Problem with computer. I'm freaking out!

Nikola · Sep 6, 2008

Hello to every one !:wave

We have bot a new computer 5 days ago and for program we have Windows XP Home SP2. Because I need some programs for watching Youtube and read PDF files I have download Adobe Reader 9 and Adobe Flash Player Plugin from official site adobe.com. With Adobe Reader 9 I get also Win32 Trojan-gen {Other} in ARI installer.

For AntiVirus program we have Avast! Home. I have move this virus to the chest.

When I saw in add/remove program list that Adobe Flash Player has red X on his upper right corner I went to uninstall that program using Uninstall program for Adobe Flash Player from official site adobe.com and when I have download that program and run it I get also two viruses. And i move them also to the chest. Avast scan is always on when I'm on internet or not.

This here is report from Avast Log :

After that I have run VRDB Generator ( Avast) and I have put computer on complete scan from the beginning ( that is blue screen with white letters who are changing very fast).
Scan have show that no files are damaged.

After that I went on Avast forum to ask them what should I do to protect my PC better. And they sad to me that I run Secunia software inspector and I did. It show me that my Windows need update and my Adobe Flash Player (because I have uninstall New Adobe Fl.Player Plugin with Uninstaller and I get viruses my husband has bring from his work Adobe Flash Player 6x ) also need update. So I made update for Windows and Adobe Flash Player and it work normaly sound and video on Youtube.

But in that report from Secunia software inspector stays also that I need update for Macromedia Flash Player 6x 6.079.0 so I have made update for that and after that I have run Secunia again and report is the same. I have look in my add/remove program list and I don't have this
Macromedia Flash Player 6x 6.079.0 on my list.

My Windows have Automatic updates on all the time.

I have also install Java Platform Standard Edition & Version & Update 7 ( build 1.6.0_07_b06) Copyright 2008 SunMicrosystem,Inc from official site Java.com.

My browser is Mozilla Firefox 3.0.1

After run that Secunia on Avast forum told me to make update on Avast and I did and i have make update for today.

After that they told me to install better firewall ( it was only Windows Firewall) so I have install PC Tools Firewall Plus and also PC Tools ThreatFire.

I have also install hpHOSTS file on their suggestion.

After that they instruct me to do HiJackThis and I did. This is results from 1 minute ago ( I made one more test for you)

I have also install SpywareBlaster , Ad-Aware, ATF Cleaner, CC Cleaner. That is on their suggestion also.

And again after installing everything ( SpywareBlaster, Ad-Aware, ATF Cleaner, CC C leaner, PC Tools Firewall Plus an ThreatFire and hpHOSTS)
they told me to run Secunia .

Report was that I need to update Macromedia Flash Player 6x 6.079.0 again. But I don't have that program on add/remove list.

So I have uninstall manual my new Adobe Flash Player Plugin and I have install him again.

After this things I have lost completely sound on my PC. I have no sound if I put my CD with music (mp3) or if I watch movies on Youtube (there is movie but no sound) no sound at all!!

I don't no what to do any more!

Please help me. Please!:cry:cry

And I also run Kaspersky on line scan and it show that I have no virus in PC.

DavidGP · Sep 6, 2008

Welcome to Major Geeks!

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

READ & RUN ME FIRST. Malware Removal Guide

If something does not run, write down the info to explain to us later but keep on going.

Do not assume that because one step does not work that they all will not.

Notes:

If you run into problems trying to run theREAD & RUN ME or any of the scans in normal boot mode. You can running steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:

Starting your computer in Safe mode

If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

plus a guide on how to attach the logs HOW TO: Attach Items To Your Post

Nikola · Sep 7, 2008

Hello!

It's me again and I have done everything from the list.Here are the results.

1.) I have check add/ remove program list and there is no old programs that I don't use them any more.

2.) I have run CC Cleaner and registry cleaner

3.) I have icon in right corner that I don't need
a.) Windows messenger

4.) Auslogics Disk Defrag version 1.4

Disk: H:\(Local,NTFS,73GB)
File system: NTFS
Total disc size: 73,24GB
Used disc space: 6,97 GB
Free disc space: 66,27 GB

Total files: 34968
Fragmented files:3359
Defragmented files:3359
Total directories: 2584
Skipped files: 0
Fragmentation before: 3,24%
Fragmentation after: 0%
Speed increased by: 7%

87 Junk files found

6.) Step 1. House cleaning & Setup

a) Uninstalling malware programs:
- I have no malware that are on that list ( I have check add/remove list )

b)I have the latest Java (TM) 6 Update 7

c) I have use MS config to setup for Normal Startup Mode

d) I have Avast Home AV do I need to remove files (empty quarantine typ folders from AV and antispyware application) like it says for Norton AV?

e) Recycle Bin is empty

f) I have run with CC Cleaner cleaning Windows Tab

7.) Windows XP cleaning procedure

Step 1.

a) SuperAntiSpayware Log file

b)Spybot S&D Log file ( I can't find him so I have written down what was on screen after scan:
No immediate threats ware found
Immunize has show:
Unprotected:0
Protected: 93193
Total: 93193

c) Malwarebytes Anti-malware Log file

d) Combofix Log file

I have install Recovery Consol

Nikola · Sep 7, 2008

e) MGTools Log file

I have download and run XP Home Fix and also download an install NET.Framework

Step 2.

Toggle System Restore

I have Disable/Enable System restore

After doing everything from the list I still don't have sound on my whole PC. Even if I put CD to listen music mp3 or if i watch videos on Youtube.

I have even check that speaker if they are broken bot no they are working OK ( I have plug them into old computer ).

I did have sound before.I have said that in my first post.
I have uninstall Ad-Aware.

And there is also one thing.Every time when I start PC on a small icon in right corner pop up that New hardware is found PCI. After that Wizard pop up for finding new hardware. And he say that if hardware did came with installation CD that I insert him now. Then question ; What you want Wizard to do?
Automatic installation of software (recommended)
Install from the list or certain place?

If I choose any of that on the end he says (Wizard) that he can not install because he didn't find new hardware.

I don't even now what is PCI!:confused

Please help I don't now how to disable this thing to pop up every time on Startup.:cry

Please help also for the sound on PC!:cry

chaslang · Sep 9, 2008

I'm sorry but none of this has anything to do with malware. Also since you had started working in another forum ( which I found here: http://forum.avast.com/index.php?topic=38464.0 ) and were following their instructions and not ours, you really should have continued to work all of your issues at that forum.

None of what Avast was telling you was correct to begin with if you had downloaded valid copies of Adobe Reader from Adobe. If on the otherhand you had downloaded hacked/cracked or keygen type software then that may be why Avast found a problem. Since you said you downloaded from and official Adobe site, I will assume you were not dowloading hacked software. Thus, you were a victim of what we call false positives. This means you were told something was an infection when it was not. Thus you had no infections to worry about. If you had not toggled system restore already, you could have tried going back to an old restore point which may have fixed your problem. You were not supposed to touch system restore if still having problems.

The new hardware that you are seeing mentioned at boot up is more than likely Windows seeing your sound card. You will need to post in the Hardware Forum (which is where I will move this message to for you). You more than likely need to reinstall the drivers for your sound card.

dlb · Sep 9, 2008

Everything chaslang has said is absolutely 100% true. As I was reading your first post, I said to myself "Avast... must be false positives". Avast is well known for being 'overly protective' and issuing many false alarms. The people in the Avast forums should have known this. Anyway- lets get the sound working. Follow these steps:
http://forums.majorgeeks.com/showthread.php?t=149107
If you can't locate the correct sound driver after following the info in that article, use the following steps:

Use Everest to get a report of your system’s hardware, OS, and drivers. Upload the report as an attachment
Everest: http://www.majorgeeks.com/download.php?det=4181
When Everest is done scanning, click "Report" at the top of the Everest window, click next to get to "Report Profile", select "Hardware related pages", click next, select "Plain Text", click "Finish". Then when it is done processing, click "Save To File". Save it where you want to. (I would use Desktop.)
Click "Go Advanced" in the MG reply box, scroll down a little way until you see "Manage Attachments", click it, browse to your file, click "Upload", and close the window. Then submit the post. You may have to also type something in the reply box, like, "Here's my report.", so that it will submit.
Click to expand...

(above instructions originally posted by MG member musksnipe... thanks muskie!)

Log in or Sign up

Problem with computer. I'm freaking out!

Nikola Private E-2

DavidGP MajorGeeks Forum Administrator - Grand Pooh-Bah Staff Member

Nikola Private E-2

Attached Files:

SUPERAntiSpyware Scan Log - 09-07-2008 - 16-33-40.log

mbam-log-2008-09-07 (18-27-07).txt

combofix log.txt

Nikola Private E-2

Attached Files:

MGlogs.zip

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

dlb MajorGeek