I ran everything as instructed, still having a problem.

Discussion in 'Malware Help (A Specialist Will Reply)' started by cheshirecat, Nov 9, 2006.

  1. cheshirecat

    cheshirecat Private E-2

    Here are 2 of the attachments. I'll add the other 2 in a reply.

    Tried to follow all of the instructions.

    At my wit's end.
     

    Attached Files:

  2. cheshirecat

    cheshirecat Private E-2

    Can't figure out how to do it any other way.

    Edit by bjgarrick: Inline log attached!
     

    Attached Files:

    Last edited by a moderator: Nov 10, 2006
  3. cheshirecat

    cheshirecat Private E-2

    Can't figure out how to upload info for runkeys.txt.:rolleyes: :confused:
     
  4. cheshirecat

    cheshirecat Private E-2

    This is the best I could do.:confused:
     

    Attached Files:

  5. cheshirecat

    cheshirecat Private E-2

    Think I figured it out.
     

    Attached Files:

  6. cheshirecat

    cheshirecat Private E-2

    Hijack log, as instructed.
     

    Attached Files:

  7. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HijackThis and check the boxes for the following entries:
    ( Make sure ALL browser windows are closed when you click FIX )

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell4me.com/myway
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapps.yahoo.com/customize/ie/defaults/sb/ymsgr6/*http://www.yaho o.com/ext/search/search.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell4me.com/myway
    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapps.yahoo.com/customize/ie/defaults/su/ymsgr6/*http://www.yaho o.com
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.dell4me.com/myway

    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE

    Again, make sure ALL browser windows are closed when you click FIX.

    Next, run CCleaner to clean up cookies and temp files.

    Final Step...

    Reset Web Settings & Default Security Settings:

    To Reset Web Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK.

    If you do not have an Internet Explorer icon on your Desktop, click Start, Control Panel (for some systems it may be Start, Settings, Control Panel), Internet Options, Programs tab and then click "Reset Web Settings". Now go back to the General tab and set your home page address to something useful like www.majorgeeks.com. Click Apply. Click Delete Cookies, Click Delete Files and select Delete all Offline content too, Click OK. When it finishes Click OK


    To Default Security Settings:
    Right click on your desktop Internet Explorer icon and select Properties. Then click the Security Tab and click Default Level for Internet, Local Intranet, Trusted Sites, and Restricted Sites.

    Once you complete the above, reboot and let me know how things are running and what problems exist.
     
  8. cheshirecat

    cheshirecat Private E-2

    Thanks :)

    I did what you suggested. Things are definitely improved, but I'm still having freezes. Error reporting brings me to the Microsoft crash page (check for viruses, adware, make sure you have the latest updates, etc.)

    Something strange that I noticed is that with certain sites, I have to wait about 10 seconds to enter my name and password (such as E-bay) whereas I used to be able to log right in.

    Any suggestions would be welcome :)
     
  9. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Attach a fresh HJT log so we can confirm your now clean.
     
  10. cheshirecat

    cheshirecat Private E-2

    OK, here it is.
     

    Attached Files:

  11. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your log looks good, I would post your other issues in the Software Forum as I don't belive they are malware related.
     
  12. cheshirecat

    cheshirecat Private E-2

    :) Thank you for all your help!
     
  13. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Your Welcome!:)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds