Trogan

Volunteer Security Advisor
  • Content Count

    139
  • Joined

  • Last visited

Everything posted by Trogan

  1. Please download the Norton Removal Tool to your Desktop. Follow the instructions to uninstall Norton. Your computer is clean. Is there anything else I can help with?
  2. Hi ken24, Please do the following... 1. Please uninstall Kaspersky now. Having multiple Anti-Virus programs will cause problems. 2. Follow the instructions Here to completely remove Norton 360. 3. Click Start > Run > type: combofix /u > Press OK. This will uninstall ComboFix. 4. Post a new HijackThis log and let me know how things are.
  3. Hi kens24, Please do the following... 1. Download & run this file - Flash_Disinfector.exe 2. Open HijackThis - Click the Do a system scan only button - Check the following entries (below) O2 - BHO: (no name) - {76F262CF-0308-0FB4-F7A3-043266F3A47C} - C:\Program Files\Mobkjqfi\ptvesxqy.dll (file missing) - Close ALL open windows (especially Internet Explorer!) - Click Fix Checked Close HiajckThis 3. Find and delete the following Folder in RED, if found: C:\Program Files\Mobkjqfi 4. Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner You will be promted to install an ActiveX component from Kaspersky, Click Yes. Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make that the following are selected: Scan using the following Anti-Virus database: Extended (if available otherwise Standard) Scan Options: Scan Archives Scan Mail Bases [*]Click OK [*]Now under select a target to scan: Select My Computer [*]This will program will start and scan your system. [*]The scan will take a while so be patient and let it run. [*]Once the scan is complete it will display if your system has been infected. Now click on the Save as Text button: [*]Save the file to your desktop. 5. Please post the Kaspersky report, along with a new HijackThis log. I see references to Norton/Symantec. Has this been uninstalled? Are you using Verizon Internet Security Suite? Please let me know.
  4. Hi, No, there is no program to download. If you open the link for Kaspersky in Internet Explorer, you should see a large button reading Kaspersky Online Scanner. From there, you should be able to follow the instructions. The link, in case you want it is: http://www.kaspersky.com/virusscanner Let me know how it goes.
  5. Hello, Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner You will be promted to install an ActiveX component from Kaspersky, Click Yes. Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make that the following are selected: Scan using the following Anti-Virus database: Extended (if available otherwise Standard) Scan Options: Scan Archives Scan Mail Bases [*]Click OK [*]Now under select a target to scan: Select My Computer [*]This will program will start and scan your system. [*]The scan will take a while so be patient and let it run. [*]Once the scan is complete it will display if your system has been infected. Now click on the Save as Text button: [*]Save the file to your desktop. Post the Kaspersky report back here.
  6. Hi Clarinette, Just so you know, your English is very good! I'm not sure on this one, sorry. Try this: Copy the pictures Paste them in your CD buring drive. Pop in a new blank CD. Click on Write these files to CD. Follow the instructions onscreen. Does that work? Could have been a variety of reasons. I suggest posting this problem at another Forum. I suggest this one or this one. Possibly. I'm not very good with networking, sorry. I suggest asking in one of the two forums mentioned above. I don't think these programs would have caused your problems. Please let me know what you decide.
  7. Hi clarinette, Glad to hear. Can you tell me what has improved and what other problems are present so I know what approach to take. Not without information. How did you try and save the pics to a DVD? Did you use any special software? Did you get an error message? Restore using the recovery disk or system restore? Regarding the Desktops... This sounds like a hardware problem, possibly RAM. Hardware is not something I know a lot about. Could be a configuration (networking) problem, but I'm not 100% sure.
  8. Hi, Two things before we start... 1. You can delete SmitfraudFix. 2. Open Notepad. Click the Format tab and ensure Word Wrap is unchecked. Now, please do the following... 1. Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update to the latest version... Updating Java: Download the latest version of Java Runtime Environment (JRE) 6 update3. Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications." Click the "Download" button to the right. Check the box that says: "Accept License Agreement." The page will refresh. Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop. Close any programs you may have running - especially your web browser. Go to Start > Control Panel double-click on Add/Remove programs and remove the following... J2SE Runtime Environment 5.0 Update 4 J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment Standard Edition v1.3.1_02 Java 2 Runtime Environment, SE v1.4.2_03 Microsoft AntiSpyware <--This is an old version which is no longer supported. New version is Windows Defender. [*]Reboot your computer once all Java components are removed. [*]Then from your desktop double-click on jre-6u3-windows-i586-p.exe to install the newest version. 2. Open HijackThis - Click the Do a system scan only button - Check the following entries (below) O2 - BHO: BDEX System - {1AC7107A-938F-4347-864C-C51E49EC586E} - C:\WINDOWS\dxpvqlmtqn.dll O3 - Toolbar: The ensfolr - {3723900A-B26F-40EC-B606-B7B37132B83F} - C:\WINDOWS\ensfolr.dll O21 - SSODL: bklgvsf - {4E8D434A-3C19-4E49-80E4-E0791FEC89BA} - C:\WINDOWS\bklgvsf.dll O21 - SSODL: ampkfst - {A27394C9-9AD2-49F8-B187-9CEF7642E2E5} - C:\WINDOWS\ampkfst.dll - Close ALL open windows (especially Internet Explorer!) - Click Fix Checked Close HiajckThis 3. Run HijackThis and click on Open the Misc Tools section. Click on delete a file on reboot... Copy and paste the following into the "File name:" text box and then click Open: C:\WINDOWS\bklgvsf.dll When you are asked "Do you want to restart your computer now?", click NO. Repeat these steps for the following file(s) and this time, when you reach the end, click OK: C:\WINDOWS\ampkfst.dll Your PC MUST reboot to delete the files! 4. Please post a new HijackThis log.
  9. Hi clarinette, Do you have recovery discs? The recovery option will reformat the laptop, meaning it will wipe the hard drive clean. Yes, you would need to install all programs and applications. You most likely may have to reconfigure your Internet. How many user accounts are on the laptop? Multiple users accounts can be a cause of slow downs too. Let me know me know what you would like to do please. We can try other things, if needed.
  10. Hi clarinette, Please read through this page and try the suggestions. Let me know the results.
  11. Hi, Please do the following... 1. I need to see another log from HijackThis. Run Hijackthis. Click on Open the Misc Tools section. Next click on Open uninstall manager. Press the Save list button. Save the file to your desktop, with the default name of uninstall_list Copy & Paste the entire contents of that file in your in your next post. 2. Please delete your current copy of SmitfraudFix as I would like you to download a new copy. Once that is done, download SmitfraudFix (by S!Ri) to your Desktop. http://siri.urz.free.fr/Fix/SmitfraudFix.zip Extract all the files to your Destop. A folder named SmitfraudFix will be created on your Desktop. Open the SmitfraudFix folder and double-click smitfraudfix.cmd Select option #1 - Search by typing 1 and press Enter This program will scan large amounts of files on your computer for known patterns so please be patient while it works. When it is done, the results of the scan will be displayed and it will create a log named rapport.txt in the root of your drive, eg: Local Disk C: or partition where your operating system is installed. Please post that log along with all others requested in your next reply. IMPORTANT: Do NOT run any other options until you are asked to do so! 3. Please post the following... Uninstall list SmitfruadFix report
  12. Hello, Download HJTInstall.exe to your Desktop. Doubleclick HJTInstall.exe to install it. By default it will install to C:\Program Files\Trend Micro\HijackThis . Click on Install. It will create a HijackThis icon on the desktop. Once installed, it will launch Hijackthis. Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad. Save the log to a convenient location as you'll need to post it soon. Don't use the Analyse This button, its findings are dangerous if misinterpreted. Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required. Please post the HijackThis log back here! It's very late here in the UK, and I need to get some rest. I will reply tomorrow.
  13. Hi clarinette, Kaspersky only found mIRC, so nothing to worry about there. Lets try some other things... 1. I see you have already have CCleaner, but I would like you to download a newer version since CCleaner is constantly updated. *NOTE* CCleaner deletes EVERYTHING out of temp/temporary folders. If you have anything in a temp folder, back it up or move it to a permanent folder prior to running CCleaner! Download CCleaner from here to clean temp files from your computer. Double click on the file to start the installation of the program. Select your language and click OK, then next. Read the license agreement and click I Agree. Click next to use the default install location. Uncheck "Add CCleaner Yahoo! Toolbar and use CCleaner from your browser" if you do not want the Yahoo Toolbar. Click Install then finish to complete installation. Double click the CCleaner shortcut on the desktop to start the program. On the "Windows" tab, under "Internet Explorer," uncheck "Cookies" if you do not want them deleted. (If deleted, you will likely need to reenter your passwords at all sites where a cookie is used to recognize you when you visit). If you use either the Firefox or Mozilla browsers, the box to uncheck for "Cookies" is on the Applications tab, under Firefox/Mozilla. Click on the "Options" icon at the left side of the window, then click on "Advanced." deselect "Only delete files in Windows Temp folders older than 48 hours." Click on the "Cleaner" icon on the left side of the window, then click Run Cleaner to run the program. Caution: It is not recommended that you use the "Issues" feature unless you are very familiar with the registry as it has been known to find legitimate items. After CCleaner has completed its process, click Exit. 2. There are many unnecessary programs running at start-up. Disabling these will improve start-up speed. The programs can be started manually, if needed. It is your choice if you want to disable them at start-up. Open HijackThis - Click the Do a system scan only button - Check the following entries (below) O4 - HKLM\..\Run: [ssAAD.exe] C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime Alternative\QTTask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot - Close ALL open windows (especially Internet Explorer!) - Click Fix Checked Close HiajckThis 3. Please post a new HijackThis log and let me know if things have improved.
  14. Hi clarinette, Please do the following... 1. Click Start > Run > type in appwiz.cpl and hit enter. From the list uninstall the following, if present: J2SE Runtime Environment 5.0 Update 11 J2SE Runtime Environment 5.0 Update 5 Java 6 Update 2 Java SE Runtime Environment 6 Update 1 2. Please do an online scan with Kaspersky WebScanner Click on Kaspersky Online Scanner You will be promted to install an ActiveX component from Kaspersky, Click Yes. Note for Internet Explorer 7 users: If at any time you have trouble with the accept button of the licence, click on the Zoom tool located at the right bottom of the IE window and set the zoom to 75 %. Once the license accepted, reset to 100%. The program will launch and then begin downloading the latest definition files: Once the files have been downloaded click on NEXT Now click on Scan Settings In the scan settings make that the following are selected: Scan using the following Anti-Virus database: Extended (if available otherwise Standard) Scan Options: Scan Archives Scan Mail Bases [*]Click OK [*]Now under select a target to scan: Select My Computer [*]This will program will start and scan your system. [*]The scan will take a while so be patient and let it run. [*]Once the scan is complete it will display if your system has been infected. Now click on the Save as Text button: [*]Save the file to your desktop. Please post the Kaspersky report here.
  15. Hi clarinette, There isn't any malware showing in your HijackThis log. Can you tell me when the computer slow downs? Is it at startup? When opening a program? I need to see another log from HijackThis. Run Hijackthis. Click on Open the Misc Tools section. Next click on Open uninstall manager. Press the Save list button. Save the file to your desktop, with the default name of uninstall_list Copy & Paste the entire contents of that file in your in your next post.
  16. Hi, Your HijackThis log is clean. Is there anything else I can help with?
  17. Hi kens24, I see a few different Anti-Virus and Firewall programs installed. Could you tell me what programs you have and which are being used. It is vital that only one Anti-Virus and Firewall program is being run and the others should be uninstalled. The reason for this is that multiple Anti-Virus and Firewall programs will conflict with each other, reducing the protection given and cause computer problems. Once you only have one of each, please do the following... 1. I need to see another log from HijackThis. Run Hijackthis. Click on Open the Misc Tools section. Next click on Open uninstall manager. Press the Save list button. Save the file to your desktop, with the default name of uninstall_list Copy & Paste the entire contents of that file in your in your next post. 2. Please download ComboFix to your Desktop. Double click on Combofix.exe & follow the prompts. When the scan has finished, it shall produce a log for you. Post that log in your next reply Note: Do not mouseclick combofix's window whilst it's running. That may cause it to stall 3. Please post the following... Uninstall list ComboFix log New HijackThis log
  18. Hello clarinette, I don't see any problems in the HijackThis log. But I see you are running two Anti-Virus programs (AVG and AntiVir). That is NOT a good idea. Multiple Anti-Virus programs (and Firewalls for that matter) will conflict with each other and cause problems such as system performance problems, serious slow downs and could lead to an unbootable machine. This is the most likeliest cause of your problems. Please uninstall either AVG or AntiVir and have only one running. Once that is done, post a new HijackThis log.
  19. Hi Andyy, You have an older version of HijackThis. Please uninstall the old "HijackThis" from Add/Remove programs in Control Panel. Next, download HJTInstall.exe to your Desktop. Doubleclick HJTInstall.exe to install it. By default it will install to C:\Program Files\Trend Micro\HijackThis . Click on Install. It will create a HijackThis icon on the desktop. Once installed, it will launch Hijackthis. Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad. Save the log to a convenient location as you'll need to post it soon. Don't use the Analyse This button, its findings are dangerous if misinterpreted. Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required. I need to see another log from HijackThis. Run Hijackthis. Click on Open the Misc Tools section. Next click on Open uninstall manager. Press the Save list button. Save the file to your desktop, with the default name of uninstall_list Copy & Paste the entire contents of that file in your in your next post. Post the Uninstall list, along with the HijackThis log back here.
  20. Hi Chilly0046, Download HJTInstall.exe to your Desktop. Doubleclick HJTInstall.exe to install it. By default it will install to C:\Program Files\Trend Micro\HijackThis . Click on Install. It will create a HijackThis icon on the desktop. Once installed, it will launch Hijackthis. Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad. Save the log to a convenient location as you'll need to post it soon. Don't use the Analyse This button, its findings are dangerous if misinterpreted. Don't have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.
  21. Hi snwball89, Apologies for the delay. The demand for help is huge, but there is not enough helpers unfortunately. If you still require help, please post a new HijackThis log.
  22. Hi kens24, Apologies for the delay. The demand for help is huge, but there is not enough helpers unfortunately. If you still require help, please post a new HijackThis log.
  23. Hi, You can burn the files from My Documents. That's fine. Try and keep the computer offline until it is reformatted. Post a HijackThis log from your computer and I'll have a look at it.