infected

I am a newbie to posting (so I hope I get this rite). My system is running so slow. I need help on cleaning it up from adware etc (which I think there maybe a virus as well). I have done the "Read and run me first" and my logs are as follows:

Please help

View attachment hijackthis.log

View attachment bdscan.txt

View attachment Activescan.txt

 

Delete this file C:\Documents and Settings\Josh Craver\Local Settings\Temp\VVSNInst.exe.

You have both Norton Antivirus and AVG Free Edition installed. Never install more than 1 antivirus program on your computer. They will conflict with each other and cause performance issues as well. Pick one uninstall the other.

 

Deleted Norton (thru add/delete programs) due to 90 day subscription running out. However, in deleting the file C:\Documents and Settings\Josh Craver\Local Settings\Temp\VVSNInst.exe., what is the best way to do this? I am in the administrator account vs my sons account. I am still learning how to do these things properly.

Also, going thru the the Read and Run me first, it says to enable view of hidden system files. Do I leave these unhidden?

 

You can delete that file from either account, doesn't really mattter. You should leave it that way the entire time we are working on the computer. Afterwards you can leave it that way or change it back.

Post a fresh HijackThis log.

 

this has been really frustrating...under explorer...i have no access to any of his folders like I do everyone elses? It doesn't have the drop down options. How can I fix this so I can?

 

Download
- Pocket Killbox

Log into his account.

Now run Pocket Killbox:

Choose Tools -> Delete Temp Files and click the RED X.

Run Killbox.exe. Paste the below filenames into KILL BOX one at a time. Check mark the box that says "Delete on Reboot" and checkmark the box "Unregister DLL" (If available) Click the RED X and it will ask you to confirm the file for deletion say YES and when the next box opens prompting you to reboot now...click NO...and proceed with the next file. Once you get to the last one click YES and it will reboot. Note many of the file list below may not exist but we need to check for them anyway.

If Killbox does not reboot or you get a Pending Operations type error message just reboot your PC yourself.

Now boot into SAFE MODE

Open Windows Explorer navigate to and DELETE the following: (This file may have already been deleted by Pocket Killbox)

Now run CCleaner. If you have Windows XP delete the contents of C:\WINDOWS\Prefetch.

Then, as an added precaution, Go to Start -> Run and type: cleanmgr and then click OK. Make sure the boxes for these are checked:
Temporary Files
Temporary Internet Files
Recycle Bin

And Click OK.

REBOOT to Normal Mode.

 

ran thru Pocket Killbox, CCleaner, and Cleanmgr. Also ran a new HiJack This log as follows:

 

You're log is clean.

Lets flush all your restore points and create a new clean one for your system.

Disable And Enable System Restore
How to Protect yourself from malware!

Safe surfing.

 

Thank you for all of your help!!! It has been a challenge but at the same time it is very interesting in learning all of this neat stuff!! Next challenge...my laptop.

You guys are AWESOME!!!!

 

You're Welcome.