I have a real bad spyware issue where sometimes when i select a bookmark or link it redirects it to an advertisement site then im getting this thing were im on the computer and all of a sudden i hear an advertisment playing in the background so i go to process explorer and killed the process of b.exe (sometimes dtemp.exe) and it would stop
i went through the computer deleted alot of temp stuff including the a b c d .exes but it is still occurring
i turned off restore, went into safe mode, did an anti virus scan (AVG free edition 8.5) and it was all clean but still the spyware continue
please help, thanks
yo alex download http://www.malwarebytes.org/mbam.php then boot into safe mode and delete
O20 - AppInit_DLLs: ,C:\DOCUME~1\ALEXBR~1\LOCALS~1\Temp\231911kou.dll
O20 - Winlogon Notify: RelevantKnowledge - c:\program files\relevantknowledge\rlls.dll
then run malwarebytes (rememeber to update it in the update tab)
in safe modego in ur windows/system32/drivers/etc/ and delete the HOSTS folder dont delete any other folder or u wont have internet! :( reboot gl reply plz
ok i booted to safe and deleted those 2 things on HJT then i ran malwarebytes and it found 50 something things but
the log says no action was taken when i selected remove alli tried to delete the hosts folders but non of the folders are
there[IMG]http://i87.photobucket.com/albums/k124/AnArchyKiNG999/cwindows.png[/IMG]
lol yea i just might have a little bit more then spyware
thanks for the help so far
i still need help getting rid of all of thisplease ask if you need more information
yo alex u need to be logged in as administrator before u can view/delete anythin in the WINDOWS folder, log in admin and do the scan again in safe mode, download http://www.forospyware.com/sUBs/Com...
save it to ur desktop run it, create the recovery tool let it run and dont turn off ur comp! restart and run the malwarebytes
and post the hijackthislog
go to start - run and type C:\windows\system32\drivers\etc
and delete the hosts file from there gl if u need any help post a reply and run the combofix.exe gl reply plz
hi again i was on admistrator when i did the whole process and still was unable to get to the windows folder without all of that junk in it and non of the actual needed folders
i will try again
the link you sent me ofcombofix.exe led me to a forum in another language
thanks again for helping
yo alex run this in safe mode it the other link works with me
http://download.bleepingcomputer.co... ur
then run malwarebytes in safe mode
restart
u will be clean with runnin the 2 scans
ur windows folder should look like this http://img151.imageshack.us/img151/... . ur missin the main folders run the scans gl ! reply plz once u dont them scans run a virus scan usin AVG or avast or http://www.kaspersky.com/virusscanner gl !
sorry i am back from a trip and i will try those thanks for waiting i hope i didnt lose you
