I have a similar issue as JakeH107. My Google searches shoot me to various sites fed through 64.111.196.117, some adsite that has been around for a while. I have tried to download the programs suggested for clearing out this issue, however everytime I click on the links, or type in the addresses, I cannot connect, or am unable to locate that address. This is strangely for every site I try to access, AVG, Windows Defender, and several of the links offered on this page. I will not have access to another computer for a bit and will not be able to get these programs from somewhere else. Any help would be great, thank you.

Hello tenlarn and welcome to the forum.

We have a great Security Team who will help you with your issue.

JB.

***Moved to HJT Section***

First off remove Deckard scanner

http://www.techsupportforum.com/secu...r-dss-exe.html

=======================

Run both these programs.


Please download Malwarebytes' Anti-Malware from one of these places:

|MG| Malwarebytes Anti-Malware 1.28

http://www.besttechie.net/tools/mbam-setup.exe

Double Click mbam-setup.exe to install the application.

* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
* Copy&Paste the entire report in your next reply along with a fresh HijackThis log.

Please Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.


================================================== ===================================

================================================== ===================================


Ok.Lets download ComboFix.exe. This will give me a better view to the files running and also hidden on your computer and also those in the registry..Please visit this webpage for downloading and instructions for running the tool:

Go here ======> A guide and tutorial on using ComboFix <====== Go here

Please ensure you read this guide carefully and install the Recovery Console first.This applies to XP Pro and XP Home users only.If you have SP3 installed you will need to use SP2.Do not use for Vista.

The Windows Recovery Console will allow you to boot up into a special recovery (repair) mode. This allows us to more easily help you should your computer have a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Once installed, you should get a prompt that says:

The Recovery Console was successfully installed.

Please continue as follows:

(1) Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
(2) Click Yes to allow ComboFix to continue scanning for malware.

When the tool is finished, it will produce a report for you.

Please include the following reports for further review, and so we may continue cleansing the system:

C:\ComboFix.txt
New HijackThis log.

Caution: Never run and remove files with Combofix unless supervised by a qualified security analyst who is experienced in the use of Combofix. Mal use can cause serious computer problems

NOTE: Combofix prevents autorun of all CDs, floppies and USB devices to assist with malware removal & increase security. If this is an issue or makes it difficult for you - please let me know.

Wish I could, for some reason I cannot connect to these web sites. I cannot seem to connect to anything that might help me clean up this issue. I may have access to another computer today, I will try to bring home copies of these programs, thank you.

You guys continue to rock, thank you, Malwarebytes seems to have cleared up the problem. I have to dig out my Windows disk then I will go through the cobofix/recovery console process. Here are the logs from Malwarebytes, one question after I removed the results, then shut down warning messages popped up saying that various dll files couldn't initialize. I had to force shut down the computer after that. I didn't get the dll names, gotta learn how to watch that, hopefully they were just the ones I didn't need.

I will need that Combofix run to see if anymore malware is there...you dont need your disc for the recovery console its all downloadable from the site...


The Windows Recovery Console will allow you to boot up into a special recovery(repair) mode, if needed. This allows us to help you in the case that your computer has a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.

Download the file from this Microsoft page:

For XP Home >> http://www.microsoft.com/downloads/d...displaylang=en

For XP Pro >> Download details: Windows XP Professional with Service Pack 2 Utility: Setup Disks for Floppy Boot Install

Do not be concerned that this file is for SP2 and you have SP3. It will work just fine on your system.





Download the file & save it as it's originally named, next to ComboFix.exe.






Now close all open windows and programs, including all anti virus and anti malware programs so they do not interfere with the running of ComboFix. [*]Drag the setup package onto ComboFix.exe and drop it.
[*]Follow the prompts to start ComboFix and when prompted, agree to the End-User License Agreement to install the Microsoft Recovery Console.
[*]At the next prompt, click 'Yes' to run the full ComboFix scan.


[*]When the tool is finished, it will produce a report for you.
Please post the C:\ComboFix.txt along with a new HijackThis log for further review.

Great, I will run that tonight and post the results, again thanks so much.