Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » Anti-Virus » Hi, I have a virus/problem.

Anti-Virus - Hi, I have a virus/problem. posted in the Security & Safety forums; Hi, I have a problem on my computer. When I go to the internet and try to search for something it redirects me to other sites. It also seems to ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 05-06-2006
Bronze Member
 
Join Date: May 2006
Posts: 7
milk - See this Members User comments on their Profile page
Default Hi, I have a virus/problem.

Hi, I have a problem on my computer. When I go to the internet and try to search for something it redirects me to other sites. It also seems to stop some of my programs. I cant run spybot, and I cant run micro trends free scanner. I have AVG free scanner, but it doesnt seem to help. My computer is also quite a bit slower. Any advice? Thanks.


  #2  
Old 05-06-2006
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,439
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

Welcome to the forum.

We have a great system for ridding your PC of nasty pests. Follow the [Pre-Work] link in my signature below. Complete all of the tasks and post the logs you generate back into this post as attachments.


__________________

Pre-Work
/ System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #3  
Old 05-06-2006
ladygreenwitch's Avatar
HR Director
My PC
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 5,764
PC Experience: PC Illiterate
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default

Hi Milk,

Welcome to PCHF. We have a wonderful team of techs here, and I am sure that we will be able to resolve your RLM (rotton little monster) infection.

Please carefully follow the instructions for PreWork in my signature. Make sure to save the ewido log, and unzip HijackThis to it's own folder. Once you have finished, post the resulting two logs back here.

Looking forward to your reply,

TTFN

LGW


  #4  
Old 05-07-2006
Bronze Member
 
Join Date: May 2006
Posts: 7
milk - See this Members User comments on their Profile page
Default

I do not know if I did this right, hopefully I did. I went through the pre-work, and when I ran that E-program in safe mode, it cleaned 7 things up. When I restared my computer, I no longer had the problem of my internet changing pages on me, so I hope that one problem is solved. I look forward to your advice once you have looked at my attachments. Thank you kindly for the help.
Attached Files
File Type: log hijackthis.log (4.8 KB, 4 views)
File Type: txt Process report_20060506.txt.txt (1.5 KB, 2 views)
File Type: txt Startup report_20060506.txt.txt (3.0 KB, 2 views)


  #5  
Old 05-07-2006
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,439
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

Well done! A member of the PC Security Team will have a look at those logs for you soon.


__________________

Pre-Work
/ System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #6  
Old 05-07-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hya Milk.

Did you also save the scanning results log from Ewido? If yes , can you post that aswell?

If not have a look if it was saved here:

C:\Program Files\ewido\security suite\Reports

Once the scan has completed, there will be a button located on the bottom of the screen named Save report.
Click Save report , save it to your desktop. Then exit ewido and reboot youre pc.
I'll have a look at youre hjt log to see what needs to done.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #7  
Old 05-07-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Please download FixWareout by LonnyRJones from one of these sites:

http://downloads.subratam.org/Fixwareout.exe
http://swandog46.geekstogo.com/Fixwareout.exe

Save it to your desktop and run it. Click Next, then Install, then make sure "Run fixit" is checked and click Finish. The fix will begin; follow the prompts. You will be asked to reboot your computer; please do so. Your system may take longer than usual to load; this is normal.

When your system reboots, follow the prompts. Afterwards, HijackThis will launch. Please click Scan, and check the following items:
(if still present)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: (no name) - {1A7AB795-1C2A-3736-CEA1-4F9249B84E82} - ExchangeMaster.dll (file missing)
O4 - HKLM\..\Run: [TForm1] NukeSpan.exe
O4 - HKLM\..\Run: [control64] bingo9.exe
O4 - HKCU\..\Run: [AliceSD] DTOURS.exe
O4 - HKCU\..\Run: [dialer423] syspanel.exe
O4 - HKCU\..\Run: [SAPSTR] atl_helper.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{99FC46E7-4DE3-49BF-BD04-A0D158344CD8}: NameServer = 85.255.116.117

Fix this one only if you dont want to keep using it as startpage:
O14 - IERESET.INF: START_PAGE_URL=http://mysask.com
Do a manuall search for the files in bold on youre pc and delete what you find.


Click Fix Checked. Close HijackThis, and click OK to proceed.

At the end of the fix, you may need to restart your computer again.

Finally, please post the contents of the logfile C:\fixwareout\report.txt, and a new HijackThis log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 08:20 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top