Phew all the scans are complete

Status
Not open for further replies.
You can run HJT and remove this one:
O4 - HKLM\..\Run: [meet great active lies] C:\Documents and Settings\All Users\Application Data\soft chic meet great\Four Ford.exe

Actually I would suggest a full IE Reset (as well), try this:

How to use Reset Internet Explorer Settings (RIES

To use RIES in Internet Explorer 7, follow these steps:

1. Click the Tools menu, and then click Internet Options.
2. On the Advanced tab, click Reset.
3. In the Reset Internet Explorer Settings dialog box, click Reset.
4. When Internet Explorer 7 finishes restoring the default settings, click Close, and then click OK two times.
5. Close Internet Explorer 7. The changes take effect the next time that you open Internet Explorer 7.

Note for users who cannot start Internet Explorer 7 for some reason, use RIES from Internet Options in Control Panel.



Once both these steps have been done restart your computer


I would also like to ask you about your installed Symantec (Norton) Antivirus
Is it still an active subscription?
Do you know how many more months (or less) you have left on the licence?

I ask you this, because Norton has not saved you from this infection, and does tend to slow down even the best of computers
As a suggestion I would recommend uninstalling it fully, then (after restart) running the Norton Removal Tool

Then try a Free Antivirus like Avast or Avira which will likely provide better protection (ironically!)
Note: If you do decide on this (removal and install) then I would suggest you run a full AntiVirus scan, with your new and improved Free AntiVirus



How did it all go?
 
open hijackthis and place a check next to the items below then run an online scan from the link below

O4 - HKLM\..\Run: [meet great active lies] C:\Documents and Settings\All Users\Application Data\soft chic meet great\Four Ford.exe
O16 - DPF: ChatSpace Full Java Client 3.1.0.248 - http://chat-a1.wanadoo.co.uk/Java/cfs31248.cab
O16 - DPF: RaptisoftGameLoader - http://www.miniclip.com/hamsterball/raptisoftgameloader.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} - http://www.symantec.com/techsupp/asa/LSSupCtl.cab
O16 - DPF: {3451DEDE-631F-421C-8127-FD793AFC6CC8} - https://www-secure.symantec.com/techsupp/asa/ctrl/SymAData.cab
O16 - DPF: {44990200-3C9D-426D-81DF-AAB636FA4345} (Symantec SmartIssue) - https://www-secure.symantec.com/techsupp/asa/ctrl/tgctlsi.cab
O16 - DPF: {44990301-3C9D-426D-81DF-AAB636FA4345} (Symantec Script Runner Class) - https://www-secure.symantec.com/techsupp/asa/ctrl/tgctlsr.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj Class) - http://aolcc.aolsvc.aol.co.uk/computercheckup/qdiagcc.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/J...58/&filename=jinstall-6u7-windows-i586-jc.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B020B534-4AA2-4B99-BD6D-5F6EE286DF5C} - http://a248.e.akamai.net/f/248/5462...img/operations/symbizpr/xcontrol/SymDlBrg.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://zone.msn.com/binFramework/v10/ZIntro.cab34246.cab
O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game08.zylom.com/activex/zylomgamesplayer.cab
O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx
O16 - DPF: {E6EB803E-DD89-11D3-80C4-0050DA2E09D0} (LightSurfUploadCtl Class) - http://mediamessaging.o2.co.uk/activex/LightSurfUploadControl.cab
O16 - DPF: {E7D2588A-7FB5-47DC-8830-832605661009} (Live Collaboration) - http://liveca12.custhelp.com/7530-b327h/rnl/java/RntX.cab

http://housecall.trendmicro.com/
 
Hi to you both, and a big thank you for your help.

I have just tried a reset of ie7 but still got popups. This turned off Norton Virus as well. As regards to Norton Virus, not so long ago it asked me to do an upgrade, which i did. It is not due for renewal until about February. I am just wondering if that has caused the problems.

When you asked me to put a check next to all them items on HJT, do i have to press fix and then run a scan?

Am i best to get rid of Norton and have the free virus checker instead?

Thank you for your patience.

Actually it says on Norton that i my browser is not set to protect fraudulent websites, phishing protection is off (what exactly is phishing). This only turned off after i reset ie7.

I am just running a trendmicro scan as we speak, hopefully this will help a little.

Oh computers are so confusing when they go wrong! lol.
 
I have now completed a trendmicro scan and it found two infections, one that causes popup advertisements. So far so good, fingers crossed it may have done the trick, only time will tell.

Why did Norton let the infections through?

Is there anything else i should be doing now to prevent it happening again, thats if the problem has gone away?
 
Thank-you for your questions

I personnaly believe you would be best without Norton (hey it didn't save you this time)
Norton is a large resource hog (on even the fastest computers)
If I could put it bluntly, I would pay to have it removed (sarcastically!)
Norton tends to run a lot of processes, startups, tasks, services, updates and has many (numerous) registries, files, folders. If any one (one) of these become corrupt (usually always, and usually by a Virus/Malware strangely!!!) Norton will totally fault.

Actually there is so much of all this stuff, that if one person (with high technical ability) and without the correct tools. Would take literally days to remove a corrupted Norton AntiVirus. Even then they would be best to format ! And re-install Windows.

Thankfully Norton released their own removal tool here: https://www.techspot.com/vb/topic100496.html#2
Out of pure demand. With literally tens of thousands of users complaining (and I was one of them!)

Not satisfied? Well how about this:
A purchased Norton Antivirus cannot remove files in use, even free ones can do that
A purchased Norton Antivirus cannot remove some Viruses (??) that even a free Antivirus can.
A purchased Norton Antivirus cannot remove Viruses in Safe Mode !
Why then, why would Norton, with so much info and removal tools (I do like the removal tools though) Why, wouldn't they just make it as easy and good as the free ones. Well after contacting support (2nd level) and thankfully speaking to someone with reasonable technical expertise. He whispered to me (believe it or not, but it is true) That "Norton can't do it". (Knowing that I would understand, that just about all other Antivirus softwares CAN.

So please make up your own mind
And if you have a chance, read a few hundred of my wide and varied posts (Not to do with Norton) And possibly think to yourself, Hmm, I might be right. By the way I 100% believe it.



So that's one question out of the way.
Here I'll just post this:
Try Free Antivirus like Avast or Avira

By the way, because of such a long post, I'm not re-reading it. So I tend to have spelling mistakes, I notice, just disregard these things :)
 
Thank you Kimsland for all the info. I think i will take you up on your advice and maybe use one of the free Antivirus'.

One question is, can you use this free all the time?

My computer seems to have been running better now, no advertisement popups, Woo hoo! Even the background noise has gone.

It is very supprising how i didn't even realise that i had so many problems, thought Norton would have stopped that, i only thought i had one problem because of the popups.

Someone earlier suggested i upgrade to ie8, should i do this and do you suggested anyother upgrades?

I really appreciate all your time and effort to help me sort out these problems (you are all so clever) xxx

Best do all the same to my children's laptops, bet they have got problems there to.
 
Well you're possibly not done yet (likely)

By the way Antivirus subscriptions are usually 1 Year (With Avast you must free register to get this. The only issue with the free ones, is you get these big splash banners, like Buy Me (only when logging into Windows, with Avast; and only when Updates come along, with Avira (Avira also uses scare splash screen, like "You are not protected", of which, you are!)

Now I'd suggest (as a suggestion) that you go to Add/Remove Programs in Control Panel, and start removing (possibly multiple) Norton (Symantec being their other name) entries, then Restart. You may need to check this a couple of times, to confirm all the Norton is gone (of which it still isn't !)

Then (after another restart, no doubt) run the Norton Removal Tool fully, and uninstall anything found.
Then go to tasks (possibly after another restart) and confirm Norton is still not trying to update (even though it's removed!) And remove the task.

Then, at last Norton is removed (But if you do a search you will still find Norton folders, and even a search in Registry will find many Norton entries. But if you like these can stay (they shouldn't hurt)

Then download and run CCleaner

Then Clear system restore points

  • Clear your existing system restore points and establish a new clean restore point:
    • Go to Start > All Programs > Accessories > System Tools > System Restore
    • Select Create a restore point, and Ok it.
    • Next, go to Start > Run and type in cleanmgr
    • Select the More options tab
    • Choose the option to clean up system restore and OK it.
    This will remove all restore points except the new one you just created.

Then download the free Antivirus
And fully update it ( + register for Avast, if you select that one)
Then do a full scan, again ! (Just in case)

Then you really should submit another HJT log

That's about all for now.
 
Status
Not open for further replies.
Back