Slower internet speeds..

Pc-cillin detected this on my computer several times but it keeps coming back :ADW_SRV33.A. And i also get this repeating virus : prvdi.exe. I've removed both of them several times but they always re-appear. could that be the problem of my 'loss' ?..

 

After doing ALL of the steps in the READ ME and you still have a problem:


http://www.majorgeeks.com/images/grenade.gif Download HijackThis 1.99.1

http://www.majorgeeks.com/images/grenade.gif Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

http://www.majorgeeks.com/images/grenade.gif Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the ZIP file as your backups will not be safely stored.

http://www.majorgeeks.com/images/grenade.gifBefore running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

http://www.majorgeeks.com/images/grenade.gifRun HijackThis and save your log file.

http://www.majorgeeks.com/images/grenade.gif Post your log as an ATTACHMENT to your next post. (Do NOT copy/paste the log into your post as it will be removed).

http://www.majorgeeks.com/images/grenade.gifNeed help with HJT? See this thread: NO HIJACK THIS LOG FILES BEFORE READING THIS: HJT Tutorial & LOG File Posting

 

I did all of that, 'try this before posting' steps, didnt solve the problem.

 

This log appears to be from Safe Mode? Please attach a fresh log from normal mode with all browsers closed.

 

sorry.

 

Now scan with HijackThis and Check the Boxes for the following:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = sas.we1.attbb.net:8000
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = sas.*.attbb.net
(If you know these entries, leave them)

Make sure All Browser Windows are Closed when you Click FIX.

NEXT:
Run CCleaner

Your HJT log is clean, are you having any further problems?

 

MY half life steam client wont connect..'prvdi.exe' keeps showing up on my pc according to pc-cillin..Any clues?

 

From what I understand thats a trojan. To be sure we got all of those lets give this a shot.

1) Download TrojanHunter

2) Install TrojanHunter, At the end of the install setup will prompt you to update definitions. Please do so!

3) Once installed and updated, select drive C:\ and do a Full Scan. Remove all found infections.

Let me know the results from this scan!

 

It found some keylogging file and removed it..i can connect now and my pc boots up much faster now. 1 more question though, access_now.exe keeps showing up on my pc as well. pc-cillin has removed it several times but keeps re-appearing.

 

Whats the EXACT file name and location?

 

forgote the name...didnt find any logs either.

 

Do a search for access_now.exe and delete when found.

Any other problems?