herbies Posted November 7, 2009 Report Share Posted November 7, 2009 i have just done a scan and it has error fix traces i have deleted them all except error fix traces can anyone help i have tried to remove them manually but havent the knoledge to do it the scan told me ask here on the form how to delete them i have kept a copy of the scan if anyone wants to have a look at it thanks herbies ~ INLINE LOGS REMOVED {Lynx} Link to comment Share on other sites More sharing options...
Lynx Posted November 7, 2009 Report Share Posted November 7, 2009 Hi herbies, and welcome to the forum ======= Read the following instructions START HERE, if you don't we are just going to send you back to this thread <--click Prepare and post the required log files into this thread Wait for reply from ShadowPuterDude, Katana, or JeanInMontana for assistance and further instructions. ======= Translation Links for Forum Instructions My regards P.S. Please keep in mind that - you posted Quick Scan report, but the result of Deep Scan is required; - update a-squared; rerun Deep scan and attach the report and all other log files as per instruction; - do not quarantine/delete anything, but just save the report Link to comment Share on other sites More sharing options...
herbies Posted November 7, 2009 Author Report Share Posted November 7, 2009 can you please tell me where to find isee you xp i am not sure where to find that ~WHOLE QUOTATION REMOVED {Lynx} Link to comment Share on other sites More sharing options...
herbies Posted November 7, 2009 Author Report Share Posted November 7, 2009 i am new to all this and where to find things i am running windows ex service pack 3 not sure where to find isee you xp Link to comment Share on other sites More sharing options...
Lynx Posted November 7, 2009 Report Share Posted November 7, 2009 ... not sure where to find isee you xp herbies, Please follow the instruction step-by-step, Where Download to your Desktop: there are links for downloading all required Utilities. Just click.My regards Link to comment Share on other sites More sharing options...
herbies Posted November 8, 2009 Author Report Share Posted November 8, 2009 this is the first scan and i did a deep scan and it didnt come up again i qurentined it all yesterday but that in the deep scan is it i have been trying to get rid of that for a week or more until i downloaded a squared have a got rid of it now or is it still there did it all before i read you last reply sorry heather ~ INLINE LOGS and whole quotation REMOVED {Lynx} Link to comment Share on other sites More sharing options...
Lynx Posted November 8, 2009 Report Share Posted November 8, 2009 ...this is the first scan and i did a deep scan and it didnt come up again Hi Heather , Please be more specific about "it didn't come up again" You posted 2 a-squared reports. One of them is a Quick Scan again as you posted initially with quarantining/deleting. Both reports are edited somehow. It is not easy to follow. - Please update a-squared; - redo the Deep Scan only; - do not quarantine/delete; - do not tamper with saved report; - attach full Deep Scan result (the saved txt file “as is”) - download; run required Utilities and attach other log files as per instruction and in the reply; - do not post in-line reports My regards P.S. I saved and attached what you've posted so it is a bit easier to read Link to comment Share on other sites More sharing options...
herbies Posted November 8, 2009 Author Report Share Posted November 8, 2009 i did another deep scan and nothing come up on it to save looks like it it went in qurentine the last scan ~WHOLE QUOTATION without any comments REMOVED {Lynx} Link to comment Share on other sites More sharing options...
Lynx Posted November 8, 2009 Report Share Posted November 8, 2009 i did another deep scan and nothing come up on it to save looks like it it went in qurentine the last scanHeather, Please use "Add Reply" button if you are not commenting particular point from the previous reply. If you are not sure what was quarantined you can use "Save quarantine list" and attach that file here Give brief description of system misbehavior if any. And anyway, since you are seeking help in this section attach all required log files so malware fighter can review them and advise. Link to comment Share on other sites More sharing options...
herbies Posted November 9, 2009 Author Report Share Posted November 9, 2009 ~WHOLE QUOTATION without any comments REMOVED {Lynx} Link to comment Share on other sites More sharing options...
herbies Posted November 9, 2009 Author Report Share Posted November 9, 2009 hope i have done this right have saved quaratine list and attached it here for you to see thanks for your pursistance with me hope this helps Link to comment Share on other sites More sharing options...
Lynx Posted November 9, 2009 Report Share Posted November 9, 2009 Heather, The file you attached is indeed the quarantine list but not the result of running Win32kDiag and keep in mind the you don't need to run that Utility since the content of your a-squared's report does not meet the conditions for running Win32kDiag as the instruction stated Please provide all required log files If you have difficulties running ISeeYouXP and HiJackFree, please describe that Update a-squared; rerun Deep Scan; and attach fresh report in addition to other logs My regards Link to comment Share on other sites More sharing options...
herbies Posted November 9, 2009 Author Report Share Posted November 9, 2009 how do you run win32klog have had a look in that program not sure what you mean ~WHOLE QUOTATION REMOVED {Lynx} Link to comment Share on other sites More sharing options...
herbies Posted November 9, 2009 Author Report Share Posted November 9, 2009 am doing a scan now with i seeyouxp will get back to you with that Link to comment Share on other sites More sharing options...
herbies Posted November 9, 2009 Author Report Share Posted November 9, 2009 ~ INLINE LOG REMOVED {Lynx} is this what you wanted Link to comment Share on other sites More sharing options...
Lynx Posted November 9, 2009 Report Share Posted November 9, 2009 how do you run win32klog have had a look in that program not sure what you mean The point of my comment was – you don't need to run Win32Diag.exe according to the instruction at the same time the last report you provided somehow was called Win32Diag.txt despite it contains the list of items quarantined by a-squared. Link to comment Share on other sites More sharing options...
Lynx Posted November 9, 2009 Report Share Posted November 9, 2009 is this what you wanted No 1st please attach whole ISeeYouXP.txt file Do not paste into the thread Both reports that you posted were just incomplete parts (I deleted the second incomplete part of the report) Attach HiJackFree log file as well Update a-squared; rerun Deep Scan and attach fresh report Link to comment Share on other sites More sharing options...
herbies Posted November 10, 2009 Author Report Share Posted November 10, 2009 have added a squared hijack and isee youxp i am doing a new deep scan with a-squared i will add it when compleated i think asquared has picked it up in the first scan i did and quantined it i cant see it any where now in the scan iseeyouxp haven a bit of trouble adding things to this will send i seeyouxp in sepeate reply Link to comment Share on other sites More sharing options...
herbies Posted November 10, 2009 Author Report Share Posted November 10, 2009 i see thay both where on the last reply Link to comment Share on other sites More sharing options...
herbies Posted November 10, 2009 Author Report Share Posted November 10, 2009 this is the deep scan nothing really on there Link to comment Share on other sites More sharing options...
Lynx Posted November 10, 2009 Report Share Posted November 10, 2009 Heather, Now when you provided all information, can you please give brief description of the problems if any? Your last scan shows only one "Trace.TrackingCookie" detection Your attached Quarantine List (that you somehow called WinDiag32.txt) contains cookies and one item from System Restore Point Cookies are harmless and never representing threats and danger. You will be advised regarding System Restore after malware fighter review all log files you attached. So , are there any symptoms of misbehaviour that your system currently exposing? My regards Link to comment Share on other sites More sharing options...
herbies Posted November 10, 2009 Author Report Share Posted November 10, 2009 that sytsem restore is it when i downloaded error fix it does a backup file to system restore and thats when all the problem started and it kept coming up on avast scans but i couldent get to it to delete it i am haven a slow responce to openng anything like windows explorer out look express any program really when i did my first scan with a squared free it picked up error fix trases and the program said contact you to find out how to remove it mabe i should delete a squared and re enstall it .,it may take all the contents with the delete sometimes it is ok and other days cant do much with my computer spend most of the time scanning to get rid of things like this if i had of none what to do before you would have see it and maybe fixed it Link to comment Share on other sites More sharing options...
Lynx Posted November 10, 2009 Report Share Posted November 10, 2009 Thanks for description Is it this rogue ErrorFix you were running? Please wait for advice from ShadowPuterDude Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted November 11, 2009 Report Share Posted November 11, 2009 Download ComboFix from one of these locations: Save as Combo-Fix.exe during the download. ComboFix must be renamed before you download to your Desktop Link 1 Link 2 Link 3 * IMPORTANT !!! Save Combo-Fix to your Desktop Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our toolsSee HERE for help Double click on ComboFix.exe & follow the prompts. As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. With malware infections being as they are today, it's strongly recommended to have this pre-installed on your machine before doing any malware removal. It will allow you to boot up into a special recovery/repair mode that will allow us to more easily help you should your computer have a problem after an attempted removal of malware. Follow the prompts to allow ComboFix to download and install the Microsoft Windows Recovery Console, and when prompted, agree to the End-User License Agreement to install the Microsoft Windows Recovery Console. **Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures. Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message: Click on Yes, to continue scanning for malware. When finished, ComboFix will produce a log. Note: 1. Do not mouseclick combofix's window while it's running. That may cause it to stall! 2. Remember to re-enable your anti-virus and anti-spyware before reconnecting to the Internet. ----------------------------------------------------------- Attach fresh logs for: ComboFix (C:\combofix.txt) a-squared Free/Anti-Malware ISeeYouXP HiJackFree Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now! Link to comment Share on other sites More sharing options...
herbies Posted November 11, 2009 Author Report Share Posted November 11, 2009 yes thats the one i downloaded it worked great but had trogens and fraud stuff in it i am haven trouble downloading that combo fix want load now i have 3 of them and thay want delete eihter now what do i do Thanks for description Is it this rogue ErrorFix you were running? Please wait for advice from ShadowPuterDude Link to comment Share on other sites More sharing options...
Lynx Posted November 11, 2009 Report Share Posted November 11, 2009 i am haven trouble downloading that combo fix want load now i have 3 of them and thay want delete eihter now what do i do Heather, Please be more specific. Try to post short simple sentences. Do you have trouble downloading ComboFix or you did download it and you cannot run it? If the latter, post precise messages and/or symptoms You have "3 (three)" of what... "them"? (instances of ComboFix?) Have you renamed ComboFix before it's downloaded to your Desktop as per instruction given by ShadowPuterDude? Have you disabled your other security before running ComboFix as the instruction stated? Link to comment Share on other sites More sharing options...
herbies Posted November 11, 2009 Author Report Share Posted November 11, 2009 have done the combofix i have been trying to put it on here but down the bottom it says internet explorer cannot display the web page will try again later Link to comment Share on other sites More sharing options...
herbies Posted November 12, 2009 Author Report Share Posted November 12, 2009 i have been trying to put a copy of combofix and your site want take it i am getting to the stage where i cant do much with my computer takes ages to do anything i think i will have the computer all reenstalled nothing is working to fix it i think the only way to send you a copy of combo fix is to email it i will send this to you and give it one more try to send you a copy of combofix to you the computer is freezing all the time wont open things or it will open 3 or 4 of the same thing like internet explorer or close the lot at once cant handle it much longer havet got the paitence for it heather ~WHOLE QUOTATION REMOVED {Lynx} Link to comment Share on other sites More sharing options...
herbies Posted November 12, 2009 Author Report Share Posted November 12, 2009 ~WHOLE QUOTATION REMOVED {Lynx} nope want send Link to comment Share on other sites More sharing options...
herbies Posted November 12, 2009 Author Report Share Posted November 12, 2009 ~WHOLE QUOTATION REMOVED {Lynx} have had trouble sending files on here where you attach this file down the bottom of here it sayes internet explorer cannot disply the webpage i have tryed 6 time to send you the files cant send anything Link to comment Share on other sites More sharing options...
Lynx Posted November 12, 2009 Report Share Posted November 12, 2009 Heather, Please do not use whole quotes all the time! Use only that part that you want to refer to or use just “Add Reply” button as it's written in the instruction. The way you are posting makes it very hard to read if not impossible. ... trouble sending files on here where you attach this file down the bottom of here it sayesinternet explorer cannot disply the webpage ... By “this file” do you mean one of those reports you have to attach? If so, which one? or you cannot attach any of the required reports? What “web page” in particular? You can post here, so what's happening during the attaching procedure? Can you post the precise name of the “web page “ you are mentioning or the image of the message? My regards Link to comment Share on other sites More sharing options...
herbies Posted November 12, 2009 Author Report Share Posted November 12, 2009 (edited) i am trying to post on here and yes all the reports you asked for and the one for cobofix and down the bottom of here where it says attach tis file i do the browes and click attach and after awhile it sayed internet explorer cant find web page MODERATOR COMMENTS: Stop using the reply with quotes button. It adds completely unnecessary text to replies. use the "Add Reply" button towards the bottom of the page. Edited November 12, 2009 by ShadowPuterDude Removed unecessary quotes Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted November 12, 2009 Report Share Posted November 12, 2009 Until you attach the logs I requested earlier, I can not help you. If you are having problems with IE then change to another browser, such a Firefox, for the duration of this support case. Stop using the reply button at the button of the post. Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted November 15, 2009 Report Share Posted November 15, 2009 Thread Closed Reason: Lack of Response PM either ShadowPuterDude or Lynx to have this thread reopened. The procedures contained in this thread are for this user and this user only. Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair. Do Not use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist. All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE, if you don't we are just going to send you back to this thread Link to comment Share on other sites More sharing options...
Recommended Posts