Spyware, Adware and Malware Galore!(RESOLVED) Spyware, Adware and Malware Galore!(RESOLVED) Hi Guys,http://www.google.co.uk/ http://www.kaspersky.com/kos/eng/par...an_unicode.cab
Create a folder such as C:\HJT or C:\Program Files\HJT and move HJT.exe into the newly created folder so we can have available backups in case you fix the wrong thing or I make a mistake. Very important. rename and rename it to foolyou.exe , press enterVundoFix.exe Double-click VundoFix.exe to run it. Click the Scan for Vundo button. Once it's done scanning, click the Remove Vundo button. You will receive a prompt asking if you want to remove the files, click YES Once you click yes, your desktop will go blank as it starts removing Vundo. When completed, it will prompt that it will reboot your computer, click OK . Please post the contents of C:\vundofix.txt and a new HiJackThis log. Scan for Vundo button." when VundoFix appears at reboot. Cheers for that mate, i think it cleared alot of the crap however i can still see that dday.dll that doesnt fancy going away http://www.google.co.uk/ http://www.kaspersky.com/kos/eng/par...an_unicode.cab I need to see vundofix log please.COMBOFIX ComboFix http://www.gmer.net HIJAK THIS http://www.google.co.uk/ http://www.kaspersky.com/kos/eng/par...an_unicode.cab Run hijackthis and click on scan only button and put checks next to these: R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = aboutIf you did not set this as your start page fix this With nothing open but hijackthis click on "fix checked" Update Java: Start > Control Panel double-click on the Software icon > add/remove programs.http://java.sun.com/javase/downloads/index.jsp Scroll down the page to 'Java Runtime Environment (JRE) 6u1 and press the 'Download' button. On the new web page, click the 'Accept License Agreement' button. Then select 'Windows Offline Installation, Multi-language' in the Windows Platform area just below the Accept button. Thanks mate it seems to be running great now and i also figured out what was wrong with the task manager.
Last edited by Irnbru; 06-06-2007 at 08:29 PM .
Excellent,If you are no longer having any more trouble here is some preventative measures for you. Be sure to re-hide hidden files/folders if you were asked to unhide them Here are some preventive measures you can take to keep your computer from getting infected again. also keep all these and Ad-awareSE and SpybotS&D updated. http://www.d-a-l.com/help/showthread.php?t=32403 Flush your restore points in ME and XP, by turning System Restore off and then back on. Explained Here: Windows XP: http://vil.nai.com/vil/SystemHelpDoc...ysRestore.aspx Explained Here Microsoft ME: http://service1.symantec.com/SUPPORT...rc=sec_doc_nam RegProtect This small registry protection tool will save you hours of heartache by notifying you when some program good or bad is trying to access your registry. http://www.diamondcs.com.au/index.php?page=regprot To reduce the re-infection potential for malware and protect yourself against spyware, here are a few helpful suggestions: 1. Keep Windows and Internet Explorer current with the latest critical security updates from Microsoft. This will patch many of the security holes through which attackers can gain access to your computer. You CANNOT complete this update using an alternate browser. http://v5.windowsupdate.microsoft.co....aspx?ln=en-us http://www.microsoft.com/windows/ie/default.asp 2. Run your antivirus software regularly, and to keep its definitions up-to-date. If you are thinking about switching, there are a some good free Antivirus programs that are decent, including AVG and Avast!. AVG: http://free.grisoft.com/doc/1 Avast: http://www.avast.com/eng/avast_4_home.html 3. In addtion to using Ad-aware consider using another free malware scanning/removal program: Windows Defender http://www.microsoft.com/athome/secu...e/default.mspx 4. Consider using a free firewall if you are not already using one. Some good free ones are: Kerio http://www.sunbelt-software.com/Kerio.cfm Zone Labs Personal Firewall: Zone Labs 5. Consider using an alternate free browser for general web surfing but you must use IE for windows update. Mozilla Firefox: www.mozilla.org/products/firefox/ 6. Consider increasing your browser security by using these programs: SpywareGuard will protect your homepage from being hijacked: http://www.javacoolsoftware.com/spywareguard.html SpywareBlaster will increase browser protection by blocking Thousands of known malware sites by adding them to IE's restricted sites zone. Download it here: http://www.javacoolsoftware.com/spywareblaster.html If you use SpywareBlaster you can also use a customblocklist to add even more entries into IE restricted sites zone. Go to this site for the current list and how to use instructions: http://customblockinglist.cjb.net/ IE-SPYAD is similar in that it adds thousands more known malware sites to IE's restricted zone. Download it here: https://netfiles.uiuc.edu/ehowes/www/resource.htm Block access to Untrustworthy Sites You can prevent your computer from visiting a myriad of untrustworthy sites and ad-servers by installing a customised hosts file. One of the best available is the: MVPS Hosts File Simply follow the instructions to install the file in the correct location. This will not only make surfing safer but will improve website load times and block popups from many of the large ad-servers. *Remember just like your primary anti-virus software, it is important to keep all of these programs up-to-date and use them on a regular basis. It's Free
33 -------- d-----w C:\DOCUME~1\ROSSSH~1\APPLIC~1\Vso
