Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Uh-oh...


  • Please log in to reply
6 replies to this topic

#1 Nikki Rockstar

Nikki Rockstar

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Galveston Island
  • Local time:10:34 AM

Posted 19 September 2006 - 04:59 PM

Do Not Know What Happened.

I got this adware ADW_Cometsys.M on my computer (desktop) and it took me forever to locate it and delete the file. I did a search and found it in my registry, so I deleted it. But the IE is still freezing up. Is there something else that could be wrong.

Things I have done:

Ran Spybot ( clean )
Ran Adaware ( clean--now)
PC-Cillin (clean but detected the cometsys.M and I deleted it)
PC-Cillin House Call --- couldn't finish cause the IE freezes up.

I do have HiJack This... should I run it and send my results?

My specs:

OS: XP

If there is something else I need to answer please let me know.

THANK YOU.

nikki rockstar

BC AdBot (Login to Remove)

 


#2 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,612 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:34 AM

Posted 20 September 2006 - 12:48 AM

You didn't list what your anti virus and firewall are, if you don't have these you will need them. You can download and use these.

Avg anti virus

http://free.grisoft.com/freeweb.php/doc/2/

Zone Alarm personal firewall

http://www.zonelabs.com/store/conte...reeDownload.jsp


I would also suggest that you download and run these as well.

Ewido Security Suite

http://www.majorgeeks.com/Ewido_sec...uite_d4677.html

Asquared

http://www.voodoofiles.com/18365

Ccleaner

http://www.majorgeeks.com/download4191.html

You might need to run these in the safe mode, some programs will have conflicts if you try to scan them while they are running.

Edited by dc3, 20 September 2006 - 12:49 AM.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#3 Nikki Rockstar

Nikki Rockstar
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Galveston Island
  • Local time:10:34 AM

Posted 20 September 2006 - 09:04 AM

Originally posted by Nikki Rockstar
Ran Spybot ( clean )
Ran Adaware ( clean--now)
PC-Cillin (clean but detected the cometsys.M and I deleted it)
PC-Cillin House Call --- couldn't finish cause the IE freezes up.


I thought PC Cillin was an anti-virus. My bad.... Um if it is not please let me know. My firewall is ran through PC Cillin, I think.

I ran PC Cillin and PC Cillin House Call. PC Cillin detected the Cometsys.M and PC Cillin House Call couldn't finish scanning because the Internet Explorer kept freezing up. One thing that I did notice was when House Call was ran it alerted me that my internet connection was very low. ODD considering that I run on DSL (Roadrunner) and it had never happened before.

The list I have above is the exact order that I ran things. Spybot and AdAware came back clean, but as AdAware was scanning PC Cillin showed the Cometsys.M on it. AdAware didn't detect it at all and told me I was clean. So I then ran PC Cillin after I deleted the bad file and came back clean. I wanted to run House Call to make sure and I can't run it because of IE.

THIS IS SOOOOOOOOOO FRUSTRATING....

Thank you so much for your help. :thumbsup:

Nikki Rockstar

#4 BobbySocks

BobbySocks

  • Members
  • 50 posts
  • OFFLINE
  •  
  • Local time:10:34 AM

Posted 20 September 2006 - 09:42 AM

is everything else working fine after you deleted thinghs from registry your self? you should be careful doing that because you can delete something vital for your pc along with malware :thumbsup:
I use Spy Sweeper.

#5 dc3

dc3

    Bleeping Treehugger


  • Members
  • 30,612 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sierra Foothills of Northern Ca.
  • Local time:08:34 AM

Posted 20 September 2006 - 10:29 AM

Originally posted by Nikki Rockstar
Ran Spybot ( clean )
Ran Adaware ( clean--now)
PC-Cillin (clean but detected the cometsys.M and I deleted it)
PC-Cillin House Call --- couldn't finish cause the IE freezes up.


I thought PC Cillin was an anti-virus. My bad.... Um if it is not please let me know. My firewall is ran through PC Cillin, I think.

I ran PC Cillin and PC Cillin House Call. PC Cillin detected the Cometsys.M and PC Cillin House Call couldn't finish scanning because the Internet Explorer kept freezing up. One thing that I did notice was when House Call was ran it alerted me that my internet connection was very low. ODD considering that I run on DSL (Roadrunner) and it had never happened before.

The list I have above is the exact order that I ran things. Spybot and AdAware came back clean, but as AdAware was scanning PC Cillin showed the Cometsys.M on it. AdAware didn't detect it at all and told me I was clean. So I then ran PC Cillin after I deleted the bad file and came back clean. I wanted to run House Call to make sure and I can't run it because of IE.

THIS IS SOOOOOOOOOO FRUSTRATING....




Thank you so much for your help. :thumbsup:

Nikki Rockstar



I was in error, I had read that PC-Cillin was a form of antispyware, and I was partially correct, but it is a antivirus that also incorporates a firewall and runs in real time.

Try running the scan in the safe mode and see if you have anymore success, some malware and rootkits will not run in the safe mode, if they are running they can impede their removal. I would also try scanning with the other products that I suggested, they are free, and no single device that I'm aware of covers all the bases by itself.

Family and loved ones will always be a priority in my daily life.  You never know when one will leave you.

 

 

 

 


#6 Nikki Rockstar

Nikki Rockstar
  • Topic Starter

  • Members
  • 52 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:Galveston Island
  • Local time:10:34 AM

Posted 20 September 2006 - 06:30 PM

Yes everything is still running the same. Thank you for your concern.


I will try to run it in safe mode. Do you happen to know what could cause IE to freeze up like that? Or is it/could it be "4-million" possibilities? Does IE update itself? I doubt it would be an update problem, but hell, the computer world changes so rapidly and I wouldn't put it past it.

Thanks again guys.

Nikki

#7 Enthusiast

Enthusiast

  • Members
  • 5,898 posts
  • OFFLINE
  •  
  • Location:Florida, USA
  • Local time:10:34 AM

Posted 21 September 2006 - 07:15 AM

Run Spybot Search and Destroy from safe mode, updating the program’s malware definitions before you scan and allowing it to fix what it finds.

If you do not already have this freeware ap installed on your computer, you can get it at the following site:

*Spybot S&D: http://www.safer-networking.org/en/index.html

Following that that I suggest you post a “HijackThis” log for expert assistance with your malware infection.

Read the pinned post in our “HijackThis” forum,
here
http://www.bleepingcomputer.com/forums/t/34773/preparation-guide-for-use-before-using-malware-removal-tools-and-requesting-help/
Carefully read and follow all directions explicitly.

Following instructions create a HJT log, and POST THE HJT LOG YOU CREATED IN OUR HJT FORUM – not in this forum,
at this link.
http://www.bleepingcomputer.com/forums/posthjtlog.html
Include the specs for your computer (ie, processor, amount of RAM, brand or motherboard, etc, and briefly describe the problem you are experiencing.)

Unless you are expert at editing the registry, Do not use the Hijack This program to try to fix anything by yourself as even what may seem to be a small mistake can render your operating system inoperable.
Some files when in the correct folder for them may be fine while in another may be malware hiding.


A member of our expert HJT Team will analyze your log, make recommendations and offer assistance, walking you through the complete repair process.

It may take a period of time to get a response to the log you posted because the members of our HJT Team are kept very busy.
Please be patient as this team is manned by volunteers. They will help you in order received as soon as possible.

NOTE
Once you have posted your HJT log, please DO NOT make any additional posts in the HJT forum thread you created until you get a response from a member of our HJT expert team, and do not make any changes to your system (changes, including any attempted repairs, will make your computer to be different than displayed in the log you posted and therefore make your log inaccurate).

The first criteria the HJT Team has when looking for logs that need replies are posts showing 0 replies. If you make an additional post, it will show as having had 1 reply.
A team member, looking for a new log that requires help might well assume another HJT Team member is already assisting you and might not open the thread to respond.

So, post your HJT Log in our HJT Forum (not here in this forum) and wait for a response from a HJT team member.

After you post your log, please do not make any changes to your computer. Discontinue trying to delete anything with any program as changes will make your HJT log obsolete and waste valuable time spent by our HJT experts analyzing the log made innacurate by changes and therefore their plan formulated to address the problems will also be obsolete.

If after 5 days you still have gotten no response, then post a re-request and a link to your HJT log HERE.
http://www.bleepingcomputer.com/forums/topic14717.html

Make sure you post your HJT log in the HJT forum, not here, because if you post it here in this forum the response from our HJT Team will be delayed because the post will have to be moved before they see it and it will fall in line behind many others posted that same day.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users