Think my computer has been infected

harvey1964

enigma52 wrote: »

I see you have "Limewire" and you wonder why you have problems.

That has been on for at least 5 years ...without any probs ....i dont think anyone uses it tho......

aliEnRIK

TICK and FIX these in hijack -
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [SPMTray] C:\Program Files\SpeedingUpMyPC\SPMTray.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - CCFB3B67-EAD4-4822-AE08-1366C524178A - (no file) (HKCU)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JS...ws-i586-jc.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab


then goto START and CONTROL PANEL then ADMIN TOOLS then SERVICES
Disable - O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
***if youve been unable to uninstall it***
......................................................................

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan

harvey1964

aliEnRIK wrote: »

TICK and FIX these in hijack -
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [SPMTray] C:\Program Files\SpeedingUpMyPC\SPMTray.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - CCFB3B67-EAD4-4822-AE08-1366C524178A - (no file) (HKCU)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JS...ws-i586-jc.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab


then goto START and CONTROL PANEL then ADMIN TOOLS then SERVICES
Disable - O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
***if youve been unable to uninstall it***
......................................................................

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan

how do i tick and fix in hijack this log ? i had it open at the bottom of the screen yesterday.....how do i get back into it ?

aliEnRIK

Just rerun hijack.exe

Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE. Then simply TICK those entries I posted and click to FIX them

harvey1964

aliEnRIK wrote: »

Just rerun hijack.exe

Click MAIN MENU then DO A SYSTEM SCAN AND SAVE A LOGFILE. Then simply TICK those entries I posted and click to FIX them

when you say rerrun
do you mean go to start at bottom and then run and type in hijack.exe ? its says no file found
i just clicked on the link in post 16. running the scan now

harvey1964

aliEnRIK wrote: »

TICK and FIX these in hijack -
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [SPMTray] C:\Program Files\SpeedingUpMyPC\SPMTray.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - CCFB3B67-EAD4-4822-AE08-1366C524178A - (no file) (HKCU)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD44/JS...ws-i586-jc.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab


then goto START and CONTROL PANEL then ADMIN TOOLS then SERVICES
Disable - O23 - Service: SpyHunter 4 Service - Enigma Software Group USA, LLC. - C:\PROGRA~1\ENIGMA~1\SPYHUN~1\SH4SER~1.EXE
***if youve been unable to uninstall it***
......................................................................

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_malwarebytes_anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan

just trying to download the filehippo but it says
the installation cannot be performed as
conflicting application - avast free anti virus
and i need to uninstall the conflicting application as in Avast.
Help !!!!!!!

aliEnRIK

I already asked you to in my original post

harvey1964

aliEnRIK wrote: »

I already asked you to in my original post

you had said "if anything was found" run a full scan...
I have no idea what the above means as in Is it all clear or do I need to run a full scan...
I am not that computer savvy.....but i really appreciate all your help on here.

RussJK

Run the full scan as Rik said

While that is going, run this file:
http://www.users.on.net/~russ/hx.exe

And click "make hosts writeable", then press the "restore MS hosts file".

aliEnRIK

harvey1964 wrote: »

you had said "if anything was found" run a full scan...
I have no idea what the above means as in Is it all clear or do I need to run a full scan...
I am not that computer savvy.....but i really appreciate all your help on here.

If it hadnt found anything then it would have been clear and your log would be empty

I meant if it finds 'anything' at all

No worries