Matt

There are the kind where the user is "tricked" into installing something malicious. There are also downloads that require no user-interaction at all. These usually enter the user's computer by means of exploits in the browser, email client, OS, etc. Windows Metafile vulnerability is a good example.

I have WAMP, and I also do not have those files. I just assumed they were part of httpd.conf. I'll look into mine..

Please read this topic: http://www.besttechie.net/forums/How-To-Po...Log-t12175.html

Here is a great site full of tips and information for Mac newcomers: http://www.myfirstmac.com/

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

Congrats! Your computer is clean! How is your system running? The following is a list of tools and utilities that I like to suggest to people. This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again. Firefox- Internet Explorer is not the most secure and best browser. There are safer and better alternatives available. I recommend Firefox, however Opera is good as well. SpywareBlaster - Great prevention tool to keep malware from installing on your system. SpywareGuard - Works as a Spyware "Shield" to protect your c

Hi Jennifer, Please scan with HJT and place a check next to the following items: O4 - HKLM\..\Run: [NateOnMain] C:\Program Files\NATEON\Addin\B926D852-194B-4c62-9C73-3F0ECA8950EA\NateOnMain.exe O4 - HKCU\..\Run: [NateOnMain] C:\Program Files\NATEON\Addin\B926D852-194B-4c62-9C73-3F0ECA8950EA\NateOnMain.exe Then, make sure all browser windows and other applications are closed, and click the Fix Checked button. Please double-click Killbox.exe to run it. Select: Delete on Reboot then Click on the All Files button. [*]Please copy the file paths below to the clipboard by highlighting ALL of them

jennifer, I'm waiting for a response on those files you submitted for me. In the meantime, can you tell me how your computer is doing?

Try these names when disabling: Session Simulator Web Brower Distribute Support Security Support Application Manager Toggle Analysis Typer Interface Service

Lets try again. Go to Start > Run and type Services.msc then hit Ok Scroll down and find the below service: comcli When you find it, double-click on it. In the next window that opens, under the General tab click the Stop button, then click the drop-down box to change the Startup Type to Disabled. Now hit Apply and then Ok. Repeat the above steps with the following services: sessionsim spoolsvc_c1 spoolsvc_c2 spoolsvc_c3 spoolsvc_m tgglana typemgr2 Open HiJackThis, click on Misc Tools, then click on Delete an NT Service. A window will pop up. Enter the below item into that field (make sure

Skip that part, and continue with the rest of the directions. We'll work on this agin once we get a new HJT log.

Yes, make sure you 'fix' it with HJT by checking this line: O23 - Service: comcli Service (comcli) - Unknown owner - C:\WINDOWS\system32\comcli.exe (file missing) If that still doesn't work, skip it and go onto the others in the list.

Alrighty, back to work... Please scan with HJT and place a check next to the following items: O4 - HKLM\..\Run: [MSNMessenger] "C:\Program Files\MSN Messenger\Device Manager\Loc\3099\msnmsgr.exe" O4 - HKLM\..\Run: [servcies] C:\WINDOWS\system32\servcies\servcies.exe O4 - HKLM\..\Run: [smss] "C:\WINDOWS\system32\DirectX\Dinput\smss.exe" O4 - HKLM\..\Run: [netfxsbs20] C:\WINDOWS\Microsoft.NET\\Framework\netfxsbs20.exe O4 - HKLM\..\Run: [fxserv] C:\WINDOWS\system32\fxcursn.exe O4 - HKCU\..\Run: [MSNMessenger] "C:\Program Files\MSN Messenger\Device Manager\Loc\3099\msnmsgr.exe" O4 - HKCU\..\Run: [

*Matt glances at that site

Boy you've got a messy log! My directions may take a while to complete, but please follow them exactly. Let's get to work... Please print out these directions for use if/when you cannot access this page. Please download VundoFix.exe to your desktop Double-click VundoFix.exe to run it. Click the Scan for Vundo button. Once it's done scanning, click the Remove Vundo button. You will receive a prompt asking if you want to remove the files, click YES Once you click yes, your desktop will go blank as it starts removing Vundo. When completed, it will prompt that it will reboot your computer, click

Hi jennifer. Just post a new HJT log and we'll work from there.

Hi jennifer, First download AVG Anti-Spyware from HERE and save that file to your desktop. This is a 30 day trial of the program Once you have downloaded AVG Anti-Spyware, locate the icon on the desktop and double-click it to launch the set up program. Once the setup is complete you will need run AVG Anti-Spyware and update the definition files. On the main screen select the icon "Update" then select the "Update now" link.Next select the "Start Update" button, the update will start and a progress bar will show the updates being installed. [*]Once the update has completed select the "Scanner"

For assistance with malware, please read How To Post a Correct HijackThis Log in the Malware Removal Forum.

Happy Birthday!

Moving to Malware Information...

SpyCrush is listed as a Rogue Anti-Spyware Application. It is said to be aggressive and have deceptive advertising. List of rogue anti-malware applications: http://spywarewarrior.com/rogue_anti-spyware.htm

Congratulations to therock247uk, who has received the Microsoft MVP Award. Security 2007. therock247uk is a great help here at BT, and the driving force behind 247Fixes and he has helped countless number of people with spyware problems, malware issues, browser hijackings and other computer ills. He has done this quietly, but is well known and highly respected among the people in the online security community. Along with administrating at various sites and assisting in chat support, he also trains others to fight malware (he was one of my teachers!). About the MVP Program WTG r0ck!

Moving to Mac support...

Hi mr x. Welcome to Besttechie. If you would like to start a thread in our graphic design forum for a 'signature contest' you can do that. All members have the right to start threads and add polls to them. It likely won't be 'sponsored' (for lack of a better term) by the administration, but I'm willing to bet that any of our moderators would be more willing to close it for you when submission time has expired (you'll have to ask nicely though ). Matt

We own a scanner that can scan slides (or negative) 1-3 at a time. Then you can use those images to create your slide show.