Laptop Buggy, Followed instructions, logs attatched.

[evanesco]

Hi there,

Got my cousins laptop here. Just keeps popping up Personal Antivirus warnings, which I know MAM deals with. I've reset her IE, too many toolbars running, MyWebSmiley and the likes. Just going to run StartUpLite as well.

She's running Windows Vista on a Dell. Processor is Intel Pentium Core Duo. 2GB Ram.

I've ran the logs and it seems fine right now. Also going to have secunia do a quick check while I'm waiting for you guys to get back to me.

Many thanks.

[attachment deleted by admin]

[kpac]

Please re-open HijackThis and scan.  Check the boxes next to all the entries listed below.

O2 - BHO: Media Access Startup - {25B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Media Access Startup\1.0.0.610\HPIEAddOn.dll
O2 - BHO: NP Helper Class - {35B8D58C-B0CB-46b0-BA64-05B3804E4E86} - C:\Program Files\Internet Saving Optimizer\3.1.0.3900\NPIEAddOn.dll

Now close all windows other than HijackThis, then click Fix Checked.  Close HijackThis.  Reboot into safe mode.

Restart your computer and as soon as it starts booting up again continuously tap F8. A menu should come up where you will be given the option to enter Safe Mode.

Please go to Start > Control Panel > Add/Remove Programs and remove the following (if present):

Internet Saving Optimizer
Media Access Startup

Please note any other programs that you don't recognize in that list in your next response.

Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these folders (if present):

C:\Program Files\Media Access Startup\
C:\Program Files\Internet Saving Optimizer\

Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these files (if present):

C:\Program Files\Media Access Startup\1.0.0.610\HPIEAddOn.dll
C:\Program Files\Internet Saving Optimizer\3.1.0.3900\NPIEAddOn.dll

After that, Reboot, and post a new HijackThis log here in a reply.

[evanesco]

Thanks, done that. Not sure what programmes should be removed, so I took a screen shot.

[attachment deleted by admin]

[kpac]

Looks good. How's the PC running?

Have you got a firewall installed?
- Free Firewalls. Remember to install only ONE!

• Comodo Personal Firewall - A firewall is your first line of defense in protecting private information. This is an excellent firewall.
  
• Sunbelt-Kerio - Protect yourself from hackers and other malicious attacks on the internet.
  
• Zone Alarm - Easy-to-use firewall blocks hackers and other unknown threats.
  

You should have one antivirus program, one or more antispyware program(s), and one firewall running on your PC.


- Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows.

1. Turn off System Restore.
      On the Desktop, right-click My Computer.
      Click Properties.
      Click the System Restore tab.
      Check "Turn off System Restore".
      Click Apply, and then click OK.

2. Restart your computer.

3. Turn ON System Restore.
      On the Desktop, right-click My Computer.
      Click Properties.
      Click the System Restore tab.
      Uncheck "Turn off System Restore".
      Click Apply, and then click OK.


- Keep your operating system up to date by visiting Microsoft Windows Update frequently.


- Be aware of what emails you open and what websites you visit. MyWOT (for Firefox) or McAfee Site Advisor (for Firefox and Internet Explorer) warns you when you visit bad or unwanted sites.

[evanesco]

Thanks, going to download comodo, I'm guessing Windows Firewall isn't secure enough.

Seems fine now, I knew isn't wasn't too bad, you know what teens are like adding webfetti and the like.

[kpac]

Thanks, going to download comodo, I'm guessing Windows Firewall isn't secure enough.

Yes, I would recommend Comodo over Windows - far better.

you know what teens are like adding webfetti and the like.

Yes I do, being one myself. Fortunately, I am one of the sensible ones.

[evanesco]

Yes, I would recommend Comodo over Windows - far better.
Yes I do, being one myself. Fortunately, I am one of the sensible ones.

Glad to see you are mis-spending your formative years wisely, not downloading webfetti =)

Many thanks for you're help.

[kpac]

Many thanks for you're help.

No problem at all. Safe computing.