Post Your HijackThis logs here

[joecacia]

Oh OK, I will try it now and gave you information, thank you so much for that.

[oddjob]

Originally Posted by fatt_joe77

sort of like easydesi, protecting my computer, but, it's been running a lot slower for the past month or so. Anything wrong with my log? BTW nice site here.

There are several things wrong here.

Please print this out to help you follow the advice.


#First ...

Download and install the trial version of AVG Anti-Spyware here (formerly Ewido) here……

www.ewido.net/en/download

The program should launch automatically after installation. If not then double-click the desktop icon.

Deactivate the Resident Shield
> Before proceeding, deactivate the "Resident Shield" as this may prevent changes to the registry.
> To do this, click "Change State" to the right of the Resident Shield option in the main window.
> You will clearly see the status change to Inactive if you have done this correctly.

Update AVG Anti-Spyware Definitions
> The program automatically updates the spyware definitions if you are connected to the net during installation.
> As a precaution, click the "Update" icon from the main menu.
> Then click the "Start Update" button.
> When you receive the "Update successful" prompt, close AVG Anti-Spyware.

-->>Note: If you have any problems with the updater you can update manually here:

http://download.ewido.net/ewido-signatures-current.exe


Reboot into Safe Mode.

Scanning with AVG Anti-Spyware
> Open AVG Anti-Spyware and click the "Scanner" icon from the main menu.
> Click "Complete System Scan" to start scanning.
> When scanning completes, click "Recommended action" beneath the results window and select Quarantine.
> Then click the "Apply all actions" button to quarantine everything detected.
> Then click Save report > Save report as and save the Report-Scan.txt to your desktop.


#Second

I don't see an antivirus ptrogram running. Do you have one? If not then download & install either of these ...

AVG Free
http://free.grisoft.com/freeweb.php/doc/2/

Avast
http://www.avast.com/eng/avast_4_home.html

Scan with the program and let it fix anything it wants to.


#Third

Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system. Please follow these steps to remove older version Java components and update.

Updating Java:

• Download the latest version of Java Runtime Environment (JRE) 5.0 Update 9.
• Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
• Click the "Download" button to the right.
• Check the box that says: "Accept License Agreement".
• The page will refresh.
• Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
• Close any programs you may have running - especially your web browser.
• Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
• Check any item with Java Runtime Environment (JRE or J2SE) in the name.
• Click the Remove or Change/Remove button.
• Repeat as many times as necessary to remove each Java versions.
• Reboot your computer once all Java components are removed.
• Then from your desktop double-click on jre-1_5_0_09-windowsi586-p.exe to install the newest version.

In your next post please include ...

1. a fresh HJT log

2. the results of the AVG Anti Spyware Report-Scan.txt

3. an update on how your computer is working now.


OJ

[joecacia]

This is really not good, I did everything you told me before doing the safe mode, but, no safe mode
It is just not working, sheesh.

[oddjob]

Originally Posted by joecacia

This is really not good, I did everything you told me before doing the safe mode, but, no safe mode
It is just not working, sheesh.

Hello joe

Sorry to hear your bad news.

I assure you nothing I recommended would have disabled safe mode. I've recommended this approach many, many times before and it's always worked. At this stage I don't know why you can't get to safe mode.

Incidentally, if you ever can't do any instructions I give for safe mode just run the scanners, tools etc. in normal mode then let me know what happened.

Please try these and let me know the outcome.

1. Turn the computer off and leave it to cool down completely for, say, 30 minutes. Now reboot to safe mode. Did it work OK?

2. Reboot again .... can you get to normal mode OK?

3. Which of my instructions did you manage to carry out? [Remember ... anything you can't do in safe mode run in normal mode].

Lastly, please post any/all of the logs I asked for at the end of post #142 above AND let me know how the computer is behaving (both in normal mode and safe mode).

We'll take it from there.


OJ

[oddjob]

Originally Posted by jg_v7n

Thanks for the help guys

The log you posted shows no malware, as such. Are you having any problems or was this posting just to check all is OK?

If you still have trouble post a fresh HJT log with a description of your problem(s).


OJ

[joecacia]

The problem is not like that, I just cannot access to safe mode, I put f8 and after a while instruction, safe mode...., but then, when I go in, it stops, it don't show me anything so I can fix it, just a black page with safe mode word on it, weird, I never had this before.

[oddjob]

Originally Posted by joecacia

The problem is not like that, I just cannot access to safe mode, I put f8 and after a while instruction, safe mode...., but then, when I go in, it stops, it don't show me anything so I can fix it, just a black page with safe mode word on it, weird, I never had this before.

OK. There are 2 immediate options here.

1. Forget safe mode for now. You should try to run all the scans and tools I mentioned but in normal mode.

Let the scans etc. fix what they want to but DON'T FORGET to save the scan reports. Reboot to safe mode.

Does that work?


2 . If not, can you roll your system back using System Restore? If you can go back to an earlier time then, yes, you will still proabably have the malware, but you may be able to go into safe mode.

If option 1. fails, and you think it wise to go back, let me know what you do.

Whatever happens please post all scans results, as I asked before, AND a fresh HJT log (taken in normal mode) with your update on how things are going.


OJ

[oddjob]

Joe

Forgot to mention ... if you can't get to boot in safe mode using the "F8" method try msconfig. Heres' how ...

http://pcsupport.about.com/od/tipstr...msysconfig.htm

Does this work?


OJ

[joecacia]

Hi Oddjob, I am really sorry to bother
I will try these and get back to you, thank you so much for the help. I appreciate that allot.

[joecacia]

I did everything under safe mode, it did work, yay.
This is what I get though.

[joecacia]

And this is after I did all in safe mode, I did Hight jack:

[oddjob]

Originally Posted by joecacia

Hi Oddjob, I am really sorry to bother
I will try these and get back to you, thank you so much for the help. I appreciate that allot.

hey joe .... don't worry about it. No need to apologise. I hate the scum that put this stuff on to people's machines. I'll always do whatever it take to get rid of it.

I'll look through the logs you posted but first, please tell me ... how is your copmuter working now. Any better? Problems gone?

I always ask users to update me at each stage because I, of course, can't see the machine so don't really know what's going on.

Report back please.


OJ

[joecacia]

Good morning,
I always have a problem, this problem is making me crazy, though, my computer is new.
I always when working, it just go off, put a report on my screen that it cannot fix the problem for that it went off, odd, but true.
I did save the file some where let me check it and I will get back to you, thank you again

[oddjob]

Originally Posted by joecacia

Good morning,
I always have a problem, this problem is making me crazy, though, my computer is new.
I always when working, it just go off, put a report on my screen that it cannot fix the problem for that it went off, odd, but true.
I did save the file some where let me check it and I will get back to you, thank you again

If your computer is just "switching off" this could be serious.

We will need to see the shutdown message before we can advise further.

I have looked at your logs and there are more problems.

One thing is that you have visited the FunWebProducts site I guess to download smilies. This is bad. That site is dreadful. Never go there.

Also you have one particular entry in your HJT log that worries me. It may be diffucult to remove.

As you are getting unexpected shutdowns it may be better that you save all your data and reformat the hard drive, reload your programs/data and start over again.

If you decide to take that route you should read this article first (if you can) ....

http://www.help2go.com/Tutorials/Pro...Hijackers.html

Save the information + programs before you reformat. That will help you stay protected when you go back online.

Let me know what you decide and please do post that shutdown error message you see.


OJ

[joecacia]

This is the file, I always have this stuff

Edit: I cannot attach it, invalid file

Edit again: I save it as .doc, so you can have an idea of what I am talking.

[fatt_joe77]

oddjob,here are my hjt log results, and my avg spyware results. sorry, for not responding earlier, i was real busy . thanks for all your help.

[oddjob]

Hi Joe

I haven't had time to look at the reports compleletly (I'll do that as soon as I can) but the good news is that the one entry in your HJT log that was worrying me has now gone.

Mainly, blue screen crashes are caused by one or more device drivers failing.

Are you still getting crashes? Can you see which device driver might be the problem?

Whilst I am looking at the logs please update Ewido/AVG Antispyware to the latest definitions, reboot to safe mode (IF you can) rescan with it.

Post back and let me know ...

> if you can now get into safe mode

> whether you are still experiencing system crashes

> which driver is causoing the problem, if any

> how is you system behaving now?


OJ

[oddjob]

Joe .... any news on this? How are things going? Are your troubles fixed now or are you still having difficulties?


OJ