pc is very slow

[momsgonelooney]

logs

i hope i did it right. ty

 

[howard_hopkinso]

I can`t see anything untoward in either your HJT of Autoruns logs.

I must admit, I`m out of ideas here.

I can`t find any info for the "sale safe loading" message you`re getting. Any chance of a screen shot?

Regards Howard

 

[momsgonelooney]

screen shot

i tried taking a screen shot but, i couldn't upload it. any suggestions?

 

[howard_hopkinso]

Maybe use a photo hosting website such as PhotoBucket to upload your pic, then copy the IMG address and paste it into your post.

Regards Howard

 

[momsgonelooney]

ok howard here's the thing, i think i found the problem, i seem to have some sort of virus called iexplore.exe and yes it is a virus i have done much research on the net today and found that this thing disguises itself as if it is the real iexplore.exe but, it is not. so i found the problem but, do not know how to fix it. do you have any suggestions? ty

 

[howard_hopkinso]

iexplore.exe is located in C:\Program Files\Internet Explorer\iexplore.exe, if it is found anywhere else it is a virus. However, I couldn`t find any evidence in your logfiles of iexplore.exe running from the wrong location.

Do a search of your system for iexplore.exe and let us know the location/s where it`s found.

Regards Howard

 

[momsgonelooney]

iexplore.exe search

C:\Program Files\Internet Explorer
C:\WINDOWS\Prefetch
C:\Program Files\Internet Explorer\en-US
C:\WINDOWS\SoftwareDistribution\Download\02e948ba5ac0e4be806c6a740042b5b2\SP2GDR
C:\WINDOWS\SoftwareDistribution\Download\02e948ba5ac0e4be806c6a740042b5b2\SP2QFE

I tried uploading the images on photo bucket with no success so I converted the pictures to pdf and uploaded them here. I hope they help. ty

 

[howard_hopkinso]

I`ve just spotted something in one of your pdf files lol. It says in the address bar "http//click.vnn.bz/?hide=1&url=yahoo.com" <This is a browser hijacker.

Download the attached zip file and extract it. Double click on the .reg file and when Windows asks you if you want to merge it into the registry, click yes.

Reboot your system and let me know how things are running.

Regards Howard

 

[momsgonelooney]

srry howard it didn't work. i am still getting the same thing on ie as wat you saw in the pdf files. any thing else?

 

[howard_hopkinso]

Ok, let`s try this.

Click start/run and type regedit into the run box and press the enter key. When the window appears maximise it. Click file/export and save a copy of your registry to wherever you want.

Click edit and choose find. Type click.vnn.bz into the dialogue box and click the find next button. Regedit will now search your registry for any entries that contain a reference to click.vnn.bz and display them in the righthand pane. Right click on any such click.vnn.bz entries and choose delete.

Now click edit again and choose find next. Again, delete any entries that reference click.vnn.bz.

Repeat the above, until no more click.vnn.bz entries are found.

Close reg edit and reboot your system. let me know the results.

Regards Howard

 

[momsgonelooney]

howard if you were here i would kiss you!! it worked!!!! ty very much for all the time and help you have given me with this problem. you are a very valuable acset to this board. ty ty ty

 

[howard_hopkinso]

That`s great news and thanks for letting us know.

Since your problem turned out to be malware related, I`ve moved this thread to our Security and the web forum.

If you have any further virus/spyware problems, please post in this thread.

Regards Howard

This thread is for the use of momsgonelooney's Avatar
momsgonelooney only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.