Spy and Ad ware continually detected on Spybot

[IBN]

Whenever i use Spybot after it detects Spyware and Adware, then after its fixed i run the scan again and it detects spyware and adware again!!! This happens everytime i rescan.

???

 

[howard_hopkinso]

Lets see if you have any nasties on your system.

Go HERE and follow the instructions.

Post a fresh HJT log as an attachment, only after doing the above.

Regards Howard

 

[IBN]

Thats was one hell of a mission. Here is the HJT log!!!

 

[howard_hopkinso]

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html

Open your task manager, by holding down the ctrl and alt keys and pressing the delete key.

Click on the processes tab and end process for(if there).

ALCMTR.EXE

Close task manager.

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/YazzleActiveX.cab?refid=1162
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab


O17 - HKLM\System\CCS\Services\Tcpip\..\{6692504B-1B16-4C2C-9509-D936EAA6F916}: NameServer = 83.146.21.5 212.158.248.6<Only fix this, if it doesn`t belong to your ISP.

O20 - Winlogon Notify: winuns32 - winuns32.dll (file missing)

Click on the fix checked button.

Close HJT.

Locate and delete the following bold files(if there).

C:\WINDOWS\SYSTEM32\winuns32.dll
ALCMTR.EXE

Run Spybot search and destroy and delete whatever it finds.

Reboot into normal mode and turn system restore back on.


Regards Howard

 

[IBN]

It worked. Many thanx.

 

[IBN]

Howard i am having the same problem again The link you posted in the past doesnt work. I have attached a HJT log to look at also.

Thanx

 

[howard_hopkinso]

I`ve fixed the link.

Your HJT log is clean.

What problems are you having?

Regards Howard

 

[IBN]

Whenever i run spybot it always picks up something.

 

[howard_hopkinso]

Can you please tell me what Spybot is picking up?

I need the exact name of the file or files.

Regards Howard

 

[IBN]

I have attached the pic.

 

[howard_hopkinso]

They`re just tracking cookies and nothing to worry about.

You can actually disable any website you choose from setting cookies in Firefox. See HERE for more info. Just scroll down the page untill you find the section on cookies.

Regards Howard

 

[Peddant]

Post removed.

 

[IBN]

OK phew. I have set it to until I close firefox. What setting do you recommend.

 

[IBN]

Another question. If your HJT log is clean does that mean you dont have no spyware or viruses?

Thanx

 

[howard_hopkinso]

To answer you first question. I`d personally recommend blocking those tracking cookies in Firefox.

As for your second question. A clean HJT log is a good indicator that your system is clean. However, it is possible for some viruses to hide on your system and not show up in HJT.

Unless you`re having some unexplained problems, I wouldn`t worry about it too much though.

Regards Howard

 

[IBN]

Thanx alot for your help. I'll read up on how to block tracking cookies.

 

[howard_hopkinso]

No problem mate.

May I suggest you read this thread by Spike. It should help you to keep your system more secure and virus/spyware free.

https://www.techspot.com/vb/topic31474.html

Regards Howard