We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Quick Help Needed Pls!! Virus!! System Security

13468912

Comments

  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Cant believe no one went through the hijack log!

    FIX these using hijack ~
    C:\Documents and Settings\All Users\Application Data\1527240312\1924345600.exe
    O1 - Hosts: 221.135.111.121 Download.McAfee.com
    O1 - Hosts: 221.135.111.122 Download.McAfee.com
    O2 - BHO: (no name) - !!7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O4 - HKLM\..\Run: [1924345600] "C:\Documents and Settings\All Users\Application Data\1527240312\1924345600.exe"
    O9 - Extra button: Sky - !!08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.sky.com (file missing)
    O15 - Trusted Zone: http://*.mcafee.com
    O16 - DPF: !!4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.aolsvc.co.uk/molb...21/mcgdmgr.cab


    Then scan with spybot (posted above)

    reboot and run a fresh hijack log
    :idea:
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Winjackie wrote: »
    I did a FULL scan, took nearly 50 minutes :eek: When you say quarantine, do you mean click to quanrantine and remove them?

    yes :D
    :idea:
  • Winjackie
    Winjackie Posts: 1,726 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    aliEnRIK wrote: »
    Cant believe no one went through the hijack log!

    FIX these using hijack ~
    C:\Documents and Settings\All Users\Application Data\1527240312\1924345600.exe
    O1 - Hosts: 221.135.111.121 Download.McAfee.com
    O1 - Hosts: 221.135.111.122 Download.McAfee.com
    O2 - BHO: (no name) - !!7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
    O4 - HKLM\..\Run: [1924345600] "C:\Documents and Settings\All Users\Application Data\1527240312\1924345600.exe"
    O9 - Extra button: Sky - !!08E730A4-FB02-45BD-A900-01E4AD8016F6} - http://www.sky.com (file missing)
    O15 - Trusted Zone: http://*.mcafee.com
    O16 - DPF: !!4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} -
    O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.aolsvc.co.uk/molb...21/mcgdmgr.cab


    Then scan with spybot (posted above)

    reboot and run a fresh hijack log

    Sorry..... how do I fix these??
    If at first you don't succeed ........ ;) Alternative autism therapies should be free!!
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    scan with hijack again and TICK the relevant entries then click to FIX them (ONLY them)
    :idea:
  • Winjackie
    Winjackie Posts: 1,726 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Okay,the top one (C:\Documents and set......\all users\application..... etc) is no longer thereso shall I just do the rest.

    Sorry to be a pain but am not confident downloading/installing all these programmes when I don't really know what I'm doing!
    If at first you don't succeed ........ ;) Alternative autism therapies should be free!!
  • aliEnRIK
    aliEnRIK Posts: 17,741 Forumite
    Part of the Furniture Combo Breaker
    Do all that are there.
    :idea:
  • Winjackie
    Winjackie Posts: 1,726 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Right, am now using daughter's laptop as I am bit worried about using my own with this system security on it. I have tried everything but it is still on there. I have found a program on google, can someone tell me if it is reputable??

    http://www.spywarehelper.org/removal-instructions/xp-vista/system-security-removal-guide?gclid=CNG36peE8JgCFUQI3wodJFC_0g
    If at first you don't succeed ........ ;) Alternative autism therapies should be free!!
  • Browntoa
    Browntoa Posts: 49,612 Forumite
    Part of the Furniture 10,000 Posts Name Dropper Photogenic
    would not trust it
    Ex forum ambassador

    Long term forum member
  • Winjackie
    Winjackie Posts: 1,726 Forumite
    Part of the Furniture 1,000 Posts Combo Breaker
    Is there any way of getting rid of this then?

    TIA
    If at first you don't succeed ........ ;) Alternative autism therapies should be free!!
  • Pie123
    Pie123 Posts: 232 Forumite
    Hit the computer with a rather large stick
This discussion has been closed.
Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 352.1K Banking & Borrowing
  • 253.5K Reduce Debt & Boost Income
  • 454.2K Spending & Discounts
  • 245.1K Work, Benefits & Business
  • 600.7K Mortgages, Homes & Bills
  • 177.4K Life & Family
  • 258.9K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.6K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.