rookie with virus problem

[evilfantasy]

Post a new HijackThis log please.

[Broni]

Look...
We have to start with some basics...
You have to answer questions asked, and you have to strictly follow instructions given to you.
So let's start fresh.
Did you install Comodo firewall, as asked by dairyman?
Did you uninstall XysoftSE, as asked by evilfantasy?
Did you install Spybot from a link given by myself, not from wherever you wanted?

Now, I'm gonna take a look at your HJT log, and I'm gonna post my findings.
In your next post, you'll answer the above three questions, and follow instructions from my HJT log findings.
If you'll do so, we'll work together to resolve your computer problem, if you won't, I'm out of this thread.

[Broni]

1. Print this post out, since you won't have an access to it, at some point.

2. Download, and install Spybot (if you don't have it) from here: http://www.safer-networking.org/en/download/index.html

3. Close all windows, except for HJT.

4. Put a checkmark next to following HJT entries:

- O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\PROGRAM FILES\AOL\AOL TOOLBAR 2.0\AOLTB.DLL (file missing)

- O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\PROGRAM FILES\AOL\AOL TOOLBAR 2.0\AOLTB.DLL (file missing)

- O4 - HKCU\..\Run: [bprsRWe7T] QTWWSOCK.EXE

- O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

- O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab

- O16 - DPF: {A0EAC162-A012-4AD8-B2E1-D5A0BBBCDA51} (PopupSh Control) - http://206.222.17.186/images/PopupSh.ocx

5. Click on "Fix It" button.

6. Restart your computer in Safe Mode (F8)

7. Run Spybot (click on updates, first), and fix whatever it asks you to fix.

8. Open Windows Explorer. Go Tools>Folder Options, put a checkmark next to "Show hidden files, and folders".

9. Delete following files (if they still exist):

Nothing to delete

10. Turn off System Restore.

11. Restart in Normal Mode.

12. Turn System Restore on.

13. Run HJT again, and post back its log back here.

[rookie47]

OK, I'm going to do these last things as asked, the only thing I haven't done is the firewall, I'll do that, I know I must seem to be a pain in the *censored* and I apologize for that, I'm not good with the computer things at all, that's why I'm here,  so when I am doing something you guys ask I'm always wondering if I'm doing it correctly, no need to bail, trust me, I'm doing the best I can.

Here's another stupid question from me, I'm running Windows ME, these are the requirements for the firewall, Is it compatible with ME?

Windows 2000 (32 bit ALL)
Windows XP (32 bit ALL)
Windows 2003 (32 bit ALL)
64 MB available RAM
32 MB of available free hard disk space

[Broni]

Is it compatible with ME?

Good question...let me do some search...

[Broni]

As far, as I can see, the only free firewall compatible with ME, would be older version of Jetico firewall:
http://www.jetico.com/download.htm
(second to last)

[WillyW]

...
Here's another stupid question from me, I'm running Windows ME, these are the requirements for the firewall, Is it compatible with ME?

For what it is worth:

I use Win98SE.
Quick check through some files, and I have the original ZoneAlarm install program,  filename = zlsSetup_61_744_000_en.exe
It is about 10 meg.    I guess I could use an online host, ... upload it, and you could d/l it.....  if that would help you.
I checked the url that I kept with it.... where I got it...
http://pcworld.com/downloads/file/fid,7228-order,1-page,1-c,firewalls/description.html
and it looks to me like they've updated it, and the version there is no longer Win98 compatible.
( I'm assuming that if it works with Win98, that you can use it with WinME )

Next idea:
I also have the original install file for Sygate firewall.
filename =  sygate562808.exe
Again,  I could upload it somewhere, if that would help you.
I tried it too, with Win98.
Upon checking the url from where I got it,  this might not be necessary! 
http://www.pcworld.com/downloads/file/fid,8132-order,1-page,1-c,firewalls/description.html
And it looks to me like it is still available for download.
It specifically lists WinME as an os.   

Another link to check out:
http://www.oldversion.com/program.php?n=sygate
You'll see what it is as soon as you get there. 

Same for:
http://www.oldversion.com/program.php?n=zalarm

Then:
http://www.oldversion.com
and scroll down to     Security     .    Others are listed there.


As far as which software is best, which version to use, etc. , from anything I've mentioned above  -- get with Broni first.    The best I could tell you to try would be the two I've already mentioned that I've tried.   They worked.
Perhaps Broni knows more about which is best though.

I hope something here is useful to you. 

[Broni]

Nice finds, Willy...
That Jetico firewall is also outdated (they have newer version, but it doesn't support ME), but it's better, then nothing.

[evilfantasy]

All good suggestions.

The only problem with older versions is, well they are old and not updated with the current protections.

A firewall that will work with ME and is current is Outpost http://filehippo.com/download_outpost_firewall/

It is good and easy to figure out.

[Broni]

Surely, it looks like the best choice...

[rookie47]

Well, before I saw the last post by Evil I went and downloaded the Jetico, only to be told it's non compatible, now there is no uninstall folder to uninstall it, seems this is a common problem from some of the threads I saw when doing a search to uninstall it.

So, it looks like I've run into my own personal firewall myself, as usual

[Broni]

Nothing under Add/Remove in Control Panel?

[evilfantasy]

If you got the incompatible warning then it did not install properly, i.e. no uninstaller will be there.

Look in C:\program files\jetico Open the folder and look for an uninstaller.

If there run it, if not then delete the entire folder.

Then delete the installer from the desktop (or wherever you had it) and it should be gone.

You can run CCleaner afterwards to be sure it is gone.

[rookie47]

Can't open the control panel, keep getting this when I try ,,,

I get this error message: Windows cannot find C\WINDOWS\rundll32.exe


Jetico Uninstaller - Not to be found, searched the net and have seen posts about this problem yet no solutions.

Any advice, other than telling me to put the computer back on the desk ,,, I'm about to throw it out the window!

I do have a question, What is the typical cost to upgrade to say XP or better? What is better I should ask,, AND, can you guys make sure I install it correctly? I could use the upgrade anyway, I use it for business and can't open certain files like xls for example ,,,, You know with all these fixes and everything I've kind of lost track of how many I've done, Have I done 5 fixes or 6? So I guess the question I have to ask is, Do I feel lucky enough to install a new OS with your help, Well do I ,,,,?

[Broni]

First of all, you have to see, if your computer is ready for Windows XP:
System Requirements for Windows XP Service Pack 2:
http://www.microsoft.com/windowsxp/sp2/sysreqs.mspx
(you better have those numbers double, or better yet, triple)

You are gonna need full version of XP. At Amazon, you can get it for $123:
http://www.amazon.com/Microsoft-Windows-Home-FULL-VERSION/dp/B00022PTRU