pc help.....had spyware i think???

Reluctant_spender

Sorry should have said. The malwarebytes cleared out some crap - make sure you reboot your system prior to starting the list.

My last post will clear out temp files, restore hosts files, in case you were suffering from misdirections and the last will check to ensure your system is clean.

crystal9

ok am just downloading now i dont use opera or firefox thoo

Reluctant_spender

that's fine - the canned speech caters for all browsers.

crystal9

heres the results from scan it found 3 threats


Operating System: Microsoft Windows XP Home Edition Service Pack 3 (build 2600)
Kaspersky Online Scanner 7 version: 7.0.25.0
Program database last update: Tuesday, November 04, 2008 05:25:16
Records in database: 1369352
Scan settingsScan using the following databaseextendedScan archivesyesScan mail databasesyesScan areaMy ComputerC:\
\
E:\
F:\
G:\
H:\
I:\ Scan statisticsFiles scanned76721Threat name3Infected objects3Suspicious objects0Duration of the scan01:46:40
File nameThreat nameThreats countC:\Documents and Settings\tina \.housecall6.6\Quarantine\NewSoftware2007Install[1].cab'.bac_a03900Infected: not-a-virus:Downloader.Win32.WinFixer.io1C:\Documents and Settings\tina \Local Settings\Temp\_5849_fHx8fDY1MHwxOTM5fHw_.dbxInfected: not-a-virus:FraudTool.Win32.PowerAntivirus2009.bg1C:\Program Files\Windows Live\Messenger\msimg32.dllInfected: not-a-virus:AdTool.Win32.MyWebSearch.cg1The selected area was scanned.

again thanks for your help

Reluctant_spender

Start button - run - entry the following into the box and press ok;

C:\Documents and Settings\tina \.housecall6.6\Quarantine

Click on the quarantine folder and delete all that is inside.If you cannot see this file continue with the below scan.

Then run this scan just to ensure you are clean;

Please go to Eset Onlinescan (NOD32)
(You need to use InternetExplorer or enable IEView in Firefox)

• You will then see the Terms of Use, tick the check-box infront of YES, I accept the Terms of Use
• Now click Start
• Should you face a Security Warning that asks if you want to install and run a file called "OnlineScanner.cab", click Yes
• Click Start (the Onlinescanner will now prepare itself for running on your pc)
• To do a full-scan, tick: "Remove found threats" and "Scan potentially unwanted applications"
• Press Scan
  The Onlinescan will now start and scan your pc (please let it run to completion)
• When the scan has finished, it will show a screen with two tabs "overview" and "details" and the option to get information or buy software, just close the window
• Click Start >> Run... >> type: C:\Program Files\EsetOnlineScanner\log.txt
  The Scan results will now open in Notepad
• Click into the text area, right-click and chose "select all"
• Right-click again and chose "copy"
• Close Notepad

Note for Vista Users: Eset is compatible but Internet Explorer must be run as Administrator. To do this, right-click on the IE icon in the Start Menu or Quick Launch Bar on the Taskbar and select "Run as Administrator" from the context menu.)

Include this log in your reply by right-clicking and "paste" in the text area of the reply post you just created.

crystal9

hi again, couldnt find the file in run so have started the scan off

Reluctant_spender

Good, it should clear the same.

crystal9

gawd that took aaagggeeesss


# version=4
# OnlineScanner.ocx=1.0.0.635
# OnlineScannerDLLA.dll=1, 0, 0, 79
# OnlineScannerDLLW.dll=1, 0, 0, 78
# OnlineScannerUninstaller.exe=1, 0, 0, 49
# vers_standard_module=3583 (20081104)
# vers_arch_module=1.064 (20080214)
# vers_adv_heur_module=1.064 (20070717)
# EOSSerial=8789c66a71ee7c468e883c2aea4d7c4e
# end=finished
# remove_checked=true
# unwanted_checked=true
# utc_time=2008-11-04 10:34:31
# local_time=2008-11-04 10:34:31 (+0000, GMT Standard Time)
# country="United Kingdom"
# osver=5.1.2600 NT Service Pack 3
# scanned=390433
# found=3
# scan_time=8759
C:\Documents and Settings\tina deacon\Local Settings\Temp\_5849_fHx8fDY1MHwxOTM5fHw_.dbx a variant of Win32/Adware.PowerAntivirus application (deleted) 00000000000000000000000000000000
C:\Documents and Settings\tina \Local Settings\Temp\_5849_fHx8fDY1MHwxOTM5fHw_.dbx »NSIS »ý‹€.exe a variant of Win32/Adware.PowerAntivirus application (error while cleaning - operation unavailable for this type of object - error while deleting - operation unavailable for this type of object - was a part of the deleted object) 00000000000000000000000000000000
C:\Program Files\Windows Live\Messenger\msimg32.dll Win32/Toolbar.MyWebSearch application (unable to clean - deleted) 00000000000000000000000000000000

so whats the outcome?

Reluctant_spender

Well it could not delete this file - download and run CCleaner and that should clear it.

http://www.ccleaner.com/

How is your system running?

crystal9

Reluctant_spender wrote: »

Well it could not delete this file - download and run CCleaner and that should clear it.

http://www.ccleaner.com/

How is your system running?

its seems fine now no problems that i can see, i've got ccleaner so ill do a scan now