avg

GunJack

Yay !! it worked

right, firstly you need to download and install XP sp3 and any other outstanding high-priority updates from microsoft update, and ensure your java's up-to-date (ver. 6-11 if I remember correctly)..and remove any older versions via add/removeprograms in control panel

fix these in HJT...

O2 - BHO: (no name) - !!1C3C4699-B285-475F-BE47-0B26088CE876} - (no file)

O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - !!3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)

O2 - BHO: NCO 2.0 IE BHO - !!602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)

O3 - Toolbar: (no name) - !!7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)


you also appear to have some other Norton (Symantec) hangovers on there, there's a removal tool on the Symantec website for that (similar to the AVG one mentioned above).

Try these and see how you get on...

GunJack

...and if MBAM will fire up too...we're on to a good start...

aliEnRIK

Interesting log!

Using hijack FIX these ~

C:\Documents and Settings\damo\Desktop\derby county 1.exe
C:\DOCUME~1\damo\LOCALS~1\Temp\is-UM90E.tmp\derby county 1.tmp
(Only fix the above 2 if youve no idea what they are)

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: (no name) - !!1C3C4699-B285-475F-BE47-0B26088CE876} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - !!3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll (file missing)
O2 - BHO: UberButton Class - !!5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: DriveLetterAccess - !!5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: NCO 2.0 IE BHO - !!602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: YahooTaggedBM Class - !!65D886A2-7CA7-479B-BB95-14D1EFB7946A} - C:\Program Files\Yahoo!\Common\YIeTagBm.dll
O2 - BHO: SidebarAutoLaunch Class - {F2AA9440-6328-4933-B7C9-A6CCDF9CBF6D} - C:\Program Files\Yahoo!\browser\YSidebarIEBHO.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - !!7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -
O16 - DPF: !!1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -
O16 - DPF: !!71057C18-0507-4747-86BC-E11CE7512C5F} (mailhelper Class) - https://register.btinternet.com/temp...control013.cab
O16 - DPF: {EC5A4E7B-02EB-451D-B310-D5F2E0A4D8C3} (webhelper Class) - https://register.btinternet.com/temp...control028.cab
O23 - Service: YPCService - Yahoo! Inc. - C:\WINDOWS\system32\YPCSER~1.EXE

Im guessing there ARE other nasties in there. Im just removing stuff fast to keep you going

After FIXING the above, reboot and try malwarebytes again (Rename it if you have to)

I also notice you have symantic running (norton). Is it supposed to be?

You also only have Service Pack 2. Once your up and running you NEED to install service pack 3 (Security updates)

GunJack

that RIK....he's such a show-off :rolleyes:

"my removal list's bigger than yours" :rotfl:

GunJack

gonna have to leave you to it guys..well tired and gotta sleep, eyes are closing on me...good luck with this, damo, you're in good hands, I'm sure RIK'll sort you out Will pop by tomorrow and see how you're getting on

damoderby

Ok done all that with the following exceptions.
1.malaware bytes will not run after installation in either normal or safe mode.
2.I can't download xp service pack 3 either from microsoft or anywhere else.

Again thanks for all the help so far.

aliEnRIK

Download SUPERANTISPYWARE (Top right)
http://www.filehippo.com/download_superantispyware/
UPDATE and SCAN

Download and run the NORTON REMOVAL TOOL
http://service1.symantec.com/Support/tsgeninfo.nsf/docid/2005033108162039

Download CCLEANER (Top right)
http://www.filehippo.com/download_ccleaner/
Run the top 2 scans (Backup the registry when it asks)


Download AVIRA ANTI VIRUS PERSONAL (Top right)
http://www.filehippo.com/download_antivir/

Do a full scan with Avira anti virus
Reboot
Do a fresh hijack log

GunJack

RIK, the OP is trying to install kaspersky...might it not be better to attempt to install that again, rather than avira, once he gets to that point ?? if it will install, it'll save on having to uninstall avira and then do kaspersky ??? Just a thought.....;)

aliEnRIK

My idea was im off to work and that should remove anything majorly nasty until such point someone takes over and gets kaspersky on (But by all means, go for kaspersky now if it will work)

cozza

hi ijust had the hassle of trying to delete avg 8 from my pc well it took me about 6 hours. i downloaded every thing i could to remove it but nothing would in the end i just downloaded avira done a scan . then blow me put pc on this morn and i could uninstall avg 8 so now that pescky avg has gone