Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Need help Removing Trojan Downloader.xs, *whataboutadog.com [RESOLVED]


  • This topic is locked This topic is locked

#31
JOMO

JOMO

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
Hello Sage5,

Funny thing; while looking to see what was in the Musicmatch Jukebox, I didn't see anything there. Then I looked at my son's directory and saw all his MP3's are opening with Musicmatch. Cutting to the chase; the error message no longer appears. All I did was browse around, no uninstall, no add/remove....and no more error message. So I guess we're good to go for the next step. I printed out your instructions in case the message ever does re-appear.

JOMO

  • 0

Advertisements


#32
sage5

sage5

    RIP 10/2009

  • Retired Staff
  • 2,646 posts
Hi JOMO

Congratulations, your new log looks clear, so we can now deal with some final clean up jobs.

Clean out cookies, temp files etc:
Please download ATF Cleaner by Atribune.
This program is for XP and Windows 2000 only
  • Double-click ATF-Cleaner.exe to run the program.
  • Under Main choose: Select All
  • Click the Empty Selected button.

    If you use Firefox browser
    • Click Firefox at the top and choose: Select All
    • Click the Empty Selected button.

      NOTE: If you would like to keep your saved passwords, please click No at the prompt.
    If you use Opera browser
    • Click Opera at the top and choose: Select All
    • Click the Empty Selected button.

      NOTE: If you would like to keep your saved passwords, please click No at the prompt.
  • Click Exit on the Main menu to close the program.
For Technical Support, double-click the e-mail address located at the bottom of each menu.


To Clear HijackThis Backups:
  • Open HijackThis.
  • Click the Config button.
  • Click the Backups button.
  • Put a check beside all the entries.
  • Click Delete, & Yes when you are prompted.
  • Close HijackThis


Cleanup with OTMoveIt:
  • Please double-click OTMoveIt2.exe to run it.
  • Click the Clean up button
  • Click YES at the next prompt (list downloaded, Do you want to begin cleanup process?)
  • Click Yes to the reboot.


To Clear Restore points, please do the following:
  • Go to Start > Settings > Control Panel.
  • Double-click the System icon.
    • NOTE: If the System icon is not visible, click "View all Control Panel options" to display it.
  • Click the System Restore tab.
  • Put a check by Disable System Restore.
  • Click Apply, OK, OK. Click Yes when you are prompted to restart Windows.
After reboot, you must turn System Restore back on:
  • Go back to the Troubleshooting tab.
  • UNcheck Disable System Restore.
  • Click Apply, OK, OK. Click Yes when you are prompted to restart Windows.


Lastly, some extra or better security for your PC:

The programs recommended below are freeware alternatives to some of your security software & might reduce the potential for spyware infection in the future:-

Spyware Prevention:
Spyware Blaster by JavaCool Software, prevents spyware installing and consumes no system resources.
IE/SpyAd, stops suspect sites loading ActiveX, popups etc onto your PC. An excellent tutorial is Here

Spyware Detection:
AVG Anti-Spyware is my favourite here.

Anti-Virus:
The first line of defence, especially since some will now detect trojans as well.
Avira's Antivir PersonalEdition Classic and Grisoft's Avast! Free Edition are among the best freebies.
*Please note* You should never install more than one anti-virus program on a PC, as it will cause conflicts.

Firewall:
A Firewall is an essential tool in the security of any PC connected to the Internet.
Sunbelt Personal Firewall and Comodo are both excellent freeware.

Alternate Browsers:
Thankfully, there are now some excellent alternatives to MS Internet Explorer. They offer better security, more stability, and better speed.
A couple of good examples are: Firefox and Opera

Other Updates:
Vital security patches and updates are available for Microsoft Windows and Internet Explorer at the Windows Update Site
It is equally important to update the other security software you use, on a regular basis.

Further reading about these issues is available in a very good article: How did I get infected in the first place ? (by Tony Klein and dvk01)

All the best & safe surfing in the future,

sage5
  • 0

#33
JOMO

JOMO

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
Hi Sage5,

Ok, we've run all the steps you directed me to run. I noticed that after running ATF-Cleaner, several programs are very slow to open, like HiJackThis. But it eventually opens and runs ok.

One problem remains: The HiJackThis backup files you directed me to remove do not get removed :) . I check each of them, then click OK, then click 'Yes' to remove all backups; 82 in our case. But after each reboot, they re-appear. Any suggestions?

With the backups still there, are we clear to resume surfing?

JOMO

  • 0

#34
sage5

sage5

    RIP 10/2009

  • Retired Staff
  • 2,646 posts
Hi JOMO,
I have just checked my machine & that is the case with mine as well.
It definitely used to work in v1.9.9, but does not appear to work with the new version.
Easy answer is to go to the folder where HijackThis is installed, (in your case
C:\Documents and Settings\Dad\Desktop) and delete everything in the Backups sub-folder.

That done, you are good to go. :)
  • 0

#35
JOMO

JOMO

    Member

  • Topic Starter
  • Member
  • PipPip
  • 23 posts
Hello Sage5,

That did the trick! Everything is looking good now :)

Thanks a lot. I really appreciate your help in working through this. If you're ever in the states, it's my shout!

JOMO

  • 0

#36
sage5

sage5

    RIP 10/2009

  • Retired Staff
  • 2,646 posts
You are very welcome JOMO. :)

All the best,

sage5
  • 0

#37
sage5

sage5

    RIP 10/2009

  • Retired Staff
  • 2,646 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP