Member Panel

Like others I have read my desk top has this obnoxious symbol in the middle spyware infection. I do have a # of anti spyware programs installed but they missed this. I was able to get back to the web but cannot get rid of the desktop take over. i have uploaded the hijack info that was requested.
mark

Hya Mark. Yup , you did it alright.

Doesn't look so bad , lets see if we can fix it.



Before fixing things with HijackThis Please Do the Following:

Show hidden files and folders:

For XP:

1. On the Tools menu in Windows Explorer, click Folder Options.
2. Click the View tab.
3. Under Hidden files and folders, click Show hidden files and folders.
4. If you see a warning message, click Yes.
5. Click Apply.
6. Click OK.

Disable System Restore to prevent re-infection.
(If you have/use it. You can turn it back on when youre PC is clean).

How to disable system restore:

WinXP.

1. Click the Start button.
2. Right-click My Computer, and then click Properties.
3. On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.

Please download CCleaner

Boot in safemode (hit f8 when booting up) and fix these with hjt:


Then delete the file in bold , and run Ccleaner.

Reboot and run this fix :
(unpack it , double click on it and click "yes" when it askes if you want to merge it with the registry)

http://users.telenet.be/marcvn/regfi...desktopfix.zip

Then please post a new hjt log to check.


I would also uninstall the Viewpoint toolbar in add/remove programs if you dont really want/use it. And i see you dont have a firewall , you could have a look in our download section for some free ones.

here is the new file for the cure. i hope it is fixed! please let me know
mark

I have to say i rebooted my computor and have my old desk top back.
thanks sooooo much
mark

Its not completly gone yet im afraid , there's one left.


Can you run a Panda active scan here and post the log from it?

http://www.pandasoftware.com/products/activescan



download KillBox by Option^Explicit from HERE.

Then boot in safemode and fix this one with hjt (if still present):


Double click on Killbox.exe and then check the delete on reboot button.

Enter the following filepath and filename into the Full path of file to delete box:

c:\secure32.html

Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)

After your computer has rebooted please run Hijackthis again and post a new Hijackthis log.

i have a warning that won't go away my computer is infected it seems to me messing with a number of other things also.

i hope i am following the correct format for asking for help