Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2:25:43 PM, on 3/12/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16791) Boot mode: Normal
Oh wow, it actually worked! My first successful copy & paste!
Down to business--For the last month or so after using comp. 30 to 45min it begins locking up on Web sites or pages "internet explorer not responding" can stay locked for few min. or much longer. Frequently I finally had to shut down to get out. Was sent here by Joe53 in virus and spyware dis., tried various virus removal programs to no success. Joe53 thinks analyze this may find something to indicate problem. Followed all instruct. on Bugbatter's post (I hope) Would gladly supply info as to installed virus prog., security etc. but I think it's listed above. Thank You.
We could have continued in your other thread, but we'll continue here if you'd like.
Spybot's TeaTimer is going to interfere with our tools, so we'll need to disable that until we are finished cleaning.
Go to Start>Run. Type Msconfig
Then click on OK.
In the next window that opens > Startup tab UNcheck the entry for TeaTimer until this is over... 1. Open Spybot 2. Click Mode > Advanced Mode 3. Click Yes 4. Click Tools (located in the bottom left corner) > Resident 5. Uncheck 'Resident "TeaTimer" (Protection of over-all system settings) active' 6. Then close Spybot. Reboot. Verify that TeaTimer is not running. After ALL cleaning of your system has been completed and we have confirmed that your computer is clean, reverse these steps and re-enable the protection applets for TeaTimer.
Run Disk Cleanup in each user's profile: Click "Start > Programs > Accessories > System Tools > Disk Cleanup" Please make sure only the following are checked:
-- Downloaded Program Files
-- Temporary Internet Files
-- Recycle Bin
-- Temporary Files
Click "OK" and Disk Cleanup will delete those files for you.
Double-click on mbam-setup.exe to install the application.
When the installation begins, follow the prompts and do not make any changes to default settings.
When installation has finished, make sure you leave both of these checked:
Update Malwarebytes' Anti-Malware
Launch Malwarebytes' Anti-Malware
Then click Finish.
MBAM will automatically start and you will be asked to update the program before performing a scan.
If an update is found, the program will automatically update itself.
Press the OK button to close that box and continue.
If you encounter any problems while downloading the updates,
manually download them fromhere and just double-click on mbam-rules.exe to install. Alternatively, you can update through MBAM's interface from a clean computer, copy the definitions (rules.ref) located in C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
On the Scanner tab:
Make sure the "Perform Quick Scan" option is selected.
Then click on the Scan button.
If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button.
The scan will begin and "Scan in progress" will show at the top.
It may take some time to complete so please be patient.
When the scan is finished, a message box will say "The scan completed successfully.
Click 'Show Results' to display all objects found".
Click OK to close the message box and continue with the removal process.
Back at the main Scanner screen:
Click on the Show Results button to see a list of any malware that was found.
Make sure that everything is checked, and click Remove Selected.
When removal is completed, a log report will open in Notepad.
The log is automatically saved and can be viewed by clicking the Logs tab in MBAM.
Copy and paste the contents of that report into your next reply below and exit MBAM.
Note:-- If MBAM encounters a file that is difficult to remove, you may be asked to reboot your computer so it can proceed with the disinfection process. Regardless if prompted to restart the computer or not, please do so immediately. Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
-- MBAM may make changes to your registry as part of its disinfection routine. If you're using other security programs that detect registry changes (like Spybot's Teatimer), they may interfere with the fix or alert you after scanning with MBAM. Please disable such programs until disinfection is complete or permit them to allow the changes.
**If you need to re-install MBAM but encounter issue in re-installing, try using the MBAM Cleanup Utility by downloading it from HERE
Feel free to post any questions if you need me to clarify any instructions.
Tom, we ask the posters on this forum not to do any procedures that we do not advise them to do and that they work with one trained helper per thread. If you would like to finish troubleshooting this issue, I'll let you continue so I can move on to helping others.. After cleaning any malware, Java needs to be removed/updated. Carry on. :emotion-1:
I don't know what that was with Tomron, I heard no more so I guess i'm in your hands. I recognize your 'name' as having been involved early in the privious forum I posted, before Joe53 took over. You want me to download and run Malwarebytes?? I went thru that about a week ago or so, that and SuperSpy; the full procedure, they found nothing my current programs missed. Concerned I may have too many programs I uninstalled those two and went back to the AVG-AdAware and SpyBot I always had. I did, however; save the install programs to a 'flash drive', if you want me to re-install Malware... maybe I can just pull it off there. I apperciate any help I can get, and if you want me to go through the Malware.... procedure again I certainly will. I just wanted to be sure you knew I had already gone thru that. Forgive me if my schedule of replying is erratic, current economic cond. have me grabbing any temp./odd job I can get, which makes any kind of schedule non-existant.
No problem with your schedule. We'll get to this when we can. I thought Tom might continue here, but as long as I'm here this evening, we'll go for it. You really would be better off removing Ad-aware and Spybot and keeping MBAM and SuperAnti-Spyware instead. In my opinion, both are superior to the others. Yes, please install both again. UPDATE them and run them. Follow that by posting their logs. Thanks.
** If you are keeping Spybot, please make sure TeaTimer is disabled per instructions above.
Memory Processes Infected: (No malicious items detected)
Memory Modules Infected: (No malicious items detected)
Registry Keys Infected: (No malicious items detected)
Registry Values Infected: (No malicious items detected)
Registry Data Items Infected: (No malicious items detected)
Folders Infected: (No malicious items detected)
Files Infected: (No malicious items detected)
Here is the log from Malwarebytes you requested. Sorry for the couple days, this thing was acting really bad Sat. and Sun. Locking up on any site I tried, even on itself when I wasn't on the Web.. When it starts locking up all I can do is shut it down and walk away! I still have Tea Timer disabled, I think that is what you wish; or should I turn it back on now?
Bugbatter
4 Apprentice
•
20487 Posts
545
0
Posted March 13th, 2009 18:00
Hi, there,
We could have continued in your other thread, but we'll continue here if you'd like.
Spybot's TeaTimer is going to interfere with our tools, so we'll need to disable that until we are finished cleaning.
Go to Start>Run. Type Msconfig
Then click on OK.
In the next window that opens > Startup tab UNcheck the entry for TeaTimer until this is over...
1. Open Spybot
2. Click Mode > Advanced Mode
3. Click Yes
4. Click Tools (located in the bottom left corner) > Resident
5. Uncheck 'Resident "TeaTimer" (Protection of over-all system settings) active'
6. Then close Spybot.
Reboot.
Verify that TeaTimer is not running.
After ALL cleaning of your system has been completed and we have confirmed that your computer is clean, reverse these steps and re-enable the protection applets for TeaTimer.
Run Disk Cleanup in each user's profile: Click "Start > Programs > Accessories > System Tools > Disk Cleanup" Please make sure only the following are checked:
-- Downloaded Program Files
-- Temporary Internet Files
-- Recycle Bin
-- Temporary Files
Click "OK" and Disk Cleanup will delete those files for you.
Following that please download Malwarebytes Anti-Malware
and save it to your desktop.
alternate download link 1
alternate download link 2
MBAM will automatically start and you will be asked to update the program before performing a scan.
and just double-click on mbam-rules.exe to install.
Alternatively, you can update through MBAM's interface from a clean computer,
copy the definitions (rules.ref) located in
C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes'
Anti-Malware from that system to a usb stick or CD and then copy it to the infected machine.
On the Scanner tab:
Back at the main Scanner screen:
Note:-- If MBAM encounters a file that is difficult to remove,
you may be asked to reboot your computer so it can proceed with the disinfection process.
Regardless if prompted to restart the computer or not, please do so immediately.
Failure to reboot normally (not into safe mode) will prevent MBAM from removing all the malware.
-- MBAM may make changes to your registry as part of its disinfection routine.
If you're using other security programs that detect registry changes (like Spybot's Teatimer),
they may interfere with the fix or alert you after scanning with MBAM.
Please disable such programs until disinfection is complete or permit them to allow the changes.
**If you need to re-install MBAM but encounter issue in re-installing, try using the MBAM Cleanup Utility by downloading it from HERE
Feel free to post any questions if you need me to clarify any instructions.