I have been having problems. AVG would find viruses, delete them, and the next day I'd have even more. My internet explorer started acting up to the point where I couldn't even surf the web anymore without errors and freezing. I followed the steps at https://www.techspot.com/community/...lware-removal-preliminary-instructions.58138/ (Which took 4+ hours! my virus scan alone took 3.5 hours!) ... I couldn't do the AVG Anti-Spyware because the program kept erroring and closing during the scan. Oh, and also.. when I rebooted my computer normally, a program called cCapp kept trying to install -- not sure what it is! My HJT file is below, any help appreciated!
HJT file after following your thread.
- Thread starter jhamel4805
- Start date
- Status
howard_hopkinso
Posts: 21,238 +17
Hello and welcome to Techspot.
Download the Pocket Killbox programme from HERE. Extract it but don`t run it yet.
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html
Go to add remove programmes in your control panel and uninstall anything to do with(if there).
VSAdd-in
del.icio.us
Close control panel.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: del.icio.us Toolbar Helper - {7AA07AE6-01EF-44EC-93CA-9D7CD41CCDB6} - C:\Program Files\del.icio.us\Internet Explorer Buttons\dlcsIE.dll
O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\system32\rvxjdqom.dll
O3 - Toolbar: del.icio.us - {981FE6A8-260C-4930-960F-C3BC82746CB0} - C:\Program Files\del.icio.us\Internet Explorer Buttons\dlcsIE.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEB utton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEB utton\support.htm
O20 - AppInit_DLLs:
Click on the fix checked button.
Close HJT.
Locate and delete the following bold files and/or directories(if there).
C:\Program Files\VSAdd-in
C:\Program Files\del.icio.us
Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted. If your computer doesn`t automatically restart, restart it manually.
This is the filepath you need to enter into killbox.
C:\WINDOWS\system32\rvxjdqom.dll
Once your system has rebooted, turn system restore back on and rehide your protected OS files.
Post a fresh HJT log as an ATTACHMENT See HERE. Let me know how your system is running.
Regards Howard :wave: :wave:
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Download the Pocket Killbox programme from HERE. Extract it but don`t run it yet.
You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.
Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html
Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html
In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html
Go to add remove programmes in your control panel and uninstall anything to do with(if there).
VSAdd-in
del.icio.us
Close control panel.
Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: (no name) - {46A4E9D9-B30E-452A-8157-DBBEC8573B03} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O2 - BHO: del.icio.us Toolbar Helper - {7AA07AE6-01EF-44EC-93CA-9D7CD41CCDB6} - C:\Program Files\del.icio.us\Internet Explorer Buttons\dlcsIE.dll
O2 - BHO: (no name) - {F18F04B0-9CF1-4b93-B004-77A288BEE28B} - C:\WINDOWS\system32\rvxjdqom.dll
O3 - Toolbar: del.icio.us - {981FE6A8-260C-4930-960F-C3BC82746CB0} - C:\Program Files\del.icio.us\Internet Explorer Buttons\dlcsIE.dll
O3 - Toolbar: &VSAdd-in - {74DD705D-6834-439C-A735-A6DBE2677452} - C:\Program Files\VSAdd-in\VSAdd-in.dll
O9 - Extra button: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEB utton\support.htm
O9 - Extra 'Tools' menuitem: Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEB utton\support.htm
O20 - AppInit_DLLs:
Click on the fix checked button.
Close HJT.
Locate and delete the following bold files and/or directories(if there).
C:\Program Files\VSAdd-in
C:\Program Files\del.icio.us
Run the killbox.exe file. When it loads type the full path to the file you would like to delete in the field and check the delete file on reboot button. press the Delete File button (looks like a red circle with a white X). It will prompt you to reboot, select no until you have finished inputting the files you want to delete, only then allow it to reboot and hopefully your files will now be deleted. If your computer doesn`t automatically restart, restart it manually.
This is the filepath you need to enter into killbox.
C:\WINDOWS\system32\rvxjdqom.dll
Once your system has rebooted, turn system restore back on and rehide your protected OS files.
Post a fresh HJT log as an ATTACHMENT See HERE. Let me know how your system is running.
Regards Howard :wave: :wave:
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
My reply 
My Internet explorer is running perfect so far. However, I did receive an error while trying to 'fix' a file you told me to fix... I've attached a copy of the error as a txt document as well as my new hijackthis log.
Thanks for your help, I really appreciate it!
My Internet explorer is running perfect so far. However, I did receive an error while trying to 'fix' a file you told me to fix... I've attached a copy of the error as a txt document as well as my new hijackthis log.
Thanks for your help, I really appreciate it!
howard_hopkinso
Posts: 21,238 +17
Your HJT log is now clean.
Don`t worry about the HJT error.
If you have any further virus/spyware problems, please post in this thread.
Regards Howard
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Don`t worry about the HJT error.
If you have any further virus/spyware problems, please post in this thread.
Regards Howard
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Actually, I am trying to get into my comcast e-mail. My Norton firewall usually blocks it so I usually turn it off for 5 minutes so I can login to my e-mail. I try to go turn off the firewall, and something pops up trying to install something called "ccCommon". It says "The feature you are trying to use is on a network resource that is unavailable" .... in reference to CCCOMMON.MSI .... Do you recommend any other free firewall programs so I can just uninstall Norton all together?
[EDIT] I am downloading ZoneAlarm which you linked in your stickied thread. Hope it works better than Norton! *crosses fingers*
[EDIT] I am downloading ZoneAlarm which you linked in your stickied thread. Hope it works better than Norton! *crosses fingers*
howard_hopkinso
Posts: 21,238 +17
Take a look at this thread HERE. Near the top of the thread, you will see some good free antivirus and firewall programmes.
Once you`ve downloaded the above, disconnect from the net and uninstall Norton.
If you have any problems uninstalling Norton, take a look at this thread HERE.
Once Norton is completely uninstalled, reboot your system and install whichever firewall you chose, followed by whichever AV you chose and reboot your ystem the required number of times. Reconnect to the net and run the AV updates.
Regards Howard
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Once you`ve downloaded the above, disconnect from the net and uninstall Norton.
If you have any problems uninstalling Norton, take a look at this thread HERE.
Once Norton is completely uninstalled, reboot your system and install whichever firewall you chose, followed by whichever AV you chose and reboot your ystem the required number of times. Reconnect to the net and run the AV updates.
Regards Howard
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
I just downloaded the Norton Uninstaller.. it shows it installing but then the window disappears and nothing happens. Any ideas what I'm doing wrong?
[EDIT] NEVERMIND! I found it. Uninstalling now, woohoo!
[EDIT] NEVERMIND! I found it. Uninstalling now, woohoo!
howard_hopkinso
Posts: 21,238 +17
You should try to uninstall normally first. Only if you have problems should you use the uninstaller and then, only if it supports your version of Norton.
Read these instructions thoroughly.
Regards Howard
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
Read these instructions thoroughly.
Regards Howard
This thread is for the use of jhamel4805 only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
- Status
