[Charbo]

Hi all,

I have XP SP2 and a problem that I believe was caused by a virus from a memory stick. Symptoms:

1) Folder Options no longer appears in the Tools menu.
2) This error pop-up appears each time Windows is started:
Windows Script Host
There is no scrip engine for file extension ".ini".
3) When viewing data on a memory stick new folders open in their own windows even though it set to same window and sometimes certain folders do not even open.
4) The Language Bar appears on the Taskbar each time Windows starts even though its toolbar option is unchecked in the Taskbar right click menu.

I have ran my virus software but the definitions are out of date and nothing has been picked up.

Many thanks for any help
Rob

[slipend]

Right ok Rob,

What you are going to have to do is run some tools to clean your computer up first.
Go here and download these, also this.

Update Spyware S&D and do a system scan.
Check what it finds and remove.
Go to immunization tab and immunize everything.

Update Ad-Aware SE and do a full system scan, this make take a while but just leave it.

Next, run CCleaner, update it. Click Run Cleaner, let CCleaner finish.
Next Scan for issue using CCleaner, make a backup.
Then remove selected issues.

Do a windows update.

Restart your computer.

Now, update your AV and restart your computer in safe mode, to get into safe mode, reapeatedly tap F8 as your computer loads. You will be presented with a list of choices. Scroll to safe mode.
Do a AV scan.

This may/may not fix all/some of your problems but it will at least rule out any inection on your computer.

Hope this helps.
Sam :)

[Charbo]

Thanks for the reply Sam

I've tried all that you've mentioned and unfortunately it has not fixed any of the problems
Any other ideas?

Thanks again
Rob

[evilfantasy]

Download HijackThis Here
Once you have it downloaded install/save it to it's own folder!!! This is important for it to work properly.
For example save in C:\program files\hijackthis
You can then create a shortcut on the desktop.
Once installed open the program and select Do a system scan and save logfile.
**Important DO NOT have Hijack This fix anything yet. Most of what it finds will be harmless or even required.
Save the log to your desktop.
In the next post click Go Advanced.
Scroll down and click Manage Attachments and add the log as an attachment.

[Charbo]

Thanks for the interest
Log is attached

[Dave Hybrid]

Originally Posted by Charbo I have ran my virus software but the definitions are out of date and nothing has been picked up.

I'm guessing the definitions are out of date as you have to subscribe and they have run out.

I advise in addition to the other advice that you remove this out of date anti-virus as it is doing no good and replace it with a free version such as Avast.

Avast is free from our downloads section and even though it is free many technicians will agree it performs much, much better than the paid software.

[evilfantasy]

Go into add/remove programs and see if anything you know shouldn't be there has been installed that you can un-install. Like toolbars.

Files to delete in HijackThis.
open hJT and select do a system scan only.
Put a check next to these entries.
Do not click fix until all windows are closed
C:\WINDOWS\system32\Flashy.exe
O2 - BHO: (no name) - {259F616C-A300-44F5-B04A-ED001A26C85C} - (no file)
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - C:\Program Files\Microsoft Money\System\mnyviewer.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Flashy Bot] C:\WINDOWS\system32\Flashy.exe
O4 - Startup: systemID.pif = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Remember to close all windown including this one. Now click fix checked.
Post a new HJT log.
We will remove and replace your Norton in the next steps.

[evilfantasy]

Forgot to mention to post a fresh HJT log in next post.

[Charbo]

the latest log is attached
thanks

[evilfantasy]

Go to www.java.com and check for updates for your java. Then go to add/remove programs and remove the old java install jre1.5.0_10

Then go HERE and follow the instructions to remove Norton/Symantec.

Next go HERE to download Avast! Home Free. Install and update then run scans.

After this is done please post a new HJT log and let us know how things are. I think Avast will pick up a few things but won't know until after it is updated and completed the scan.