Help Please :)

Discussion in 'Malware Help (A Specialist Will Reply)' started by RademR, Feb 21, 2006.

  1. RademR

    RademR Private E-2

    I get spyware (malware) on my computer every couple weeks. But I just run in "safe mode" and then run my anti-spyware programs (HiJack this, sweeper, etc.) and clear some files out and everything is fine.

    But I just got one that I can not seem to get rid of. I constantly get ad popus, mostly from the following websites:

    http://certified-safe-downloads.com/adserver/RegClean/soref/newdownload.asp?Referrer=ellregclean
    http://www.amaena.com/securityworm2/?aid=gglwavp1&lid=disable

    Here is a copy of a HJT log I just ran. I need help pleeasse....this thing is so annoying. thanks in advance.


    Logfile of HijackThis v1.98.2
    Scan saved at 10:28:13 AM, on 2/22/2006
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Edit: Old HJT log removed
     
    Last edited by a moderator: Feb 21, 2006
  2. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    You are using an out of date version of HiJackThis ( download links to all software are in the guide below ), please download the updated version, then, please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis:

    Downloading, Installing, and Running HijackThis

    and remember to attached also the logs from Bitdefender and Panda Scan ( Step 6 ) as well as the HJT log ...Thanks.
     
  3. RademR

    RademR Private E-2

    sorry about that. i ran through all those steps, yet i still get the same constant popups.

    EDIT: Inline log removed as per guide.
     

    Attached Files:

    Last edited by a moderator: Feb 23, 2006
  4. DavidGP

    DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

    You Hijackthis log was not run from the correct location as per the guide, plus and the Malware guy's will be able to tell, your log doesnt look complete.
     
  5. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You must run ALL the steps in the READ & RUN ME not just some of them.

    I see no sign of Microsoft Windows Defender being installed and run.
    Also Spybot does not appear to be installed and run as per the READ & RUN ME.

    There are also two logs that are also requested to be attached in step 6. You have not run these tools and they must be run and logs attached before HijackThis is used.

    In addition as Halo pointed out, you did not follow the instructions in step 7 and as a result you have HijackThis installed exactly where we specify that it not be installed.

    Recommendation: You should no be running all the spyware scanning/detection tools that you are running as a long term solution:
    eTrust PestPatrol
    CounterSpy
    SpySweeper
    McAfee AntiSpyware
    Aluria Security Center Spyware Eliminator Service (ASCService)

    Which of these do you have paid subscriptions for?
     
    Last edited: Feb 23, 2006

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds