Computer Hope

Software => Computer viruses and spyware => Topic started by: Legendaryswan on April 30, 2009, 11:58:02 PM

Title: Can someone please have a look at the logs from my scans
Post by: Legendaryswan on April 30, 2009, 11:58:02 PM
I ran the scans suggested in the section about malware removal help.

I ran SAS overnight and in the morning my computer was off.  When I tried turning it on instead of the normal one 'beep' there were two, and my computer wouldn't turn on.  I left it off for about 4 hours and it turned on after the third go.

Don't know what that is all about.

[attachment deleted by admin]
Title: Re: Can someone please have a look at the logs from my scans
Post by: Karnac on May 02, 2009, 01:34:43 PM
If you have AMIBIOS

2 Beeps
Two beeps means there has been a parity error in base memory. This is an issue with the first 64KB block of memory in your RAM. The solution is usually to replace the memory.
Title: Re: Can someone please have a look at the logs from my scans
Post by: harry 48 on May 02, 2009, 02:05:01 PM
http://www.computerhope.com/help/ami.htm

go to above and read , harry
Title: Re: Can someone please have a look at the logs from my scans
Post by: evilfantasy on May 02, 2009, 02:18:19 PM
Go to Add or Remove Programs and uninstall:

- Yontoo Layers or anything with Yontoo in the name.

----------

Open HijackThis and select Do a system scan only.

Place a check mark next to the following entries: (if there)

.
Important: Close all windows except for HijackThis and then click Fix checked.

Exit HijackThis.

----------

Download ComboFix© by sUBs from one of the below links. Be sure top save it to the Desktop.

Link #1 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link #2 (http://subs.geekstogo.com/ComboFix.exe)

**Note:  It is important that it is saved directly to your Desktop

DO NOT run it yet!

Note: the below instructions were created specifically for this user. If you are not this user, DO NOT follow these directions as they could damage the workings of your system

Delete these files/folders, as follows:

1. Go to Start > Run > type Notepad.exe and click OK to open Notepad.
It must be Notepad, not Wordpad.
2. Copy the text in the below code box by highlighting all the text and pressing Ctrl+C

Code: [Select]
KillAll::

Driver::
Ms-java

Folder::
C:\Program Files\AskBarDis
C:\Program Files\Yontoo Layers Client for Internet Explorer


3. Go to the Notepad window and click Edit > Paste
4. Then click File > Save
5. Name the file CFScript.txt - Save the file to your Desktop
6. Then drag the CFScript (hold the left mouse button while dragging the file) and drop it (release the left mouse button) into ComboFix.exe as you see in the screenshot below. Important: Perform this instruction carefully!

(http://i154.photobucket.com/albums/s258/evilfantasy69/CFScript-1.gif)

ComboFix will begin to execute, just follow the prompts.
After reboot (in case it asks to reboot), it will produce a log for you.
Post that log (Combofix.txt) in your next reply.

Note: Do not mouseclick ComboFix's window while it is running. That may cause your system to freeze
Title: Re: Can someone please have a look at the logs from my scans
Post by: Legendaryswan on May 03, 2009, 02:30:32 AM
Evilfantasy,

I ran through the instructions exactly as they are and when I dropped the Notepad document on the ComboFix I got an error message, shown below.

(http://img217.imageshack.us/img217/1317/screenshotg.jpg) (http://img217.imageshack.us/my.php?image=screenshotg.jpg)
Title: Re: Can someone please have a look at the logs from my scans
Post by: evilfantasy on May 03, 2009, 09:56:40 AM
Delete ComboFix and download it again.