lesser-equity

Magazine
Go Back   Computer Juice > Computer Software > Virus, Spyware & Security

Register


 Default 

Virus or Spyware infection




Reply
 
Thread Tools
  #21  
Old 22nd Nov 2008, 15:17
Member Group
 
Default Virus or Spyware infection

Here you go.

Thanks again, greatly appreciated.
Attached Files
File Type: txt hijackthis.txt (3.4 KB, 3 views)
  #22  
Old 22nd Nov 2008, 15:32
Moderator Group
 
Default Virus or Spyware infection

Looks good.

Download Disable/Remove Windows Messenger to the Desktop to remove Windows Messenger.

Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Unzip the file on the Desktop. Open the MessengerDisable.exe and choose the bottom box - Uninstall Windows Messenger and click Apply.

Exit out of MessengerDisable then delete the two files that were put on the Desktop.

----------

Install and run CCleaner.

Download CCleaner Slim and save it to your Desktop.
When the file has been saved, go to your Desktop and double-click on ccsetupxxx_slim.exe
Follow the prompts to install the program.
Complete the installation then:
  • Double-click the CCleaner shortcut on the desktop to start the program.
  • Click on the Options block on the left, then choose Cookies.
    • Under Cookies to Delete, highlight any cookies you would like to retain permanently
    • Click the right arrow > to move them to the Cookies to Keep window.
  • Go into Options > Advanced uncheck Only delete files in Windows Temp folders older than 48 hours
  • Click Cleaner on the left then Run Cleaner on the right to run the program.
  • Important: Make sure that ALL browser windows are closed before selecting Run Cleaner
  • Caution: It is not recommended that you use the 'Registry' feature unless you are very familiar with the registry.
  • Exit CCleaner after it has completed its process.

----------

Final steps and advice. Let me know if you have any questions.

Next: Set a New Restore Point to prevent possible reinfection from an old one.

Please go to: Start -> All Programs -> Accessories -> System Tools -> System Restore -> System Restore Settings
Click to add a check mark beside Turn off System Restore and click Apply
When you are warned that all existing Restore Points will be deleted, click Yes to continue and wait a few moments to let System Restore clear.
Uncheck "Turn off System Restore"
Click "Apply," and then click "OK".

----------

Use the Secunia Software Inspector to check for out of date software.
Out of date software has security vulnerabilities that malware can exploit.
  • Click Start Now
  • Check the box next to Enable thorough system inspection.
  • Click Start
  • Allow the scan to finish and scroll down to see if any updates are needed.
  • Update anything listed.

----------

Go to Microsoft Windows Update and get all critical updates.

----------

Concerned about Browser Security? Consider using Mozilla Firefox 3.0.

To prevent unknown applications from being installed on your computer install WinPatrol 2008
* Using Winpatrol to protect your computer from malicious software

I would suggest using SiteAdvisor. SiteAdvisor rates sites on business practices and spam. Safety ratings from McAfee SiteAdvisor are based on automated safety tests of Web sites.

SpywareBlaster - Secure your Internet Explorer to make it harder for these ActiveX programs to run on your computer. Also stop certain cookies from being added to your computer when running Mozilla based browsers like Firefox.
* Using SpywareBlaster to protect your computer from Spyware and Malware
* If you don't know what ActiveX controls are, see here

Check out Keeping Yourself safe On The Web for tips and free tools to keep you safe in the future.

Also see Slow Computer? It May Not Be Malware for free cleaning/maintenance tools to help keep your computer running smooth.

----------

Looking over your log it seems you don't have any evidence of a third party firewall.

Firewalls protect against hackers and malicious intruders. You need to download a free firewall from one of these reliable vendors.

Remember only install ONE firewall

1) Comodo (Uncheck during installation "Install Comodo SafeSurf..", Make Comodo my default search provider" and "Make Comodo Search my homepage" if you choose this one)
2) Online Armor
3) Sunbelt/Kerio
4) Agnitum
5) PC Tools Firewall Plus

If you are using the built-in Windows XP firewall, it is not recommended as it does not block outgoing connections. This means that any malware on your computer is free to "phone home" for more instructions. Simply put, Windows XP contains a mediocre firewall. This firewall is NO replacement for a dedicated software solution. Remember to use only one firewall at the same time.
__________________

  #23  
Old 22nd Nov 2008, 19:08
Member Group
 
Default Virus or Spyware infection

Hey. I'm all clean now.

No further questions from this way.

Thanks you very much for your time and effort.

Jim
  #24  
Old 26th Nov 2008, 21:55
Member Group
 
Default Virus or Spyware infection

Hi EvilFantasy, me again.

Bit of a problem unfortunately.

That abc.dll file is back in business on my computer, same symptoms as before.

I have been running COMODO Internet Security since I removed it last time.

I have both the Firewall and Defence+ settings on Safe Mode, and it never picked up anything.

Well I'm sure I can remove the file again, but I can't find anything on the web about this dll and what it does.

So I was thinking, while its on my computer, is there anywhere I can send the file to, so they can check it out and add it to their virus databases? Or so they could just tell me what it does?

Thanks mate, Jim.
  #25  
Old 26th Nov 2008, 22:09
Moderator Group
 
Default Virus or Spyware infection

Submit it here http://uploads.malwarebytes.org/

And here please http://www.uploadmalware.com/

You can also submit it to AVG by following the instructions here http://freeforum.avg.com/read.php?4,...,backpage=,sv=
__________________

  #26  
Old 26th Nov 2008, 22:13
Member Group
 
Default Virus or Spyware infection

Thanks champ
  #27  
Old 26th Nov 2008, 22:24
Member Group
 
Default Virus or Spyware infection

cant seem to upload it.

i cant archive the file or copy it anywhere else.

when i try to upload, the websites say: "Your file (abcebbebbcfce.dll) was 0 bytes and could not be uploaded. Please try disabling any anti-virus software and trying the upload again."

Move On Boot won't work either.
  #28  
Old 27th Nov 2008, 13:46
Moderator Group
 
Default Virus or Spyware infection

Basically that means it's an empty file. Try to delete it in safe mode. If that doesn't work update and run Dr Web again. Might be a good idea to run it in safe mode.
__________________

Reply

Register

Bookmarks

Similar Threads
Thread Thread Starter Forum Replies Last Post
Cyber Security Virus Infection on My Computer - Can You Help Me? MadMRTeen Virus, Spyware & Security 16 23rd Oct 2009 11:09
Possible Virus? - sdra64.exe Infection mbonwick Virus, Spyware & Security 16 15th Aug 2009 10:09
Cannot Update Virus and Spyware software on My Pc. ddd13 Virus, Spyware & Security 18 28th Feb 2009 19:52
Windows has detected spyware infection! seetham Virus, Spyware & Security 2 19th Oct 2008 22:18
Anti virus and spyware pop ups please help shaune Virus, Spyware & Security 3 25th Sep 2007 14:37
Thread Tools




Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright ©2006 - 2009 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2009 Jelsoft Enterprises Ltd. SEO by vBSEO ©2009, Crawlability, Inc.