure of, i did but he did not respond to it, anyone else able to? Thanks
These are the programs im not too sure about:
Openmg limited patch 4.1-05-13-31-01
Openmg limited secure module 4.1.00
Metaframe presentation server
Web client for win32
Mvision
Microsoft IEAK
Winpcap
Also, can you donate to the forum?
- Status
Similar threads
