Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

"Warning! Spyware detected on your computer!" [CLOSE

Started by mdchallenger18 , Aug 13 2008 07:27 PM

  • This topic is locked This topic is locked

#16
fenzodahl512
Posted 26 August 2008 - 12:57 AM

fenzodahl512

  • Malware Removal
  • 9,863 posts
Lets do this instead.. After the scan finish, post the log and tell me about your computer condition..


Lets run F-Secure online scan for Viruses, Spyware and RootKits:
  • Scroll to the bottom of the page and click the Start scanning button. A window will pop up.
  • Allow the Active X control to be installed on your computer, then click the Accept button
  • Click Full System Scan and allow the components to download and the scan to complete.
  • If malware is found, check Submit samples to F-Secure then select Automatic cleaning
  • When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
  • Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
If Automatic cleaning with Submit samples hangs, click Cancel, then New Scan
  • When the cleaning option is presented, Uncheck Submit samples to F-Secure
  • Click Automatic cleaning
  • When cleaning has finitished, click Show report (this will open an Internet Explorer window containing the report)
  • Highlight and Copy (CTRL + C) the complete report, and Paste (CTRL + V) in a new reply to this post
Notes:
  • This scan will only work with Internet Explorer
  • You must have administrator rights to run this scan
  • This scan can take several hours, so please be patient
  • 0

Advertisements

#17
mdchallenger18
Posted 26 August 2008 - 07:46 PM

mdchallenger18

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Hi Again,


I Can't install the F-Secure components. I got this error message " Unable to download necessary online scanner components. Please try again". What will I do?


Thanks Again
  • 0

#18
fenzodahl512
Posted 26 August 2008 - 07:53 PM

fenzodahl512

  • Malware Removal
  • 9,863 posts

Hi Again,


I Can't install the F-Secure components. I got this error message " Unable to download necessary online scanner components. Please try again". What will I do?


Thanks Again


Uh.. do this then..


Please download AVPTool by Kaspersky and save it to your desktop.
  • Please reboot into Safe Mode
  • Once you are in Safe Mode, double click the setup file to run and install it.
  • By default it will install to your Desktop (as Kaspersky Lan Tool folder)
  • A Kaspersky Virus Removal Tool window will open. There will be a tab that says Automatic Scan.
  • Under Automatic Scan make sure these are checked.
    • [1.] System Memory
      [2.] Startup Objects
      [3.] Disk Boot Sectors.
      [4.] My Computer.
      [5.] Also any other drives (Removable that you may have)
  • Then click on Scan button.
  • It will automatically Neutralize any objects found.
  • If some objects are left unneutralized then click the button that says Neutralize all
  • If it says it cannot be Neutralized, then chooose the Delete option when prompted.
  • After that is done click on the Report button at the bottom and save it to file name as Kas.
  • Save it somewhere convenient like your Desktop and just post only the detected Virus\malware in the report. It will be at the very top under Detected. Post those results in your next reply.
  • When you close the AVPTool, you will be asked to uninstall the program.. Choose Yes..



Also post me a fresh DSS log after above step...
  • 0

#19
mdchallenger18
Posted 27 August 2008 - 12:18 AM

mdchallenger18

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Here are the logs


1. Scan
----
Scanned: 297527
Detected: 0
Untreated: 0
Start time: 8/27/2008 10:33:29 AM
Duration: 03:06:30
Finish time: 8/27/2008 1:39:59 PM


Detected
--------
Status Object
------ ------


2. Deckard's System Scanner v20071014.68
Run by Santos_GDV on 2008-08-27 14:02:20
Computer is in Normal Mode.
--------------------------------------------------------------------------------



-- HijackThis (run as Santos_GDV.exe) ------------------------------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:02:25 PM, on 8/27/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\ibmpmsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\acs.exe
C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe
C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\TEMP\GCB152.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
C:\Program Files\Lenovo\Zoom\TpScrex.exe
C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\TurboNote\tbnote.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\PROGRA~1\MICROS~2\OFFICE11\OUTLOOK.EXE
C:\WINDOWS\system32\WISPTIS.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Santos_GDV\Desktop\dss.exe
C:\PROGRA~1\TRENDM~1\HIJACK~1\SANTOS~1.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://192.9.1.247:8.../servlet/ddrint
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.9.1.192:80
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 192.9.1.249;<local>
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TPHOTKEY] C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe
O4 - HKLM\..\Run: [Client Access Service] "C:\Program Files\IBM\Client Access\cwbsvstr.exe"
O4 - HKLM\..\Run: [Client Access Help Update] "C:\Program Files\IBM\Client Access\cwbinhlp.exe"
O4 - HKLM\..\Run: [Client Access Check Version] "C:\Program Files\IBM\Client Access\cwbckver.exe" LOGIN
O4 - HKLM\..\Run: [Client Access Express Welcome] "C:\Program Files\IBM\Client Access\cwbwlwiz.exe"
O4 - HKLM\..\Run: [Client Access PC5250 Sound] "C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe"
O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" -HideWindow
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'Default user')
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: TurboNote.lnk = C:\Program Files\TurboNote\tbnote.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_01\bin\npjpi142_01.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} - http://www.eset.eu/OnlineScanner.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-sec...m/ols/fscax.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com...obat/nos/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = EIBHO.LOCAL
O17 - HKLM\Software\..\Telephony: DomainName = EIBHO.LOCAL
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = EIBHO.LOCAL
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = EIBHO.LOCAL
O23 - Service: Atheros Configuration Service (acs) - Atheros - C:\WINDOWS\system32\acs.exe
O23 - Service: iSeries Access for Windows Remote Command (Cwbrxd) - IBM Corporation - C:\WINDOWS\CWBRXD.EXE
O23 - Service: ThinkPad PM Service (IBMPMSVC) - Lenovo - C:\WINDOWS\system32\ibmpmsvc.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\ntrtscan.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OfficeScanNT Personal Firewall (OfcPfwSvc) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\OfcPfwSvc.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: OfficeScanNT Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\OfficeScan Client\tmlisten.exe

--
End of file - 6791 bytes

-- Files created between 2008-07-27 and 2008-08-27 -----------------------------

2008-08-27 09:41:25 0 d-------- C:\fsaua.data
2008-08-26 17:16:29 0 d---s---- C:\Documents and Settings\Santos_GDV\UserData
2008-08-26 13:47:27 0 drahs---- C:\autorun.inf
2008-08-21 09:03:16 0 d-------- C:\Program Files\TurboNote
2008-08-18 18:25:57 10 --a------ C:\WINDOWS\popcinfo.dat
2008-08-18 18:11:41 0 d--h----- C:\WINDOWS\PIF
2008-08-16 10:27:31 0 d-------- C:\WINDOWS\system32\SoftwareDistribution
2008-08-16 10:24:27 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\Datalayer
2008-08-15 09:02:11 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\Malwarebytes
2008-08-15 09:02:07 0 d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-15 09:02:07 0 d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-11 11:10:16 0 d-------- C:\Program Files\Windows XP Fun Pack
2008-07-31 10:42:35 0 d--hs---- C:\Documents and Settings\Santos_GDV\Phone Browser
2008-07-28 08:53:28 0 d-------- C:\Program Files\Microsoft ActiveSync
2008-07-28 08:40:51 0 dr-h----- C:\MSOCache


-- Find3M Report ---------------------------------------------------------------

2008-08-25 22:14:10 72154 --a------ C:\WINDOWS\system32\nvModes.dat
2008-08-08 16:23:07 0 d-------- C:\Program Files\Trend Micro
2008-08-08 15:05:16 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\AdobeUM
2008-08-08 09:40:07 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\Nokia
2008-08-08 09:39:20 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\PC Suite
2008-07-25 19:46:20 0 d-------- C:\Program Files\The KMPlayer
2008-07-23 13:42:50 0 d-------- C:\Program Files\Common Files\PCSuite
2008-07-23 13:42:46 0 d-------- C:\Program Files\Nokia
2008-07-23 13:42:46 0 d-------- C:\Program Files\Common Files
2008-07-23 13:42:46 0 d-------- C:\Program Files\Common Files\Nokia
2008-07-23 13:42:28 0 d-------- C:\Program Files\DIFX
2008-07-23 13:42:22 0 d-------- C:\Program Files\PC Connectivity Solution
2008-07-22 17:45:50 0 d-------- C:\Program Files\Online Services
2008-07-10 09:54:51 0 d-------- C:\Program Files\WinPcap
2008-06-30 13:50:41 0 d-------- C:\Program Files\Ahead
2008-06-30 13:48:50 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\Ahead
2008-06-30 13:47:31 0 d-------- C:\Program Files\Common Files\Nero
2008-06-30 13:45:40 0 d-------- C:\Program Files\Common Files\Ahead
2008-06-30 09:22:09 0 d-------- C:\Documents and Settings\Santos_GDV\Application Data\IDMComp
2008-06-18 10:12:21 376 --a------ C:\ACH16301
2008-06-11 18:09:56 73216 --a----c- C:\WINDOWS\ST6UNST.EXE <Not Verified; Microsoft Corporation; Microsoft® Visual Basic for Windows>
2008-06-10 22:15:46 62 --ahs---- C:\Documents and Settings\Santos_GDV\Application Data\desktop.ini
2008-06-10 14:26:41 0 -rahs---- C:\MSDOS.SYS
2008-06-10 14:26:41 0 -rahs---- C:\IO.SYS
2008-06-10 14:26:41 0 --a------ C:\CONFIG.SYS
2008-06-10 14:26:41 0 --a------ C:\AUTOEXEC.BAT
2008-06-10 14:23:19 21640 --a----c- C:\WINDOWS\system32\emptyregdb.dat
2008-05-30 10:37:22 14047581 --a------ C:\Program Files\kmp_1430 (May 2008 version).exe


-- Registry Dump ---------------------------------------------------------------

*Note* empty entries & legit default entries are not shown


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [03/21/2008 08:49 AM]
"nwiz"="nwiz.exe" [03/21/2008 08:49 AM C:\WINDOWS\system32\nwiz.exe]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [03/21/2008 08:49 AM]
"TPHOTKEY"="C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe" [01/24/2008 10:21 AM]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [04/24/2008 05:53 PM]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [08/08/2007 09:13 AM]
"SunJavaUpdateSched"="C:\Program Files\Java\j2re1.4.2_01\bin\jusched.exe" [08/19/2003 05:23 PM]
"Client Access Service"="C:\Program Files\IBM\Client Access\cwbsvstr.exe" [01/23/2004 05:30 AM]
"Client Access Help Update"="C:\Program Files\IBM\Client Access\cwbinhlp.exe" [01/23/2004 05:30 AM]
"Client Access Check Version"="C:\Program Files\IBM\Client Access\cwbckver.exe" [01/23/2004 05:30 AM]
"Client Access Express Welcome"="C:\Program Files\IBM\Client Access\cwbwlwiz.exe" [01/23/2004 05:30 AM]
"Client Access PC5250 Sound"="C:\Program Files\IBM\Client Access\Emulator\pcssnd.exe" [01/23/2004 05:30 AM]
"OfficeScanNT Monitor"="C:\Program Files\Trend Micro\OfficeScan Client\pccntmon.exe" [05/05/2008 03:30 PM]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [12/05/2007 04:14 PM]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [12/05/2007 04:14 PM]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.exe" [07/09/2001 11:50 AM]
"PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [11/28/2006 02:12 PM]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [08/04/2004 01:06 AM]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [02/28/2006 08:00 PM]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"PcSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [6/11/2008 11:10:42 AM]
Microsoft Office.lnk - C:\Program Files\Microsoft Office\Office\OSA9.EXE [2/17/1999 8:05:56 PM]
TurboNote.lnk - C:\Program Files\TurboNote\tbnote.exe [8/21/2008 9:03:16 AM]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoDispBackgroundPage"=0 (0x0)
"NoDispScrSavPage"=0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tpfnf2]
C:\Program Files\Lenovo\HOTKEY\notifyf2.dll 09/06/2006 04:37 PM 34344 C:\Program Files\Lenovo\HOTKEY\notifyf2.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tphotkey]
C:\Program Files\Lenovo\HOTKEY\tphklock.dll 12/14/2007 04:36 PM 28672 C:\Program Files\Lenovo\HOTKEY\tphklock.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
SecurityProviders msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,


[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{01c7f9ce-5a3a-11dd-9571-001f3c4ddd4f}]
AutoRun\command- E:\wd_windows_tools\setup.exe




-- End of Deckard's System Scanner: finished at 2008-08-27 14:03:05 ------------


Thanks
  • 0

#20
fenzodahl512
Posted 27 August 2008 - 12:39 AM

fenzodahl512

  • Malware Removal
  • 9,863 posts
Great.. Your logs look good to me...

Now for some cleanup..
  • Make sure you have an Internet Connection.
  • Double-click OTMoveIt2.exe to run it. (Vista users, please right click on OTMoveit2.exe and select "Run as an Administrator")
  • Click on the CleanUp! button
  • A list of tool components used in the Cleanup of malware will be downloaded.
  • If your Firewall or Real Time protection attempts to block OtMoveit2 to reach the Internet, please allow the application to do so.
  • Click Yes to begin the Cleanup process and remove these components, including this application.
  • You will be asked to reboot the machine to finish the Cleanup process. If you are asked to reboot the machine choose Yes.



---------------------


Let's clean your Restore Points and set a new one:

Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous Restore Points which are likely to be infected)
To create a new Restore Point.
  • On the Desktop, right-click My Computer.
  • Click Properties.
  • Click the System Restore tab.
  • Check Turn off System Restore.
  • Click Apply, and then click OK. This will flush your old System Restore.
  • Then please UNCHECK the Turn off System Restore.
  • Click again on Apply, and then click OK. This will create a new Restore Point
System Restore will now be active again

If you are using Windows Vista, please go HERE for tutorial on how to use, disable and enable System Restore

Then please create a fresh Restore Point... Please visit this webpage if you do not know how..

If you are using Windows Vista, please visit this webpage for more information.




Lastly, to keep your operating system up to date please visit the link below monthly

Please read these excellent articles by miekiemoes :
Help! My computer is slow!
How to prevent Malware

And another excellent article by CastleCops Malware Prevention: Prevent Re-infection

Please reply to this thread once more and tell us about the computer behaviour before we can close this thread :)



Have a safe and happy computing day!


Regards
fenzodahl512
  • 0

#21
mdchallenger18
Posted 27 August 2008 - 01:25 AM

mdchallenger18

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Hi Again,


I can't run the clean up process of OTMoveit. I got this error msg " File/Folder Error: Access is Denied. not found.

How will I go about it?


Thanks
  • 0

#22
fenzodahl512
Posted 27 August 2008 - 01:34 AM

fenzodahl512

  • Malware Removal
  • 9,863 posts

Hi Again,


I can't run the clean up process of OTMoveit. I got this error msg " File/Folder Error: Access is Denied. not found.

How will I go about it?


Thanks



Use this instead..

Please download OTCleanIt and save it to Desktop.
  • Double-click OTCleanIt.exe
  • Click the CleanUp! button.
  • Select Yes when the "Begin cleanup Process?" prompt appears.
  • If you are prompted to Reboot during the cleanup, select Yes


Then, tell me about it..
  • 0

#23
mdchallenger18
Posted 27 August 2008 - 01:57 AM

mdchallenger18

    Member

  • Topic Starter
  • Member
  • PipPip
  • 30 posts
Hi,

I've done it. I'll have to checked everyday the performance of my computer.


Thanks again for the help.
  • 0

#24
fenzodahl512
Posted 27 August 2008 - 02:02 AM

fenzodahl512

  • Malware Removal
  • 9,863 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0
Back to Virus, Spyware, Malware Removal · Next Unread Topic →




Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

  1. Geeks to Go Community
  2. → Security
  3. → Virus, Spyware, Malware Removal

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP