2 Big Problems!!

Discussion in 'Malware Help (A Specialist Will Reply)' started by skd44, Aug 17, 2005.

  1. skd44

    skd44 Private First Class

    2 things,
    First, the ibm00021.exe is not the only thing in it, it has alot of other things in that folder
    Second, once I have removed the two lines from hijack this should I restart my machine?
     
  2. skd44

    skd44 Private First Class

    Ok, when I rebooted after removing what you said the computer made that error noise when all the desktop items had appeared and then this message appeared in regards to the ibm00021.exe file I removed
    "Windows cannot find "C:\Program Files\Common Files\Microsoft Shared\Web Folders\ibm00021.exe. Make sure you typed the name correctly, and then try again. To search for a file, click the start button, and then click Search."

    I have included the current hijack this log.
     

    Attached Files:

  3. skd44

    skd44 Private First Class

    OK thanks.
    The only thing I wanted to tell you is that I ran regseeker 5 times and the last two times I ran it the same reg key showed up and it looks familiar. The only entry that regseeker couldn't seem to remove showed this:

    HKEY_LOCAL_MACHINE
    Software\ShudderLTD\PSGuard
    C:\Program Files\PS Guard

    This PS Guard was part of my original problem.
    Get back to me whenever you can. Thanks again.
     
  4. skd44

    skd44 Private First Class

    OK I removed the two entries from hijack this as well as ran ccleaner and everything in the prefetch folder. Here is the file you requested from smitrem.
    Just wanted to add that when I ran the LTD_Fix.exe it showed PSGuard and Shudder LTD and said both were removed.
     

    Attached Files:

  5. skd44

    skd44 Private First Class

    I am assuming I should boot back in normal mode and see from there?
     
  6. skd44

    skd44 Private First Class

    OK I booted in normal mode and my normal screen saver was finally displayed for about 30 seconds and then an error message came up similar to the one I just posted a few posts back except this one said "Windows cannot find C:\delfiles.cmd"
    Then the red screen with that raze spyware ad came back. My internet and everything else seems to be working ok but my display and startup still seem a little shaky.
     
  7. skd44

    skd44 Private First Class

    After all the work and help you have given me I don't mean to sound stupid or naive but when you say you copy it to the C:, you don't mean just simply copy and paste it??? I know this sounds stupid but I just don't want to make any mistakes at this point!
     
  8. skd44

    skd44 Private First Class

    No error message this time but the red screen with raze spyware ad is still plastered on my display. As I said, the machine is running fine and the programs seem to be running ok, but the display seems to be the only problem still. Although it seems as if my speed surfind is slower and takes longer to jump from page to page.
     
  9. skd44

    skd44 Private First Class

    Here are both logs you requested.
     

    Attached Files:

  10. skd44

    skd44 Private First Class

    Ran everything and still the desktop backround loads for a few seconds and then goes white and then the red screen comes back.
     
  11. skd44

    skd44 Private First Class

    It asks me if I want to ad the information in C:\DOCUME\SEAN\Desktop\Fix.reg to the registry?
    Did I do this right?
     
  12. skd44

    skd44 Private First Class

    Red Screen is still happening with that Raze Spyware add. If I click on the Raze Spyware part of the ad it starts taking me to a site called http://aflashcounter.com but then it closes and windows says it encounters a problem and must close and then asks if I want to send a report to microsoft.
     
  13. skd44

    skd44 Private First Class

    I will try what you recommended with safe mode and command prompt because I cannot right click on the desktop. I right click and nothing happens at all.
     
  14. skd44

    skd44 Private First Class

    I'll have to try.
     
  15. skd44

    skd44 Private First Class

    It worked!!! I actually went into control panel and went to display and did what you said with the desktop and customize desktop. In that section labeled web pages there was a box checked that said Security. I highlighted that and deleted it and clicked apply. My desktop has been restored. Its finally back!!! Well, I think I am going to run some of the spyware removal programs you have had me download in safe mode just to make sure I have rid myself of everything, or should I say YOU have rid me of everything. I can't thank you enough for your help and especially your PATIENCE. I am sorry this took so long but I am glad that I learned quite a bit along the way. Thanks again!!!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds