need help.. please :S

DuckyD · Jun 17, 2006

Hello, I have just followed your guide to removing malware

I didn’t run in safe mode because I don’t like changing the boot settings of my pc (I did disconnect the internet

Some things ware found but I still get popup windows,

Ulwindow URL & ulwindow seek [this is the reason I come hear should have mentioned this first]

I have attached the scan logs from the 2 online scanners & hjt as txt files please ask if I have missed a log (I waned to try and fix my system as soon as possible and may have missed a step out (apologies if I have missed anything))

Can you please give me advice on what I have on my system that could be harmful & how to remove it?

I am not very good in this area of computing so please keep the directions simple

Thank you
sorry for being so newb (if this post is in the wrong section please move it)
its been a ong day and i just want it over with!

chaslang · Jun 18, 2006

DuckyD said:

I didn’t run in safe mode because I don’t like changing the boot settings of my pc (I did disconnect the internet
Click to expand...

Welcome to Majorgeeks!

You must follow directions! Booting to safe mode and running the procedures is one of the most important steps of the READ ME. Many components of malware cannot be fixed any other way. There is no need to change any boot settings anyway (at least not in most cases) and they are only temporary. From now on when we request that you boot into safe mode, please follow those instructions or you probably will not get your problems fixed.

Also you have Spybot's Teatimer running. The READ ME specifically requests that you not run this because it will get in the way of removing malware. Please disable Teatimer.

Also the READ ME requests that you attach the CounterSpy log. Please attach the log.

Then go back and follow the instructions in step 7 of the READ ME for installing and running HijackThis. You are running it exactly how we ask that you not run it. Just follow the directions in the link given in step 7.

Questions:
1) Is Ewido a paid or free version? Did you run a full scan with Ewido? I guess you did not run it in safe mode if you did?????
2) Is CounterSpy a paid or free version?
3) Why are you running with no antivirus and no firewall applications?
4) Is this your own PC or does it belong to a company (ToysRus)?

Log in or Sign up

need help.. please :S

DuckyD Private E-2

Attached Files:

hijackthis.log

bdscan.txt

Activescan.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member