[Beatrix]

My computer is running very well except for the long start-up, which I can live with. Search engine loads are much better now too.



When I ran TFC, i was told the system needed to re-boot to delete files. I don't recall seeing specific information about problems.



As for the Windows Hard-Drive Maintenance/Repair, I ran it over night and I don't recall seeing anything about errors.



My Norton subscription is included with my internet service.



I went into control panel and uninstalled both Java options.



I deleted C:\Documents and Settings\HP_Administrator\My Documents\Downloads\ilividsetupv1.exe



I followed your instructions to re-set IE7

-----------------------------------------------------------------------------------------------------------------------------------------



The type of the file system is NTFS.
Volume label is COMPAQ.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
CHKDSK is verifying indexes (stage 2 of 3)...
Deleting index entry CHECKH~1.LNK in index $I30 of file 6254.

Errors found. CHKDSK cannot continue in read-only mode.

[Advertisements]

Hi.

My computer is running very well except for the long start-up, which I can live with. Search engine loads are much better now too.

Having had another look at the logs provided it appears AVG PC Tuneup 2011 is installed, is this the trial version and or did you purchase it? If the former uninstall it please(though do seriously consider removing either way is my friendly advice) as these types of software cause more problems than actually solve anything.

If you do opt to uninstall run the below batch file afterwards...

• Open Notepad.
• Copy and Paste everything from the Code Box below into Notepad: <-- Start >> Run... type in notepad and select OK

net stop winmgmt
rd %systemroot%\system32\wbem\repository
net start winmgmt

• Go to File >> Save As
• Save File name as "reset.bat" <-- Make sure to include the quotes.
• Change Save as Type to All Files and save the file to your Desktop.

Double click on reset.bat. A command window will open, when prompted type in Y then hit the enter/return key.

When completed the command window will close. Reboot your computer. <-- Make sure you do this.

Next:

The Hard-Drive could still do with some further in-depth maintenance...so follow the instructions again please in post # 9 for Hard-Drive Maintenance/Repair only.

Let myself know when completed the above and provide a quick update also please.

[Dakeyras]

Hi.

My computer is running very well except for the long start-up, which I can live with. Search engine loads are much better now too.

Having had another look at the logs provided it appears AVG PC Tuneup 2011 is installed, is this the trial version and or did you purchase it? If the former uninstall it please(though do seriously consider removing either way is my friendly advice) as these types of software cause more problems than actually solve anything.

If you do opt to uninstall run the below batch file afterwards...

• Open Notepad.
• Copy and Paste everything from the Code Box below into Notepad: <-- Start >> Run... type in notepad and select OK

net stop winmgmt
rd %systemroot%\system32\wbem\repository
net start winmgmt

• Go to File >> Save As
• Save File name as "reset.bat" <-- Make sure to include the quotes.
• Change Save as Type to All Files and save the file to your Desktop.

Double click on reset.bat. A command window will open, when prompted type in Y then hit the enter/return key.

When completed the command window will close. Reboot your computer. <-- Make sure you do this.

Next:

The Hard-Drive could still do with some further in-depth maintenance...so follow the instructions again please in post # 9 for Hard-Drive Maintenance/Repair only.

Let myself know when completed the above and provide a quick update also please.

[Beatrix]

I've tried to uninstall the AVG, in control panel add/remove, but I get a message saying the uninstall file is missing.

[Dakeyras]

Hi.

I've tried to uninstall the AVG, in control panel add/remove, but I get a message saying the uninstall file is missing.

OK, carry out the below please as follows...

• Click on Start >> My Computer >> Local Disk(C:) >> Program Files >> AVG >> AVG PC Tuneup 2011 >> locate and delete unins000.exe(if present).
• Now go here and download the installer to your desktop.
• Once downloaded >> double click on avg_pct_stf_all_2012_27.exe >> follow the prompts >> close the AVG PC Tuneup window when it appears/launches.
• Now click on Start again >> All Programs >> AVG PC Tuneup >> Uninstall AVG PC Tuneup >> close the Internet Explorer window that may appear.
• Click on Yes at the AVG PC Tuneup Uninstall prompt >> in the next window select Also remove Rescue Center backups >> click on Next >> then on OK at the final prompt.
• AVG PC Tuneup should now be fully uninstalled...

Custom Batch File:

• Open Notepad.
• Copy and Paste everything from the Code Box below into Notepad:

@Echo off
pushd\windows\system32\drivers\etc
attrib -h -s -r hosts
echo 127.0.0.1 localhost>HOSTS
attrib +r +h +s hosts
popd
@Echo on
net stop winmgmt
rd%systemroot%\system32\wbem\repository
net start winmgmt
del %0

• Go to File >> Save As
• Save File name as Dakeyras.bat
• Change Save as Type to All Files and save the file to your Desktop.
• It should look similiar to this: :

Now double-click on the desktop Dakeyras.bat to run the batch file. It will self-delete when completed.

A command window will open, when prompted type in Y then hit the Enter/Return key.

When completed the command window will close. Reboot your computer. <-- Make sure you do this.

Next:

The Hard-Drive could still do with some further in-depth maintenance...so follow the instructions again please in post # 9 and re-run TFC(Temp File Cleaner) and follow the Hard-Drive Maintenance/Repair only.

Let myself know when completed the above and provide a quick update also please.

[Beatrix]

I'm still here, but my computer has been having problems since I reloaded and uninstalled AVG. It won't stop churning for a while.
I'm not even sure if AVG is all gone. I followed your next step too. Maybe the machine is still working on the hard drive problem.
I will post again shortly when I sort this out.

[godawgs]

Hi Beatrix,

My name is godawgs. Dakeyras will be away for the next few days attending to a personal matter. He asked me to relay his apologies and cover this log.

I'm unclear as to which part of his last instructions you have done. I saw that you downloaded the AVG TuneUp 2011 installation file and ran it then tried to uninstall the program.
After you reinstalled the program were you unable to uninstall it thru the Add/Remove programs?

Did you run the Dakeyras.bat file afterwards?

Please clarify for me.

Thanks.

[Beatrix]

Hi Godawgs

My computer is running very well now, so there is no reason for me to take any more of your time. I appreciate all the time Dakeyras took
to help me out and I will happily make a contribution to your site.

Thank you

[godawgs]

My computer is running very well now, so there is no reason for me to take any more of your time. I appreciate all the time Dakeyras took
to help me out...

On behalf of Dakeyras, you are very welcome. I will be back with instructions to cleanup the tools that were used. This is important. Please stay with me through this step.

[godawgs]

Hi Beatrx,

OK! Well done. Here is the best part of the process! The mullygrubs are gone! That's a technical term for your log(s) appear to be clean! If you have no further issues with your computer, please proceed with the housekeeping procedures outlined below.
The first thing we need to do is to remove all the tools that we have used. This is so that should you ever be re-infected, you will download updated versions.

If you didn't uninstall ESET after you ran it we will uninstall it now.

Step-1.

Uninstall ESET

1. Please click Start > Control Panel > Add/Remove Programs
2. In the list of programs installed, locate the following program(s):

ESET OnLine Scanner

3. Click on each program to highlight it and click Change/Remove.
4. After the programs have been uninstalled, close the Installed Programs window and the Control Panel.
5. Reboot the computer.

Delete the folders associated with the uninstalled programs.(Only do this if you uninstalled the program)

1. Using Windows Explorer (to get there right-click your Start button and click "Explore"), please delete the following folders(s) (if present):

C:\Program Files\ESET

2. Close Windows Explorer.


Step-2.

Uninstall ComboFix

• Hold down the Windows key + R on your keyboard. This will display the Run dialogue box .
• In the Run box, type in ComboFix /Uninstall (Notice the space between the "x" and "/") then click OK
  
  
  
• Follow the prompts on the screen.
• A message should appear confirming that ComboFix was uninstalled

Step-3.

Uninstall AdwCleaner

Re-open AdwCleaner

• Click the Uninstall button
• Confirm with yes

Step-4.

Delete the following files and dolders:

From the C:\Documents and Settings\HP_Administrator\My Documents\Downloads folder:
OTL.exe
OTL.txt
Extras.txt

From the Desktop:
DDS.scr
DDS.txt
Attach.txt
checkhd.txt
reset.bat
avg_pct_stf_all_2012_27.exe

Delete the C:\_OTL folder.

Delete any other .bat, .log, .reg, .txt, and any other files created during this process, and left on the desktop and empty the Recycle Bin
.

Step-4.

Make a Fresh Restore Point, Clear the Old Restore Points, and Re-enable System Restore

The files in System Restore are protected to prevent any programs from changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected, but that's good news).

Note: Do not clear infected/old System Restore points before creating a new System Restore point first!

• Click Start > All Programs > Accessories > System tools > System Restore. The System Restore Wizard opens.
• Note: If the System Restore Wizard does not open, the System Restore feature may be turned off. To turn System Restore on, follow these steps:
• Click Start, click Control Panel, and then double-click System.
• Click the System Restore tab.
• Make sure that the Turn off System Restore check box is not selected. Or, make sure that the Turn off System Restore on all drives check box is not selected.
• Click OK.

[*] On the dialogue box that appears select Create a Restore Point
[*] Click NEXT
[*] Enter a name e.g. Clean
[*] Click CREATE
[*] Close System Restore[/list]Turn OFF System Restore.

• On the Desktop, right-click My Computer.
• Click Properties.
• Click the System Restore tab.
• Check Turn off System Restore.
• Click Apply, and then click OK.
  Restart your computer.

Turn ON System Restore.

• On the Desktop, right-click My Computer.
• Click Properties.
• Click the System Restore tab.
• UN-Check Turn off System Restore.
• Click Apply, and then click OK.
  System Restore will now be active again.

Step-5.

Reset Hidden Files and Folders

1. Click Start.
2. Open My Computer.
4. Select the Tools menu and click Folder Options.
5. Select the View tab.
6. Under the Hidden files and folders heading UNSELECT Show hidden files and folders.
7. Click the Hide protected operating system files (recommended) option. Click Yes to confirm. Click OK.


Preventing Re-Infection


Below, I have included a number of recommendations for how to protect your computer against future malware infections.

:Keep Windows Updated:-Windows Updates are constantly being revised to combat the newest hacks and threats, Microsoft releases security updates that help your computer from becoming vulnerable. It is best if you have these set to download automatically.

XP Users: You must use Internet Explorer to Update Windows.
1. Click Start> All Programs, in the programs window that comes up, look for Windows Update toward the top of the list and click it.

:Turn On Automatic Updates:

XP Users:
1. Click Start, click Run, type sysdm.cpl, and then press ENTER.
2. Click the Automatic Updates tab, and then click to select one of the following options. We recommend that you select the Automatic (recommended) Automatically download recommended updates for my computer and install them


: Keep Adobe Reader Updated :

• Open Adobe Reader
• Click Help on the menu at the top
• Click Check for Updates
• Allow any updates to be downloaded and installed

NOTE: Whether you use Adobe Reader, Acrobat or Foxit Reader to read pdf files you need to disable Javascript in the program. There is an exploit out there now that can use it to get on your PC. For Adobe Reader: Click Start, All Programs, Adobe Reader, Edit, Preferences, Click on Javascript in the left column and uncheck Enable Acrobat Javascript. Click OK Close program. It's the same for Foxit Reader except Preferences is under the Tools menu, and you uncheck Enable Javascript Actions.

:Web Browsers:

:Make your Internet Explorer more secure:
1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.
5. Change the Download signed ActiveX controls to "Prompt"
6. Change the Download unsigned ActiveX controls to "Disable"
7. Change the Initialise and script ActiveX controls not marked as safe to "Disable"
8. Change the Installation of desktop items to "Prompt"
9. Change the Launching programs and files in an IFRAME to "Prompt"
10. When all these settings have been made, click on the OK button.
11. If it prompts you as to whether or not you want to save the settings, click the Yes button.
12. Next press the Apply button and then the OK to exit the Internet Properties page.

:Alternate Browsers:

If you use Firefox, I highly recommend these add-ons to keep your PC even more secure.

• NoScript - for blocking ads and other potential website attacks
• WebOfTrust - a safe surfing tool for your browser. Traffic-light rating symbols show which websites you can trust when you search, shop and surf on the Web.
• McAfee SiteAdvisor - this tells you whether the sites you are about to visit are safe or not. A must if you do a lot of Googling

:Install the MVPs Hosts File: (Only needed for Firefox)

• MVPS Hosts file-replaces your current HOSTS file with one containing well known ad sites and other bad sites. Basically, this prevents your computer from connecting to those sites by redirecting them to 127.0.0.1 which is your local computer, meaning it will be difficult to infect yourself in the future.

Preventative programs that will help to keep the nasties away! We will start with Anti Spyware programs. I would advise getting a couple of them at least, and running a full scan at least once a month. Run Quick Scans at least once a week. Download the Free versions. And update the definitions before running scans.

========Anti Spyware========

• Malwarebytes-Free Version- a powerful tool to search for and eliminate malware found on your computer.
• SUPERAntiSpyware Free Edition-another scanning tool to find and eliminate malware.
• SpywareBlaster-to help prevent spyware from installing in the first place. A tutorial can be found here.
• SpywareGuard-to catch and block spyware before it can execute. A tutorial can be found here.
• WinPatrol - will alert you to hijackings, malware attacks and critical changes made to your computer without your permission. Help file and tutorial can be found here.

It's a good idea to clear out all your temp files every now and again. This will help your computer from bogging down and slowing. It also can assist in getting rid of files that may contain malicious code that could re-infect your computer.

========TEMP File Cleaners========

• TFC by OldTimer-A very powerful cleaning program for 32 and 64 bit OS. Note: You may have this already as part of the fixes you have run.
• CleanUP-Click the Download CleanUP! link. There is also a Learn how to use CleanUP! link on this page.

:BACKUPS:

• Keep a backup of your important files.-Now, more than ever, it's especially important to protect your digital files and memories. This article is full of good information on alternatives for home backup solutions.
• ERUNT-(Emergency Recovery Utility NT) allows you to keep a complete backup of your registry and restore it when needed. The standard registry backup options that come with Windows back up most of the registry but not all of it. ERUNT however creates a complete backup set, including the Security hive and user related sections. ERUNT is easy to use and since it creates a full backup, there are no options or choices other than to select the location of the backup files. The backup set includes a small executable that will launch the registry restore if needed.

:Keep Installed Programs Up to Date:

It is also possible for other programs on your computer to have security vulnerability that can allow malware to infect you. Therefore, it is also a good idea to check for the latest versions of commonly installed applications that are regularly patched to fix vulnerabilities.
Download and install the programs and run it monthly:
Filehippo Update Checker

Finally, please read How did I Get Infected in the First Place(by Mr. Tony Klein and dvk01)


I'd be grateful if you could reply to this post so that I know you have read it and, if you've no other questions, the thread can then be closed.

I Will Keep This Open For 24 hours or so. If Anything Comes Up - Just Come Back And Let Me Know

Stay Safe
godawgs

[godawgs]

Since this issue appears to be resolved ... this Topic has been closed. Glad we could help.

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.