Help with ABETTERINTERNET

Discussion in 'Malware Help (A Specialist Will Reply)' started by Cactus Jack, Feb 3, 2007.

  1. Cactus Jack

    Cactus Jack Private E-2

    Each time I run Spybot it shows that my computer it infected with Abetterinternet. Here are the hijackthis log and Qoofix log. Adware doesn't show any thing.

    Thanks,
    Cactus
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, renaming, running, and posting HijackThis logs as attachments.
    • Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support
    • Make sure you check version numbers and get all updates.
    • Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.
    • After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:
    Make sure you also rename HijackThis.exe as suggested in the procedures. Use analyse.exe for the new name. This is very important due to some new infections going around.
    • When you return to make your next post, make sure you attach the following logs and that you have run these scans in the following order too:
      • CounterSpy
      • AVG Antispyware log - ONLY IF NEEDED you were not able to run CounterSpy
      • Bitdefender - from step 6
      • Panda Scan - from step 6
      • runkeys.txt - the log from GetRunKey.bat
      • newfiles.txt - the log from ShowNew.bat
      • HijackThis
    NOTE: You can only attach 3 files in a single message so it will require that you use two messages to attach all of these logs!
     
  3. Cactus Jack

    Cactus Jack Private E-2

    I have run all of the recommended scans and fixes, and still can't get rid of Abetterinternet malware.

    Thanks,
    Cactus
     
  4. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you have run all the recommended scans you need to attach ALL 6 requested logs as instructed. Unitl that has been done, you have not followed the instructions in the READ & RUN ME.
     
  5. Cactus Jack

    Cactus Jack Private E-2

    I think that the problem may be with Spybot. All of the other scans and file searches turn up nothing. Looking over my Hijackthis log, I don't see anything suspicious.

    Cactus
     
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Most people are under the very mistaken misconception that HijackThis is a scanning/removal tool. It is not! HijackThis is simply a tool that is used to identify browser hijackers and in some cases it will show entries for some malware that is for instance running at startup. All it does is list a few of the thousands of registry keys that exist, and it makes no inferences to whether anything being shown is good or bad. That decision is left a person with significant Windows and malware cleaning experience. HijackThis does not come close to showing all malware that could be hiding on a PC. Anyone who has an infected computer and is relying on HijackThis without the benefit of running other scans such as Spybot, Windows Defender, BitDefender & Panda, CCleaner, etc. are more than likely still infected. In most cases, where there is one virus/trojan there are more. The goal of this forum is to remove all malware, and this cannot be done properly by just seeing a HijackThis log.


    We cannot help you if you don't cooperate by attach the requested logs!
     
  7. Cactus Jack

    Cactus Jack Private E-2

    I would rather be safe than sorry! Here are all on of the logs on two post from the scans.

    Cactus
     

    Attached Files:

  8. Cactus Jack

    Cactus Jack Private E-2

    The rest of the logs. Looking at Spybot, I am thinking that it thinks that the driver for my new Nvidia Video Board is spyware. Doing a search for NvCplDaemon is a part of the driver. Am I thinking right? Is there some spyware
    with the driver or is Spybot finding something that is not really there?

    Thanks for your patience,
    Cactus
     

    Attached Files:

  9. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You did not attach the logs from Bitdefender and PandaActiveScan. Also HijackThis was not renamed as requested. But none of this really matters at this point since you do appear to be clean.

    Your problem is related to the fact that you did not install Spybot from what we gave you in the READ ME. You are using a version that has not been used in more than two years.

    Uninstall this outdated version of Spybot, reboot (don't skip this), and reinstall the correct version from the READ ME. Then update it and run a new scan. Do you still have a detection! You should not since it was a false positive and was only due to you not have the proper version of software installed.

    You are almost as far out of date with your Sun Java version!

    Uninstall the below old versions of software:
    J2SE Runtime Environment 5.0

    Make sure you reboot after uninstalling the above!

    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment


    You can now also uninstall the CounterSpy trial since we are finished with it. Then delete the below two folders left behind by the uninstall:
    C:\Documents and Settings\Moe\Local Settings\Application Data\Sunbelt Software
    C:\Program Files\Sunbelt Software
     
  10. Cactus Jack

    Cactus Jack Private E-2

    That worked!

    Thanks for your help!
    Cactus
     
  11. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds