About Blank Morphs?

Controlmind,

Please leave the thread moderation work to the moderators and administrators.

If you do not have the ability to do more than post links to the sticky threads, please refrain from posting in the Spyware Forum. If you have the ability to help then please start using it. Short incomplete posts are not going to help the majority of users. If you do not have detailed knowledge of how to fix problems, I would prefer that you leave the suggestions for what people should be doing to those of us who do. In short, posting just to post is not what we want to see.

 

Speedo,

Please follow the steps below:

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps below:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

 

Is that HijackThis log from safe mode or normal boot mode?

You appear to be running without an antivirus application and without a firewall. That is like swimming in shark infested waters without a cage.

Download this file: SpSeHjfix109

Unzip it to your desktop or to a folder.

Boot into Safe Mode

Start SpSeHjfix, click on " Desinfecton starten" (the other button means close) then it will reboot and finish the cleaning.

Run SpSeHjfix one more time.

Reboot in Normal mode.

Run HijackThis again and post a new log. Also post the log from SpSeHjfix, the log should be on your desktop or the same folder as SpSeHjfix.

 

Okay looks like that fixed a bunch of stuff.

Now we need to Reset Web Settings:
1) If you have an Internet Explorer icon on your Desktop, goto step 2. If not, skip to step 3.
2) Now right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK. Then skip step 3.
3) If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

Are you still having any problems? Did you really mean that IE does not work at all know? Reboot you PC and then try opening IE and if it opens okay. Close it. And then get a new HJT log. Then come back and post thre new HJT log.

 

That's a strange looking log. Where are all your O4 lines? There should be some that load your AV.

Yes it morphs!

 

There are many programs that load at startup. And there are many ways of loading them too. Some items that load at startup may be bad (what we removed) but others are good like you antivirus program and BHO Demon. They are not showing how they are loading in your log. Are you using HijackThis's ability to filter lines (i.e. hide certain lines like ones you know about).

Look in other thread at some logs and you will see many examples.

 

It is a very bad idea to use the ignore list as you can see how much confusion it can cause. I would recommend not using it as it always causes helpers (like me and others) headaches in figuring out what is going on.

You should be okay now if you have rebooted a couple time and ran some IE sessions without the problems coming back.

Here is you next set of steps to help keep you clean:

How to Protect yourself from malware!