Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected with Vundo!grb, not resolved with Combofix


  • This topic is locked This topic is locked
10 replies to this topic

#1 Sam Kumar

Sam Kumar

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:57 PM

Posted 07 April 2009 - 07:35 PM

Hello-
Similar to another user (http://www.bleepingcomputer.com/forums/topic198421.html) my laptop (Dell Latitude) is affected by the trojan Vundo!grb. Every time I start it up my McAfee virus software pops up saying it has blocked the Vundo!grb virus at:

C:\WINDOWS\system32\cvsyojhw.tmp

Also- when I'm on the internet, pop-ups keep coming up.

As per the advise given to the other user having the same issue- I
1. uninstalled McAfee
2. downloaded and ran ComboFix
3. reinstalled McAfee
4. Not- I hv not uninstalled ComboFix.

McAfee still gives me the warning message- though I hv not seen any pop-ups.
The log from ComboFix in attached.
Pls help.
Thanks a lot for your help.
-Sam

Attached Files



BC AdBot (Login to Remove)

 


#2 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 07 April 2009 - 07:49 PM

Hello, Sam Kumar

Welcome to the Bleeping Computer Forums. My name is Jat, and I will be helping you with your situation.

If you do not make a reply in 5 days, we will have to close your topic.


You may want to keep the link to this topic in your favourites. Alternatively, you can click the Posted Image button at the top bar of this topic and Track this Topic. The topics you are tracking can be found here.

Please take note of some guidelines for this fix:
  • Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools. Doing so could cause changes to the directions I have to give you and prolong the time required. Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.
  • If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
  • Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
  • Please reply using the Posted Image button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply. Only attach them if requested or if they do not fit into the post.
  • Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just post back here so that we know you're still here.


I must warn you not to look at other's logs and follow directions given to that person. Every log is different and the instructions given are for that user only.

Also, ComboFix was not created for general use, only under the direction from a member of the HJT Team. In some cases this program can seriously damage your computer if not supervised.

Please take a look at the Preparation Guide for a download link to DDS and instructions on how you should ask for help.

Thanks :thumbup2:
- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image

#3 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 12 April 2009 - 05:30 AM

Due to Lack of feedback, this topic is now Closed.

If you need this topic reopened, please send me a message. In your message please include the address of this thread in your request.

This applies only to the original topic starter.

Everyone else please start a new topic.
- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image

#4 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 23 April 2009 - 10:41 AM

Reopened at user request.
- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image

#5 Sam Kumar

Sam Kumar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:57 PM

Posted 23 April 2009 - 11:16 AM

Thanks for reopening the topic.

Pls find below the log from the DDS. I hv also attache dthe "attach" file. I look forward to your inputs and guidance.
thanks
sam


DDS (Ver_09-03-16.01) - NTFSx86
Run by Admin at 11:14:50.73 on Thu 04/23/2009
Internet Explorer: 7.0.5730.13

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Settings,ProxyOverride = *.local
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: {68949742-e208-47f4-a734-3e982e69f772} - c:\windows\system32\bikuhagu.dll
BHO: scriptproxy: {7db2d5a0-7241-4e79-b68d-6309f01c5231} - c:\program files\mcafee\virusscan\scriptsn.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\3.1.807.1746\swg.dll
BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
TB: &Google: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
mRun: [ATIPTA] "c:\program files\ati technologies\ati control panel\atiptaxx.exe"
mRun: [ZCfgSvc.exe] c:\windows\system32\ZCfgSvc.exe
mRun: [PRONoMgr.exe] c:\program files\intel\ncs\proset\PRONoMgr.exe
mRun: [Broadcom Wireless Manager UI] c:\windows\system32\WLTRAY.exe
mRun: [McAfeeUpdaterUI] "c:\program files\mcafee\common framework\UdaterUI.exe" /StartedFromRunKey
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [AppleSyncNotifier] c:\program files\common files\apple\mobile device support\bin\AppleSyncNotifier.exe
mRun: [Google Desktop Search] "c:\program files\google\google desktop search\GoogleDesktop.exe" /startup
mRun: [mcagent_exe] "c:\program files\mcafee.com\agent\mcagent.exe" /runkey
mRun: [liziduhusu] Rundll32.exe "c:\windows\system32\fuweyofa.dll",s
mRun: [04e902bb] rundll32.exe "c:\windows\system32\rokeyuki.dll",b
mRun: [CPM07da3127] Rundll32.exe "c:\windows\system32\yelesato.dll",a
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - hxxp://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll
Notify: AtiExtEvent - Ati2evxx.dll
Notify: Sebring - c:\windows\system32\LgNotify.dll
AppInit_DLLs: c:\windows\system32\nuvameje.dll c:\windows\system32\zotemiso.dll c:\windows\system32\yelesato.dll
SSODL: SSODL - {EC43E3FD-5C60-46a6-97D7-E0B85DBDD6C4} - c:\windows\system32\nuvameje.dll
STS: STS: {ec43e3fd-5c60-46a6-97d7-e0b85dbdd6c4} - c:\windows\system32\nuvameje.dll
LSA: Notification Packages = scecli c:\windows\system32\zotemiso.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\admin\applic~1\mozilla\firefox\profiles\gzgg3qh7.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.com/accounts/ServiceLogin?continue=http://www.google.com/ig%3Fhl%3Den&followup=http://www.google.com/ig%3Fhl%3Den&service=ig&passive=true&cd=US&hl=en&nui=1&ltmpl=default
FF - component: c:\program files\mcafee\siteadvisor\components\McFFPlg.dll
FF - component: c:\program files\mozilla firefox\components\GoogleDesktopMozilla.dll
FF - plugin: c:\documents and settings\admin\application data\mozilla\firefox\profiles\gzgg3qh7.default\extensions\firefox@tvunetworks.com\plugins\npTVUAx.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npGoogleGadgetPluginFirefoxWin.dll

============= SERVICES / DRIVERS ===============


=============== Created Last 30 ================

2009-04-22 10:17 <DIR> --d----- c:\docume~1\alluse~1\applic~1\TVU Networks
2009-04-20 12:27 46,483 a------- c:\windows\system32\rn.tmp
2009-04-18 08:46 284,160 -c------ c:\windows\system32\dllcache\pdh.dll
2009-04-18 08:46 401,408 -c------ c:\windows\system32\dllcache\rpcss.dll
2009-04-18 08:46 110,592 -c------ c:\windows\system32\dllcache\services.exe
2009-04-18 08:46 473,600 -c------ c:\windows\system32\dllcache\fastprox.dll
2009-04-18 08:46 227,840 -c------ c:\windows\system32\dllcache\wmiprvse.exe
2009-04-18 08:46 453,120 -c------ c:\windows\system32\dllcache\wmiprvsd.dll
2009-04-18 08:46 729,088 -c------ c:\windows\system32\dllcache\lsasrv.dll
2009-04-18 08:46 617,472 -c------ c:\windows\system32\dllcache\advapi32.dll
2009-04-18 08:46 714,752 -c------ c:\windows\system32\dllcache\ntdll.dll
2009-04-18 08:44 2,560 -------- c:\windows\system32\xpsp4res.dll
2009-04-18 08:44 1,203,922 -c------ c:\windows\system32\dllcache\sysmain.sdb
2009-04-18 08:44 215,552 -c------ c:\windows\system32\dllcache\wordpad.exe
2009-04-16 16:30 <DIR> --d----- c:\documents and settings\admin\LocalLow
2009-04-16 16:30 <DIR> --d----- c:\program files\TVUPlayer
2009-04-16 16:21 <DIR> --d----- c:\program files\SopCast
2009-04-13 13:02 5,632 a------- c:\windows\system32\ptpusb.dll
2009-04-13 13:02 15,104 ac------ c:\windows\system32\dllcache\usbscan.sys
2009-04-13 13:02 15,104 a------- c:\windows\system32\drivers\usbscan.sys
2009-04-13 13:02 159,232 a------- c:\windows\system32\ptpusd.dll
2009-04-12 20:54 <DIR> --d----- c:\windows\system32\KB905474
2009-04-11 21:52 <DIR> --d----- c:\windows\system32\scripting
2009-04-11 21:52 <DIR> --d----- c:\windows\l2schemas
2009-04-11 21:52 <DIR> --d----- c:\windows\system32\en
2009-04-11 21:52 <DIR> --d----- c:\windows\system32\bits
2009-04-11 21:44 <DIR> --d----- c:\windows\ServicePackFiles
2009-04-11 21:37 <DIR> --d----- c:\windows\network diagnostic
2009-04-10 22:18 <DIR> --d----- C:\ComboFix
2009-04-10 22:18 73,728 a------- C:\pv.exe
2009-04-07 20:52 <DIR> --d----- c:\program files\MSXML 4.0
2009-04-07 20:09 2,145,280 -c------ c:\windows\system32\dllcache\ntkrnlmp.exe
2009-04-07 20:09 2,189,056 -c------ c:\windows\system32\dllcache\ntoskrnl.exe
2009-04-07 20:09 2,023,936 -c------ c:\windows\system32\dllcache\ntkrpamp.exe
2009-04-07 20:09 2,066,048 -c------ c:\windows\system32\dllcache\ntkrnlpa.exe
2009-04-07 20:08 203,136 -c------ c:\windows\system32\dllcache\rmcast.sys
2009-04-07 20:08 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2009-04-07 20:08 333,952 -c------ c:\windows\system32\dllcache\srv.sys
2009-04-07 20:07 691,712 -c------ c:\windows\system32\dllcache\inetcomm.dll
2009-04-07 20:07 459,264 -c------ c:\windows\system32\dllcache\msfeeds.dll
2009-04-07 20:07 52,224 -c------ c:\windows\system32\dllcache\msfeedsbs.dll
2009-04-07 20:07 268,288 -c------ c:\windows\system32\dllcache\iertutil.dll
2009-04-07 20:07 383,488 -c------ c:\windows\system32\dllcache\ieapfltr.dll
2009-04-07 20:07 63,488 -c------ c:\windows\system32\dllcache\icardie.dll
2009-04-07 20:07 13,824 -c------ c:\windows\system32\dllcache\ieudinit.exe
2009-04-07 20:07 2,455,488 -c------ c:\windows\system32\dllcache\ieapfltr.dat
2009-04-07 20:07 991,232 -c------ c:\windows\system32\dllcache\ieframe.dll.mui
2009-04-07 20:07 6,066,176 -c------ c:\windows\system32\dllcache\ieframe.dll
2009-04-07 20:06 337,408 -c------ c:\windows\system32\dllcache\netapi32.dll
2009-04-07 20:00 <DIR> --d----- c:\windows\system32\PreInstall
2009-04-07 19:54 8,365 a------- c:\windows\system32\Config.MPF
2009-04-07 19:49 40,552 a------- c:\windows\system32\drivers\mfesmfk.sys
2009-04-07 19:49 79,880 a------- c:\windows\system32\drivers\mfeavfk.sys
2009-04-07 19:49 35,272 a------- c:\windows\system32\drivers\mfebopk.sys
2009-04-07 19:48 120,136 a------- c:\windows\system32\drivers\Mpfp.sys
2009-04-07 19:47 <DIR> --d----- c:\program files\common files\McAfee
2009-04-07 19:47 <DIR> --d----- c:\program files\McAfee.com
2009-04-07 19:46 34,216 a------- c:\windows\system32\drivers\mferkdk.sys
2009-04-07 19:28 104,960 -------- c:\windows\system32\drivers\atinrvxx.sys
2009-04-07 19:25 <DIR> --d----- c:\windows\system32\SoftwareDistribution
2009-04-07 19:19 <DIR> a-dshr-- C:\cmdcons
2009-04-07 19:10 272,128 -c------ c:\windows\system32\dllcache\bthport.sys
2009-04-07 19:10 272,128 -------- c:\windows\system32\drivers\bthport.sys
2009-04-06 22:34 <DIR> --d----- c:\program files\SiteAdvisor
2009-04-06 22:19 <DIR> --d----- c:\windows\system32\appmgmt

==================== Find3M ====================

2009-04-23 09:27 47,616 a--sh--- c:\windows\system32\yidurufo.exe
2009-04-23 09:27 89,600 a--sh--- c:\windows\system32\yelesato.dll
2009-04-23 09:27 81,408 a--sh--- c:\windows\system32\rokeyuki.dll
2009-04-22 10:12 50,176 a--sh--- c:\windows\system32\ziperame.dll
2009-04-22 10:11 80,896 a--sh--- c:\windows\system32\jahiyaso.dll
2009-04-22 10:11 89,088 a--sh--- c:\windows\system32\nuvameje.dll
2009-04-22 10:11 46,592 a--sh--- c:\windows\system32\zevihami.exe
2009-04-11 22:00 86,327 a------- c:\windows\pchealth\helpctr\offlinecache\index.dat
2009-03-25 11:06 214,024 a------- c:\windows\system32\drivers\mfehidk.sys
2009-03-06 10:22 284,160 a------- c:\windows\system32\pdh.dll
2009-03-02 20:18 826,368 a------- c:\windows\system32\wininet.dll
2009-02-20 14:09 78,336 a------- c:\windows\system32\ieencode.dll
2009-02-09 08:10 729,088 a------- c:\windows\system32\lsasrv.dll
2009-02-09 08:10 714,752 a------- c:\windows\system32\ntdll.dll
2009-02-09 08:10 617,472 a------- c:\windows\system32\advapi32.dll
2009-02-09 08:10 401,408 a------- c:\windows\system32\rpcss.dll
2009-02-09 07:13 1,846,784 a------- c:\windows\system32\win32k.sys
2009-02-07 19:02 2,066,048 a------- c:\windows\system32\ntkrnlpa.exe
2009-02-06 07:11 110,592 a------- c:\windows\system32\services.exe
2009-02-06 07:08 2,189,056 a------- c:\windows\system32\ntoskrnl.exe
2009-02-06 06:39 35,328 a------- c:\windows\system32\sc.exe
2009-02-03 15:59 56,832 a------- c:\windows\system32\secur32.dll
2009-01-22 10:13 50,176 a--sh--- c:\windows\system32\bikuhagu.dll
2009-01-22 10:13 50,176 a--sh--- c:\windows\system32\fuweyofa.dll
2009-01-22 10:13 50,176 a--sh--- c:\windows\system32\zotemiso.dll

============= FINISH: 11:24:03.81 ===============

Attached Files



#6 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 23 April 2009 - 12:53 PM

Hello,

ComboFix

Please download ComboFix from one of these locations (If you already have it, delete it and download again):

Link 1
Link 2
Link 3

* IMPORTANT !!! Save ComboFix.exe to your Desktop
  • Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. Instruction can be found here
  • Double click on ComboFix.exe & follow the prompts.
  • As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware.
  • Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console.
**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.

Posted Image


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

Posted Image

Note** ComboFix was designed only to be used under the supervision of a helper, not for general use.

Click on Yes, to continue scanning for malware.

When finished, it will produce a log for you. Please include the C:\ComboFix.txt in your next reply.
- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image

#7 Sam Kumar

Sam Kumar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:57 PM

Posted 23 April 2009 - 04:50 PM

Thanks for your response. Pls find the combofix log attached.
Greatly appreciate your help, and look forward to your response.
-Sam

Attached Files



#8 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 24 April 2009 - 09:11 AM

Hello, let's do this:

CFScript

1. Close any open browsers.

2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

3. Open notepad and copy/paste the text in the quotebox below into it:

File::
c:\windows\system32\rn.tmp
c:\windows\system32\yidurufo.exe
c:\windows\system32\zevihami.exe
c:\windows\system32\lodayija.dll.tmp
c:\windows\system32\torajigu.dll.tmp
c:\windows\system32\webomeru.dll.tmp


Save this as CFScript.txt, in the same location as ComboFix.exe


Posted Image

Refering to the picture above, drag CFScript into ComboFix.exe

When finished, it shall produce a log for you at C:\ComboFix.txt which I will require in your next reply.

ESET Online Scan

Please go to Eset website to perform an online scan. Please use Internet Explorer as it uses ActiveX.
  • Check (tick) this box: YES, I accept the Terms of Use.
  • Click on the Start button next to it.
  • When prompted to run ActiveX. click Yes.
  • You will be asked to install an ActiveX. Click Install.
  • Once installed, the scanner will be initialized.
  • After the scanner is initialized, click Start.
  • Uncheck (untick) Remove found threats box.
  • Check (tick) Scan unwanted applications.
  • Click on Scan.
  • It will start scanning. Please be patient.
  • Once the scan is done, you will find a log in C:\Program Files\esetonlinescanner\log.txt. Please post this log in your next reply.


In your next reply, please post:
  • ComboFx log
  • ESET log

- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image

#9 Sam Kumar

Sam Kumar
  • Topic Starter

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:09:57 PM

Posted 24 April 2009 - 11:12 AM

Hi Jat-
thanks for your inputs.
Pls find the logs attached
* ComboFx log
* ESET log
Look forward to your response...
-Sam

Attached Files



#10 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 24 April 2009 - 05:42 PM

Looks Clean, how is your pc now?

Congratulations you are now clean! :thumbup2:

We should tidy up our mess though.

Uninstall ComboFix
  • Go to Start, then click Run
  • In the box, type: Combofix /u
  • Press Enter or click ok, and ComboFix will uninstall. Refer to the picture below if unsure.
Posted Image

Other Deletions

Locate where you saved DDS.exe, right click the file and select Delete.



Take a read of this excellent tutorial:

Simple and easy ways to keep your computer safe and secure on the Internet


Disable and Enable System Restore.

You should disable and re-enable system restore to make sure there are no infected files found in a restore point. You should now create a new restore point, since your system is clean.

You can find instructions on how to disable and re-enable system restore here:

Windows XP System Restore Guide

Visit Microsoft's Windows Update Site Frequently
  • It is important that you visit http://www.windowsupdate.com regularly.
  • This will ensure your computer has always the latest security updates available installed on your computer.
  • If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
System still slow?

You may wish to try StartupLite. Simply download this tool to your desktop and run it. It will explain any optional auto-start programs on your system, and offer the option to stop these programs from starting at startup. This will result in fewer programs running when you boot your system, and should improve preformance.
If that does not work, you can try the steps mentioned in Slow Computer/browser? Check Here First; It May Not Be Malware.

Next, I would recommend the download and installation of some (I would say two is enough) of the following programs:

Spybot© - Search and Destroy
  • This will provide real-time spyware & hijacker protection on your computer alongside your virus protection.
  • You should also scan your computer with program on a regular basis just as you would an anti virus software.
SUPERAntiSpyware
  • You should also scan your computer with the program on a regular basis just as you would an anti virus software in conjunction with Spybot.
  • Each antispyware product has different detection rates for different infections, using different products therefore increases your chances of finding and killing most malware.
MalwareBytes' Anti-Malware
  • Malwarebytes' Anti-Malware can detect and remove malware that even the most well known anti-virus and anti-malware applications fail to detect.
  • Ability to perform full scans for all drives.
  • The "Quick Scan" option lets the user scan the computer quickly checking for the most damaging threats and completing in usually under 10 minutes.
Javacools© SpywareBlaster
  • SpywareBlaster will added a large list of programs and sites into your Internet Explorer and Firefox settings and that will protect you from running and downloading known malicious programs.
Update all these programs regularly - Make sure you update all the programs I have listed regularly.
Without regular updates you WILL NOT be protected when new malicious programs are released.

Glad I could Help :)
- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image

#11 Jat90

Jat90

  • Members
  • 1,515 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:United Kingdom
  • Local time:02:57 AM

Posted 26 April 2009 - 01:18 AM

Since the problem appears to be resolved, this topic is now Closed. Glad I could help.
If you need this topic reopened, please send me a message. In your message please include the address of this thread in your request.

This applies only to the original topic starter.

Everyone else please start a new topic.
- Jat90 -

If I have not responded to you within 24 hours, then please feel free to send me a message.

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users