A miss - Help needed : (

Discussion in 'Malware Help (A Specialist Will Reply)' started by Phantomx3, Jan 17, 2006.

  1. Phantomx3

    Phantomx3 Private E-2

    Hello everybody,

    I went through all the steps and attached are the log files.
    I can not uninstall many programs.
    I have some virus and spyware programs that I can not start.
    In addition to the programs in the steps, I used Spyware Doctor.


    Thanks in advance
     

    Attached Files:

  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

  3. Phantomx3

    Phantomx3 Private E-2

    Hi, Thank you for helping me out bjgarrick.

    I can not run the programs listed (can not start setup)????:confused:
     
  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Which one can you not run? What does it say?
     
  5. Phantomx3

    Phantomx3 Private E-2

    When clicking on the Ewido-setup file, it does nothing.
    The same for the other two:
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Reboot into Safe Mode and try them again, once they are installed print each thread as a reference so you can close all browsers.
     
  7. Phantomx3

    Phantomx3 Private E-2

    I downloaded and scanned with the three above mentioned programs.
    Spy Sweeper did not find anything.
    Ewido found 4 but they were errors cleaning three of them.
     

    Attached Files:

  8. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Run Spy Sweeper again, but before you run the sweep update the definitions. After run a full sweep and have it remove all found infections.
     
  9. Phantomx3

    Phantomx3 Private E-2

    I do not have a subscribtion in Spy Sweeper, Is there another way to remove anything it might find.
     
  10. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    It's a trial version, it allows you to use it for 30 days. Do you not have this version? Did you not download the version in the link I provided for you?
     
  11. Phantomx3

    Phantomx3 Private E-2

    I did but i had the newer version already installed and I could not uninstall it as this is one of the problems that I am facing.

    i know i am messing everything up but bare with me pls.
     
  12. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Uninstall every version of Spy Sweeper you have installed. Reboot your computer and download a fresh copy below.

    Spy Sweeper

    Install it and then configure the scan settings as requested in the thread provided.

    When you run this version of Spy Sweeper, let me know what comes up. Let me know if it says how many days you have left on the trial or trial expired.
     
  13. Phantomx3

    Phantomx3 Private E-2

    bjgarrick,

    I can not uninstall it or any other program. Uninstallers do not work:confused: .
     
  14. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    What happens when you try to uninstall? Are you using Add/Remove Programs?
     
  15. Phantomx3

    Phantomx3 Private E-2

    When I try to access the control panel, the screen blinks and then i am back to the desk top then when I try to access the control panel for the second time it works fine but when trying to uninstall the program using Add/Remove, all I get is a blink of the page and nothing happens. When trying to remove it from PROGRAMS it does the blinking again but then nothing happens???
     
  16. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Again, reboot into Safe Mode and try the uninstall there. After you complete this if you can, attach a fresh HJT log from normal mode and we will begin a fix to get your problems somewhat knocked out.

    I will check back in a few hours...:)
     
  17. Phantomx3

    Phantomx3 Private E-2

    I could not uninstall it in safe mode and here is a new HJT log and thanks a million for helping me out. :)
     

    Attached Files:

  18. Phantomx3

    Phantomx3 Private E-2

    A new HJL Log:
     

    Attached Files:

  19. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Please look in Add or Remove Programs for the following and Uninstall them if found:
    (If you can't skip this for now)

    Ewido

    Spy Sweeper

    Spy Cleaner Gold


    After you complete the above, if possble, please try to run the Look2Me fix tool once more. Try to install it, if you can't reboot to Safe Mode and try to install it. You need to run this before we start anything so it will clean some things.
     
  20. Phantomx3

    Phantomx3 Private E-2

    Welcome back and thanks again for the help.

    I could not uninstall the programs, I did run L2MFIX and it mentioning something about "Please fix the missing file 020 with HJT after reboot and i will reboot now.
     
  21. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Be sure you attach the logs from the Look2Me Fix tool along with a fresh HJT log.
     
  22. Phantomx3

    Phantomx3 Private E-2

    Re: A mess - Help needed : (

    New logs:
     

    Attached Files:

  23. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Download Pocket KillBox
    • Save it to your desktop or a place easy to find.
    • Do not run it yet
    If you can uninstall Spy Sweeper and Ewido.

    Now scan with HijackThis and check the boxes for the following entries:
    ( Make sure ALL browser windows are closed when you click FIX )

    O20 - Winlogon Notify: snda32 - C:\WINDOWS\SYSTEM32\snda32.dll

    Again, make sure ALL browser windows are closed when you click FIX.

    Now, Please boot into Safe Mode, be sure you have the Viewing of Hidden Files & Folders Enabled per the tutorial.

    Next, run CCleaner to clean up cookies and temp files.

    Run full scans with Ad-Aware SE & Spybot S&D and have both programs fix what they find.

    Note: Remember to get all updates before doing the scans.


    Then, as an added precaution, Go to Start > Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
    • Temporary Files
    • Temporary Internet Files
    • Recycle Bin
    And Click OK.



    Locate PocketKillbox
    (Procede with this step even if they do not show in blue)

    Now, Copy and Paste C:\WINDOWS\system32\snda32.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click YES and allow your PC to reboot.

    • If you get an error message about Pending Operations, just reboot your computer manually.

    After you complete the above, attach a fresh HJT log.
     
  24. Phantomx3

    Phantomx3 Private E-2

    I did what u told me and attached is a new HJT log.
    I could not uninstall the programs before scanning.
     

    Attached Files:

  25. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HJT and have it fix the below entry:

    O20 - Winlogon Notify: snda32 - snda32.dll (file missing)

    After you complete the above...

    Please see the below thread on how to run WinPfind and attach the log.
     
  26. Phantomx3

    Phantomx3 Private E-2

    Here is the WinPfind Log:
     

    Attached Files:

  27. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Please download HOSTER and then follow the below steps.
    • Unzip HOSTER to a convenient folder such as C:\Hoster

    • Run Hoster.exe, click Restore Original Hosts and then click OK.

    • Click the X to exit the program.

    Copy the contents of the below Quote Box to Notepad. Then click File and then Save As. Change the Save as Type to All Files. Name the file fix.reg and then click save. (make sure you save it somewhere you can find it. Saving it to your Desktop may make that easy.) Then double-click on the fix.reg file on your desktop (or locate it with Windows Explorer and double click on it if not saved to the Desktop) and when it prompts to Add in to the registry, say yes.
    After you complete the above, reboot and follow the below...

    Please download Blacklight to its own folder...

    F-Secure Blacklight

    After download is complete, double click to run the program. Click "Accept" to procede. Then click SCAN to begin scanning your system.

    Once the scan is complete it will attempt to clean the found infections. There should be a log in the folder that you ran the program from, attach this log to your next post along with a fresh WinPFind log.
     
  28. Phantomx3

    Phantomx3 Private E-2

    Black Light did not find anything and here are the logs:
     

    Attached Files:

  29. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Download Pocket KillBox
    • Save it to your desktop or a place easy to find.
    Locate PocketKillbox
    (Procede with this step even if they do not show in blue)

    Now, Copy and Paste C:\WINDOWS\prJpa into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\system32\82FF585A41.dll into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\SYSTEM32\drivers\etc\hosts.aqu into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click NO.

    Now, Copy and Paste C:\WINDOWS\SYSTEM32\nslock17vb6cmp.ocx into the box – If it exists, it will show up in Blue. Check the option to Delete on Reboot and Click the Red X and Yes to the confirmation message. A message will ask if you want to reboot now – Click YES and allow your PC to reboot.

    • If you get an error message about Pending Operations, just reboot your computer manually.

    After you complete the above, reboot and let me know how things are running and what problems remain.
     
  30. Phantomx3

    Phantomx3 Private E-2

    Things seems to be OK.
    The control panel is working.
    I am able to uninstall programs and Norton Antivirus is ok .

    "THANKS A MILLION MAN YOU ARE A GENIUS"


    One last thing:

    What would you recommend as a Anti virus a nd fire wall programs other than memory monster Norton?
    What would you recommend me to use against spyware?


    THANKS AGAIN:) :) :) :) :)
     
  31. Phantomx3

    Phantomx3 Private E-2

    Ahhh one more thing:

    Is Bazooka Scanner a reliable prog. as it keeps showing me the following as Detected objects :

    EXPLOIT searchterror.com
    EXPLOIT maiden4u.biz
    EXPLOIT Hiconvert.com
    EXPLOIT Beehappyy.biz

    .......
     
  32. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    AVG AntiVirus

    Free, Spyware Blaster & Spyware Guard. If you want to buy something Spy Sweeper for sure.

    You should see this article on How to Protect yourself from malware!

    Surf Safely!:)
     
  33. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    No, it's not. I wouldn't worry about those.
     
  34. Phantomx3

    Phantomx3 Private E-2

    Thanks again

    :)
     
  35. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your Welcome!:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds