[ThunderOcean]

01 - I am just off to work so I will run these tonight. It's about 08:00 am in the UK.

02 - I will download all of the programs however, there are no instructions on what to do with Hoster, CleanUp! or KillBox. Are these downloaded for future use or have I missed something?

03 - If my PC re-starts because of the problem that it has, do I just repeat the step that failed or do I start from the beginning again?

04 - If I cannot complete a step because of consistent re-starting, do I just leave it and move on to the next step?

ThunderOcean

Edited by ThunderOcean, 04 May 2005 - 01:09 AM.

[Advertisements]

Yes, we will use those in the next step.

You should repost a new VX2 and DllCompare log if it restarts since the names might have changed if restarted.

If it restarts in the middle of a fix, fix up what you still can and then restart. Post those new set of logs again.

[greyknight17]

Yes, we will use those in the next step.

You should repost a new VX2 and DllCompare log if it restarts since the names might have changed if restarted.

If it restarts in the middle of a fix, fix up what you still can and then restart. Post those new set of logs again.

[ThunderOcean]

01 - I have downloaded and run Look2Me and it reported "No version of the application found to uninstall.".

02 - I have downloaded and run IGN Keyword Uninstaller and it reported "The iGetNet upgrade has been removed from your system. You will no longer be able to resolve IGN Keywords on your Internet Browser. Thank you for trying out iGetNet.".

03 - I have downloaded and run ClearSearch Uninstaller and it reported "Thank you for trying Clear-Search. You will need to reboot your computer in order to completely remove the software for your system.". I rebooted.

04 - I have downloaded and run Kill2Me and it reported "No signs of an infection were found on your system, you may still be infected. Continue anyway?". I continued and this was followed by "The Look2Me infection is about to be removed. Your desktop and taskbar will disappear for a few seconds, don't be alarmed, this is normal." which, in turn, was followed by "The Look2Me infection has been removed if it was present".

05 - I have downloaded and run VX2Finder9x and I have attached it's log below.

Log for VX2.BetterInternet File Finder

Files Found---


User Agent String---
Q312461

06 - I have downloaded and run DllCompare and I have attached it's log below.

* DLLCompare Log version(1.0.0.125)
Files Found that Windows does not See or cannot Access
*Not everything listed here means you are infected!
________________________________________________

O^E says: "There were no files found "
________________________________________________

1,013 items found: 1,013 files, 0 directories.
Total of file sizes: 177,829,495 bytes 169.59 M

--------------------End log---------------------

07 - I have shown the most recent C:\WINDOWS\SYSTEM files below. I have included the date (yyyy-mm-dd) and the time (hh:mm).

2005-05-04-19:21 - vsconfig.xml
2005-05-02-09:03 - zllictbl.dat
2005-05-01-14:46 - msisys.vxd
2005-04-29-09:05 - cardview.dll
2005-04-22-05:32 - pav.sig
2005-04-19-18:06 - zlcommdb.dll
2005-04-19-18:06 - zlcomm.dll
2005-04-19-18:06 - vsxml.dll
2005-04-19-18:05 - vsutil.dll
2005-04-19-18:05 - vsregexp.dll
2005-04-19-18:05 - vspubapi.dll
2005-04-19-18:05 - vsmonapi.dll
2005-04-19-18:05 - vsinit.dll
2005-04-19-18:05 - vsdatant.sys
2005-04-19-18:05 - vsdata.dll
2005-04-19-14:57 - vsdata95.vxd
2005-04-14-20:22 - vetredir.dll
2005-04-14-20:02 – rmoc3260.dll
2005-04-14-20:02 – pndx5016.dll
2005-04-14-20:02 – pndx5032.dll
2005-04-14-20:01 – pncrt.dll
2005-04-14-18:08 – adidsl.cfg
2005-03-14-14:54 – rtclib.dll
2005-03-14-14:54 – rtcrtp.dll

07 - I have shown all of the C:\WINDOWS\DOWNLOADED PROGRAM files below.

{556DDE35-E955-11D0-A707-000000521957} – ActiveX Control 0,0,01 from ‘http://www.xblock.com/download/xclean_micro.exe’
ActiveScan Installer Class
Anonymizer Anti-Spyware Scanner
ChatSpace Full Java Client 3.1.0.246
ChatSpace Full Java Client 3.1.0.248
ChatSpace Java Client 2.1.0.90N
Create & Print ActiveX Plug-in
CV3 Class
DirectAnimation Java Classes
DiskHealth Class
EPSON Web Printer-SelfTest Control Class
HeartbeatCtl Class
HiperLoader Control
Hotmail Attachments Control
HouseCall Control
Internet Explorer Classes for Java
Java Runtime Environment 1.3.1
JT’s Blocks
MSN Chat ontrol 4.5
PCPitstop Utility
PPSDKActiveXScanner.MainScreen
RdxlE Class
Shockwave ActiveX Control
Shockwave Flash Object
Update Class
Yahoo! Audio UI1
Yahoo! Bingo
Yahoo! Chat
Yahoo! Cribbage
Yahoo! Graffiti
Yahoo! Literati
Yahoo! Mahjong Solitaire
Yahoo! Poker
Yahoo! Pool 2
Yahoo! Spades
Yahoo! Spelldown
Yahoo! Towers 2.0
YinstStarter Class

08 – I do not know what should be in C:\PROGRAM FILES\INTERNET EXPLORER so I have shown them all below.

internet explorer\actsetup.exe
internet explorer\chlinst.exe
internet explorer\dw15.exe
internet explorer\fixie.inf
internet explorer\hmmapi.dll
internet explorer\ie4.dll
internet explorer\ie4regun
internet explorer\ie5old.dat
internet explorer\ie5old.ini
internet explorer\ie6bak.dat
internet explorer\ie6bak.ini
internet explorer\ie6setup.exe
internet explorer\iedetect.dll
internet explorer\iesetup.cif
internet explorer\iexplore.exe
internet explorer\license.txt
internet explorer\readme.txt
internet explorer\support.txt
internet explorer\1033\dwintl.dll
internet explorer\1033\mscreate.dir
internet explorer\connection wizard\icwconn.dll
internet explorer\connection wizard\icwconn1.exe
internet explorer\connection wizard\icwconn2.exe
internet explorer\connection wizard\icwdl.dll
internet explorer\connection wizard\icwhelp.dll
internet explorer\connection wizard\icwip.dun
internet explorer\connection wizard\icwres.dll
internet explorer\connection wizard\icwrmind.exe
internet explorer\connection wizard\icwtutor.exe
internet explorer\connection wizard\icwutil.dll
internet explorer\connection wizard\icwx25a.dun
internet explorer\connection wizard\icwx25b.dun
internet explorer\connection wizard\icwx25c.dun
internet explorer\connection wizard\inetwiz.exe
internet explorer\connection wizard\isignup.exe
internet explorer\connection wizard\msicw.isp
internet explorer\connection wizard\msn.isp
internet explorer\connection wizard\phone.icw
internet explorer\connection wizard\phone.ver
internet explorer\connection wizard\state.icw
internet explorer\connection wizard\support.icw
internet explorer\connection wizard\trialoc.dll
internet explorer\custom\this has no files in it
internet explorer\plugins\npdocbox.dll
internet explorer\plugins\npiprt32.dll
internet explorer\plugins\nppdf32.dll
internet explorer\plugins\nppetz.dll
internet explorer\plugins\npqtplugin.dll
internet explorer\plugins\npqtplugin2.dll
internet explorer\plugins\npqtplugin3.dll
internet explorer\plugins\npqtplugin4.dll
internet explorer\plugins\npqtplugin5.dll
internet explorer\plugins\quicktimeplugin.class
internet explorer\plugins\richfx\player\nprfxins.dll
internet explorer\plugins\richfx\player\nprfxins_eula.txt
internet explorer\setup\ie4.dll
internet explorer\setup\iebase.inf
internet explorer\setup\iebatch.exe
internet explorer\setup\mscreate.dir
internet explorer\setup\mssetup.dll
internet explorer\setup\regbin.inf
internet explorer\setup\setup.exe
internet explorer\setup\setup.ini
internet explorer\setup\setup.stf
internet explorer\setup\setup.tdf
internet explorer\signup\chat.inf
internet explorer\signup\inetset.inf
internet explorer\signup\install.ins
internet explorer\uninstall information\128bitdom.dat
internet explorer\uninstall information\128bitdom.ini
internet explorer\uninstall information\ainf0000
internet explorer\uninstall information\ainf0001
internet explorer\uninstall information\ainf0002
internet explorer\uninstall information\ainf0003
internet explorer\uninstall information\ainf0004
internet explorer\uninstall information\ainf0005
internet explorer\uninstall information\ainf0006
internet explorer\uninstall information\ainf0007
internet explorer\uninstall information\ainf0008
internet explorer\uninstall information\ainf0009
internet explorer\uninstall information\ainf0010
internet explorer\uninstall information\ainf0011
internet explorer\uninstall information\ie5bakex.dat
internet explorer\uninstall information\ie5bakex.ini
internet explorer\uninstall information\ie5extra.dat
internet explorer\uninstall information\ie5extra.ini
internet explorer\uninstall information\ieex.dat
internet explorer\uninstall information\ieex.ini
internet explorer\uninstall information\iereadme.001.dat
internet explorer\uninstall information\iereadme.001.ini
internet explorer\uninstall information\iereadme.dat
internet explorer\uninstall information\iereadme.ini
internet explorer\uninstall information\mobile option pack.dat
internet explorer\uninstall information\mobile option pack.ini
internet explorer\uninstall information\mstask.dat
internet explorer\uninstall information\mstask.ini
internet explorer\uninstall information\msvml.dat
internet explorer\uninstall information\msvml.ini
internet explorer\w2k\expinst.exe
internet explorer\w2k\ieex.cab
internet explorer\w2k\ieexinst.inf
internet explorer\w2k\migrate.dll
internet explorer\w2k\mscreate.dir

ThunderOcean

Edited by ThunderOcean, 04 May 2005 - 02:12 PM.

[greyknight17]

Make sure to get the latest updates for Windows and Internet Explorer at http://v5.windowsupd...t.aspx?ln=en-us.

Your log is clean.

To help prevent future spyware installations/infections, please read the Anti-Spyware Tutorial and use the tools provided.

Are there any problems now? If not, you should be set to go.

[ThunderOcean]

01 - I am still unable to run/complete Ad-Aware or Panda Software ActiveScan or Trendmicro Housecall.

02 - I have successfully run SpyBot and it found BackWeb Lite (containing 57 entries) which I removed.

03 - I have an HP CD-Writer 8200 Series External USB CD-RW Drive (which comes with Adaptec DirectCD 3.0 and HP MyCD 2.5). I have been trying to copy data to CD in case I have to restore my PC however, this keeps re-starting as well.

ThunderOcean

[greyknight17]

Is this memory module ok? I suggest running the Microsoft Memory Tool on this one also just to make sure. It could be that both of them are bad. So if the ram is bad, you will need to replace them.

[ThunderOcean]

01 - I have run Windows Memory Diagnostic and it does not identify any problems. I ran the standard tests three times and the extended tests once.

ThunderOcean

[greyknight17]

Does the PC restart even if you don't run spyware removal program? How about regular usage (typing word documents, surfing the web, playing games, etc.)? Does it restart on those occassions also?

If yes, I suggest posting this either in the Windows or maybe Hardware forums. See if anyone can help you troubleshoot the problems there.

I ran the normal tests and it doesn't sound like you have a spyware problem here, at least not one that these programs can detect. So I think this may be an issue non-related to spyware.

If you don't have any further questions on spyware, I will close this topc.

[ThunderOcean]

01 - I have added a new topic in Windows 95, 98, ME as http://www.geekstogo.com/forum/index.php?act=ST&f=3&t=23565.

02 - Thank you very much for your help.

ThunderOcean

[ThunderOcean]

01 - I have added a new topic in Windows 95, 98, ME as http://www.geekstogo.com/forum/index.php?act=ST&f=3&t=23565.

02 - Thank you very much for your help.

ThunderOcean

[greyknight17]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If your the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.