Help Stupid System Tool Protect PC - Spyware? **Updated 9/3!**

aliEnRIK

Ok

Id suggest saying its ok and see how you get on over the next few weeks

OnAndUp

Thanks again & that really puts my mind at rest!

Just a few (more!) questions please?

Someone above suggested a hotfix for the code that came up on the blue screen? I'm unsure about that?

Also I can't see a way of turning maxblast off? Do you think it would be worth uninstalling it to try and run combofix again?

aliEnRIK

Depends on the bluscreen. Ive not really taken much notice of it, but if it was me, id definitely give it a go

Combofix, entirely upto you. if you can get a log posted I can give you a much better indication of if your computers free of nasties or not

OnAndUp

Thought I would give it a go so I uninstalled maxblast and ran combofix exactly the same thing happened again! It gets to about completed stage 50 then switches off this time I actually saw deleting files pop up so I guess it has never saved a logfile.

http://s1108.photobucket.com/albums/h406/OnAndUp/?action=view&current=P1010357.jpg

aliEnRIK

What about the hotfix?

OnAndUp

No haven't done the hotfix - yet?

Because when I google "stop 0x00000019" it takes me to this page http://support.microsoft.com/kb/892260 BUT it says "System TipThis article applies to a different version of Windows than the one you are using. Content in this article may not be relevant to you.Visit the Windows XP Solution Center"

I'm am running windows XP? not windows server 2003? So I assume that means it wouldn't work on here and I don't want to do any damage??

aliEnRIK

fair enough

It seems it 'might' be registry based

Download CCLEANER
http://www.piriform.com/ccleaner/download/slim
Run the CLEANER scan (UNTICK 'cookies')
Then run the REGISTRY scan (Backup the registry when it asks)


Download GLARY UTILITIES
http://www.glaryutilities.com/download/gusetup_slim.exe
REBOOT then run the ONE CLICK scan
Goto MODULES / SYSTEM TOOLS / WINDOWS STANDARD TOOLS / then run SYSTEM FILE CHECKER

Reboot and try combofix one last time

llamedos36

Hi need some help too plz, daughter used laptop last nite, for itunes and facebook today we have a blue screen with the following message warning you're in danger your computer is infected with spywire. it then pops up with a screen telling us we have 38 trojans and worms, but will not let us do anything except purchase system tool. will not let us on the internet will let us into a couple of programs but wont let us do anything and wont let us run any anti virus

Thanks in advance

Bev

Browntoa

llamedos, you need to start your own thread , advice is unique to each PC and will confuse the original poster

aliEnRIK

llamedos36 wrote: »

Hi need some help too plz, daughter used laptop last nite, for itunes and facebook today we have a blue screen with the following message warning you're in danger your computer is infected with spywire. it then pops up with a screen telling us we have 38 trojans and worms, but will not let us do anything except purchase system tool. will not let us on the internet will let us into a couple of programs but wont let us do anything and wont let us run any anti virus

Thanks in advance

Bev

Please start a new thread

Reboot and keep pressing F8 to get into SAFE MODE WITH NETWORKING

Run FixExe.reg (to allow malwarebytes etc to run). After clicking YES it will be fixed (Nothing will visually happen)
http://download.bleepingcomputer.com/reg/antivirus-vista-2010/FixExe.reg

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log in your NEW thread AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan


reboot

Download HIJACK THIS (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_hijackthis/
Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE(Takes seconds) then post the log so we can see whats running
(do NOT do anything else with Hijack but scan and post the FULL log)
If you get a message that you cant write to the hosts file then Press the SHIFT key, and whilst holding it RIGHT CLICK and select RUN AS (admin)