Help With Virus Please !!!

notasdaftasilook

sry i didi those scans b4 i read your last message. regarding your message i have just been to the hijack yhis report and i cant seem to see the file/programs that you listed? my pc has started taking me off line now without instruction also pop ups and speed are getting quite bad. i feel like throwing it thru the window as its all very annoying. i am gonna take another look in hijack this for those files. tx again for your help.

pchelpman

Unless you downloaded Winantispyware it looks like some miscreant installed adware on your computer promoting this nebulous product the suppliers of which pay them if they get you to buy it.

http://www.softwareprofit.com/faq.html

> >Go to Add/Remove programs in your control panel and uninstall ......

WinAntiSpyware 2006 Scanner.

---

Go to this folder [in BOLD] and delete it IF it is still present …

C:\program files\WinAntiSpyware 2006 Scanner

---

Go to these files [on BOLD] and delete them IF they are still present ….

C:\WINDOWS\system32\ldE280.tmp
c:\windows\system32\atmclk.exe
c:\windows\system32\ot.ico
c:\windows\system32\1024\ldD166.tmp
C:\WINDOWS\system32\1024\ldF34C.tmp
C:\WINDOWS\system32\hpE186.tmp
C:\WINDOWS\system32\regperf.exe

---

You also seem to have SpywareQuake. The removal of this takes time but can be done. Follow these step-by-step removal instructions ….

http://www.bleepingcomputer.com/forums/topic47826.html

---

Next, download CCleaner from :-

http://www.filehippo.com/download_ccleaner/ (click the download tab)

NOTE > During the installation be sure to UN-check the box for "Ccleaner Yahoo Toolbar" unless you want it.

Doubleclick the ccsetup.exe file and install the program.

Click "run cleaner" to let it get on with it's work... clicking this will result in the following pop-up

"This process will permanently delete files from your system. Are you sure you wish to proceed?"

click OK.

---

This message you mention …..

ASP.NET PATH VALIDATION VULNERABILITY(887219). …

...is/was a known issue with “.Net” systems. Read about it here and take corrective action …..

http://www.microsoft.com/technet/security/Bulletin/MS05-004.mspx

You should ensure all your operating software patches are up to date. Go to the Windows update site here ….

http://windowsupdate.microsoft.com/

….and check for/download/install any required updates/patches.

---

Repeat the Activescan and Housecall online scans.

---

Please post back a new HijackThis log, the results of both online scans and an update on how your system is operating now.

notasdaftasilook

the pc has really slowed down now. i am following all yr steps and going to all the links but all that happens is i download the program(am not sure what the right one is ) and its doing a scan. it tells me i have all these problems and viruses and when i am prompted to fix them i am sent to a site saying to do this i have to buy the software. i seem to be forever downloading , scanning , and restarting and still the problem is there if not worse.

twice it has taken me right out of this site as i have been typing this. i am grateful for all your time and help but its so frustrating for me as i dont really know what to look for or how to sort it

Browntoa

you need to be in safe mode to run all the software

http://www.bleepingcomputer.com/tutorials/tutorial61.html

Browntoa

follow this guide

http://forums.moneysavingexpert.com/showthread.html?t=133269

steps 1 to 4, you may need to print it out

pchelpman

As Browntoa says please repeat the steps in the anti-malware guide.

When completed please also post a new HJT log with an update on how your computer is behaving now.

notasdaftasilook

Sorry but i have been called away and i wont be able to do anything now until tuesday so please dont think i am ignoring you. many thanks

notasdaftasilook

i would like to thank both pchelpman and browntoa for there patience and help in sorting out my pc. It is running as it should now and all popups have stopped. I am very gratefull for all your help thanks again.

pchelpman

You're welcome. Glad to hear the good news.

You might like to read these two. Both very interesting and helpful.

How you may have been infected in the first place ....

http://castlecops.com/t7736-So_how_did_I_get_infected_in_the_first_place.html

How you might help to avoid it in the future.....

http://www.help2go.com/Tutorials/Protect_Your_PC/Avoid_Web_Browser_Hijackers.html


Safe surfing!

notasdaftasilook

Did i speak too soon i wonder ?

When i run a scan with Windows Defender (beta 2) it comes back with - Items Detected Severe /High Alert level 1.
When i click on remove all i get the following message -

Windows defender encountered an erroe : Ox 80501001 one or more actions could not be completed successfully. . name of the threat is is C2.hop which is spyware.

When i try to quarantine it i get the same message as above . The system also freezes every now and again and slows right down but when i run Norton Scans it comes back with no threats found. Its only windows defender that detects the above threat .

Grateful for any help Pchelpman/Browntoa.