journey software pro error keeps appearing

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by meloney, Oct 30, 2008.

  1. meloney

    meloney Private E-2

    Hi

    My dad asked me to copy a copy DVD for my nan. I did so, since then i was not able to un install any programs and it messed up the internet cache so i have had to re install a lot of programs to un install them.
    Now its asking for a install of journey software pro???

    I have no idea what that is, iv looked on the internet and im asuming that its a virus of sorts??

    Could someone help rolleyes
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Welcome to Major Geeks!

    Please follow the instructions in the below link and attach the requested logs when you finish these instructions.


    • If something does not run, write down the info to explain to us later but keep on going.
    • Do not assume that because one step does not work that they all will not.
    READ & RUN ME FIRST. Malware Removal Guide

    Notes:

    1. If you run into problems trying to run the READ & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
    2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.
     
  3. meloney

    meloney Private E-2

    Hi Tim

    Iv been very busy doing all these things. Please find enclosed.

    Just from going on the internet it appears better since doing these processes.

    So, once again.. Thank you very much.

    From Meloney in the UK.:wave
     

    Attached Files:

  4. meloney

    meloney Private E-2

    This was the last mglogs zip
     

    Attached Files:

  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Your logs look good.....let's just do two things:

    Run C:\MGtools\analyse.exe by double clicking on it. (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    After clicking Fix, exit HJT.

    Now use windows explorer to find and delete:
    C:\Documents and Settings\All Users\Application Data\qfsxapil

    If you are not having any other malware issues, then:
     
  6. meloney

    meloney Private E-2

    Oh Tim..

    Its started to install again, journey software promo again.. AN running slow.. Grr :cry

    Iv done the above, what you asked but its back! Every time i try and go on the internet.

    Meloney
     
  7. meloney

    meloney Private E-2

    Its error 1706 apparently does that help??
     
  8. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Sounds like something associated with your browser....Please download ATF Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

    NOTE: This program is for Windows XP and Windows 2000 only. ATF Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory first.

    * Double-click ATF-Cleaner.exe to run the program.
    * Under Main choose: Select All
    * Click the Empty Selected button.

    If you use Firefox browser

    * Click Firefox at the top and choose: Select All
    * Click the Empty Selected button.
    o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    If you use Opera browser

    * Click Opera at the top and choose: Select All
    * Click the Empty Selected button.
    o NOTE: If you would like to keep your saved passwords, please click No at the prompt.

    Click Exit on the Main ATF Cleaner menu to close the program.

    Also run CCleaner and check both the cleaner and the issues ...be sure to make a backup when prompted.
     
  9. meloney

    meloney Private E-2

    Hi Tim

    I did that and its still doing it.. Do you think i will have to totaly wipe the pc and start again? Iv enclosed a word doc with the screen shots on it of what i get when i start the internet.

    I hope this helps.

    Meloney
     

    Attached Files:

  10. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    No, you do not need to reformat...you need to go to add/remove programs and uninstall:
    JourneySoftwarePromo

    If it does not uninstall, then do a search for it....delete any folders or files that you find for this software.

    It is something someone installed at some point and possibly did not uninstall it properly.

    You should also run CCLeaner and run both the cleaner and the issues sections...make sure you do the backup when prompted.
     
  11. meloney

    meloney Private E-2

    Hi Tim

    If it were in add and remove programs i would of taken it off, but its not. Its also not showing when I scan for it. I even went on the net to find it but it does not exist.

    Nightmare!rolleyes
     
  12. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    It shows in your MGLogs in post #4... the NewFiles log.....either way, it is not malware, but rather a software issue and you should post in the software forum to help resolve this. :)
     
  13. meloney

    meloney Private E-2

    Hi Tim.. Iv posted the issue
    I also wiped my bloomin pc down now and re done it.. I dont know if it will work but its still so slow I keep having to do control ult and delete to bring the task manager up to make it run faster.. Why is this?

    I could cry iv spend so long trying to save it and now its still slow..:cry:(:confused
     
  14. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    If you completely reformatted your system...then unless you had some malware on a disc or thumb drive that you may have used to add programs back on..there would only be the amount of ram you have or other hardware issues that would slow you donw.

    This was not an issue that should have caused you to reformat...it was not malware. :(
     
  15. meloney

    meloney Private E-2

    ooo!! boo! okxx Thanks Tim
    Apparently it was from the HP printer.. Never mind..x
     
  16. meloney

    meloney Private E-2

    virus!!

    Hi Tim

    I found the virus, its back..
     

    Attached Files:

  17. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I have no idea what you sent me.....could you tell me what "virus" is "back" and what program is identifying it?
     
  18. meloney

    meloney Private E-2

    security center anti virus overide - in spy bot

    Hi Tim

    I keep getting a secruity center anti virus overide, showing as a virus when i run Spybot. Is this ok or not? Iv enclosed a ziped word doc of the issue..

    Meloney
     

    Attached Files:

  19. meloney

    meloney Private E-2

    Iv also a mutant flooder in dreamweaver it says.. on my threat fire!
     
  20. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Please attach the spybot log and the threatfire log.

    And since you re-installed....did you also reformat before doing that or just run the repair option?

    If just the repair option...any malware would still exist.

    So I need you to re-run all of the Read and Run FIrst instructions and attach those logs.

    You seem to be a target for malware as this is at least the third go round since June...:)

    We may have to discuss your surfing habits...:)
     
    Last edited: Nov 4, 2008
  21. meloney

    meloney Private E-2

    Hi Tim

    No I totaly wiped and over wrote the computer.

    I cant give you logs of the spybot and the threatfire as they dont give you a option, or save to anywhere?? Or do they??
     
  22. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Then give me the exact path to the file they are reporting....and get me the new logs. :)
     
  23. meloney

    meloney Private E-2

    virus

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\security center\antivirustoverride(is not)dword:0
    (SBI $3604910C

    is one of the paths the virus is.. the other i will mail you with when i get it in a bit..
     
  24. meloney

    meloney Private E-2

    THE OTHER IS THIS

    c:\DOCUMENTS AND SETTTINGS \ MBLAZYE\LOCAL SETTINGS\ TEMPORARY INTERNET FILES\ CONTENT.IE5\GM161GYQ\q1436183391_2837(1).JPEG
     
  25. meloney

    meloney Private E-2

    there may be more threat fire virsu in the last link i sent but i cant run a full scan now its quite late and i have to get up early tomorrow to see my nan..
     
  26. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Re: virus

    This is not a threat, this is just showing that you have the option checked in the Security Center to not monitor your antivirus status.

    Run CCleaner or ATF-Cleaner and this will be removed.

    Are you having any current malware issues?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds