HELP! Computer won't switch off

aliEnRIK

timbim wrote: »

How do you come up with all this? And how do you know what's what?

erm....are you asking me?

timbim_2

Yes, I'm constantly amazed by how much help you distribute, and the rate at which you do it!

aliEnRIK

ok doki

erm.........

"O10 - Unknown file in Winsock LSP" ~ the fact theres loads of these points to a definite infection

LSPFIX and HOSTS EXPERT should (Hopefully) rectify that

SAS is to attempt to find what the source of the problem is (for starters)

Chuzzle

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 04/25/2009 at 08:44 AM

Application Version : 4.26.1000

Core Rules Database Version : 3863
Trace Rules Database Version: 1815

Scan type : Complete Scan
Total Scan Time : 00:21:17

Memory items scanned : 531
Memory threats detected : 0
Registry items scanned : 5839
Registry threats detected : 9
File items scanned : 14500
File threats detected : 28

Adware.Tracking Cookie
C:\Documents and Settings\User\Cookies\user@serving-sys[2].txt
C:\Documents and Settings\User\Cookies\user@bs.serving-sys[1].txt
C:\Documents and Settings\Brandon\Cookies\brandon@ads.sun[1].txt
C:\Documents and Settings\Brandon\Cookies\brandon@media.wow-europe[2].txt
C:\Documents and Settings\Brandon\Cookies\brandon@liveperson[2].txt
C:\Documents and Settings\Brandon\Cookies\brandon@solutions.liveperson[2].txt
C:\Documents and Settings\Brandon\Cookies\brandon@mywebsearch[2].txt
C:\Documents and Settings\Brandon\Cookies\brandon@revsci[2].txt
C:\Documents and Settings\Josh\Cookies\josh@sexintheuk[2].txt
C:\Documents and Settings\Josh\Cookies\josh@trafficholder[2].txt
C:\Documents and Settings\Josh\Cookies\josh@penisbot[1].txt
C:\Documents and Settings\Josh\Cookies\josh@specificclick[2].txt
C:\Documents and Settings\Josh\Cookies\josh@gmmtracker[2].txt
C:\Documents and Settings\Josh\Cookies\josh@www.penisbot[2].txt
C:\Documents and Settings\Josh\Cookies\josh@mywebsearch[1].txt
C:\Documents and Settings\Josh\Cookies\josh@ads.ad4game[1].txt
C:\Documents and Settings\Josh\Cookies\josh@media.wow-europe[2].txt
C:\Documents and Settings\Josh\Cookies\josh@ad.yieldmanager[1].txt
C:\Documents and Settings\Josh\Cookies\josh@eas.apm.emediate[2].txt
C:\Documents and Settings\Josh\Cookies\josh@euroclick[1].txt
C:\Documents and Settings\Josh\Cookies\josh@imrworldwide[2].txt
C:\Documents and Settings\Josh\Cookies\josh@nichetrafficticket[2].txt
C:\Documents and Settings\Josh\Cookies\josh@questionmarket[2].txt
C:\Documents and Settings\Josh\Cookies\josh@server.cpmstar[2].txt
C:\Documents and Settings\Josh\Cookies\josh@tsprotraffic[1].txt
C:\Documents and Settings\Josh\Cookies\josh@www.googleadservices[1].txt
C:\Documents and Settings\Josh\Cookies\josh@yieldmanager[1].txt

Adware.MyWebSearch/FunWebProducts
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE#NextInstance
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Service
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Legacy
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#ConfigFlags
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#Class
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#ClassGUID
HKLM\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MYWEBSEARCHSERVICE\0000#DeviceDesc

Trace.Known Threat Sources
C:\Documents and Settings\Josh\Local Settings\Temporary Internet Files\Content.IE5\ZAQV0ZVD\g_default[1].gif

Chuzzle

RIK

Have done everything you said. And yes I did reboot as malwarebytes instructed.

Bullguard came pre-installed on the computer the shop claimed it was the best one available....I had my doubts though, any salesperson would say theirs is the best!

What do you recommend I have instead of Bullguard ..... McAfee or Norton maybe ??:rotfl::rotfl::rotfl:Seriously tho what is a good thing to have?

Reading the SAS log I can see my kids names appear rather alot....Can you tell which websites I should be telling them to avoid?

gaming_guy

Ruthibe73 wrote: »

What do you recommend I have instead of Bullguard ..... McAfee or Norton maybe ??:rotfl::rotfl::rotfl:Seriously tho what is a good thing to have?

mcafee is worse than useless, nortons not much better either.

kaspersky is the best paid for suite around, or if you want free security, avira antivir and either pctools firewall or the comodo firewall are the best ones to go for.

aliEnRIK

I completely agree with gaming guy

As for the sites. SPYBOTS IMMUNISE feature will auto prevent some of them ~
Download SPYBOT (Make sure you click 'DOWNLOAD LATEST VERSION' ~ make sure TEA TIMER is UNTICKED on installation)
http://www.filehippo.com/download_spybot_search_destroy/
UPDATE and IMMUNISE (Make sure it reads ZERO unprotected) and SCAN

And the safest way to browse is to use FIREFOX with the NOSCRIPT plug in ~
Download FIREFOX
http://www.mozilla-europe.org/en/firefox/

NOSCRIPT
https://addons.mozilla.org/en-US/firefox/addon/722


NOSCRIPT works by blocking ALL website scripts (Which is how dodgy websites infect your computer ~ the easiest way to catch a virus after downloading). So you need to UNLOCK all websites you use for them to work properly (Like this one for example)
It also prevents 'page hijacking' (clicking to goto a BANK page for example and being redirected to a BOGUS page which would give scammers your login details!)
I personally set it so that it DOESNT show messages about blocked scripts. Then all you need to do is use common sense. Think to yourself 'does the site work ok'? If so it doesnt need touching. But if you wanted to watch a video on youtube say, youd need to unlock parts of it. Look bottom right, If theres ANY red on the 'S' symbol, then something is being blocked.

(You will also need the other addons like FLASH etc)
http://www.google.com/tools/firefox/toolbar/FT5/intl/en-GB/index.html
https://addons.mozilla.org/en-US/firefox/browse/type:7