Loads of Spyware/Malware Removed. IE Mem Crashing.

Discussion in 'Malware Help (A Specialist Will Reply)' started by iiifly, Aug 11, 2005.

  1. iiifly

    iiifly Private E-2

    I removed, manually, spyware and malware never before seen (things including DLoader, and so many other trojans it's not even funny). Certain trojans and viruses remained, and no antivirus/scanner in the FAQ worked at all - IEXPLORE.exe was launching programs in the system32 folder when you launch the browser, and after a few scans/removals they started revealing themselves by crashing during IEXPLORE startup, things like ww1th.exe, 7zn.exe clearly spyware - they were hidden files (which i turned off hidden) in the system32 and nothing would detect them as such - so I deleted them and other files - dll's with funky random numbers and letters that were recently added. What concerned me the most was that I found a file in system32 (a text file) with all my passwords (including AOL, and other log in sites). THAT concerned me. I believe I got rid of all of it.

    NOw that I got rid of it, Iexplore is crashing on startup - the instruction at "0x01fcad94" referenced memory at "0x00000008". The memory could not be "read" and IE Closes. I'm using firefox now just to get by. Also, I can't change the wallpaper either. My wallpaper loads on startup but goes to blue, and you can't adjust it in display. Also, everything is loading slower.
     
  2. iiifly

    iiifly Private E-2

    help!! how do i stop it from crashin!?! :mad:
     
  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Exactly what filenames did you delete? Are you sure you did not delete any necessary system files?

    Have you completed all the steps in the READ ME FIRST sticky. If not, please do so and then continue with the below. If you already did the sticky, directly proceed to the below.

    Follow the below steps exactly:

    - Download HijackThis 1.99.1

    - Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

    - Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

    - Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

    - Run HijackThis and save your log file.

    - Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds