Jump to content

pskelley

Trusted Malware Techs
  • Content Count

    1,759
  • Joined

  • Last visited

Posts posted by pskelley


  1. IntelGuy, I will do as you suggested and give any user who has issues with the 3D Test the link you provided. I will not bother with additional tests on this computer, this is a workhorse and sooner or later I will put it out to pasture and saddle up the new Dell setting beside it. I just wanted to take a moment to thank you for your help :)

     

    Phil


  2. Thanks for that feedback, the computer was purchased in 2003 and has been tested with no issues many times. I would have to assume then that the tests have been changed, the display adapter certainly has not. I'll post that information asap and if I run the tests in the future I will bypass that particular test. I am considering now if I can continue to suggest the tests to folks at other forums?

    I am really interested in trying the test on my new Dell to see what happens...

     

    Appreciate the time you took.

     

    Phil Skelley


  3. Hi IntelGuy, Do you have a solution for this yet?

    http://forums.pcpitstop.com/index.php?showuser=24733

     

    I just ran into it this am when I posted for a member at Safer Networking to run the diagnostic as I do with many folks, but will stop until this is resolved. When I noticed the website changed and decided to update my directions, to do so I tought I would scan one of my computers. I run into the issues at the 3D Performance Test. MSN Explorer and Internet Explorer, with both browsers I get a message that a problem has been encountered and the browser must shut down. The file being sent to Microsoft is c069_appcompat.txt I should also point out that I removed the old ActiveX and installed it again just in case that was the problem. I will say again, the test, both singed in and not signed in as a user, proceeded properly until it moved from "Testing Drives" to "3D Performance Test", so it sounds like the same issure you are working on. If I can recreate the test and send any information, let me know. I would be glad to go to email also if that will help. I will not be able to suggest the diagnostic tests until this is resolved.

     

    If you want me to start a new topic, let me know.

     

    Thanks...Phil

    pskelley


  4. Thanks for the feedback, have a look at this link I posted:

    http://users.telenet.be/bluepatchy/miekiem...owcomputer.html

    and this information:

    http://www.netsquirrel.com/msconfig/msconfig_xp.html

    http://www.malwareremoval.com/tutorials/runningslowly.php

     

    I also suggest, if you have not done so recentlyu, you run a free diagnostic here:

    Click here: http://www.pcpitstop.com/

    Click: Free PC Health Scan - Overdrive

    Click: battery of tests

    Click: 4. OK, I Want to Run the Tests!

    First time? Click New Members, I suggest you register free (they store tests)

    Then follow the prompts. Once the test is complete, read the information provided under all tabs.

    If you have questions, post them here: http://forums.pcpitstop.com/index.php?showforum=6

     

    Thanks


  5. I will try to work with you a little, but these issues are not malware which is what I do.

     

    You would probably be better off to post here:

    http://forums.pcpitstop.com/index.php?showforum=3

    There are talented folks there who deal with the kind of issues you describe, but let's look here first.

     

    error message >>> post the message word for word exactly as you see it, that is the only way I can try to research it. It may be malware corrupted the program in question and reinstalling the software may correct the error.

     

    aol questions: I do not use aol (never will) so have no knowledge. Yes...malware can effect those programs and the person to talk to would be tech support at aol.

    http://help.aol.com/help/supportcentral/supportcentral.do

     

    Thanks


  6. Thanks for returning your information and the feedback.

     

    Remove combofix from the computer like this:

     

    Click START then RUN

    Now type or copy Combofix /u in the runbox and click OK.

    Note the space between the X and the U, it needs to be there.

     

    Posted Image

     

    To be sure, clean the System Restore files like this:

     

    Turn off System Restore.

    On the Desktop, right-click My Computer.

    Click Properties.

    Click the System Restore tab.

    Check Turn off System Restore.

    Click Apply, and then click OK.

     

    Reboot

     

    Turn ON System Restore,

    On the Desktop, right-click My Computer.

    Click Properties.

    Click the System Restore tab.

    UN-Check *Turn off System Restore*.

    Click Apply, and then click OK.

     

    Run MBAM again to make sure we got all of the junk, no need to post a clean scan result.

     

    Update McAfee and scan the system to make sure it is running right and scanning clean. If you have any problems with the program, contact tech support for instructions.

    http://www.mcafee.com/us/support/

     

    Let me have a report on how the computer is performing at this point.

     

    Some good information for you:

    http://users.telenet.be/bluepatchy/miekiem...owcomputer.html

    http://www.microsoft.com/windowsxp/using/h...ps/mcgill1.mspx

     

    Here is some great information from experts in this field that will help you stay clean and safe online.

    http://users.telenet.be/bluepatchy/miekiem...prevention.html

    http://forums.spybot.info/showthread.php?t=279

    http://russelltexas.com/malware/allclear.htm

    http://forum.malwareremoval.com/viewtopic.php?t=14

    http://www.bleepingcomputer.com/forums/topict2520.html

    http://cybercoyote.org/security/not-admin.shtml

     

    http://www.malwarecomplaints.info/

     

    Thanks...pskelley

    http://pcpitstop.com/about/supportus.asp

    If you are reading this information...thank a teacher,

    If you are reading it in English...thank a soldier.

     

    http://users.telenet.be/bluepatchy/miekiemoes/Links.html


  7. All now seems OK. Is this common or I'm I just a bit thick?

    Please do not quote my instructions, a waste of space. I have learned from many years of removing malware, that nothing is common.

     

    This topic is closed.

     

    Here is some information that might help you avoid this in the future.

     

    Some good information for you:

    http://users.telenet.be/bluepatchy/miekiem...owcomputer.html

    http://www.microsoft.com/windowsxp/using/h...ps/mcgill1.mspx

     

    Here is some great information from experts in this field that will help you stay clean and safe online.

    http://users.telenet.be/bluepatchy/miekiem...prevention.html

    http://forums.spybot.info/showthread.php?t=279

    http://russelltexas.com/malware/allclear.htm

    http://forum.malwareremoval.com/viewtopic.php?t=14

    http://www.bleepingcomputer.com/forums/topict2520.html

    http://cybercoyote.org/security/not-admin.shtml

     

    http://www.malwarecomplaints.info/

     

    Thanks...pskelley

    http://pcpitstop.com/about/supportus.asp

    If you are reading this information...thank a teacher,

    If you are reading it in English...thank a soldier.

     

    http://users.telenet.be/bluepatchy/miekiemoes/Links.html


  8. Welcome to PCPitStop, please be aware that all advice given is taken at your own risk.

    Sorry for the wait, the logs are many, and the volunteers are few.

    When you reply, please use the "Add Reply" button, not the Quote or New Topic buttons.

     

    If you still need help let me say I am at a bit of a loss since I have not seen the HJT log before you started running removal tools so I don't know if something was removed by mistake or not. Do you still have the logs from the scans? If not, show me a new MBAM scan:

     

    Download Malwarebytes' Anti-Malware to your Desktop

    http://www.besttechie.net/tools/mbam-setup.exe

     

    * Double-click mbam-setup.exe and follow the prompts to install the program.

    * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

    * If an update is found, it will download and install the latest version.

    * Once the program has loaded, select Perform FULL SCAN, then click Scan.

    * When the scan is complete, click OK, then Show Results to view the results.

    * Be sure that everything is checked, and click Remove Selected.

    * When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt

    * Please post contents of that file & a new HJT log in your next reply.

    I am still having problems with desk top display and lost programs after running RogueRemover and Malwarebytes.

    Please describe these "problems" in more detail, exactly what programs are you having issues with? Are you receiving any error messages, if so post those "word for word".

     

    Thanks


  9. I can't delete the ewido anti spyware program because I get a message that says 'access denied.'

    1) C:\Program Files\ewido anti-spyware 4.0\ <<< ewido has been obsolete for a long while, uninstall it in Add Remove programs.

    That says to UNINSTALL in ADD REMOVE PROGRAMS, says nothing about DELETE?

    Having used ewido quite a bit myself when it was available, I know it has an uninstaller?

     

    Read and follow the directions in the posted order:

     

    1) Disable the Service

    Click Start > Run and type services.msc

    Scroll down to ewido anti-spyware 4.0 guard and right click on it.

    Click Properties and under Service Status click Stop, then under Startup Type change it to Disabled.

     

    2) Please download ATF Cleaner by Atribune

    http://www.atribune.org/public-beta/ATF-Cleaner.exe

    Save it to your Desktop. We will use this later.

     

    3) Open notepad and copy/paste the text in the codebox below into it:

     

    Folder::
    C:\Program Files\ewido anti-spyware 4.0

    Save this as CFScript

     

    Posted Image

     

    Referring to the picture above, drag CFScript into ComboFix.exe.

     

    This will start ComboFix again. After reboot, (in case it asks to reboot), post the contents of Combofix.txt in your next reply together with a new HijackThis log. (wait until you finish to post the logs)

     

    4) Run ATF Cleaner

    Double-click ATF-Cleaner.exe to run the program.

    Click Select All found at the bottom of the list.

    Click the Empty Selected button.

    Click Exit on the Main menu to close the program.

     

    *Cleaning Prefetch may results in a few slow starts until the folder is repopulated:

    http://www.windowsnetworking.com/articles_...refetch-XP.html

     

    5) Download Malwarebytes' Anti-Malware to your Desktop

    http://www.besttechie.net/tools/mbam-setup.exe

     

    * Double-click mbam-setup.exe and follow the prompts to install the program.

    * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

    * If an update is found, it will download and install the latest version.

    * Once the program has loaded, select Perform FULL SCAN, then click Scan.

    * When the scan is complete, click OK, then Show Results to view the results.

    * Be sure that everything is checked, and click Remove Selected.

    * When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt

    * Please post the log from CFScript, the log from MBAM and a new HJT log.

     

    How is your computer running now.

     

    Thanks


  10. I have a Bluetooth Logitech keyboard and mouse and when the computer was booting up and I tried to use F8 or any other key they are not active until the blue screen comes up. Where can I get info to fix this problem?

    I have no idea, you might try Logitech support:

    http://www.logitech.com/index.cfm/support_...s/&cl=us,en

    or ask that question at the Logitech forum:

    http://forums.logitech.com/

    Is there a better defrag program than MS Defrag Sys tool?

    I use the defrag tool build into Windows myself so I can not tell you if another is better.

     

    http://www.google.com/search?hl=en&q=f...amp;btnG=Search

     

    Thanks


  11. I

    did not have my back up seagate exterrnal drive booted up and running

    You might try making sure it is running and then run MBAM again, it scans all hard drives so it should scan that one. You could also use Symantec, you should be able to choose just that drive but it would not hurt to update and scan the system.

    two of the programs GMT & Run:[optimum online netguide, were not listed, is that a problem?

    Not if you followed the instruction to delete the folders later, It is always best to use the programs uninstaller if one is available.

     

    O4 - Global Startup: GStartup.lnk = C:\Program Files\Common Files\GMT\GMT.exe <<< this is still in the log, make sure that folder in red has been deleted.

    Another question I have is, how do you attach a file to the reply?

    You don't, I do not open file attachments.

     

    Remove combofix from your computer like this:

    Click START then RUN

    Now type or copy Combofix /u in the runbox and click OK.

    Note the space between the X and the U, it needs to be there.

     

    Posted Image

     

    Review this information which will help speed up your computer.

    http://www.netsquirrel.com/msconfig/msconfig_xp.html

    http://www.malwareremoval.com/tutorials/runningslowly.php

    http://users.telenet.be/bluepatchy/miekiem...owcomputer.html

     

    Here is some great information from experts in this field that will help you stay clean and safe online.

    http://users.telenet.be/bluepatchy/miekiem...prevention.html

    http://forums.spybot.info/showthread.php?t=279

    http://russelltexas.com/malware/allclear.htm

    http://forum.malwareremoval.com/viewtopic.php?t=14

    http://www.bleepingcomputer.com/forums/topict2520.html

    http://cybercoyote.org/security/not-admin.shtml

     

    http://www.malwarecomplaints.info/

     

    Thanks...pskelley

    http://pcpitstop.com/about/supportus.asp

    If you are reading this information...thank a teacher,

    If you are reading it in English...thank a soldier.

     

    http://users.telenet.be/bluepatchy/miekiemoes/Links.html


  12. Thanks for returning your information, please look in Notepad under Format and make sure "Word Wrap" is not checked.

     

    Good job :tup: getting Recovery Consolde installed, here is some information for you:

    http://support.microsoft.com/kb/314058

    http://support.microsoft.com/kb/307654

    Recovery Console is a tool that will allow you to recover from a catastrophic system failure, so let's hope you never need it. Many experts believe Microsoft should have installed it by default.

     

    C:\Program Files\Java\jre1.6.0_05\ <<< check Java for an update:

    http://forums.spybot.info/showpost.php?p=1...amp;postcount=2

     

    C:\Program Files\Optimum Online\Netsurf.exe

    http://www.castlecops.com/startuplist-2624.html <<< see this information

     

    C:\Program Files\PrecisionTime\PrecisionTime.exe

    http://www.castlecops.com/startuplist-10014.html

    all of the Gain/Gator junk!

     

    Let's do a little cleaning first:

     

    1) Please download ATF Cleaner by Atribune

    http://www.atribune.org/public-beta/ATF-Cleaner.exe

    Save it to your Desktop. We will use this later.

     

    2) Start > Control Panel > Add Remove programs and uninstall Optimum Online, PrecisionTime, GMT (any other junk you see that should not be there)

     

    3) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

     

    O4 - HKLM\..\Run: [Optimum Online net guide] "C:\Program Files\Optimum Online\Netsurf.exe" -trayicon

    O4 - HKLM\..\RunServices: [MOSearch] C:\PROGRA~1\COMMON~1\System\MOSearch\Bin\mosearch.exe

    O4 - HKCU\..\RunOnce: [] C:\Program Files\Internet Explorer\iexplore.exe http://www.symantec.com/techsupp/servlet/P...000000D2.DMTemp

    O4 - S-1-5-18 Startup: PowerReg Scheduler.exe (User 'SYSTEM')

    O4 - .DEFAULT Startup: PowerReg Scheduler.exe (User 'Default user')

    O4 - Startup: PowerReg Scheduler.exe

    O4 - Global Startup: PrecisionTime.lnk = C:\Program Files\PrecisionTime\PrecisionTime.exe

    O4 - Global Startup: Dell Service.lnk = C:\Program Files\Dell\Solution Center\Service.exe

    O4 - Global Startup: Date Manager.lnk = C:\Program Files\Date Manager\DateManager.exe

    O16 - DPF: Win32 Classes -

     

    Close all programs but HJT and all browser windows, then click on "Fix Checked"

     

    4) Right click Start > Explore and navigate to these files/folders and delete them if there.

     

    C:\Program Files\Optimum Online <<< folder and contents

     

    C:\PROGRAM FILES~1\COMMON FILES~1\System\MOSearch <<< folder and contents

     

    C:\Program Files\PrecisionTime <<< folder and contents

     

    C:\Program Files\Date Manager <<< folder and contents

     

    5) Run ATF Cleaner

    Double-click ATF-Cleaner.exe to run the program.

    Click Select All found at the bottom of the list.

    Click the Empty Selected button.

    Click Exit on the Main menu to close the program.

     

    *Cleaning Prefetch may results in a few slow starts until the folder is repopulated:

    http://www.windowsnetworking.com/articles_...refetch-XP.html

     

    6) Download Malwarebytes' Anti-Malware to your Desktop

    http://www.besttechie.net/tools/mbam-setup.exe

     

    * Double-click mbam-setup.exe and follow the prompts to install the program.

    * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

    * If an update is found, it will download and install the latest version.

    * Once the program has loaded, select Perform FULL SCAN, then click Scan.

    * When the scan is complete, click OK, then Show Results to view the results.

    * Be sure that everything is checked, and click Remove Selected.

    * When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt

    * Please post contents of that file & a new HJT log in your next reply.

     

    I need a report on how the computer is running now.

     

    Thanks


  13. Welcome to PCPitStop, please be aware that all advice given is taken at your own risk.

    Sorry for the wait, the logs are many, and the volunteers are few.

    When you reply, please use the "Add Reply" button, not the Quote or New Topic buttons.

     

    I suggest you keep this computer offline except when troubleshooting, the junk may download more. If you have any tool I use, delete it and download it new from the link I provide. Read and follow the directions carefully, the tools will not work unless you do. The junk can be tough to remove, so do not expect fast or easy.

     

    If you still want help, follow these directions:

     

    1) C:\Program Files\ewido anti-spyware 4.0\ <<< ewido has been obsolete for a long while, uninstall it in Add Remove programs.

     

    2) We need first to disable TeaTimer that it doesn't interfere with fixes. You can re-enable it when you're clean again:

    * Run Spybot-S&D in Advanced Mode.

    * If it is not already set to do this Go to the Mode menu select "Advanced Mode"

    * On the left hand side, Click on Tools

    * Then click on the Resident Icon in the List

    * Uncheck "Resident TeaTimer" and OK any prompts.

    * Restart your computer.

    (leave TT disabled until we finish)

     

    3) A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.

     

    Tutorial

    http://www.bleepingcomputer.com/combofix/how-to-use-combofix

     

    Remove any old copies of combofix before you proceed.

     

    Thanks to sUBs and anyone else who helped with this fix.

     

    It is important that it is saved directly to your Desktop.

     

    Download ComboFix from Here to your Desktop

    • Double click combofix.exe and follow the prompts.
    • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

     

    Post the combofix log and a new HJT log.

     

    Thanks


  14. Thanks for the feedback, that being the case, SAS did a lot of the work for us then.

     

    C:\Program Files\Java\jre1.6.0_01\ <<< update your Java program, see this:

    http://forums.spybot.info/showpost.php?p=1...amp;postcount=2

     

    MBAM is finding nothing, if the same is true with AVG 8, then you should be good to go.

     

    Some good information for you:

    http://users.telenet.be/bluepatchy/miekiem...owcomputer.html

    http://www.microsoft.com/windowsxp/using/h...ps/mcgill1.mspx

     

    Here is some great information from experts in this field that will help you stay clean and safe online.

    http://users.telenet.be/bluepatchy/miekiem...prevention.html

    http://forums.spybot.info/showthread.php?t=279

    http://russelltexas.com/malware/allclear.htm

    http://forum.malwareremoval.com/viewtopic.php?t=14

    http://www.bleepingcomputer.com/forums/topict2520.html

    http://cybercoyote.org/security/not-admin.shtml

     

    http://www.malwarecomplaints.info/

     

    Thanks...pskelley

    http://pcpitstop.com/about/supportus.asp

    If you are reading this information...thank a teacher,

    If you are reading it in English...thank a soldier.

     

    http://users.telenet.be/bluepatchy/miekiemoes/Links.html


  15. Thanks for returning your information and the feedback, I noticed this:

    Super AntiSpyware found 1085 threats and all were fixed.

    and I am guessing that was a lot of cookies, here is information to help with that:

    http://www.mvps.org/winhelp2002/cookies.htm

    http://www.microsoft.com/windows/ie/using/...acy/config.mspx

     

    A friend sent me this tutorial, I will post it in case it will help you, it is certainly optional:

    How to Install Free version AVG 8.0 without LinkScanner feature

    http://russelltexas.com/tutorials/avg8install.htm

     

    I don't like the looks of this item:

    C:\Program Files\Search Settings\SearchSettings.exe

    http://www.google.com/search?hl=en&q=S...amp;btnG=Search

    and will remove it, if you know it is safe, you may leave it.

     

    Windows Defender

    Click on "Tools"

    Click on "General Settings"

    Scroll down to "Real-time protection options"

    Uncheck "Turn on Real-time protection (recommended)"

    Click "Save"

    Make sure to turn your protection back on when you finish.

     

    SUPERAntiSpyware <<< turn this off also, my suggest would be if you do not own the program, to leave it off, it is a resource user.

     

    You may remove (delete) SDFix, we are finished with that program.

     

     

     

    1) How to make files and folders visible:

    Click Start > Open My Computer.

    Select the Tools menu and click Folder Options.

    Select the View Tab. Under the Hidden files and folders heading, select Show hidden files and folders.

    Uncheck: Hide file extensions for known file types

    Uncheck the Hide protected operating system files (recommended) option.

    Click Yes to confirm. Click OK.

    You may reverse this for safety when we are finished.

     

    2) Please download ATF Cleaner by Atribune

    http://www.atribune.org/public-beta/ATF-Cleaner.exe

    Save it to your Desktop. We will use this later.

     

    3) Start > Control Panel > Add Remove Programs and uninstall Search Settings if there.

     

    4) Open HijackThis and choose "Do a system scan only" then check the box in front of these line items:

     

    (if you set this to blank on purpose, you may leave it)

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

     

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - (no file)

    O4 - HKLM\..\Run: [searchSettings] C:\Program Files\Search Settings\SearchSettings.exe

    O9 - Extra button: PokerStars - {3AD14F0C-ED16-4e43-B6D8-661B03F6A1EF} - C:\Program Files\PokerStars\PokerStarsUpdate.exe

     

    Close all programs but HJT and all browser windows, then click on "Fix Checked"

     

    5) Right click Start > Explore and navigate to these files/folders and delete them if there.

     

    C:\Program Files\Search Settings\ <<< delete that folder and contents

     

    6) Run ATF Cleaner

    Double-click ATF-Cleaner.exe to run the program.

    Click Select All found at the bottom of the list.

    Click the Empty Selected button.

    Click Exit on the Main menu to close the program.

     

    *Cleaning Prefetch may results in a few slow starts until the folder is repopulated:

    http://www.windowsnetworking.com/articles_...refetch-XP.html

     

    7) Download Malwarebytes' Anti-Malware to your Desktop

    http://www.besttechie.net/tools/mbam-setup.exe

     

    * Double-click mbam-setup.exe and follow the prompts to install the program.

    * Be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.

    * If an update is found, it will download and install the latest version.

    * Once the program has loaded, select Perform FULL SCAN, then click Scan.

    * When the scan is complete, click OK, then Show Results to view the results.

    * Be sure that everything is checked, and click Remove Selected.

    * When completed, a log will open in Notepad. Please save it to a convenient location. The log can also be opened by going to Start > All Programs > Malwarebytes' Anti-Malware > Logs > log-date.txt

    * Please post contents of that file & a new HJT log in your next reply.

     

    Tell me how the computer is running now.

     

    Thanks...Phil


  16. Welcome to PCPitStop, please be aware that All advice given is taken at your own risk.

    Sorry for the wait, the logs are many, and the volunteers are few.

    When you reply, please use the "Add REPLY" button, not the Quote or New Topic buttons.

     

    As dangerous as the internet is anymore, why would anyone open a file in email they did not know was coming or what it was??

     

    oembios.exe <<< http://www.bleepingcomputer.com/startups/o....exe-23775.html

     

    Thanks to andymanchesta and anyone else who helped with the fix.

     

    Download SDFix and save it to your Desktop

    http://downloads.andymanchesta.com/RemovalTools/SDFix.exe

     

    Double click SDFix.exe and it will extract the files to %systemdrive%

    (Drive that contains the Windows Directory, typically C:\SDFix)

     

    Please then reboot your computer in Safe Mode by doing the following :

    Restart your computer

    After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;

    Instead of Windows loading as normal, the Advanced Options Menu should appear;

    Select the first option, to run Windows in Safe Mode, then press Enter.

    Choose your usual account.

    Open the extracted SDFix folder and double click RunThis.bat to start the script.

    Type Y to begin the cleanup process.

    It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to Reboot.

    Press any Key and it will restart the PC.

    When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.

    Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt

    (Report.txt will also be copied to Clipboard ready for posting back on the forum).

    Finally post the contents of the Report.txt back on the forum with a new HijackThis log

     

    Thanks


  17. Welcome to PCPitStop, please be aware that all advice given is taken at your own risk.

    Sorry for the wait, the logs are many, and the volunteers are few.

    When you reply, please use the "Add REPLY" button, not the Quote or New Topic buttons.

     

    Hey Tony, you have so much junk on this computer it is a wonder it runs at all. I am going to help you clean the junk and while we are doing that I want you to be reading this information:

    http://www.netsquirrel.com/msconfig/msconfig_xp.html

    http://users.telenet.be/bluepatchy/miekiem...owcomputer.html

    Listen carefully, DO NOT do anything with the information except acquaint yourself with it until I tell you to start.

     

    Read and follow all directions carefully...

     

    A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.

     

    Tutorial

    http://www.bleepingcomputer.com/combofix/how-to-use-combofix

     

    Remove any old copies of combofix before you proceed.

     

    Thanks to sUBs and anyone else who helped with this fix.

     

    It is important that it is saved directly to your Desktop.

     

    Download ComboFix from Here to your Desktop

    • Double click combofix.exe and follow the prompts.
    • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

     

    Post the combofix log and a new HJT log.

     

    Thanks


  18. Welcome to PCPitStop, please be aware that All advice given is taken at your own risk.

    Sorry for the wait, the logs are many, and the volunteers are few.

    When you reply, please use the "Add REPLY" button, not the Quote or New Topic buttons.

     

    A word of warning: Neither I nor sUBs are responsible for any damage you may have caused your machine by running ComboFix on your own. This tool is not a toy and not for everyday use.

     

    Tutorial

    http://www.bleepingcomputer.com/combofix/how-to-use-combofix

     

    Remove any old copies of combofix before you proceed.

     

    Thanks to sUBs and anyone else who helped with this fix.

     

    It is important that it is saved directly to your Desktop.

     

    Download ComboFix from Here to your Desktop

    • Double click combofix.exe and follow the prompts.
    • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
    Note: Do not mouseclick combofix's window while its running. That may cause it to stall

     

    Post the combofix log and a new HJT log.

     

    Thanks

×
×
  • Create New...