lop toolbar

[ramdo]

Me Too!

Hello,

I Have the same exact problem you have, plus I'm running Vista, apprently we are the only two people stuck on this annoying secound by secound alert, please...HELP!

 

[howard_hopkinso]

Hello and welcome to Techspot.

Go and read the Viruses/Spyware/Malware, preliminary removal instructions. Follow all the instructions exactly.

Post fresh HJT, AVG Antispyware and Combofix logs as attachments into this thread, only after doing the above.

Also, let me know the results of the AVG Antirootkit scan.

Regards Howard :wave: :wave:

This thread is for the use of ramdo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[ramdo]

hello,

Forgot to tell you that im a vista 64 bit user, most of the programs listed are not supported by vista 64, its eating away my disk space for some reason
, please advise proper action...even if it means a fresh OS. thank you.

 

[howard_hopkinso]

Just follow as many of the instructions as you can and post the requested log files.

Regards Howard

This thread is for the use of ramdo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[ramdo]

Logs

Hello,

I tried following the steps s much as i can, Here are the logs you requested, Combofix.exe couldnt run on my computer, Thank you for your help.

 

[howard_hopkinso]

All items in your AVG Antispyware log say "No Action Taken". That`s because you haven`t told AVG Antispyware to quarantine it`s results as per the instructions. See this pictorial guide.

You might want to copy and paste these instructions into a notepad file. Then you can have the file open in safe mode, so you can follow the instructions easier.

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how HERE.

Run HJT with no other programmes open(except notepad). Click the scan button. Have HJT fix the following, by placing a tick in the little box next to(if there).

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKCU\..\Run: [OneDent] "C:\ProgramData\junkhopehope.ke623dn"

O4 - HKCU\..\Run: [vc log bows face] "C:\ProgramData\16 HOLD FRAG.t3rrvmi"

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files and/or directories(if there).

C:\ProgramData\16 HOLD FRAG.t3rrvmi
C:\ProgramData\junkhopehope.ke623dn

Reboot your computer and post a fresh HJT log.

Let me know if you`re still having any problems.

Regards Howard

This thread is for the use of ramdo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.