Desktop Spyware

Discussion in 'Malware Help (A Specialist Will Reply)' started by Frostbitten138, Jul 25, 2005.

  1. Frostbitten138

    Frostbitten138 Private E-2

    Recently my desktop changed to a page reading, "Warning your computer may be affected my spyware" and then it has a link to download "protection". I ran all of the steps that I could on the Read before posting thread, could someone please read my hijack this file, my computer is still in pretty bad shape. Thank you so much
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please read the announcement and sticky threads. HJT logs should only be posted when requested and you must also install and use HijackThis properly. You did not complete the steps in the READ ME FIRST. At a minimum I can see that step 1 of the cleaning section was not run.

    Please run the steps below.

    - The free version of Bearshare contains malware. You should uninstall it if you are using the free version.

    - Also look in Add/Remove Programs for any of the below and uninstall if found:
    PSGuard spyware remover or PSGuard
    TBPS or Toolbar
    Search Maid
    Security IGuard
    Virtual Maid
    WinTools

    - Do you know what the below program is?
    O4 - HKCU\..\Run: [WhatPulse] C:\Program Files\WhatPulse\WhatPulse.exe

    - Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem, boot into normal mode and make sure you follow these directions:


    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     
    Last edited: Jul 25, 2005

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds