Malware / Spyware check

[blackcat1975]

Hi

I have followed "8-step Viruses/Spyware/Malware Preliminary Removal Instructions" and I am now posting to check to see if everything is fixed.

Problems I was having include:

Firefox
Pop up internet windows trying to access other websites through firefox.
Constant Crashing of Firefox when I want to access sites for removal information.


New Program appeared
Sav.exe (looks exactly like the windows security centre)
A.exe
both disabled through msconfig startup

A few "various character named".exe files showing up in temp folder and having to be stoped through task manager.

Window Security Alert in taskbar showing automatic updates are disabled
Automatic updates have been disabled. Under system / automatic updates everything is greyed out. When accessed through services it can not be turned on. I have been able to fix this since running the scans.

Computer seems faster and running back to normal. Did I get everything?

Thanks in advance
Amanda

 

[BillAllen55]

I would take it one step further....

This is a website that will do a preliminary evaluation of your hijackthis! logs.
http://hjt.networktechs.com/ When looking over the hihjackthis! logs that you provided there seems to be enough there still that might warrant you taking a look at this site and giving the suggestions some thought.
Let me know how it all turns out.

Regards.

 

[kimsland]

That program (well website)
Found these 3 in the log: (to tick and fix in HJT)

C:\WINDOWS\ALCMTR.EXE

O2 - BHO: (no name) - {B930BA63-9E5A-11D3-A288-0000E80E2EDE} - (no file)

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

Reference Here: http://hjt.networktechs.com/parse.php?log=541845

 

[tw0rld]

1. Update Adobe acrobat reader to version 9.0: https://www.techspot.com/downloads/2083-adobe-reader-dc.html
   
2. Update to the latest version of IE http://www.microsoft.com/downloads/details.aspx?FamilyId=9AE91EBE-3385-447C-8A30-081805B2F90B&displaylang=en
   
3. Update to the latest version of Java https://www.techspot.com/downloads/6463-java-se.html Choose your platform (first option under windows)

 

[momok]

Clearly that site is not sufficient. Fix these too:

O2 - BHO: XBTP04475 Class - {4C61D9D5-8F6C-4280-87E6-3C5FA4AF5A2B} - C:\PROGRA~1\SENSIS~1\tbu67\SENSIS~1.DLL
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = CPV.local
O17 - HKLM\Software\..\Telephony: DomainName = CPV.local
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = CPV.local
O20 - AppInit_DLLs: gcijvd.dll