|
Posted by PA Bear on July 2, 2007, 6:46 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.
Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm http://aumha.org/a/quickfix.htm http://aumha.net/viewtopic.php?t=5878 http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm http://inetexplorer.mvps.org/data/prevention.htm http://inetexplorer.mvps.org/tshoot.html http://www.mvps.org/sramesh2k/Malware_Defence.htm http://defendingyourmachine2.blogspot.com/ http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, HijackThis v1.99.1
(http://aumha.org/downloads/hijackthis.zip) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for expert
analysis, not here.**
If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org
Nick O''tene wrote:
> Symptoms
> i) my favourites has been wiped clean...twice
> ii) my security software alerted me to unexpected changes to my startup
> settings which could allow others to access my computer on the net, I
> selected to undo those changes
> iii) several times, when I shutdown, I get a message that windows must
> first close a MYSTERIOUS program. I have scribbled its name down while it
> is
> on the screen; it is something like TRBc7xykTgiOrlmCynNRuw24td... .When I
> try to search for it on my hard dive, using part of the name, it can't be
> found.
>
> I have tried Microsofts nalicious software removal tool. I have all the
> latest patches and use McAfee security centre.
>
> Any help much appreciated
|