Computer Hope
Software => Computer viruses and spyware => Topic started by: Drd on August 21, 2008, 03:33:06 PM
-
Hello: I use Windows XP Service Pack 2. I use it in an HP Pavillion Laptop. My windows is authentic. I have overall 55 Gig memory with 17 Gig free. That's all I know about my computer, I think.
I have both Firefox Version 3.0.1 and IE installed. My Firefox browser crashes often, like every couple of days. It shuts down and I get a message from the Firefox people, "Sorry, your browser has crashed, would you like to report this?" I do, but nothing gets better. I never had this problem with whatever version was before Firefox 3. That worked just great.
Also, my IE doesn't work right. The version is 7.0.5730.13. Whenever I go to the IE, and then go to a site, immediately some sort of bogus site comes up that warns me that my computer is infected, and that I must immediately download something or other program to be safe again. My McAfee site advisor flashes a warning on that saying that this site itself is dangerous.
More info: There is a small red shield on the right bottom of my tool bar (is that the horizontal blue bar that runs across the bottom of the page, next to the clock?) When I roll the mouse over this it says " Windows Security Alerts". The shield is red, meaning that it is turned off, but I can't get it turned back on again. I went to my Control Panel and tried both "System" where it says to turn it on, and also the Security section, but nothing works. I am telling you this because maybe this is why I get this problem with my IE, I don't know.
Also, a couple of months ago, I free downloaded from ZDNET a program called shampoo that offered to help clean my register. I may have turned off the Security myself, I'm not sure. The program expired after only about 2 weeks, so I couldn't go back and fix whatever may have happened there.
So, this is my problem. Also, another weird thing that happens with my browsers is that sometimes I can't enter the main site of something. For example, if I want to read the NYTimes, I can't just use, www.nytimes.com. Instead, I have to go to my history, click on an old page of the Times that I've read, and enter that way. The same thing goes for my online university. Often, I can't connect to my sign in page and have to use some such backdoor.
Thanks so much for your help. I look forward to clearing this up. In peace, Dr. D.
-
http://www.computerhope.com/forum/index.php/topic,46313.0.html
We should have this cleared up I personally think Its a virus.
so if it is I need you to follow the instructions posted in the Link I provided at the top.
When your done make sure we have all three logs (provided in link).
-
Hello Pink Floyd and others. Why doesn't my McAfee pick this up when I do a virus scan? Of course, I haven't updated it recently..
Anyway, I will try what you suggest and then be back to let you know if it worked.
In peace Dr D
-
Hello Pink Floyd and others. Why doesn't my McAfee pick this up when I do a virus scan? Of course, I haven't updated it recently..
Anyway, I will try what you suggest and then be back to let you know if it worked.
In peace Dr D
Things can still get past Antivirus program I have a trojan on my Other PC and Norton, AVG, and Kaspersky all wont Detect it.
The reason we need the logs is so we can see everything thats on your PC and running on your PC.
!~*:.Pink Floyd.:*~!
-
Hello again, Mr. Pink Floyd. Actually I went to a Pink Floyd concert in around 1972 and am glad to still have my hearing! Anyway, what you are suggesting sounds very complicated but I'm glad to give it a try. I trust the computer hope people and have always gotten good results. So here goes...
Downloading AVG at this very moment. It says it will take 2 hours. So, can I check over the list of my add and delete programs while we're waiting for that to get your advice on what should be deleted or should we just wait. By the way I do have AVG spyware but not AVG virus scan.
Thanks
Dr. D.
-
OK. Here is the stuff I'm wondering about deleting:
ABBYY Fine Reader Professional Edition
Activation manager
ALPS Touch Pad Driver
Applian FLV Player
DV Z2
Flash Player 7
Flash Player Pro v3.51
FLV Converter 3
Microsoft.NET Framework 1.1
MIK SOF Mobile 3GP Converter
MIK SOF Mobile AMR converter
MIK SOF mobile media converter
MSXML 4.0 SP2 (KB 927978)
MSXML 4.0 SP2 (KB 936181)
Omni PagePro 9.0
Quick Launch Button 5.10 BS
Rhapsody Player Engine
Speed Optimizer
Windows Registry Cleaner 2.6
Can I delete all of these? Or which of these do I need to save?
Thanks. Dr.D
-
Just concentrate on getting the malware scan logs. Those are all either needed or legitimate programs.
-
OK. It will take me a while to download the programs and then make the scans and post the logs here. I'm still 2 hours and 2 minutes away from the AVG download being finished. I see I"ll need to download a couple of more programs to complete this project. Should I download them all simultaneously? Do you have a suggestion as to how to do the downloads quicker?
Thanks again. Dr.D
-
Download then one at a time that way it should be faster.
-
OK thanks, then I'll just have to wait to get these all downloaded and will post the logs here when ready. See you then. Dr. D.
-
OK thanks, then I'll just have to wait to get these all downloaded and will post the logs here when ready. See you then. Dr. D.
Well stick bye your side
Also Theres no need to download AVG or any other of the programs I talked about With the trojan I had.
Just get the logs like Evil fantasy said.
-
Hello again: I downloaded AVG because in the instructions on dealing with malware that you linked to, it said to follow all the steps, and step A was for people with expired anti-virus programs, like me, so I had to download the program. I don't know enough about what goes to know when to skip a step, so I didn't skip that. And, to get the logs, do I have to download the programs, or just somehow run them on my computer? I'm getting a little confused that maybe I don't need to do these downloads. Please explain.
Thank you
Dr. D.
-
Specifically, I see that downloading and running CCSlim is part of the instructions. Yet, Mr. Pink Floyd said to just stick to getting the logs. So, does that mean I can skip the CCSlim step, and save time through one less download, or should I do that step anyway? Thanks. Dr. D.
-
Download and run CCleaner. It's a small download and shouldn't take long.
-
Hello helping friends: I gotta tell you that I've finished the AVG download and am scanning. So far I've found a series of about 6 Trojan Horses. I"ll keep you posted. I've downloaded the CC thing and will go to that next. Thanks for everything and stay tuned! Dr. D.
-
AVG might take care of everything on it's own, but it never hurts to be thorough.
-
yes I would just stick to getting the logs and following the instructions.
I will be leaving this thread so I dont cause any farther complications.
!~*:.Pink Floyd.:*~!
-
Your doing fine David. I haven't moved the thread yet until I know for sure what were dealing or not dealing with.
-
I'm attaching the log of the SuperAntiSpyware
[recovering disk space -- attachment deleted by admin]
-
Here is another log from SuperAntiSpyware. I don't know if there was supposed to be two, but there were.
[recovering disk space -- attachment deleted by admin]
-
Topic moved to the Computer viruses and spyware forum.
-
Hello helping friends: Attached is the log for Malwarebytes Anti-Malware
[recovering disk space -- attachment deleted by admin]
-
Making good progress now. One more log.
-
Hello: I just wanted you to know that I found my way into this forum where the thread is now. Also, I'm working on installing a new Java script, apparently that will take about an hour. So, I'll do that and then go to the next step which is HiJack this.
I'm glad you are still there and I have to apologize for all the trouble you're taking. Many thanks. Dr. D.
-
No problem, it's why were here. At least you will know everything is up to date and malware free when we are done.
-
Hello! I hope you're still out there. Here is the last log, from HJT.
Many thanks and what's next? Dr. D.
[recovering disk space -- attachment deleted by admin]
-
Open HijackThis and select Do a system scan only.
Place a check mark next to the following entries: (if there)
- O2 - BHO: (no name) - {AF8938AB-C445-4710-85E8-B964C1B42E12} - C:\WINDOWS\system32\jkkIAstt.dll (file missing)
- O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll (file missing)
- O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)
Important: Close all open windows except for HijackThis and then click Fix checked.
Once completed, exit HijackThis and restart the computer to register the changes.
----------
How is everything now?
-
Well, I don't know just what you mean by "how are things now" but I can tell you that my start up time is cut in about half. It was up to about 3 or 4 minutes. It's still not like when I bought the computer, but it is better.
The IE browser does not have that malicious pop-up. My Firefox is still really slow on start up.
So, that's it from here. What is your diagnosis, can we consider this "all-clear"? Thanks a million! Dr. D.
-
Download and install CleanUp!.exe (http://stevengould.org/downloads/cleanup/CleanUp452.exe)
Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:- Click Options...
- Move the arrow to Standard CleanUp!
- Uncheck the following: (if checked)
- Delete Newsgroup cache
- Delete Newsgroup Subscriptions
- Click OK
Click the CleanUp! button to start the program. Reboot/logoff when prompted.
----------
Set a New Restore Point to prevent possible reinfection from an old one
Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.
- Go to Start > Programs > Accessories > System Tools and click System Restore
- Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
- The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
- Next go to Start > Run and type Cleanmgr
- Click OK
- Click the More Options Tab.
- Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.
You can find instructions on how to enable and re-enable system restore here:
Windows XP System Restore Guide (http://www.bleepingcomputer.com/forums/tutorial56.html) or Windows Vista System Restore Guide (http://www.bleepingcomputer.com/tutorials/tutorial143.html)
.
----------
Use the Secunia Software Inspector (http://secunia.com/software_inspector) to check for out of date software.
- Click Start Now
- Check the box next to Enable thorough system inspection.
- Click Start
- Allow the scan to finish and scroll down to see if any updates are needed.
- Update anything listed.
.
----------
Important: You Need to Update Windows and Internet Explorer regularly to protect your computer from the malware and other security threats that are on the Internet. Go to Microsoft Windows Update (http://windowsupdate.microsoft.com/) and get all critical updates.
----------
How is "the computer" now?
-
Hello: I'm moving along with the instructions you've given me, but I have a question:
About the Secunia: Their report of what needs updated includes multiple versions of some programs.
For example: Macromedia Flash 8.0 and also 5.0. What should I do about this? Should I update all versions or try and find and delete the older versions. If so, where would I find them to delete them?
Also: The Adobe Flash player version 9.0.115.0 is listed twice and the same update is suggested. Does that mean that there are two copies of the same version on the computer, or what? What do I need to do about this?
Thanks again. Dr. D. By the way, in th meantime, I'm updating the MS stuff like explorer and XP.
Do you have any advice as to how I can avoid such a mess in the future? Thanks.
-
Do this to remove all unstable older versions of Flash.
Download the Flash Player Uninstaller (http://www.adobe.com/shockwave/download/alternates/) and save it to your desktop.
Run the uninstaller program and then reboot your computer to complete the uninstall.
Download and install the latest version of Flash Player (http://www.adobe.com/go/getflashplayer).
You may need to restart for the changes to take effect.