Recommended Driver Scanner

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » Spyware / AdWare » extreme Problems. Spyware, Malware!!!?!?!?!?

Spyware / AdWare - extreme Problems. Spyware, Malware!!!?!?!?!? posted in the Security & Safety forums; Hey guys, Thanks for any help in advance, My son had downloaded something thinking it was a map, and opened it. Its installed a bundle of spyware,malware, etc. And now ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 03-27-2006
Silver Member
 
Join Date: May 2005
Posts: 106
EmattE - See this Members User comments on their Profile page
Default extreme Problems. Spyware, Malware!!!?!?!?!?

Hey guys, Thanks for any help in advance,
My son had downloaded something thinking it was a map, and opened it. Its installed a bundle of spyware,malware, etc. And now the computer is so full of trash that it runs really slow. Ive dis connectede it from the internet run a few spyware scans etc. (Lavasoft Adaware SE Professional, Microsoft Antispyware and CCleaner) And theres still stuff on there. I get pop-ups adverts etc. Also there are files on the C:/ drive that i delete and then they re appear after removing them (also tried removing them with internet disconnected)
I can't give you a report thing to summarise my computer as i am on the laptop, and have disconnected the internet from the PC. If it is essential i will try again later.
Many Thanks
Matt

*** Also i can't open up task manager any more. (Ctrl+Alt+Del) It just wont open Really stuck for ideas now.



Last edited by EmattE; 03-27-2006 at 08:32 PM.
  #2  
Old 03-27-2006
Bluefish's Avatar
Elite Member
My PC
 
Join Date: Jan 2005
Location: Holland
Posts: 2,169
Bluefish - See this Members User comments on their Profile page Bluefish - See this Members User comments on their Profile page
Default

He EmattE!
I'm not of the Security Team, but I think, that if you're somehow able to, you should start following this instructions:
http://www.pchelpforum.com/hijackthi...r-hjt-log.html
The logs give the Security Team the information.
If you're not able to, please wait until one of our Security Team members is online to have a look at your problem.
Thanks,
Blue


__________________
PCHF Rules - You're Welcome!
What's inside my PC? - Prework
  #3  
Old 03-27-2006
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,591
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

Ok, 3 things;

1) Ouch
2) Don't panic!
3) Click on the [Pre-Work] link in my signature. Download the tools mentioned onto the laptop and burn them onto a disk so that you can run them without the need to connect back up to the 'net. Post the resulting logs back here as attachments.


__________________

Pre-Work
/ System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #4  
Old 03-27-2006
Silver Member
 
Join Date: May 2005
Posts: 106
EmattE - See this Members User comments on their Profile page
Default

Sorry its taken me so long to reply. Lots of popups to get round
Attached Files
File Type: txt hijackthis 27.03.06.txt (6.9 KB, 2 views)


  #5  
Old 03-27-2006
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,591
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

Thanks for posting that - did you do the Ewido part aswell?


__________________

Pre-Work
/ System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation
  #6  
Old 03-28-2006
Silver Member
 
Join Date: May 2005
Posts: 106
EmattE - See this Members User comments on their Profile page
Default

Hey guys,
Im currently running spyware sweeper, Have run CCleaner, Disabled system restore before doing both also shown all hidden files. After the Spy Sweeper has completed, ill boot in safe mode, Run ewido. Then run another Hijack log. Hopefully will have all cleared up by then
Either way, ill post back.
Thanks for all your help so far. Youve been brilliant
Matt


  #7  
Old 03-28-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Looking at youre hjt log , Ewido and Spysweeper will remove plenty of the infections on there for sure.
But also the Smitrem is needed.

Download Smitrem to your desktop:
http://noahdfear.geekstogo.com/click...click.php?id=1

Run the installer and then press Start to Extract the
files to the desktop, Do not run it yet.

Reboot into safe mode (Reboot and keep tapping F8 , then
choose safe mode from the list)

Run SmitRem:
Open the SmitRem folder and double click the "RunThis.bat" file to start the tool. Follow the prompts on screen , wait for the tool to complete , and disk cleanup to finish.

The tool will create a log named smitfiles.txt on the drive that you ran Smitrem on, eg; "C:\smitfiles.txt" , or the partition where your operating system is installed on.
Please attach this log to your next reply.



You will need to reload your wallpaper as the SmitRem
tool will reset it, you can do this by right clicking
desktop and choosing properties, First check Theme and
set it to Windows XP then click the Desktop tab and
choose the one you want to use and press apply.


When done please post all 4 logs , from Ewido , Spysweeper , smitrem , and a new hjt log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Last edited by joe5; 03-28-2006 at 10:13 PM.

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 11:29 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top