redirected here from software section

Basic Problem: Every time firefox or internet explorer is opened, I get the message that says it has to close, and that whole thing about sending or not sending an error report. HOWEVER: when I get pop-ups from either firefox or internet explorer, they do not get the error.

I was first directed to this site by people at firefox, because i did all their stuff, giving 0 results, and now the people on the software forum sent me here to try whatever you all are willing to throw at me.

My thread is located here: http://forums.majorgeeks.com/showthread.php?t=70301

I did the stuff on the basic spyware removal thread, didn't help with this problem, so they sent me here. Metacumbie wanted me to do the HJT tutorial thread before I posted here, but it pretty much just confused me more- I'm getting desperate.

Any help is GREATLY appreciated.

 

http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

Did what you said, in safe mode, to make sure everything possible is closed. Attachment follows.

 

Please make sure System Restore is OFF and the Viewing of Hidden Files & Folders is Enabled as per the tutorial.

Now look in Add or Remove Programs for the following and Uninstall them if found:

AutoUpdate

SurfAccuracy

SurfSideKick 3

E2G

Aprps

VBouncer or Virtual Bouncer

taas


After you complete the above...
Download this trial version of Ewido Security Suite

• Install ewido security suite
• Launch ewido, there should be an icon on your desktop double-click it.
• The program will have a window come up. One of the buttons on the left is to Update. Click the Update button.and then Start the Update. The update will start and a progress bar will show the updates being installed.
• After it completes the update, click the Scanner button

Now exit Ewido. Now print the below instructions or save them locally because I want you do have no browsers opened and also have no connection to the internet (unplug your cable) while doing the below.

Okay, reboot into safe mode and follow the steps below. (If you have any problems at all trying to get into safe mode to complete these steps, just run them in normal boot mode and make sure you tell me when you come back.)

Open up Ewido and do the following:

• Click on Scanner
• Then click Settings
• Under What to Scan? Select Scan every file
• Then click OK
• Click on Complete System Scan and the scan will start.
• Let the program scan the machine

While the scan is in progress you will be prompted to clean files that are infected. Leave the defaults selections (to Remove and backup) and click OK. To save yourself some time, you can select Perform action with all infections and then click OK. With the option to scan every file, a lot of cookies will be removed.

Once the scan has completed, there will be a button located on the bottom of the screen named Save report

• Click Save report
• Save the report to your desktop or anyplace you will be able to find it to upload here.

Reboot into normal mode and reconnect to the internet.

Come back here and post the Ewido Scan Report along with the 3 logs from the next step.


First, please run Panda Online Scan. After the scan attach the log to your next post. Also please follow the below:

1 - Please EXTRACT all files from Qoologic Tool to its own folder - C:\Program Files\QoologicFinder . Then, DoubleClick Find-Qoologic.bat to run the tool. It should produce a log - Please attach that with your next post!

2 - Please EXTRACT all the files form RKFiles Tool to its own folder named C:\Program Files\RKTOOL. Then, Please boot to SAFE MODE and DoubleClick rkfiles.bat to run the tool. Let it run and then, when it finishes, look for a log at C:\Log.txt and please attach that log.


Now come back here and post all four logs as attachments.

 

Update: Attachment is there (RKTOOL), panda scan wouldn't work- said that the files wouldn't work in ms-dos...odd, and the qoologic scan wouldn't work either. Maybe those two don't work in safe-mode, maybe its just something I did wrong, but that's what I got so far. AND: I tried opening firefox just to check, and it seems to work now, I'm on it, and no problem yet. I still want to keep going though, because I'm sure there are things that I could fix still- the 2 scans that didn't work. Thanks, ready to continue whenever!