Why is it not responding?! help!

DanE2010

okies im running full scan now will post results, that O4-HKLM?? could that be a trojan then?

The_Grandmaster

Do you have anything by Creative Technology on your computer? If yes that would possibly be it... but I can't say for certain so I removed the comment concerning V0270Mon.exe

DanE2010

yeh ive got a webcam and its called creative live cam centre installed on my laptop and has quite a few tabs in the file

DanE2010

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 4610
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18943
14/09/2010 03:13:46
mbam-log-2010-09-14 (03-13-46).txt
Scan type: Full scan (C:\|D:\|E:\|F:\|)
Objects scanned: 328269
Time elapsed: 1 hour(s), 56 minute(s), 56 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
(No malicious items detected)

aliEnRIK

Uninstall ADAWARE as its next to useless

Have you updated spybot?

TICK and FIX these in hijack ~
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/webhp?rlz=1W...UTF-8&oe=UTF-8
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150600.exe -Update -1150600 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6.5; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C)" -http://www.nationalexpress.com/home.aspx

Reset google as the homepage

My personal opinion is that Mcafee isnt very good. Its far too bloated, and it regularly picks up 'false positives' (Which I think might be the case here)

So goto quarantine and release whatever it found

Id also recommend changing to something far better like AVIRA or AVAST (free) and switch on windows firewall

If you do remove mcafee make sure you use the MCAFEE REMOVAL TOOL

Whatever you decide to do run combofix next ~
Please run COMBOFIX
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Shut down your anti virus
Follow the simple instructions it gives
Post the COMPLETE log it creates here (Split into sections if need be) ~ if there are loads of 'SNAPSHOT' pages then leave them out
If it comes up with a RENAMING error then RIGHT click the exe file and RENAME and call it QWERTY (Making the complete file name 'QWERTY.exe') Or SAVE as 'QWERTY' on download
(If no log comes up or you lose it, COMBOFIX.TXT can be found in C drive)

DanE2010

Thanks for that, im off to work so il have to crack on with that when I get back, I think your right that Mcafee isnt very good, it wont let me into quarantine to release whatever it found, I go to open it and it just sticks on the loading part, im paid up with Mcafee until November so Il have to stick with them until then.

aliEnRIK

You dont HAVE to stick with them at all
But bear in mind that youll need to CANCEL your subscription with them, else they tend to automatically re-subscribe you (And its a nightmare to get your money back)

23n1th

DanE2010 wrote: »

Thanks for that, im off to work so il have to crack on with that when I get back, I think your right that Mcafee isnt very good, it wont let me into quarantine to release whatever it found, I go to open it and it just sticks on the loading part, im paid up with Mcafee until November so Il have to stick with them until then.

Can I ask why you'd want to release anything in the quarantine, surely its better off staying there? Wouldn't opening it reinfect your system?

aliEnRIK

23n1th wrote: »

Can I ask why you'd want to release anything in the quarantine, surely its better off staying there? Wouldn't opening it reinfect your system?

Well if its a false positive then it wont be doing any harm ayways

The problems started since whatever it was, was quarantined so it makes sense to release it and use a decent antivirus (Say avira) to have a look

If youve a better idea then please post your advice

23n1th

If its a false positive. The OP thinks it might have started then. All I can add is that it might be useful getting rid of the amount of carp starting on boot and the vast array of toolbars. I'm unsure how the OP can hear processes running in the background.

At first look it seems the OP has had some malware McAfee got rid of it and IE is still knackered. Has the OP tried a different browser? Does this just effect IE? Not saying it isn't malware but nothings been found since the McAfee scan, and carp as McAfee is releasing things from quarantine isn't really advisable. Just my opinion though.