alsocom

Hello Donna. It looks like TeaTimer added the 016 entry back in the log again. We'll need to shut it down and run a .bat file to clear it. Step 1 I'll need you to turn off TeaTimer once again to remove these entries. Open Spybot S&D in advanced mode, click Tools > Resident, and remove the check from "Resident Tea-Timer". Download ResetTeaTimer.zip. Unzip the file to your desktop. Double click ResetTeaTimer.bat to remove all entries set by TeaTimer. I need you to disable SpywareGuard as it will interfere with the registry changes we will need to do. Right click the running icon of Spywa

Closed due to Inactivity. If you need this topic reopened, please request this by sending a PM to a member of the HJT team with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.

Hello Digidave. Step 1 You have Spybot S&D's Teatimer running which is good, but we need you to disable it for the remainder of the fix as it will interfere with the registry changes being made. Open Spybot S&D in advanced mode, click Tools > Resident, and remove the check from "Resident Tea-Timer". Be sure to re-enable this option again once the computer is clean. I need you to disable SpywareGuard as it will interfere with the registry changes we will need to do. Right click the running icon of Spywareguard, it will open the program. Then go to Menu, file, exit. Then confirm the

I see ZoneAlarm in the new log which is great but don't forget to get an antivirus program also. In these days on the Internet, an antivirus program running in the background is crucial to a clean computer. Your new log appears clean. Reset and Re-enable your System Restore to remove bad files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected.) 1. Right-click My Computer, and then click Properties. 2.

Hello LWB and welcome to BestTechie. I see no signs of a Firewall or Antivirus program on your computer. I recommend downloading and installing the following free programs: ZoneAlarm Firewall AVG7 Antivirus. Be sure to check for updates after installation. Step 1 Open HijackThis, run a scan, then check the following: O4 - HKLM\..\Run: [NT Logging Service] syslog32.exe O4 - HKLM\..\Run: [Windows Proxy Admin] winproxy32.exe O4 - HKLM\..\RunServices: [Windows Proxy Admin] winproxy32.exe With all other programs and browsers closed, click fix checked. Step 2 Please set your computer to show all fi

Hello pipeslayer420420. Download Blockrem from HERE Unzip it to its own folder on your desktop. Boot your computer to safe mode by rebooting and tapping the F8 button repeatedly until it brings up a boot menu. From that menu, select Safe Mode by using the arrow keys to highlight it then pressing enter. Once in safe mode open the Blockrem folder on your desktop and double-click blockrem.bat (this is the file with the gear icon) to run it. Once it is running please follow the onscreen instructions. Reboot and post a fresh HijackThis log as a reply to this thread. Please post the Uninstall List

Your welcome. Glad to help out.

Other than those two items, your new log appears clean. Reset and Re-enable your System Restore to remove bad files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected.) 1. Right-click My Computer, and then click Properties. 2. On the System Restore tab, put a check mark in the 'Turn Off System Restore' check box. 3. Click OK, and then click Yes. 4. Restart the computer. 5. Repeat steps 1 - 2, this time

You didn't state whether you installed those programs or not. Please let me know. For the MSN Messenger problem, it was showing in the HijackThis log that a file was missing. You may need to reinstall the program or check to make sure you have the latest version.

Hello chewy. You have several items on your computer which are better removed with automated scanners. First, we'll remove a couple of programs. Step 1 Go to Add/Remove Programs and remove New.Net or NewDotNet. If there is no listing for it, use the uninstaller at newdotnet.com Use procedure 4 to remove it. It requires that an internet connection be active while doing it. Go here and follow the instructions on removal for TvMedia. Reboot when finished removing. Step 2 Please download the trial version of Ewido security suite. Install and Update Ewido: Download and install Ewido security suit

Hello goman87. You don't have much bad on your computer. There are a couple of questionable programs on your computer that I need to alert you to. If you did not intentionally install these than I can give you instructions on removing them. 007 Spy Software Password Cracker Step 1 We need to disable your Microsoft AntiSpyware Real-time Protection as it may interfere with the fixes that we need to make. Open Microsoft AntiSpyware. Click on Options, Settings. In the left pane, click on Real-time Protection. Under Startup Options uncheck Enable the Microsoft AntiSpyware Security Agents on startu

Step 1 Download this file to your desktop. http://www.mvps.org/winhelp2002/DelDomains.inf Right-click on the deldomains.inf file and select Install. Note : Since the Domains are deleted SpywareBlaster protection must be re-enabled, Spybot's Immunize feature must be used again, and you'll also have to re-install IE-SpyAd if installed. Step 2 Click Here to download Killbox by Option^Explicit. Extract the program to your desktop and double-click on its folder, then double-click on Killbox.exe to start the program. In the killbox program, select the Delete on Reboot option. In the field labeled Fu

It appears from the RAV Online Virus Scanner that the trojans you have on your computer have overwritten many valid files. This is one of those case where you may be better off to save what you can and reformat the computer. I will give you a fix but can not guarantee how well/or if the computer will be operational afterwards. Download the free trojan scanner A2 Squared, update and run a scan with it. Fix anything found then reboot when completed. Reconfigure Windows XP to show hidden files:Click Start. Open My Computer. Select the Tools menu and click Folder Options. Select the View Tab. Und

To be honest with you, I am not entirely sure where the infection comes from. Many people have been infected that have not been to porn sites. The folder called backups on the desktop was created by Hijackthis. It stores everything fixed just in case they may be needed later. The service in step 5 was successfully removed. Boot into Safe Mode: Restart your computer and immediately begin tapping the F8 key on your keyboard. If done right a Windows Advanced Options menu will appear. Select the Safe Mode option and press Enter. To return to normal mode just restart your computer as you normally w

Hello Rick and welcome to BestTechie. You may want to print out these instructions or save them to your desktop as a text file with Notepad because we will be restarting into Safe Mode later on in the fix and you might not be able to access the Internet. Prepare CWShredder for use:Download CWShredder. Save CWShredder.exe to a convenient location. Please do not do anything with it yet. [*]Prepare AboutBuster for use: Download AboutBuster. Unzip the contents of AboutBuster.zip and an AboutBuster directory will be created. Navigate to the AboutBuster directory and double-click on AboutBuster.exe