Member Panel

ashley514

When I scan with avg, have 6 infected files. It wont let me heal any of them and I can only put 2 in the vault..

And I was recently on AIM, mic to mic with a friend. Now my volume wont work. I already went into the volume controls and nothing is muted. My computer is messed up... very much and I'm clueless.

I included a log file for you to look at.

joe5

Hya Ashley514, welcome to PCHF.

First please go to add/remove programs and uninstall ISTBar/IST Service ans WEBREBATES if present.

Then run HijackThis , select to do a "system scan only" and then place a check beside each of the following:

R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {806DB9B3-56E1-49FF-B5A5-D41129000130} - C:\WINDOWS\SYSTEM\FCYVS.DLL (file missing)
O4 - HKLM\..\Run: [IST Service] C:\Program Files\ISTsvc\istsvc.exe
O4 - HKLM\..\Run: [w07ed24b.dll] RUNDLL32.EXE w07ed24b.dll,I2 00051668007ed24b
O8 - Extra context menu item: Web Rebates. - file://C:\PROGRAM FILES\WEBREBATES4\websrebates\webtrebates\toprC0.h tm
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O16 - DPF: {A243F6C2-34D2-4549-BCCD-A7BEF759B236} (Seekford Solutions, Inc.'s ssiPictureUploader Control) - http://img.funtigo.com/images/upload...reUploader.cab

[color=blue]Fix this one only if you don't want to keep using it as start page:
O14 - IERESET.INF: START_PAGE_URL=http://msnmember.msn.com

Now first close all windows and browsers other then HijackThis , then click Fix checked and close HijackThis.

Manually delete these:

C:\Program Files\ISTsvc
C:\WINDOWS\system32\w07ed24b.dll
C:\PROGRAM FILES\WEBREBATES4

After that reboot your pc.

1. Download this file - combofix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it shall produce a log for you. Post that log in your next reply

Also do an online AV scan here:

PC Help Forum.com - Computer Tech Support

and post the log from it when done, and also post a new HijackThis log please.

ashley514

I followed the instructions in the post before yours and got this new log file... His/her post must have been deleted though. I really appreciate the help I'm getting.

ashley514

combofix.exe doesn't work with my operating system.

joe5

Looking alot better already.

Download Pocket Killbox:
http://www.atribune.org/downloads/KillBox.exe

Start Killbox and place a tick next to [x]delete on reboot.
And press the "all files" button. (just above the yellow triangle)

Copy this list into the windows clipboard:
(highlight the text , rightclick it and select "copy")

c:\windows\NDNuninstall6_98.exe
c:\windows\system\feeds
c:\program files\SurfAccuracy
c:\program files\MyWay
c:\program files\Aprps
C:\WINDOWS\TEMP\NNEMOB388.exe
C:\WINDOWS\NDNuninstall7_14.exe
C:\WINDOWS\NDNuninstall7_22.exe
C:\Program Files\Mozilla Firefox\plugins\NPMySrch.dll
C:\WINDOWS\MSNImport.exe
C:\WINDOWS\TEMP\cfout.txt

Back in Killbox go > file > paste from clipboard,
Click the red highlighted X button and say yes to the prompt, then click OK.

Exit Killbox and restart your PC.

And do you know what this is from yourself?

O4 - HKLM\..\Run: [MSGADJUST] C:\UNZIPPED\MSGADJUST2[1]\FINAL\MSGADJUST.exe

If not, then please upload the file in bold to this site:

VIRUSTOTAL - Free Online Virus and Malware Scan

When done, please post back with the results of the above file, and how your pc is running now.

ashley514 · 05:32 PM

I see an improvement already, thanks for your help. I still have no sound, though.

ashley514 · 05:32 PM

There's no virus found with any of the programs

Aditional Information
File size: 0 bytes
MD5: d41d8cd98f00b204e9800998ecf8427e
SHA1: da39a3ee5e6b4b0d3255bfef95601890afd80709