My computer keeps crashing , please help

aliEnRIK

Uninstall any LOGITECH software (its not needed for the webcam to work)
Uninstall EPSON TOOLBAR
Uninstall WINDOWS LIVE TOOLBAR
Uninstall/disable SKYPE TOOLBAR


TICK and FIX these in hijack -
R3 - URLSearchHook: (no name) - - (no file)
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\Windows\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.0; Trident/4.0; GTB6.6; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; eSobiSubscriber 2.0.4.16; .NET CLR 3.5.30729; .NET CLR 3.0.30618; InfoPath.2; !!!!!!!!!!Connector.1.5; !!!!!!!!!!Patch.1.3)" -"http://www.nationalexpress.com/home.aspx"

I suspect this might not be helping -
O23 - Service: DeviceMonitorService - Nero AG - C:\Program Files\Motorola Media Link\NServiceEntry.exe
Is it needed?

aliEnRIK

I notice you have malwarebytes installed

Plase open malwarebytes, goto LOGS and post the WHOLE of the last log

Ilovecubbage

How do I uninstall these, I remooved them is it the same thing?

Uninstall any LOGITECH software (its not needed for the webcam to work)
Uninstall EPSON TOOLBAR
Uninstall WINDOWS LIVE TOOLBAR
Uninstall/disable SKYPE TOOLBAR

aliEnRIK

Not sure what you mean by remove

But to uninstall you need to goto START - CONTROL PANEL - (make sure view by ICONS is on and not category) - PROGRAMS AND FEATURES, then find and uninstall them from there

Ilovecubbage

I couldn`t find the epson toolbar and those two:

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide

O4 - HKCU\..\Run: [Logitech Vid] "C:\Program Files\Logitech\Logitech Vid\vid.exe" -bootmode

Have done the rest will post the log in a sec as it keeps freezing on me.

Ilovecubbage

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5895
Windows 6.0.6001 Service Pack 1 (Safe Mode)
Internet Explorer 8.0.6001.18975
27/02/2011 19:06:49
mbam-log-2011-02-27 (19-06-49).txt
Scan type: Full scan (C:\|D:\|)
Objects scanned: 318272
Time elapsed: 39 minute(s), 27 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\kCgInAm06300 (Trojan.FakeAlert) -> Value: kCgInAm06300 -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\{6358C7DF-A059-1F26-4462-E4680AE48950} (Trojan.ZbotR.Gen) -> Value: {6358C7DF-A059-1F26-4462-E4680AE48950} -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\programdata\kcginam06300\kcginam06300.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\John\AppData\Local\Mozilla\Firefox\Profiles\ethu28fu.default\Cache\89c91747d01 (Adware.Hotbar) -> Quarantined and deleted successfully.
c:\Users\John\AppData\LocalLow\Sun\Java\deployment\cache\6.0\12\6384a20c-38c9a5c3 (Trojan.FakeAlert) -> Quarantined and deleted successfully.
c:\Users\John\AppData\Roaming\Wuqyw\trzC8BA.tmp (Spyware.Passwords.XGen) -> Quarantined and deleted successfully.
c:\Users\John\downloads\Setup.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

Ilovecubbage

sorry it took me so long

espresso

Ilovecubbage wrote: »

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org
Database version: 5895

Your Malwarebytes' Anti-Malware database is well out of date. Click on the Update Tab, Update and run again.

GunJack

open malwarebytes, go to the Update tab, update it, then run a FULL SCAN, let mbam delete all it finds (may need a reboot) and post the new log back here


burger....must type quicker

aliEnRIK

Your problem is clearly definitely trojan related

Ill advise further once youve posted the UPDATED and FULL scan