Computing.Net > Forums > Security and Virus > someone please help me

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

someone please help me

Reply to Message Icon

Name: a40izzum
Date: January 15, 2008 at 20:31:49 Pacific
OS: windows xp pro
CPU/Ram: 600 mhz pentium
Product: ibm
Comment:

i have an older ibm 600mhz comp that i've never had any problems with until today....i've been getting 100000 popups and i keep getting rundll errors and also in my comp. i have about 2000 tmp files that i cant delete...i've run a lot of different spyware/adware programs, and even tried using hijackthis, but i dont know what im looking for...i also keep getting debugger message popups....someone please please help me



Sponsored Link
Ads by Google

Response Number 1
Name: ngwasuma
Date: January 16, 2008 at 01:27:00 Pacific
Reply:

Try BartPE CD and scan your system from the cd.


0

Response Number 2
Name: jabuck
Date: January 16, 2008 at 14:42:58 Pacific
Reply:

Let take a look at your Hijack This log and see if we can identify the bad files.

Please download and install the latest version of HijackThis v2.0.2:


Download the "HijackThis" Installer from this link:
Hijack This


1. Save " HJTInstall.exe" to your desktop.
2. Double click on HJTInstall.exe to run the program.
3. By default it will install to C:\Program Files\Trend Micro\HijackThis.
4. Accept the license agreement by clicking the "I Accept" button.
5.Click on the "Do a system scan and save a log file" button. It will scan and then ask you to save the log.
6. Click "Save log" to save the log file and then the log will open in Notepad.
7. Click on "Edit > Select All" then click on "Edit > Copy" to copy the entire contents of the log.
8. Paste the log in your next reply.
9. Do NOT have HijackThis fix anything yet! Most of what it finds will be harmless or even required.


0

Response Number 3
Name: a40izzum
Date: January 17, 2008 at 06:04:31 Pacific
Reply:

here is the requested logfile...im pretty sure from looking around on the net that i have winfixer but ive tried a million things aside from manually deleting files from the registry because i dont know what's what..

Logfile of HijackThis v1.99.1
Scan saved at 9:02:23 AM, on 1/17/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\Program Files\Common Files\AOL\Loader\aolload.exe
C:\WINDOWS\system32\rundll32.exe
C:\PROGRA~1\Crawler\CToolbar.exe
C:\WINDOWS\explorer.exe
C:\Program Files\AIM6\aim6.exe
C:\Program Files\AIM6\aim6 .exe
C:\Program Files\AIM6\aolsoftware.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://go.divx.com/divx/divx6/new/e...
F3 - REG:win.ini: load=C:\WINDOWS\System32\vtstt.exe
O3 - Toolbar: &Crawler Toolbar - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [IESet] IExplorer.dll .dbt
O4 - HKLM\..\RunServices: [IESet] IExplorer.dll .dbt
O4 - HKCU\..\Run: [Aim6] "C:\Program Files\AIM6\aim6 .exe" /d locale=en-US ee://aol/imApp
O4 - HKCU\..\Run: [IESet] IExplorer.dll .dbt
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O8 - Extra context menu item: Download Image with Download Manager - tbr:iemenudownload
O8 - Extra context menu item: Download URL in selection with Download Manager - tbr:iemenudownsel
O8 - Extra context menu item: Download URL with Download Manager - tbr:iemenudownload
O17 - HKLM\System\CCS\Services\Tcpip\..\{58D8EEB3-1909-41B3-A674-B08BFEA190DB}: NameServer = 192.168.2.1
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O23 - Service: Microsoft cache control (MSControlService) - Unknown owner - C:\WINDOWS\system32\windows
O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - C:\Program Files\WinClamAVShield\sp_clamsrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe



0

Response Number 4
Name: a40izzum
Date: January 17, 2008 at 09:26:06 Pacific
Reply:

next step????????


0

Response Number 5
Name: jabuck
Date: January 17, 2008 at 15:38:27 Pacific
Reply:

Go to start> control panel> add remove programs and uninstall this program:

Spyware Terminator

Please download Atribune's VundoFix.exe from the followinf site to your desktop:

VundoFix


Double-click VundoFix.exe to run it.

Click the Scan for Vundo button.

Once it's done scanning, click the Remove Vundo button.

You will receive a prompt asking if you want to remove the files,
click "yes".

Once you click yes, your desktop will go blank as it starts removing
Vundo.

When completed, it will prompt that it will reboot your computer,
click "ok".

Post a new Hijack This log.


0

Related Posts

See More



Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: someone please help me

someone please help me with this... www.computing.net/answers/security/someone-please-help-me-with-this/16747.html

Uh oh, big trouble, please help me www.computing.net/answers/security/uh-oh-big-trouble-please-help-me/11260.html

Please Help Me www.computing.net/answers/security/please-help-me/12480.html