[ali.B]

hi

Now that we are almost done, please let me know when did your internet problems started.

also is everything running better ?

NEXT

Please download OTM

• Save it to your desktop.
• Please double-click OTM to run it. (Note: If you are running on Vista, right-click on the file and choose Run As Administrator).
• Copy the lines in the codebox below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose Copy):
  
  

  :Files
  C:\DGJSENYTSSD.EXE /s
  
  :Commands
  [purity]
  [emptytemp]
  [Reboot]

• Return to OTM, right click in the "Paste Instructions for Items to be Moved" window (under the yellow bar) and choose Paste.
  
• Click the red Moveit! button.
• Copy everything in the Results window (under the green bar) to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy), and paste it in your next reply.
• Close OTM and reboot your PC.

Note: If a file or folder cannot be moved immediately you may be asked to reboot the machine to finish the move process. If you are asked to reboot the machine choose Yes. In this case, after the reboot, open Notepad (Start->All Programs->Accessories->Notepad), click File->Open, in the File Name box enter *.log and press the Enter key, navigate to the C:\_OTMoveIt\MovedFiles folder, and open the newest .log file present, and copy/paste the contents of that document back here in your next post.

Edited by ali.B, 09 June 2010 - 08:01 AM.

[Advertisements]

I've had problems with this computer and the internet since it was given to me 3-4 years ago. It got worse, much worse, very recently.

A few months ago I attempted to download IE 8 and it couldn't be done. Since then I've had "Done with errors on page" messages and some difficulty accessing pages - usually very slow to open or a page would hang - while using IE. A few months ago a friend and I started an online business. We sell adult novelty items. I think that may have made us a target, but I also think (more likely) that these viruses have something to do with Facebook and or IE itself.

The biggest problem started over a month ago. I would get a missing DLL message. That message then turned into difficulty on start-up; I'd have to manually make selections to get it booted. Then, I couldn't get it to start up other than in safe mode. A friend is a geek and this is what he does for a living, so I paid him to fix it. He got rid of the viruses I had at that time, gave me a memory upgrade, cleaned off some stuff that was running in the background (but not nearly all that could've been cleaned out.) Things were good for about a month.

A couple weeks ago I'd run SuperAntiSpyware, which usually takes a long time on this machine so I left. When I got back I had a couple of porn sites downloaded on my desk top along with short cuts to items actually labled as Trojan and Spam. I updated SuperAntiSpyware again, ran it and that got rid of the stuff on the desktop.

Just over a week ago I started to get the fake security alerts. I used SuperAntiSpyware and it took care of some (I thought all?) each time. Last Thursday I started to get ALOT of warnings and multiple fake security program windows opening up. I tried to run SuperAntiSpyware but couldn't update it. I read somewhere to ignore (don't close) the fake warnings and start the program again, but it still couldn't update. I disconnected from the internet, ran SuperAntiSpyware while offline and it seemed to slow things down - or maybe that was hopeful thinking. I reconnected to the internet and it wasn't long before I'd totally lost control of the computer. I couldn't stop the windows from opening, I couldn't access the control panel and I couldn't access My Computer. I couldn't get SuperAntiSpyware to even open let alone run. When the first porn site window popped up and I realized it was downloading itself, I pulled the internet plug. I shut down the computer and on Friday I made my first post here on geekstogo.

I haven't tried to do alot on here because I didn't want to jinx getting it running right. It has no difficulty accessing this site and moving from page to page quickly. I'll be brave and try to surf a bit to see what happens after I post this update.


OTM log:

All processes killed
========== FILES ==========
File/Folder C:\DGJSENYTSSD.EXE not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Deb
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Kathleen A. Hill
->Temp folder emptied: 289790 bytes
->Temporary Internet Files folder emptied: 8218954 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: KATHLE~1~HIL

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5091472 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 13511932 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 26.00 mb


OTM by OldTimer - Version 3.1.12.2 log created on 06092010_220751

Files moved on Reboot...
File C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temp\~DF732C.tmp not found!
C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temporary Internet Files\Content.IE5\OEWJT5Z9\Windows-Security-Alert-Application-cannot-executed-Internet-Explo-t278613[1].htm moved successfully.
C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temporary Internet Files\Content.IE5\F0JJ8ADU\iframe[3].htm moved successfully.
C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temporary Internet Files\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat moved successfully.

Registry entries deleted on Reboot...

[Frogstitch64]

I've had problems with this computer and the internet since it was given to me 3-4 years ago. It got worse, much worse, very recently.

A few months ago I attempted to download IE 8 and it couldn't be done. Since then I've had "Done with errors on page" messages and some difficulty accessing pages - usually very slow to open or a page would hang - while using IE. A few months ago a friend and I started an online business. We sell adult novelty items. I think that may have made us a target, but I also think (more likely) that these viruses have something to do with Facebook and or IE itself.

The biggest problem started over a month ago. I would get a missing DLL message. That message then turned into difficulty on start-up; I'd have to manually make selections to get it booted. Then, I couldn't get it to start up other than in safe mode. A friend is a geek and this is what he does for a living, so I paid him to fix it. He got rid of the viruses I had at that time, gave me a memory upgrade, cleaned off some stuff that was running in the background (but not nearly all that could've been cleaned out.) Things were good for about a month.

A couple weeks ago I'd run SuperAntiSpyware, which usually takes a long time on this machine so I left. When I got back I had a couple of porn sites downloaded on my desk top along with short cuts to items actually labled as Trojan and Spam. I updated SuperAntiSpyware again, ran it and that got rid of the stuff on the desktop.

Just over a week ago I started to get the fake security alerts. I used SuperAntiSpyware and it took care of some (I thought all?) each time. Last Thursday I started to get ALOT of warnings and multiple fake security program windows opening up. I tried to run SuperAntiSpyware but couldn't update it. I read somewhere to ignore (don't close) the fake warnings and start the program again, but it still couldn't update. I disconnected from the internet, ran SuperAntiSpyware while offline and it seemed to slow things down - or maybe that was hopeful thinking. I reconnected to the internet and it wasn't long before I'd totally lost control of the computer. I couldn't stop the windows from opening, I couldn't access the control panel and I couldn't access My Computer. I couldn't get SuperAntiSpyware to even open let alone run. When the first porn site window popped up and I realized it was downloading itself, I pulled the internet plug. I shut down the computer and on Friday I made my first post here on geekstogo.

I haven't tried to do alot on here because I didn't want to jinx getting it running right. It has no difficulty accessing this site and moving from page to page quickly. I'll be brave and try to surf a bit to see what happens after I post this update.


OTM log:

All processes killed
========== FILES ==========
File/Folder C:\DGJSENYTSSD.EXE not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrator
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: All Users

User: Deb
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: Guest
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Kathleen A. Hill
->Temp folder emptied: 289790 bytes
->Temporary Internet Files folder emptied: 8218954 bytes
->Java cache emptied: 0 bytes
->Apple Safari cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: KATHLE~1~HIL

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 5091472 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 13511932 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 0 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 26.00 mb


OTM by OldTimer - Version 3.1.12.2 log created on 06092010_220751

Files moved on Reboot...
File C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temp\~DF732C.tmp not found!
C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temporary Internet Files\Content.IE5\OEWJT5Z9\Windows-Security-Alert-Application-cannot-executed-Internet-Explo-t278613[1].htm moved successfully.
C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temporary Internet Files\Content.IE5\F0JJ8ADU\iframe[3].htm moved successfully.
C:\Documents and Settings\Kathleen A. Hill\Local Settings\Temporary Internet Files\AntiPhishing\A0AB7674-8D67-4F4D-B5E1-96FAEADFB79D.dat moved successfully.

Registry entries deleted on Reboot...

[ali.B]

hi

Congratulations your logs appear clean

Reset and Re-enable your System Restore

The following will implement some cleanup procedures as well as reset System Restore points:

• Click START then RUN
• Now type ComboFix /Uninstall in the runbox and click OK. Note the space between the X and the U, it needs to be there.
  
  

NEXT

• Open OTL to run it. (Vista users, right click on OTL and "Run as administrator")
• Click on the CleanUp button.
• Click Yes to begin the cleanup process and remove tools, including this application
• You may be asked to reboot the machine to finish the cleanup process - if so, choose Yes

Recommendations

See Here for a list of recommendations for free Antivirus\AntiSpyware applications.

• Keep Your windows up to date by regularly checking their website at:
  http://windowsupdate.microsoft.com/
  
  
• SpywareBlaster protects against bad ActiveX, it immunizes your PC against them.
  
  
• SpywareGuard offers realtime protection from spyware installation attempts. Make sure you are only running one real-time anti-spyware protection program ( eg : TeaTimer, Windows Defender ) or there will be a conflict.
  
  
• Make Internet Explorer more secure
  • Click Start > Run
  • Type Inetcpl.cpl & click OK
  • Click on the Security tab
  • Click Reset all zones to default level
  • Make sure the Internet Zone is selected & Click Custom level
  • In the ActiveX section, set the first two options ("Download signed and unsigned ActiveX controls) to "Prompt", and ("Initialize and Script ActiveX controls not marked as safe") to "Disable".
  • Next Click OK, then Apply button and then OK to exit the Internet Properties page.
  
  
  
• MVPS Hosts file replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.
  
  
• Please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more
  secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built-in pop up
  blocker (as an added benefit!) that I have ever seen. If you are interested, Firefox may be downloaded from
  Here
  
  If you choose to use Firefox, I highly recommend these add-ons to keep your PC even more secure.
  
  • NoScript - for blocking ads and other potential website attacks
  • McAfee SiteAdvisor - this tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling
  
  
• Click Here to learn how to keep a backup of your important files
  
  
• FileHippo Update Checkker is an extremely helpful program that will tell you which of your programs need to be updated. Its important to keep programs up to date so that malware doesn't exploit any old security flaws.

Thank you

[ali.B]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.