AHH!! virus/pop ups SOMETHIGN is back up!!

SweepeR

hey, I went to update my spysweeper via the program but says unable to connect to webroot, plz check to see if the firewall is activated...how can i turn it off? i turned teh kaspersky off and its still giving the same response back, thanks.

gringo_pr

Hello sweeper let me see if I got all this correct

1.IE7 is ok
2.firefox still in safe mode
3.spysweeper won't update
4. Kaspersky off ,something else on



For Firefox:
Start > All Programs > Mozilla Firefox > Mozilla Firefox (Safe Mode)
On prompt, tick this box: Disable all add-ons
Then click on Make Changes and Restart button
OR Continue in Safe Mode. In either mode, Firefox will run without addons.
See if it still has problems. If no problems, one or more addons is/are causing problems.
Start Firefox up, enable each addon one by one till you run into a problem. Disable that addon.
If nothing works, have him to create a new Firefox profile.
1. Start > Run and copy and paste this in: firefox.exe -ProfileManager
2. Click on Create Profile button
3. Give this a name, preferably without spaces.
4. Click Finish.
5. you will see the Create Profile window again. Select the new profile he has created and tick this box: Don't ask at startup


gringo

SweepeR

gringo_pr wrote:

Hello sweeper let me see if I got all this correct

1.IE7 is ok
2.firefox still in safe mode
3.spysweeper won't update
4. Kaspersky off ,something else on



For Firefox:
Start > All Programs > Mozilla Firefox > Mozilla Firefox (Safe Mode)
On prompt, tick this box: Disable all add-ons
Then click on Make Changes and Restart button
OR Continue in Safe Mode. In either mode, Firefox will run without addons.
See if it still has problems. If no problems, one or more addons is/are causing problems.
Start Firefox up, enable each addon one by one till you run into a problem. Disable that addon.
If nothing works, have him to create a new Firefox profile.
1. Start > Run and copy and paste this in: firefox.exe -ProfileManager
2. Click on Create Profile button
3. Give this a name, preferably without spaces.
4. Click Finish.
5. you will see the Create Profile window again. Select the new profile he has created and tick this box: Don't ask at startup


gringo

no firefox isnt in safe but it just keeps freezing and saying "not responding" taht error on the top. IE so far seems ok. dont wna jinx it yet. spysweeper wont update b/c it says its not able to connect to the server. apparently a firewall or soemthig of that nature is preventing it.

the Kaspersky part I meant i turned it off so the firewall wont be active but it still gave me a unable to connect issue so i dono if the firewall or somethign else is preventing the server connection.

SweepeR

kk one more issue...my keyboards F1 F2 etc etc etc options dont work...where did this issue come from? it worked fine before.

gringo_pr

hello sweeper

I tried uninstalling Kaspersky but half way thru gave me an error stating to check n see if i have the abliity to remove completely or somethign random like that. any tool kits taht will help me remove this ?
hey i just removed Kaspersky finally. so scratch that one out

the Kaspersky part I meant i turned it off so the firewall wont be active

I am confused here Have you removed Kaspersky or not?
Have you tried my advice from post 33 and what was the result?
I would like to see another uninstall list from hijackthis
To access the Uninstall Manager you would do the following:

• 1. Start HijackThis
  2. Click on the Config button
  3. Click on the Misc Tools button
  4. Click on the Open Uninstall Manager button.
  5. Click on the Save list... button and specify where you would like to save this file. When you press Save button a notepad will open with the contents of that file. Simply copy and paste the contents of that notepad here on your next reply.

Gringo

SweepeR

I installed a better version of Kaspersky.
I tried post 33 and it dindt work. Still doesnt6 respond n' freezes the browser.

ABBYY FineReader 5.0 Sprint Plus
Ad-Aware SE Personal
Adobe Download Manager 2.0 (Remove Only)
Adobe Flash Player ActiveX
Adobe Photoshop 7.0
Adobe Reader 7.0.8
Adobe Shockwave Player
Adobe® Photoshop® Album Starter Edition 3.0
AIM 6
AOL Instant Messenger
Apple Mobile Device Support
Apple Software Update
ArcSoft PhotoImpression
Ares 1.9.0
aspi
Audio Editor Pro 2.81
CCHelp
CCScore
C-Media 3D Audio
Cool Edit Pro 2.0
CR2
DivX
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DM9XInst
DVD Shrink 3.2
EPSON Copy Utility
EPSON EIC CX5400
EPSON Photo Print
EPSON Printer Software
EPSON Scan
EPSON Smart Panel
ESSAdpt
ESSANUP
ESSBrwr
ESSCAM
ESSCDBK
ESScore
ESSgui
ESShelp
ESSini
ESSPCD
ESSTUTOR
ESSvpaht
ESSvpot
Google Toolbar for Internet Explorer
HijackThis 2.0.2
Hotfix for Windows XP (KB914440)
Hotfix for Windows XP (KB915865)
Image Converter .EXE 2.0.0.77
iPhoneRingToneMaker 1.3.2
ITE Smart Accessories
iTunes
Java(TM) 6 Update 3
Kaspersky Internet Security 7.0
Kaspersky Internet Security 7.0
Kaspersky Online Scanner
Kodak EasyShare software
KSU
LimeWire PRO 4.9.7
Macromedia Flash Player 8
MAGIX Ringtone Maker 2 silver (US)
Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.0
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office XP Professional with FrontPage
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (2.0.0.11)
MSN Music Assistant
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
Nero 7 Premium
Notifier
NVIDIA Drivers
NVIDIA WDM Drivers
OTtBP
PCDLNCH
PCI Audio Applications
PCI Audio Driver
PowerDVD
PS3 Video 9 1.94
QuickTime
RealPlayer
Registry Mechanic 6.0
Roxio Easy Media Creator 9 Suite
ScanToWeb
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Microsoft .NET Framework 2.0 (KB928365)
Security Update for Windows Internet Explorer 7 (KB938127)
Security Update for Windows Internet Explorer 7 (KB939653)
Security Update for Windows Internet Explorer 7 (KB942615)
Security Update for Windows Media Player (KB911564)
Security Update for Windows Media Player 10 (KB917734)
Security Update for Windows Media Player 10 (KB936782)
Security Update for Windows Media Player 6.4 (KB925398)
Security Update for Windows Media Player 8 (KB911565)
Security Update for Windows Media Player 8 (KB917734)
Security Update for Windows Media Player 9 (KB917734)
Security Update for Windows XP (KB890046)
Security Update for Windows XP (KB893756)
Security Update for Windows XP (KB896358)
Security Update for Windows XP (KB896422)
Security Update for Windows XP (KB896423)
Security Update for Windows XP (KB896424)
Security Update for Windows XP (KB896428)
Security Update for Windows XP (KB899587)
Security Update for Windows XP (KB899589)
Security Update for Windows XP (KB899591)
Security Update for Windows XP (KB900725)
Security Update for Windows XP (KB901017)
Security Update for Windows XP (KB901214)
Security Update for Windows XP (KB902400)
Security Update for Windows XP (KB905414)
Security Update for Windows XP (KB905749)
Security Update for Windows XP (KB908519)
Security Update for Windows XP (KB911280)
Security Update for Windows XP (KB911562)
Security Update for Windows XP (KB911567)
Security Update for Windows XP (KB911927)
Security Update for Windows XP (KB912919)
Security Update for Windows XP (KB913446)
Security Update for Windows XP (KB913580)
Security Update for Windows XP (KB914388)
Security Update for Windows XP (KB914389)
Security Update for Windows XP (KB916281)
Security Update for Windows XP (KB917159)
Security Update for Windows XP (KB917344)
Security Update for Windows XP (KB917422)
Security Update for Windows XP (KB917953)
Security Update for Windows XP (KB918118)
Security Update for Windows XP (KB918899)
Security Update for Windows XP (KB919007)
Security Update for Windows XP (KB920213)
Security Update for Windows XP (KB920214)
Security Update for Windows XP (KB920670)
Security Update for Windows XP (KB920683)
Security Update for Windows XP (KB920685)
Security Update for Windows XP (KB921398)
Security Update for Windows XP (KB921503)
Security Update for Windows XP (KB921883)
Security Update for Windows XP (KB922616)
Security Update for Windows XP (KB922760)
Security Update for Windows XP (KB922819)
Security Update for Windows XP (KB923191)
Security Update for Windows XP (KB923414)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB923694)
Security Update for Windows XP (KB923980)
Security Update for Windows XP (KB924191)
Security Update for Windows XP (KB924270)
Security Update for Windows XP (KB924496)
Security Update for Windows XP (KB924667)
Security Update for Windows XP (KB925454)
Security Update for Windows XP (KB925486)
Security Update for Windows XP (KB925902)
Security Update for Windows XP (KB926255)
Security Update for Windows XP (KB926436)
Security Update for Windows XP (KB927779)
Security Update for Windows XP (KB927802)
Security Update for Windows XP (KB928090)
Security Update for Windows XP (KB928255)
Security Update for Windows XP (KB928843)
Security Update for Windows XP (KB929123)
Security Update for Windows XP (KB929969)
Security Update for Windows XP (KB930178)
Security Update for Windows XP (KB931261)
Security Update for Windows XP (KB931768)
Security Update for Windows XP (KB931784)
Security Update for Windows XP (KB932168)
Security Update for Windows XP (KB933566)
Security Update for Windows XP (KB933729)
Security Update for Windows XP (KB935839)
Security Update for Windows XP (KB935840)
Security Update for Windows XP (KB936021)
Security Update for Windows XP (KB937143)
Security Update for Windows XP (KB937894)
Security Update for Windows XP (KB938127)
Security Update for Windows XP (KB938829)
Security Update for Windows XP (KB939653)
Security Update for Windows XP (KB941202)
Security Update for Windows XP (KB941568)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB943460)
Security Update for Windows XP (KB944653)
SFR
SFR2
SlimBrowser (remove only)
SOYO HW Monitor
Spy Sweeper
Spybot - Search & Destroy 1.4
Steam
touchFree 0.6
Trillian
Update for Windows XP (KB898461)
Update for Windows XP (KB900485)
Update for Windows XP (KB904942)
Update for Windows XP (KB908531)
Update for Windows XP (KB910437)
Update for Windows XP (KB916595)
Update for Windows XP (KB920872)
Update for Windows XP (KB922582)
Update for Windows XP (KB925720)
Update for Windows XP (KB927891)
Update for Windows XP (KB929338)
Update for Windows XP (KB930916)
Update for Windows XP (KB931836)
Update for Windows XP (KB933360)
Update for Windows XP (KB936357)
Update for Windows XP (KB938828)
Update for Windows XP (KB942763)
VideoLAN VLC media player 0.8.6
Winamp (remove only)
Windows Communication Foundation
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live OneCare safety scanner
Windows Media Format Runtime
Windows Media Player 10
Windows Presentation Foundation
Windows Workflow Foundation
Windows XP Hotfix - KB873339
Windows XP Hotfix - KB885835
Windows XP Hotfix - KB885836
Windows XP Hotfix - KB885884
Windows XP Hotfix - KB886185
Windows XP Hotfix - KB887472
Windows XP Hotfix - KB887742
Windows XP Hotfix - KB888113
Windows XP Hotfix - KB888302
Windows XP Hotfix - KB890859
Windows XP Hotfix - KB891781
Windows XP Service Pack 2
WinRAR archiver
WinZip
World of Warcraft
Yahoo! Toolbar

gringo_pr

hello sweeper
This is my general post for when your logs show no more signs of malware

The problems you are having now I believe are not related to malware and that is were most of my knowing is

so I am going to refer you to another part of the forum
try posting the problems with firefox and your keyboard here in this forum
http://icrontic.com/forum/forumdisplay.php?f=24

• Click START then RUN
• Now type Combofix /u in the runbox and click OK
• 

• When shown the disclaimer, Select "2"

Make your Internet Explorer more secure - This can be done by following these simple instructions:

• From within Internet Explorer click on the Tools menu and then click on Options.
• Click once on the Security tab
• Click once on the Internet icon so it becomes highlighted.
• Click once on the Custom Level button.
• Change the Download signed ActiveX controls to Prompt
• Change the Download unsigned ActiveX controls to Disable
• Change the Initialise and script ActiveX controls not marked as safe to Disable
• Change the Installation of desktop items to Prompt
• Change the Launching programs and files in an IFRAME to Prompt
• Change the Navigate sub-frames across different domains to Prompt
• When all these settings have been made, click on the OK button.
• If it prompts you as to whether or not you want to save the settings, press the Yes button.

Next press the Apply button and then the OK to exit the Internet Properties page.
Turn On Automatic Updates
Turn On Automatic Updates
1. Click Start, click Run, type sysdm.cpl, and then press ENTER.
2. Click the Automatic Updates tab, and then click to select one of the following options. We recommend that you select the Automatic (recommended) Automatically download recommended updates for my computer and install them
If you click this setting, click to select the day and time for scheduled updates to occur. You can schedule Automatic Updates for any time of day. Remember, your computer must be on at the scheduled time for updates to be installed. After you set this option, Windows recognizes when you are online and uses your Internet connection to find updates on the Windows Update Web site or on the Microsoft Update Web site that apply to your computer. Updates are downloaded automatically in the background, and you are not notified or interrupted during this process. An icon appears in the notification area of your taskbar when the updates are being downloaded. You can point to the icon to view the download status. To pause or to resume the download, right-click the icon, and then click Pause or Resume. When the download is completed, another message appears in the notification area so that you can review the updates that are scheduled for installation. If you choose not to install at that time, Windows starts the installation on your set schedule.

or visit http://www.windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.

antispyware programs
you have a couple of good antispyware programs on this computer but you still can try some of these others to see if you like them also
I would reccomend the download and installation of some or all of the following programs (all free), and the updating of them regularly:

• WinPatrol As a robust security monitor, WinPatrol will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. WinPatrol takes snapshot of your critical system resources and alerts you to any changes that may occur without your knowledge.
• AVG Anti-Spyware This is a program that scans for and removes known spyware from your machine.
• Ad-Aware SE - This is a program that scans for and removes known spyware from your machine.
• Spyware Blaster - By altering your registry, this program stops harmful sites from installing things like ActiveX Controls on your machines.
• IE_Spyad - Works by placing known "bad" sites into your Internet Explorer "Restricted Zones" prohibiting them from doing potentially problematic things to your computer.

Consider a custom hosts file
Consider a custom hosts file such as MVPS HOSTS. This custom hosts file effectively blocks a wide range of unwanted ads, banners, 3rd party Cookies, 3rd party page counters, web bugs, and many hijackers.
For information on how to download and install, please read this tutorial by WinHelp2002
Note: Be sure to follow the instructions to disable the DNS Client service before installing a custom hosts file.


Use an alternative Internet Browser
Many of the exploits are directed to users of Internet Explorer. Try using a different browser instead.

• Maxthon Browser
• Opera
• K-Meleon

Also please read this great article by Tony Klein So How Did I Get Infected In First Place
Now you have followed my advice - it's time to lodge a complaint against what you have suffered.........

Malware Complaints
If you were infected .... Stand Up and be Counted.


I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can then be closed.


Gringo

SweepeR

yea seems like thigns are ok with taht but more of a computer issue...such as when i play a video/song every so often there is a quick lapse in it as in it just like stops for a sec then continues again.