Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Cleaning computer


  • This topic is locked This topic is locked
13 replies to this topic

#1 fastkitty

fastkitty

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 19 May 2009 - 11:22 PM

My friend was helping to clean computer. he had me put this Hijack This on to the computer and being a flake he has now left me hanging. i don't know what to do. Original problem was someone was able to get into my email and send mail to people in my contacts list. I am hoping to get help finishing ther job. Its time i leaarned. I know nothing about this stuff but I'm learning fast. I ran the Ad-Aware and CCleaner and AVG. Spybot I don't know what to do with.

Attached Files



BC AdBot (Login to Remove)

 


#2 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:45 AM

Posted 20 May 2009 - 01:39 PM

Hello fastkitty,

Posted Image

Can you please post a HijackThis log for me? :thumbup2: I'll help you with it.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#3 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 27 May 2009 - 02:18 PM

Thanks for offering. i couldn't find this until now. i am not good on computers which is why I have so much trouble. I'm going to try to upload a log I just made. here goes. Thanks with anything you find to help clean up the computer. I have done Ccleaner and Ad Aware. I have tried to get rid of what looked bad but I'm sure I didn't get rid of the really bad stuff.

Attached Files



#4 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:45 AM

Posted 27 May 2009 - 03:05 PM

Hello,

Not to worry. We'll get through it fine. :thumbup2:

Please download Malwarebytes' Anti-Malware from one of these places:
http://www.majorgeeks.com/Malwarebytes_Ant...ware_d5756.html
http://www.besttechie.net/mbam/mbam-setup.exe

Double Click mbam-setup.exe to install the application.

* Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select "Perform Quick Scan", then click Scan.
* The scan may take some time to finish,so please be patient.
* When the scan is complete, click OK, then Show Results to view the results.
* Make sure that everything is checked, and click Remove Selected.
* When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
* The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
* Copy&Paste the entire report in your next reply along with a fresh HijackThis log.

Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#5 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 27 May 2009 - 06:45 PM

Thanks for your help. Here is the first one:Malwarebytes' Anti-Malware 1.37
Database version: 2186
Windows 6.0.6001 Service Pack 1

5/27/2009 3:52:44 PM
mbam-log-2009-05-27 (15-52-44).txt

Scan type: Quick Scan
Objects scanned: 74810
Time elapsed: 13 minute(s), 3 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Attached Files



#6 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:45 AM

Posted 27 May 2009 - 07:15 PM

Thanks. :thumbup2: Nothing there, so let's look a bit deeper :

This tool is not a toy. If used the wrong way you could trash your computer. Please use only under direction of a Helper. If you decide to do so anyway, please do not blame me or ComboFix.

1. Download this file - combofix.exe
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
2. Double click combofix.exe & follow the prompts.
3. When finished, it will produce a log for you. Post that log in your next reply please, along with a new HijackThis log.

Note:
Do not mouseclick combofix's window while it's running. That may cause it to stall.

If ComboFix will not run the first time, then rename ComboFix.exe to fastkitty.exe and try it again. :)

Thanks,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#7 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 28 May 2009 - 12:16 AM

I downloaded and saved combofix to the computer. When I clicked Run, it gave me a warning to disable spybot, avg, lavasoft and another avg. I tried to disabble avg but couldn't figure out how so i tried to uninstall and when it failed I got this:
Local machine:
installation failed
Installation:
Error: Action failed for registry key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows: creating registry key....
Error 0x80070005

I don't know what to do. If I click ok on the warning box from combofix, I am afraid of what it will do. I will leave the computer on until I hear from you. Thanks for your help so far.

#8 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 28 May 2009 - 02:50 AM

I found a way to take off the avg. It was a avg remover and I took it off. Now I am going to run the combofix again.

#9 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 28 May 2009 - 02:56 AM

The avgremover didn't do any good. i couldn't uninstall avg and i don't know how to disable it so that combofix can run. i am disconnecting from the internet and will turn it on in about 8 hours. My desktop is just black with theicons showing. I don't know if thats bad. Thanks.

#10 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 28 May 2009 - 02:19 PM

Somehow I managed to do it in spite of not being able to disable avg antivirus ands anti spyware. I hope that doesn't cause problems I am going to disconnct from the internet so i don't have problems. Need to leave but will check back late. Thanks.

Attached Files



#11 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 29 May 2009 - 06:38 PM

Here is the Hijack log. I thought it was loaded yesterday.

Attached Files



#12 fastkitty

fastkitty
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:01:45 AM

Posted 29 May 2009 - 07:58 PM

Sorry that I missed that you aren't well. there is no hurry so you just get well and I'll hear from you when you are feeling better. Take your time. i just wanted to get done what you advised and I finally did. Hope you feel better and thanks for caring enough to help me. I truly appreciate it and will be happy to support you when I get my finances going again. Take care.

#13 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:45 AM

Posted 09 June 2009 - 11:44 PM

Hello fastkitty,

I apologize for my abrupt departure. :thumbup2: I've been fighting an infection and it hasn't been pleasant. If you still need help, please let me know. Otherwise I'll close the thread out as solved in the next few days. :)

Thank you for understanding,
tea
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?

#14 teacup61

teacup61

    Bleepin' Texan!


  • Malware Response Team
  • 17,075 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Wills Point, Texas
  • Local time:03:45 AM

Posted 21 June 2009 - 01:03 PM

Due to the lack of feedback this Topic is closed.

If you need this topic reopened, please request this by sending the moderating team a PM with the address of the thread. This applies only to the original topic starter.

Everyone else please begin a New Topic
Please make a donation so I can keep helping people just like you.
Every little bit helps! :)
You can even use your credit card! Thank you!

Posted Image


Error reading poptart in Drive A: Delete kids y/n?




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users