Welcome guest. Before posting on our computer help forum, you must register. Click here it's easy and free.

Author Topic: Computer virus and spyware  (Read 8977 times)

0 Members and 1 Guest are viewing this topic.

Robinhood

    Topic Starter


    Rookie

    Computer virus and spyware
    « on: July 27, 2008, 04:35:17 PM »
    Hello,
    I have just finished all of the steps in evil fantasies guide to getting started. I am using a "HP pavillion a1600n" with "amd athlon 64 x 2 dual core processor 3800+ ",  1024MB memory. I am using "Windows XP Media Centre Edition 2005" Here are the three logs requested.
    Thankyou for your help.

    [recovering disk space -- attachment deleted by admin]

    Robinhood

      Topic Starter


      Rookie

      posting my logs
      « Reply #1 on: July 27, 2008, 04:49:33 PM »
      I am not sure my attachments came through.  When I viewed my posting I could not see them. Is that normal or do I have to repost
      Thanks

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: Computer virus and spyware
      « Reply #2 on: July 27, 2008, 04:54:47 PM »
      They're there.

      evilfantasy

      • Malware Removal Specialist
      • Moderator


      • Genius
      • Calm like a bomb
      • Thanked: 493
      • Experience: Experienced
      • OS: Windows 11
      Re: Computer virus and spyware
      « Reply #3 on: July 27, 2008, 05:03:51 PM »
        Open Hijackthis and select
      Do a system scan only.

      Place a check mark next to the following entries: (if there)

      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKCU\..\Run: [WinButler] C:\Documents and Settings\HP_Administrator\Application Data\WinButler\WinButler.exe


      Important: Close all windows except for Hijackthis and then click Fix checked.

      Exit Hijackthis and restart the computer.

      ----------

      Download OTMoveIt2 by OldTimer
      • Save it to your desktop.
      Note: If you are running on Vista, right-click on OTMoveIt2.exe and choose Run As Administrator.

      • Double-click OTMoveIt2.exe to run it.
      • Copy the lines in the codebox below.
      Code: [Select]
      [kill explorer]
      C:\Documents and Settings\HP_Administrator\Application Data\WinButler\WinButler.exe
      EmptyTemp
      [start explorer]
      • Return to OTMoveIt2, right click in the Paste List of Files/Folders to Move window (under the yellow bar) and choose Paste
      • Click the red Moveit! button.
      • Copy everything in the Results window (under the green bar) and paste it in your next reply.
      • Close OTMoveIt2
      .
      ----------

      Next post add the OTMoveIt2 log and let me know how everything is now.

      Robinhood

        Topic Starter


        Rookie

        Re: Computer virus and spyware
        « Reply #4 on: July 27, 2008, 05:40:45 PM »
        here is th last log

        [recovering disk space -- attachment deleted by admin]

        evilfantasy

        • Malware Removal Specialist
        • Moderator


        • Genius
        • Calm like a bomb
        • Thanked: 493
        • Experience: Experienced
        • OS: Windows 11
        Re: Computer virus and spyware
        « Reply #5 on: July 27, 2008, 05:54:39 PM »
        Download Deckard's System Scanner (DSS) to your Desktop.
        Note: You must be logged onto an account with administrator privileges.
        Vista users Right click DSS and Run as Administrator.


        • Close all applications and windows.
        • Double-click on dss.exe to run it, and follow the prompts.
        • When the scan is complete, two text files will open.
          • main.txt <- this one will be maximized
          • extra.txt <- this one will be minimized
        • Copy (Ctrl+A then Ctrl+C) and paste (Ctrl+V) the contents of main.txt and extra.txt in your reply.

        Robinhood

          Topic Starter


          Rookie

          Re: Computer virus and spyware
          « Reply #6 on: July 27, 2008, 06:17:29 PM »
          Here are the two most recent logs you requested

          [recovering disk space -- attachment deleted by admin]

          drmsucks



            Specialist

            Re: posting my logs
            « Reply #7 on: July 27, 2008, 06:18:21 PM »
            I am not sure my attachments came through.  When I viewed my posting I could not see them. Is that normal or do I have to repost
            Thanks

            FYI - You need to be logged in to see attachments.

            Good luck.
            If you don't have time to do it right
                            ...when will you have time to do it over?

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: Computer virus and spyware
            « Reply #8 on: July 27, 2008, 06:39:45 PM »
            Go to add/remove programs and uninstall J2SE Runtime Environment 5.0 Update 6

            Update your Mozilla Firefox Browser
            Recently there have been vulnerabilities detected in older versions of Mozilla Firefox.
            It is strongly suggested that you update to the current version.
            Mozilla Firefox 2.0.0.16
            You can update it by clicking Help > Check for updates...

            I still see WinButler in add/remove programs, try to uninstall it. If it gives you any problems let me know.

            How everything is now?

            evilfantasy

            • Malware Removal Specialist
            • Moderator


            • Genius
            • Calm like a bomb
            • Thanked: 493
            • Experience: Experienced
            • OS: Windows 11
            Re: Computer virus and spyware
            « Reply #9 on: July 27, 2008, 06:41:42 PM »
            If your browser tries to get you to download Firefox 3.0 and you don't want to then go here for the new version of 2.0 http://www.mozilla.com/en-US/firefox/all-older.html

            Robinhood

              Topic Starter


              Rookie

              Re: Computer virus and spyware
              « Reply #10 on: July 27, 2008, 06:53:29 PM »
              J2Se and Winbutler both uninstalled successfully.
              Everything seems to be fine.  I am having problems with my email not sending but I believe it has to do with my provider. Thank you very much for your help. You are very thorough and I can't express enough how gratefull I am not just for my sake but that you give so much of your time to help others.   You deserve a medal
              Thanks :)

              evilfantasy

              • Malware Removal Specialist
              • Moderator


              • Genius
              • Calm like a bomb
              • Thanked: 493
              • Experience: Experienced
              • OS: Windows 11
              Re: Computer virus and spyware
              « Reply #11 on: July 27, 2008, 06:55:44 PM »
              Thanks for the kind words :)

              A few more things to do.

              Final steps and advice.

              1. Double click OTMoveIt2.exe to launch it.
              Vista users right click and choose Run As Administrator
              2. Click on the CleanUp! button.
              3. OTMoveIt2 will download a list from the Internet, if your firewall or other defensive programs alerts you, allow it access.
              4. Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
              5. Once complete exit out of OTMoveIt2

              ----------

              Set a New Restore Point to prevent possible reinfection from an old one
              Setting a new restore point AFTER cleaning your system will enable your computer to roll-back to a clean working state if needed.
              • Go to Start > Programs > Accessories > System Tools and click System Restore
              • Choose the radio button marked Create a Restore Point on the first screen then click Next Give the Restore Point a name then click Create.
              • The new restore point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
              • Next go to Start > Run and type Cleanmgr
              • Click OK
              • Click the More Options Tab.
              • Click Clean Up in the System Restore section to remove all previous restore points except the newly created clean one.
              You can find instructions on how to enable and re-enable system restore here:

              Windows XP System Restore Guide or Windows Vista System Restore Guide
              .
              ----------

              Use the Secunia Software Inspector to check for out of date software.
              • Click Start Now
              • Check the box next to Enable thorough system inspection.
              • Click Start
              • Allow the scan to finish and scroll down to see if any updates are needed.
              • Update anything listed.
              .
              ----------

              Important: You Need to Update Windows and Internet Explorer regularly to protect your computer from the malware and other security threats that are on the Internet. Go to Microsoft Windows Update and get all critical updates.

              If you are running any Microsoft Office version go to the Office Update site and make sure you have at least all the critical updates installed (Free) Microsoft Office Update.

              ----------

              Make sure all of your security programs are up to date and run scans with them regularly. Turn on the automatic updates in all of them. Do scans once or twice a week minimum. I can not stress how important it is to keep your antivirus, antispyware and firewall up to date.

              Here are some great FREE tools to help you keep from getting infected again. These tools use little or no resources so won't slow down your PC.

              Concerned about Browser Security? Consider using Mozilla Firefox 3.0 with Adblock Plus and NoScript

              To prevent unknown applications from being installed on your computer install WinPatrol 2008
              * Using Winpatrol to protect your computer from malicious software

              I suggest using SiteAdvisor. SiteAdvisor rates sites on business practices and spam. Safety ratings from McAfee SiteAdvisor are based on automated safety tests of Web sites.

              SpywareBlaster - Secure your Internet Explorer to make it harder for these ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
              * Using SpywareBlaster to protect your computer from Spyware and Malware
              * If you don't know what ActiveX controls are, see here

              Check out Keeping Yourself Safe On The Web for tips and free tools to help keep you safe in the future.

              Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.


              Robinhood

                Topic Starter


                Rookie

                Re: Computer virus and spyware
                « Reply #12 on: July 28, 2008, 10:32:27 AM »
                I am having problems after running the secunia software inspector. It tells me

                "This installation of Macromedia Flash Player 7.x is insecure and potentially exposes your system to security threats!"

                and   "This installation of Macromedia Flash Player 8.x is insecure and potentially exposes your system to security threats!


                I have downloaded the updates and have the new flashplayer. I can not find anything in add or remove programs .

                I reran the scan and the results come back the same

                evilfantasy

                • Malware Removal Specialist
                • Moderator


                • Genius
                • Calm like a bomb
                • Thanked: 493
                • Experience: Experienced
                • OS: Windows 11
                Re: Computer virus and spyware
                « Reply #13 on: July 28, 2008, 10:38:15 AM »
                Flash Player can be a pain when it comes to updating. It doesn't overwrite the old version completely and leaves old useless files around that Secunia see.

                Do this.

                Download the Flash Player Uninstaller and save it to your desktop.

                Run the uninstaller program and then reboot your computer to complete the uninstall.

                Download and install the latest version of Flash Player

                Robinhood

                  Topic Starter


                  Rookie

                  Re: Computer virus and spyware
                  « Reply #14 on: July 28, 2008, 04:05:53 PM »
                  the advice on flashplayer worked great.
                  I now have a lot of programs on my computor that I did not have before. should I leave them all?