hijack help please - Page 2 - PC Help Forum - Free Computer Help, Windows, Hardware, Software and more!

Twizzle · #16 04-05-2008

V man, i have posted the two new logs. I will not expect to hear from you this weekend - you need a break !

thanks,
wizzle

valis · #17 04-07-2008

got a hanger on there....

Please close/disable all anti-virus and anti-malware programs so they do not interfere with the running of SDFix and make sure you are disconnected from the Internet after downloading the program but before extracting the files.

Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with SDFix and remove some of its embedded files which may cause "unpredictable results".
Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
Remember to re-enable the protection again afterwards before connecting to the Internet.

Download SDFix and save it to your Desktop.

Double click SDFix.exe and it will extract the files to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Please then reboot your computer in Safe Mode by doing the following :

Restart your computer
After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually
Instead of Windows loading as normal, the Advanced Options Menu should appear
Select the first option, to run Windows in Safe Mode, then press Enter
Choose your usual account.

Open the extracted SDFix folder and double click RunThis.bat to start the script.
Type Y to begin the cleanup process.
It will remove any Trojan Services and Registry Entries that it finds then prompt you to press any key to reboot.
Press any Key and it will restart the PC.
When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
Once the desktop icons load the SDFix report will open on screen and also save into the SDFix folder as Report.txt
(Report.txt will also be copied to the clipboard ready for posting back on the forum).
Finally paste the contents of the Report.txt back on the forum with a new HijackThis log

Note: During this process, it would help a great deal and be very much appreciated if you would refrain from installing any new software or hardware on this machine, unless absolutely necessary, until the clean up process is finished as it makes our job more tedious, with additional new files that may have to be researched, which is very time consuming.

Also, please do not run any security programs or fixes on your own as doing so may compromise what we will be doing. It is important that you wait for instructions.

thanks,

v

Twizzle · #18 04-08-2008

Valis, got your message. Would it be ok if I waited on this last action until after Apr 15? I am doing many tax filings and can not afford any "unintended consequences" at the moment.

also, one of the files that we removed (i think) was this foto zip thing with a facebook reference. I got that file from a friend I correspond with in Argentina , but she is often in a cyber cafe. I dont know how careful they are about viruses, etc. Today i got an e mail from her and when i went to "reply", my Outlook program, which always uses Word as the writing program, stalled for a bit then returned a message saying "cant find Word, must be busy. We will use the Outlook editor to reply". or something like that. this only happens (and it happens every time - i tried it 3 times) when i hit reply to her e mail. It does not happen when i hit reply to any other e mails. Is this a clue of something bad happening???

thanks for looking out for me!