Inherited Computer

Canzealander · Dec 4, 2007

I inherited a computer from my Mom's boyfriend a while ago, and I want to do two things a) make sure that's it's secure because I want to do online banking and b) make sure that it is running as efficiently as possible. I'm also starting a thread in the hardware section, because I want to try my hand at customizing the computer to speed it up and make it run better. I am a complete n00b though so I'm going to need some hand holding on the hardware side of things. I figure that while it might not be ultimately cheaper to upgrade on my own, it'll be more satisfying and I can control the price better, because I'll be buying everything gradually. Anyway, thanks for your time. After I go through the read and run me first section, can I start posting?

TimW · Dec 4, 2007

Yes...just follow the instructions and attach the requested logs.

Canzealander · Dec 4, 2007

Cheers. I just have a question though. I did the first couple steps and then ran out of free time. Can I do these steps in installments, as long as I'm not using the computer in between? Or do I have to do them all in one fell swoop? If it's the latter, I'm not going to be able to post anything else until Saturday (that's 4 days later that when I'm posting this for anyone not in my time zone). If the former, can I post the logs as soon as I'm done the scan, and have multiple postings? i.e. one post for the mgtools log, one for the avg log, etc. Thanks.

TimW · Dec 5, 2007

Yes....do what you can and attach the logs as you have them.

Canzealander · Dec 10, 2007

Alright, I'm done. Here's the logs.

Canzealander · Dec 10, 2007

And here's the rest.

TimW · Dec 10, 2007

I'm not seeing much that needs fixing.....
Please use add/remove programs to uninstall:
J2SE Runtime Environment 5.0 Update 2"
Java(TM) SE Runtime Environment 6 Update 1

Reboot and install:
Java Runtime 6

Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
Click to expand...

NOTE: HJT may popup an error about the AppInit_DLLs line. Ignore it and click OK to continue.

After clicking Fix, exit HJT.

Please copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.

REGEDIT4

[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search]
"SearchAssistant"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchasst.htm"
"CustomizeSearch"="http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm"
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
[HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="Search Bar"="http://search.msn.com/intl/searchpane/en-au/prov2.htm"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl]
""="http://home.microsoft.com/access/autosearch.asp?p=%s"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\main]
"Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
"Search Bar"="http://search.msn.com/spbasic.htm"
"Use Custom Search URL"= dword:00000000
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{CFBFAE00-17A6-11D0-99CB-00C04FD64497}"=""
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\DefaultPrefix]
@="http://"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\URL\Prefixes]
"ftp"="ftp://"
"gopher"="gopher://"
"home"="http://"
"mosaic"="http://"
"www"=http://
Click to expand...

Tell me if you are having any other issues.

Canzealander · Dec 10, 2007

Well, I ran all that and I don't see any problems. Is it advisable to run the scans again and post the logs to double check?

TimW · Dec 10, 2007

If you want ...but I don't think it is necc. ...there really wasn't any malware in the logs.
You may wish to read this:
How to Protect yourself from malware!

Canzealander · Dec 10, 2007

Did the scans that I did also screen for viruses? Or is malware a catchall term for viruses, trojans, spyware, worms, etc. I'm kinda paranoid...

TimW · Dec 11, 2007

Malware (short for Malicious Software) includes Spyware, Adware, Viruses, Trojans, Dialers and Rootkits. Also for questions related to your computer's security.All posts are answered by approved professionals.
Click to expand...

That's the definition and we look at the specific logs that you attached for signs of malware....your system is clean. That does not mean that you could not get re-infected at some point, which is why we have you do the How to Protect yourself from malware!

Log in or Sign up

Inherited Computer

Canzealander Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Canzealander Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Canzealander Private E-2

Attached Files:

ComboLog2.txt

GetUnKey.txt

hijackthis.log

Canzealander Private E-2

Attached Files:

newfiles.txt

procdll.txt

runkeys.txt

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Canzealander Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

Canzealander Private E-2

TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member