We will clean up everything when we are done. Hopefully that will stop Avira from alerting you. Some of the tools we are using will cause antivirus to alert you.
Disable Spybot's TeaTimer so it doesn't block the fixes1. Right click Spybot in the System Tray (looks like a calendar with a padlock symbol). Choose
Exit Spybot S&D Resident2. Run
Spybot S&D 3. Go to the
Mode menu, and make sure
Advanced Mode is selected.
4. On the left hand side, choose
Tools >
Resident
uncheck
Resident TeaTimer and
OK any prompt and
Restart your computer.
Note: If TeaTimer gives you a warning afterwards that some changes were made, allow this instead of blocking it.
Go to Start > Run, and copy/paste the following into the Open box:
sc stop Symantec Lic NetConnect serviceNow click
OKNow enter this line
sc delete Symantec Lic NetConnect serviceClick
OKDownload the
Norton Removal Tool (SymNRT) to your Desktop.
Once downloaded please close ALL open browsers, also save any work because this may require a restart.
- Go to your desktop and double click on the removal tool and then click Setup.
- Once open Click Next
- Accept the license agreement and click Next
- Type in the letters/numbers that you see into the text box then click Next.
- Then click Next and the tool will start running.
- Once finished restart the PC and run the tool again to ensure everything has been removed.
----------
Your Java is out of date.Older versions have vulnerabilities that malicious sites can use to infect your system.First install the new
Sun Java Runtime EnvironmentBe sure to close all browser windows before beginning the install.Remove the old version(s)- Go to add/remove programs and uninstall all old versions.
- Be sure not to remove the new version that was just installed.
- Download JavaRa.zip and unzip the file to your Desktop.
- Open JavaRA.exe and choose Remove Older Versions
- Once complete exit JavaRA and delete the program.
- Run CCleaner.
----------
1. Double click
OTMoveIt2.exe to launch it.
If using Vista Right-Click OTMoveIt and choose Run As Administrator2. Click on the
CleanUp! button.
3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
4. Click
YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
- When finished exit out of OTMoveIt2
.
----------
Delete the ISeeYouXP files from the Desktop and also go to C:\ > ISeeYouXP and delete the ISeeYouXP folder.
----------
Download
ATF Cleaner by Atribune to your Desktop.
Alternate download linkNote: Vista users must use Run As Administrator- Under Main: Select Files to Delete choose: Select All.
- Click the Empty Selected button.
- If you use Firefox browser click Firefox at the top and choose: Select All
- Click the Empty Selected button.
If you would like to keep your saved passwords click No at the prompt.
- If you use Opera browser click Opera at the top and choose: Select All
- Click the Empty Selected button.
If you would like to keep your saved passwords click No at the prompt.
- Click Exit on the Main menu to close the program.
Note that your system will run slower for a reboot or two after having used this tool so don't panic. Right click and delete ATF-Cleaner.
----------
Clear your System Restore of infected Restore points.
Reset and Re-enable your System Restore to remove any infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous restore points which are infected, but that's good news)
Turn OFF System Restore- On the Desktop, right-click My Computer
- Click Properties
- Click the System Restore tab.
- Check Turn off System Restore
- Click Apply, and then click OK
.
Restart your computerTurn ON System Restore- On the Desktop, right-click My Computer
- Click Properties
- Click the System Restore tab.
- UN-Check Turn off System Restore
- Click Apply, and then click OK
.
System Restore will now be active again----------
Use the
Secunia Software Inspector to check for out of date software.
- Click Start Now
- Check the box next to Enable thorough system inspection.
- Click Start
- Allow the scan to finish and scroll down to see if any updates are needed.
- Update anything listed.
.
----------
Defragment your hard driveBoot into Safe Mode by restarting your computer - keep tapping F8 until the menu appears.
Use your up and down arrow keys to select
Safe ModeThen click
Start >
Run > type
dfrg.mscIn the top of the window click on the
C: drive
Click the
Defragment button
This can take some time so please be patient.Close Disk Defragmenter when finished
Restart into Normal Mode.A tutorial for disc defragmentation is available at
BleepingComputer.com-----
How is everything now?
There is also a question about versions of programs and running duplicates. For instance there seems to be two versions of Office ( 2003 and 2007 ) on this computer. The 03 version seems to be a suite whereas 07 seems to be only Word.
I would think that uninstalling 2003 would be what to do bit I'm not sure. I use
www.openoffice.orgThere is also a question about the actual OS. i see in the report that it says XP Professional but on the start-up screen ( momentary DOS like screen ) it says Windows Media.
Only Windows Professional can support Media Center. It means you have a TV card and can watch TV from the PC with the right connections between the PC and TV.
The clicking is gone and the frequency for blanking out has been reduced but it still happens from time to time. Could a video card driver update fix this problem?
Possibly. Might need a new card.
Can i follow the same procedures with this PC as i did with the other in the order that you laid it out and get the same or similar results?
Yes but start a new thread and post the MBAM and HJT logs.
When i tried posting the report i got a warning that "The message exceeds the maximum allowed length
( 20000 characters )
Will split it up. Is there a way to zip it or condense it for posting here in/on CH?
Did I forget to add the instructions to upload it at
www.savefile.com ?