Matt

Welcome back! Download smitRem.exe and save the file to your desktop. Double click on the file to extract it to it's own folder on the desktop. Place a shortcut to Panda ActiveScan on your desktop. Please download the trial version of Ewido Security Suite here: (if you already have Ewido, please still follow the setup directions) http://www.ewido.net/en/download/ Please read Ewido Setup Instructions Install it, and update the definitions to the newest files. Do NOT run a scan yet. If you have not already installed Ad-Aware SE 1.06, follow these download and setup instructions, otherwise, chec

Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.

Hey handplane. Statcounter places a cookie so that if you go to a site that has it, you will be recognized as a returning visitor. It doesn't track where you go beyond that website. Just so you know, ad-aware also flags yahoo cookies.

Nawww I have no way to check logs... I'm sure I'll hear about the answer, it's been posted on a few sites so someone may figure it out... http://www.statcounter.com/ free tool shows where visits are coming from

I would suggest a third party firewall over the windows one because of more functionality, and more protection. The windows one will not block possible malicious outgoing packets like 3rd party apps could.

Kerio Personal Outpost Free

Alright. Your log is clean. I'm closing this topic now.

Hi IEatHardDrives. Jotti is a very good scanner, and you probably shouldn't have touched those files if they came up clean. However, yes the could have been part of malware; the fact that it was uncertain is why I had you do a scan. How is your system running now? Also, could you post a HJT log please.

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread. Everyone else please begin a New Topic.

IEatHardDrives, in your first post you said they are clean, but in your second post, you said they came back as adware programs.. What did the Jotti scan produce? Can you copy and paste the full report from Jotti on those two files please? Matt

Inactive topic... If you still need help on this problem, contact me or one of the Moderators to re-open this up. Topic closed.

Hi Ant200thelink! Welcome to Besttechie! Please print out these directions for use if/when you cannot access this page. Please scan with HJT, and place a check next to the following items: R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://as.starware.com/dp/search?x=wKX1ILE...hXTkqakvvDgEZ1Q R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.my-etrust.com/Redirect/router.a...EZ&ver=

Hi marinerschas2! Your log is coming up clean. I don't think that this is a malware issue. Try posting a question in the Windows Support Forum. Matt

Hi Ieatharddrives! Your log is fairly clean. There are some files showing up that is quite probably malware, but to be sure I want to check it before we delete it. Jotti File Submission: Please go to Jotti's malware scan Copy and paste the following file path into the "File to upload & scan"box on the top of the page:C:\WINDOWS\system32\MSSWCHX.EXE [*] Click on the submit button Repeat those steps for the following file: C:\WINDOWS\system32\osk.exe [*] Please post the results of both files in your next reply.

Hi SLO! Please print out these directions for use if/when you cannot access this page. Your log is fairly clean of malware, just a few things to get rid of. If after this you are still havin issues, let me know. Before starting any cleaning steps, please disable the Microsoft Anti-Spyware real-time protection: Right-click on the Microsoft Anti-Spyware tray icon by your clock (it's the one with the red and yellow bulls-eye). Click on "Security Agents Status". Click on "Disable real-time protection". Next, open Microsoft Anti-Spyware. Click on the Options menu, then Settings. Select "Real Ti

Hi bubba bob! Your log is pretty much clean, looks like you got it taken care of.

Hi burton. Great avatar/sig! That is one of the funniest movies ever. I'm sure you'll love BT.

This thread is being closed because it has been resolved. If you would like it to be reopened please contact a member of the Moderating team. Matt

Well Linda, you computer is clean. That report from your spyware program is a false alert. No, do not have Panda "fix" that, that is not a virus. The following is a list of tools and utilities that I like to suggest to people. This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again. Spybot Search & Destroy - Uber powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections. AdAware - Another very powerful tool which s

HAPPY BIRTHDAY!!!

Congrats! Your log is clean! How is your system running now? Are you experiencing any more issues (pop-ups, slowness, browser redirects)? The following is a list of tools and utilities that I like to suggest to people. This list is full of great tools and utilities to help you understand how you got infected and how to keep from getting infected again. Spybot Search & Destroy - Uber powerful tool which can search and annhilate nasties that make it onto your system. Now with an Immunize section that will help prevent future infections. AdAware - Another very powerful tool which searches

Hi calbeee! Welcome to Besttechie! I will be assisting you in cleaning up your computer! Please print out these directions for use if/when you cannot access this page. One thing I need you to do first is to place HiJackThis into a permanent folder. The reason for this is so that when HJT makes backups, they will be stored in a safe place. *Go to Start > My Computer > and double click on C:. * Now right click an open area and click New > folder and change the folder name to HJT. * Extract HijackThis from the zipped file into this new folder. Scan with HiJackThis, and place a check

Ok, your log still isn't showing anything malicious. But we can run another scan. BTW, are you having any system issues? (slowness, popups, browser red-rects, etc) Panda ActiveScan - Once you are on the Panda site click the Scan your PC button - A new window will open...click the Check Now button - Enter your Country - Enter your State/Province - Enter your e-mail address and click send - Select either Home User or Company - Click the big Scan Now button - If it wants to install an ActiveX component allow it - It will start downloading the files it requires for the scan (Note: It may take a

TK, I am very sorry to hear this. It must be very tough what you've been going through recently. Take care my friend!

surfwick, post a new HJT log. Also, rescan with spyware doctor, and see if it finds it again. If it does, tell me the name of the trojan it finds. Matt