McAfee says Ii'm not protected ....

top_drawer_2

aliEnRIK wrote: »

Your computers definitely infected, which is why nothing is connecting.

Create a boot disc ~
http://www.free-av.de/en/tools/12/avira_antivir_rescue_system.html

hi,

How come I can use Mozzilla?

It seems to be only IE thats affected.

boot disc - that sounds really serious!!

Jen

aliEnRIK

If you cant create a boot disc, then run an online scan ~

Please go to Eset Onlinescan (NOD32)
(You need to use InternetExplorer or enable IEView in Firefox)

• You will then see the Terms of Use, tick the check-box infront of YES, I accept the Terms of Use
• Now click Start
• Should you face a Security Warning that asks if you want to install and run a file called "OnlineScanner.cab", click Yes
• Click Start (the Onlinescanner will now prepare itself for running on your pc)
• To do a full-scan, tick: "Remove found threats" and "Scan potentially unwanted applications"
• Press Scan
  The Onlinescan will now start and scan your pc (please let it run to completion)
• When the scan has finished, it will show a screen with two tabs "overview" and "details" and the option to get information or buy software, just close the window
• Click Start >> Run... >> type: C:\Program Files\EsetOnlineScanner\log.txt
  The Scan results will now open in Notepad
• Click into the text area, right-click and chose "select all"
• Right-click again and chose "copy"
• Close Notepad

aliEnRIK

top_drawer wrote: »

hi,

How come I can use Mozzilla?

It seems to be only IE thats affected.

boot disc - that sounds really serious!!

Jen

pass

I was round at my mates today with the exact (ish) same problem.
Difference being SUPERANTISPYWARE did run, so we managed to remove it using that.

aliEnRIK

another option (if possible) is to download the latest definition file of MALWAREBYTES from here ~
http://www.gt500.org/malwarebytes/database.jsp

top_drawer_2

aliEnRIK wrote: »

theyre there ~ look near the bottom of the C drive stuff
C:\Users\Jenny\AppData\Local\Temp\RarSFX0\basic\se tup.exe
C:\Users\Jenny\AppData\Local\Temp\RarSFX0\basic\fa ct.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

I've looked and looked and what I see on the scan is not an exact replica of what the log is IYSWIM. Those processes are not available for me to fix

Jen

aliEnRIK

jen ~ heres the first part of the log you LAST posted (The files are at the bottom)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.ex e
C:\Windows\ehome\ehtray.exe
C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.ex e
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIC CE.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FAMTC CE.EXE
C:\Users\Jenny\Desktop\antivir_workstation_winu_en _h.exe
C:\Users\Jenny\AppData\Local\Temp\RarSFX0\basic\se tup.exe
C:\Users\Jenny\AppData\Local\Temp\RarSFX0\basic\fa ct.exe

DCFC79

top_drawer wrote: »

a proxy .... possibly when I go to the (uni) library it is .... at home we are on Broadband.

Jen

alienrik means do you connect to the internet via a proxy, you can do it if your using broadband

top_drawer_2

aliEnRIK wrote: »

jen ~ heres the first part of the log you LAST posted (The files are at the bottom)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Windows\System32\WLTRAY.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
C:\Program Files\Kontiki\KHost.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.ex e
C:\Windows\ehome\ehtray.exe
C:\Program Files\NetRatingsNetSight\NetSight\NielsenOnline.ex e
C:\Windows\System32\spool\drivers\w32x86\3\E_FATIC CE.EXE
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FAMTC CE.EXE
C:\Users\Jenny\Desktop\antivir_workstation_winu_en _h.exe
C:\Users\Jenny\AppData\Local\Temp\RarSFX0\basic\se tup.exe
C:\Users\Jenny\AppData\Local\Temp\RarSFX0\basic\fa ct.exe

but the list I get to choose which ones to fix doesnt have them on the list ....

top_drawer_2

aliEnRIK wrote: »

another option (if possible) is to download the latest definition file of MALWAREBYTES from here ~
http://www.gt500.org/malwarebytes/database.jsp

I've done this and I have run it .... nothing seems to be happening though so Ive re-run it several times .....

Jen

aliEnRIK

jen. Running THAT file will auto update malwarebytes
So open Malwarebytes and goto UPDATE ~ the definition file there SHOULD now say ~ 1778
If it DOES, then run another FULL scan