Spyware Help

Discussion in 'Malware Help (A Specialist Will Reply)' started by RyanO, Jan 24, 2006.

  1. RyanO

    RyanO Private E-2

    I've read and done the read me first post and the constant pop ups are still happening. The one technical problem i ran into with the guide was getting webpage errors on the Panda active search and unable to start it to scan. I do however have the bdscan and Hijack log below.

    If it is of any help for more info, i know for a fact i got infected from a .pif file, the pop ups happen every 5 or so minutes on their own with no IE running, or constantly when browsing webpages. There used to be a bunch of IEXPLORER.EXE's in my SYSTEM, however those have seemed to go away, however i am still getting lots of popups.

    Hopefully that can be of some help.
     

    Attached Files:

  2. RyanO

    RyanO Private E-2

    Wow thanks, that seemed to have worked! Look2Me was indeed in the Spysweeper find.

    Here are some new logs.

    Note: SpySweeper 1st log was done in normal reboot, but did it again in safemode when it said some processes were running, so Spysweeper2 is the Safemode log.

    And a new Hijack log.

    Thanks again for help it seems to have fixed my issue
     

    Attached Files:

  3. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    That's because each time you run Spy Sweeper it appends (but at the beginning so it is more of an insert) to the log.
     
  4. RyanO

    RyanO Private E-2

    Ouch that cant be good.

    Did that stuff you said, However in the first step with MSconfig it said those programs were "Stopped" I couldn't right click them and disable, i assume Stopped and Disable are same thing depending on your system setup, so all my files were either Stopped or Running.

    I attached a Spysweeper log again because no matter how many times i reboot, that one program "Quicklink Search Toolbar" always comes back, the log is of all my scans so just look near top.

    Thanks again for your time and help.
     

    Attached Files:

  5. RyanO

    RyanO Private E-2

    Also at any point am i supose to disable System restore after any of these deletes from Hijack, or Spysweeper? I am only worried because before i found this site, i did a system restore, then was told to Disable it from a random webpage, then was then told not to disable it on the Read-me guide here until everything is fixed.
     
  6. RyanO

    RyanO Private E-2

    Installed deldomains
    Disabled Local Security Authority Subsystem Service. Was set as automatic.


    However when i when i pasted it in Hijack under NT Services it says service wasn't found make sure you enter the short name (or something similar)

    And those files you re-mentioned i couldn't find in my Hijack scan, I wonder if i somehow posted a earlier log, though i really double checked so i don't think i did.

    Here is the new log
     

    Attached Files:

  7. RyanO

    RyanO Private E-2

    No idea what that is

    Everything seems to be working fine, and havn't had any pop ups for a day.
     
  8. RyanO

    RyanO Private E-2

    Thank you once again for your time and help!
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds