JeanInMontana
-
Posts
3,859 -
Joined
-
Last visited
Content Type
Events
Profiles
Forums
Posts posted by JeanInMontana
-
-
Your welcome, if you don't want to see the Widows welcome screen, keep it removed. If you do want it, then restore.
Since this issue is resolved I will close the thread to prevent others from posting to it.
-
Can you boot the PC? Please be specific when describing what will and will not work. We have other options but if you can boot, reformat would be about all you have left, if you can't boot, since there is really no point repairing an infected system and you are infected majorly.
-
I'm glad we got it fixed up for you. You uninstall. Not delete. I'm not a fan of either AVG program anymore, they basically ruined a good program with junk. If you like the antispyware keep it. I think it's still supported. You should not use HJT unless someone is helping you. It is not a scanner to find malware on its own. It shows parts of the system that malware likes to go to. Deleting the wrong things can ruin your system. This stuff below needs to be done, resetting the System Restore needs resetting. The rest is a good selection of free protections and you should install them for a good layered protection.
We need to now reset a clean System Restore point. If you don't and you need to use System Restore you will reinfect yourself. Go to Start>Control Panel>System. Click on the System Restore tab and put a check in Turn off System Restore. Then click OK.
Now go to Start>Help and Support > Undo Changes to Your System or System Restore depending on the make of your PC. Click on what ever will open the System Restore box. You will see two options, Choose Create a System Restore Point. Give it a name like Clean Restore Point and today's date. Now if you need to use it you have it.
Many infections can be avoided with an added layer of prevention. All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal. Keep MBAM and Spybot Search & Destroy and always immunize SBS&D when you update. You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price, from the link in my signature.
-
I understand school is getting down to the wire I have a ton of stuff to get done I haven't started. Please do as Raid asked.
-
You should be uninstalling Adobe Flash not deleting it. Are you running as an administrator?
Please follow these instructions here and begin your own topic in that forum.
-
Sweeet!! Thanks for sharing.
-
Yes Symantec it Norton, but it's a messy program and leaves crap even after install. You have an active service running from it and it needs to be shut down.
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
and
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
Go here find the correct tool for the version you had and run it.
http://service1.symantec.com/SUPPORT/tsgen....nsf&view=0
How is the machine running now?
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 <======== That is the old updater remove it with HJT.
-
Yes we would like to see if the ctfmon.exe are legit. It's not the norm to see two instances, so very well could be a new malware posing and if we can get it then others will be helped. I got your email from PayPal and thank you so very much! I have only gotten anything once before from helping someone. It's nice. Thanks!
-
Hi again KayakAngler . I'm surprised the machine runs at all. Your running 3 antivirus programs, Avira, Avast and Symantec. Never run more than one actively. My choice would be Avira, Avast is also good Symantec is a resource hog and will slow your system. Either uninstall 2 or shut them down as active scanners.
You need to move HJT to program files on C:\ to it's own folder named HiJack This! in case you need to ever restore backups they are there.
Please update MBAM, quick scan post the log here, not attached, use edet and select all then right click and select copy, paste it into your reply here. Also the same for a new HJT log please. There are some items in it we can clean up once you move it.
-
What was the malware? Are you sure it was all cleaned? This sounds like maybe not.
-
What version of MBAM are you using? This is an old thread and MBAM has updated many times. Please post an MBAM log so we can see what your seeing.
-
Oh please. Overreact much? It's a false positive and it's not the first time a company has made a false positive.
That's my point Tarun and FYI I was not the first to take note. And it was checked on the other site. There should be a time they stop finding a well known program as malware, but they don't. Save your sarcasm.
-
We should see a new MBAM log and a HJT log to be sure your clean. Be sure you post the full MBAM log please.
-
Oh dear I'm becoming more clueless. Are you running Symantec Antivirus and AVG? I totally missed that before in your HJT log. You need to choose one and in all honesty I wouldn't choose either I would go with Avira. But you can't run two active antivirus.
-
This is a false positive and will be fixed in the next update in approximately one hour.
-
OK that was a new version of Vundo, it will be added soon to definitions. But I need you to now go to those two ctfmon.exe and upload them too. I'm sorry I should have just gone for that yesterday.
-
Belarc is not SiteAdvisor, it is a system analysis tool nothing to do with security. Firefox is on version 3.3 update it now. Site Advisor doesn't work for Opera.
Online Armour is a great firewall and free. You need a layered protection.
All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
Spybot Search & Destroy Be sure to use the immunize feature.
SpywareBlaster from Javacool Software
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price For life in my signature.
You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
-
I believe I have the go.google virus on my laptop. I want to install malwarebytes to try to fix it. Here is what is probably a dumb question, but is holding me up from this plan: how to I get to the malwarebytes site or how do I download it when my brower won't work to take me there?
How did you get here? This is the Malwarebytes site. You can burn it to CD, copy to floppy or as GT500 says use a flash drive.
-
I can't duplicate this at all. Is it a 32 bit system?
-
This has gone beyond F/P they are all aware that file is not malware.
-
You have an open HJT thread why start another one here?
-
Hi bmac and welcome to Malwarebytes. It's impossible to answer your questions without further analysis of the situation.
Please read and follow the instructions here then post a log here . Someone will be happy to help you.
-
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.
-
I recommend Avira. I use it and it's free. Runs very well with MBAM http://www.free-av.de/en/index.html
Did you update MBAM and scan? You didn't uninstall Viewpoint or update your Adobe and Java.
Please update MBAM run a quick scan post that log and a new HJT log.
please help me get unrooted!
in Resolved Malware Removal Logs
Posted
Did you have two instances of Office open before? And that is still not the norm. Those posts are at this site only...LOL I've been doing this for over five years on several sites.
All recommended programs are free and easy on system resources. You should install them as part of your protection arsenal.
A firewall and antivirus are also essential. The Windows firewall in XP and Vista is not sufficient.
Preform Windows Updates monthly on the second Tuesday or use automatic updates, and use your scanners weekly at the least. Always update before you scan.
Keep other software known for vulnerabilities updated also. Use the Secunia Inspector free scan to identify risks in outdated versions.
MBAM
hpHosts
Avira Antivir
Spybot Search & Destroy Be sure to use the immunize feature.
SpywareBlaster from Javacool Software
WinPatrol by BillPStudios
SiteHound by FireTrust
RogueRemover
The windows firewall is not sufficient to protect. It doesn't monitor outgoing traffic and this is a must. I use and recommend Online Armor Free
Also the full protection of MBAM is offered at a very low price For life in my signature.
You will also need at least one other scanning program Asquared or SuperAntiSpyware are good and there are several other excellent programs with free and paid versions. Read the overviews of what each program below does so you have an understanding of their importance and how to use.
Since this issue is resolved I will close the thread to prevent others from posting into it. If you need assistance please start your own topic and someone will be happy to assist you.
The fixes and advice in this thread are for this machine only. Do not apply to your machine. Please start a thread of your own and someone will be happy to help you.