Member Panel

zeth_g · 03:25 AM

Hi, I think I need some help here, some weeks ago I had an Adware problem which I kindda solved and I thought everything was ok, but now, my antivirus (norton) is all messed up and when I turn on my computer and it's loading all the start files and stuff 4 out of 5 times it says that there's a problem with the explorer and then it just freezes. Also everytime I try to open a folder I get this message: The file or folder you are opnening contains Web content that may be unsafe. The Web content has either been modified or is from an unknown source. Do you want to allow it to be initialized and be access by scripts?.

Hope this can help:

Thanks!!!

joe5

Welcome to PCHF , Zeth_g.

Looks pretty clean concerning mal-ware , but try to fix these with Hijackthis:

O15 - ProtocolDefaults: '@ivt' protocol is in My Computer Zone, should be Intranet Zone (HKLM)
O15 - ProtocolDefaults: 'file' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'ftp' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'http' protocol is in My Computer Zone, should be Internet Zone (HKLM)
O15 - ProtocolDefaults: 'https' protocol is in My Computer Zone, should be Internet Zone (HKLM)

I'm not sure myself on this one , it seems ok to me but its being flagged as a "password cracker" ,if you remove it and it turns out it was legit and from ares then you can easely re-install ares but even if it is legit , it looks like it is unnecesary for ares to work anyway.

O4 - HKCU\..\Run: [ares] "C:\ARCHIVOS DE PROGRAMA\ARES LITE EDITION\ARES.EXE" -h

And have you tried re-installing Norton? you can also try some online scans.

zeth_g

I can't fix the O15 files with Hijack, everytime I scan they appear again

joe5

Try to fix them in safe mode and at the same time (in safe mode) clear all youre temp files , the content of windows\prefetch folder and disable and delete youre system restore points (make a new restore point after you're done).

If that doesn't work then try to delete them manually from tools/internet options/securety/my computer zone , if "my computer zone' doesn't show then you need this reg key to unhide it:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0]

"Flags"=dword:00000047

to hide it again:

REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings\Zones\0]

"Flags"=dword:00000021

(copy to a text file and rename it XXXXX.reg)

Member Panel

Sponsors and Ads

Noticeboard