|
Posted by =?Utf-8?B?RW1pbHk=?= on October 11, 2006, 6:50 pm
If you were Registered and logged in, you could reply and use other advanced thread options chrisc,
Instead of trying ALL the scanners under the sun to see which ones fixes
your spyware problem, you are MUCH better off posting your Hijackthis log to
one of these forums.
The qualified helpers there will know exactly what tools to use to fix your
problem.
It is unnecessary to download many scanners and filling your pc with
programs that may not fix the problem.
You have to wait at least 3 days to get a reply, unless an expert see
something unusual in your logfile like a new variant.
http://www.geekstogo.com/forum/Malware_Removal_HiJackThis_Logs_Go_Here-f37.html http://www.atribune.org/forums/ http://www.bleepingcomputer.com/forums/forum22.html http://forums.tomcoyote.org/index.php?showforum=27 http://forums.spywareinfo.com/index.php?showforum=18
"David H. Lipman" wrote:
>
> | I am running windows xp home with sp2 I believe that the last update I got
> | was on 9/14. I also have window defender beta 2 (Windows Defender Version:
> | 1.1.1347.0
> | Engine Version: 1.1.1560.0, Definition Version: 1.14.1674.6), spybot search
> | and destroy (ver1.4), Ad-Aware SEpersonal (build 1.06r, def: SE1R125
> | 06.10.2006), Tenebril spycatcher (version 4.0.4, build 4, fingerprint
> | 10.9.06) and SBC Yahoo Anti-spy. I can no longer do manual or automatic
> | updates for windows or get new definitions for windows defender. When I do
> | the windows update I get "Windows Update - error 0x800A0046" The
> | recommendation is to enable data persistence but it is already enabled.
> | Other suggestions for this error does not seem to fit my situation ( the 3
> | recommendations: I do not have the same start menu list, I do not want to
> | delete my main user id, and I am reluctant to try the command line solution
> | since I do not know what it will do.) When I try to get system information
> | from start>accessories>system tools>system information it tells me that
> | cannot access the windows management instrumentation software. Windows
> | management files may be moved or missing. When trying to update the Windows
> | defender definitions manually, I get an error (Windows Defender unable to
> | complete the update 0x80070005 access denied ). I'm not sure if one of my
> | spyware programs has deleted or blocked programs from running. I also had
> | problems with IE so I tried the IE 7 beta. When that locked up I did an
> | uninstall and it restored IE to (ver 6.0.2900.2180.xpsp_sp2_gdr.050301-1519IC
> | cipher strength 128 bit, product ID 55277-OEM-0011903-00110 update ver sp2).
> | It wouldn't work unless I disabled saving the forms. So maybe the install
> | and uninstall could have caused the problems. Right now I believe that
> | there is a critical security update that I cannot access. What should I try
> | next?
> | --
> | chrisc
>
>
>
> If you are using any version of Sun Java that is prior to JRE Version 5.0
update 9,
> then you are strongly urged to remove any/all versions.
> There are vulnerabilities in them and they are actively being exploited.
>
> It is highly suggested that you update to the latest version which is Sun Java
JRE/JSE
> Version 5.0 Update 9
>
> Simple check, look under...
> C:\Program Files\Java
>
> The only folder under that folder should be the latest version.
>
> Such as...
> C:\Program Files\Java\jre1.5.0_09
>
> http://java.sun.com/javase/downloads/index.jsp
>
> FYI:
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
> http://sunsolve.sun.com/search/document.do?assetkey=1-26-102648-1
>
>
> For non-viral malware...
>
> Please download, install and update the following software...
>
> * Ad-aware SE v1.06
> http://www.lavasoft.de/
> http://www.lavasoftusa.com/
> http://www.lavasoft.de/ms/index.htm
>
> * SpyBot Search and Destroy v1.4
> http://security.kolla.de/
> http://www.safer-networking.org/microsoft.en.html
>
> * SuperAntiSpyware
> http://www.superantispyware.com/superantispywarefreevspro.html
>
> After the software is updated, I suggest scanning the system in Safe Mode.
>
> I also suggest downloading, installing and updating BHODemon for any Browser
Helper Objects
> that may be on the PC.
>
> * BHODemon
>
>
http://www.majorgeeks.com/downloadget.php?id=3550&file=11&evp=245a87539eea8ed6904332b4b8b8442d
>
> For viral malware...
>
> * Download MULTI_AV.EXE from the URL --
> http://www.ik-cs.com/programs/virtools/Multi_AV.exe
>
> To use this utility, perform the following...
> Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
> Choose; Unzip
> Choose; Close
>
> Execute; C:\AV-CLS\StartMenu.BAT
> { or Double-click on 'Start Menu' in C:\AV-CLS }
>
> NOTE: You may have to disable your software FireWall or allow WGET.EXE to go
through your
> FireWall to allow it to download the needed AV vendor related files.
>
> C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
> This will bring up the initial menu of choices and should be executed in
Normal Mode.
> This way all the components can be downloaded from each AV vendor's web site.
> The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot
the PC.
>
> You can choose to go to each menu item and just download the needed files or
you can
> download the files and perform a scan in Normal Mode. Once you have downloaded
the files
> needed for each scanner you want to use, you should reboot the PC into Safe
Mode [F8 key
> during boot] and re-run the menu again and choose which scanner you want to
run in Safe
> Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.
>
> When the menu is displayed hitting 'H' or 'h' will bring up a more
comprehensive PDF help
> file. http://www.ik-cs.com/multi-av.htm
>
> Additional Instructions:
> http://pcdid.com/Multi_AV.htm
>
>
> * * * Please report back your results * * *
>
>
> --
> Dave
> http://www.claymania.com/removal-trojan-adware.html
> http://www.ik-cs.com/got-a-virus.htm
>
>
>
|