User User name Password  
   
Monday 10.3.2025 / 03:01
Search AfterDawn Forums:        In English   Suomeksi   På svenska
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > can't remove spyware
Show topics
 
Forums
Forums
Can't remove spyware
  Jump to:
 
Posted Message
Member
_
16. December 2007 @ 12:21 _ Link to this message    Send private message to this user   
read the link in my sig

Kindle Fire 1st Gen running Jelly Bean
Nexus S 4G running 4.1.1 Jelly Bean
PS3 Slim 3000 Model 4.3.1
PS3 ID: killbarney1123
Advertisement
_
__
mav41
Junior Member
_
16. December 2007 @ 14:21 _ Link to this message    Send private message to this user   
I'm not saying it was Combofix. When you posted the text and told me to save it on notepad and scan that with Combofix and reboot. After I did that,is when I could'nt go online and like I said before my taskbar and start menu changed. I don't know if it removed things from my PC that it was'nt supposed to remove.


I was looking at the Combofix quarantined files and I wondering if that could be causing the problems. Here they go, if somebody would take a look at them and let me know I would really appreciate it.



C:Qoobox\Quarantine\D\Autorun.inf.vir
C:Qoobox\Quarantine\C\Program Files\Internet Explorer\msimg32.dll.vir
C:Qoobox\Quarantine\C\Windows\System32\f3PSSavr.scr.vir
C:Qoobox\Quarantine\C\Windows\rs.txt.vir
C:Qoobox\Quarantine\C\Windows\dat.txt.vir

This message has been edited since posting. Last time this message was edited on 16. December 2007 @ 17:34

Member
_
16. December 2007 @ 18:34 _ Link to this message    Send private message to this user   
those item in C:Qoobox have been removed bt combofix as malware. theres nothing in there thats causing the networking problem.
Quote:
start menu changed to the old version

right click in the task bar select properties then the start menu st the top. change back from the classic style, click apply then ok.
can you ping a webpage? start>run>type in cmd, click ok. at the prompt type in ping wwww.yahoo.com (to check your connectivity)

mav41
Junior Member
_
16. December 2007 @ 22:38 _ Link to this message    Send private message to this user   
Another thing I forgot to mention was I'm not getting any sound on my PC. And it's not only the taskbar asnd start menu that changed it's also the windows. I tried changing the settings on the taskbar and start menu but they're not set to classic.


I really don't know what to do. Is there any way I can run System Restore. this is the message I get when I try to run it.



System Restore is not able to protect your computer.Please restart your computer, and then run System Restore again.
Member
_
17. December 2007 @ 20:25 _ Link to this message    Send private message to this user   
hi,

check to see that the service is running.

start>run and type in services.msc then click ok.

under the name column look for System Restore service

right click on it and select properties

under the general tab make sure the startup type is set to: automatic
and the service status is: started
if not change them to that, click apply then ok
reboot computer.

mav41
Junior Member
_
17. December 2007 @ 22:37 _ Link to this message    Send private message to this user   
Thank You for responding.
I did what you said.System Restore was stopped and I clicked start and this message appeared.

Could not start the System Restore Service service on Local Computer.Error 1083: The executable program that this service is configured to run in does not implement the service.


Any idea what it means?

This message has been edited since posting. Last time this message was edited on 18. December 2007 @ 20:03

Member
_
18. December 2007 @ 21:16 _ Link to this message    Send private message to this user   
remove combofix if you havent yet. try running windows file checker.
start>run and type in sfc /scannowthere is a space after the c in sfc
may be prompted for the windows install cd.

mav41
Junior Member
_
19. December 2007 @ 03:18 _ Link to this message    Send private message to this user   
After the Windows file checker was done scanning the window closed and nothing happened.


In your previous post,where you told me to check what services where running I checked Network connections (It's stopped) I clicked start and the same message appeared as the one when I tried starting System Restore.


What Do you think I should do now?
Member
_
19. December 2007 @ 06:58 _ Link to this message    Send private message to this user   
Spyware is smart enough not to erase themself in system restore, the only way to completely 100% remove this stuff is to backup your data, format your hdd, and re-install windows, that is the only way to be completely sure your computer still doesn't have junk on it.

read my sticky in my sig how to keep your pc your pc

Kindle Fire 1st Gen running Jelly Bean
Nexus S 4G running 4.1.1 Jelly Bean
PS3 Slim 3000 Model 4.3.1
PS3 ID: killbarney1123
Member
_
19. December 2007 @ 19:21 _ Link to this message    Send private message to this user   
Quote:
file checker was done scanning the window closed and nothing happened.
it just checks for possible software overwriting any window core files.
the scan must not have found any files that where over written

actually i have never seen or dealt with that message you are getting.

Quote:
I checked Network connections (It's stopped) I clicked start and the same message appeared as the one when I tried starting System Restore.

it must have made reference to something other than system restore?

if you try turning off system restore, you get the same message?
you could turn it off, reboot then turn it back on and reboot. this will wipe out all previous restore points and make a new one in the computers present state.

mav41
Junior Member
_
19. December 2007 @ 21:57 _ Link to this message    Send private message to this user   
No, the message does'nt appear when I turn off System Restore.System Restore is off, when I try to start it is when the message appears.
Member
_
19. December 2007 @ 22:03 _ Link to this message    Send private message to this user   
we kind of got side tracked-- you still have a malware issue iam sure because we never finished that part. i think this is a seperate unrelated problem. see if this link provides any help:

http://support.microsoft.com/kb/302796

mav41
Junior Member
_
20. December 2007 @ 04:27 _ Link to this message    Send private message to this user   
The Malware issue is the least of my worries right now. It would be difficult to work on the Malware since I can't even go online.


Regarding the internet connection.
I go to the Control Panel and click on Internet Options and I select Connections from the tabs at the top. There is a blank box that has (Dial-up and Virtual Private Network settings)on top, like I said the box is clear, so I click on (Add) on the right side of the blank box and this message appears.


Cannot load the Remote Access Connection Manager Service.
Error 711: A configuration error on this computer is preventing this connection. For further assistance, click More Info or search Help and Support Center for this error number.


So I go to Help and Support and this appears.


Windows cannot open Help and Support because a system service is not running. To fix this problem, start the service named 'Help and Support'.



Now I go and try to do that and the Service Status says stopped so I click on start and this appears.



Could not start the Help and Support service on Local Computer.
Error 1083: The executable program that this service is configured to run in does not implement the service.


ANY IDEAS?
Member
_
20. December 2007 @ 17:44 _ Link to this message    Send private message to this user   
Quote:
least of my worries right now. It would be difficult to work on the Malware since I can't even go online
its a good thing because malware only attracts more malware.

i have no idea how to resolve your issue. it seems to be much more than just a system restore problem, we arent making any progress, and its been several days-- if it was my box i would pull off a few things then reformat/reinstall windows.

Member
_
20. December 2007 @ 20:05 _ Link to this message    Send private message to this user   
at least echoreply agrees with me

Kindle Fire 1st Gen running Jelly Bean
Nexus S 4G running 4.1.1 Jelly Bean
PS3 Slim 3000 Model 4.3.1
PS3 ID: killbarney1123
mav41
Junior Member
_
21. December 2007 @ 03:28 _ Link to this message    Send private message to this user   
I understand what you're saying, but what I mean is how am I going to download software to work on removing the malware. I know we've been working on this for a while and I really appreciate your help.
And if you don't mind I'd like to ask you another question.


I was looking to see what services were started and which were stopped, and I saw that I could start some services but some I could'nt.I noticed that the services I could'nt start such as(system restore, windows audio,help and support)had the same "PATH TO EXECUTABLE"

C:\WINDOWS\System32\svchost.exe-k netsvcs



This message appears when I try to start one of those services "The executable program that this service is configured to run in does not implement the service".

ANY IDEAS?

This message has been edited since posting. Last time this message was edited on 21. December 2007 @ 03:47

Member
_
21. December 2007 @ 15:15 _ Link to this message    Send private message to this user   
format and reinstall

Kindle Fire 1st Gen running Jelly Bean
Nexus S 4G running 4.1.1 Jelly Bean
PS3 Slim 3000 Model 4.3.1
PS3 ID: killbarney1123
Member
_
21. December 2007 @ 21:38 _ Link to this message    Send private message to this user   
Quote:
how am I going to download software to work on removing the malware

you have malware but you also have another problem with those services, cant really say if its related to the malware or not. for the most part malware wants a computer with a internet connection.


Quote:
services I could'nt start such as(system restore, windows audio,help and support)had the same "PATH TO EXECUTABLE"
answer:
Quote:
svchost.exe -k netsvcs
"svchost.exe -k netsvcs" is a standard part of Windows.
It is the universal commmand for auto starting of the network services.
I have no idea whats wrong with all those services. i have never encountered the problem before and i have answered many many hjt logs.

mav41
Junior Member
_
23. December 2007 @ 01:17 _ Link to this message    Send private message to this user   
Tucker001 said to format and reinstall. I don't know how to do that, I'm pretty sure you guys would tell me how to do it, but I have a few questions.


Is there any risk?

Is it just a suggestion, or do you realy think it will fix my problems?
Member
_
23. December 2007 @ 12:38 _ Link to this message    Send private message to this user   
Quote:
Is there any risk
the risk is: reformatting will wipe your hd. you should pull off anything you dont want to lose. documents, pictures etc. you can burn it cd/dvd or transfer it to usb flash memory. software etc you can always reinstall.

Quote:
do you realy think it will fix my problems?

yes because you will be wiping out everything on your hd and will be starting over with a clean new installation of windows.

you should visit your computer vendors website. most of them provide good instructions/guides on how to reinstall windows.

mav41
Junior Member
_
24. December 2007 @ 02:44 _ Link to this message    Send private message to this user   
Ok, I think I'll try that, but before I do, do you think I should try posting my questions in a different section, considering this is for viruses and spyware and my problem turned into something else.



I checked out the HP website and I was reading about audio devices not being detected(one of my problems)and it said it could be some software that stopped the audio device. Since these problems started after I used combofix I just wanted to know how can I check to make sure Combofix and any part of it is completely removed from my pc.
Member
_
24. December 2007 @ 11:03 _ Link to this message    Send private message to this user   
Quote:
Combofix and any part of it is completely removed
did you run combofix /u ?


Quote:
my problem turned into something else.

you still have malware on your computer

Quote:
posting my questions in a different section

thats up to you
-------------------------
reformatting/reinstall of windows will take care of any malware issues and your services problem. follow the guides on the hp website

mav41
Junior Member
_
28. December 2007 @ 03:42 _ Link to this message    Send private message to this user   
I could'nt find anything on reformatting and reinstalling windows on the HP website. Could you post a link, please.


Are you sure there are no major risk in doing this?

I just ask because I'm worried about making things worst.
Member
_
28. December 2007 @ 09:25 _ Link to this message    Send private message to this user   
the risk is you will wipe your hard drive and lose everything that you didnt pull off. you must have a original windows installation disk or a set of recovery disks provided by HP.

http://h10025.www1.hp.com/ewfrf/wc/produ...0&lang=en&cc=us

if you dont see anything specific, there is a user forum;
http://forums11.itrc.hp.com/service/foru...849624+28353475

Advertisement
_
__
 
_
Member
_
28. December 2007 @ 11:27 _ Link to this message    Send private message to this user   
make sure you backup everything then

Kindle Fire 1st Gen running Jelly Bean
Nexus S 4G running 4.1.1 Jelly Bean
PS3 Slim 3000 Model 4.3.1
PS3 ID: killbarney1123
 
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > can't remove spyware
 

Digital video: AfterDawn.com | AfterDawn Forums
Music: MP3Lizard.com
Gaming: Blasteroids.com | Blasteroids Forums | Compare game prices
Software: Software downloads
Blogs: User profile pages
RSS feeds: AfterDawn.com News | Software updates | AfterDawn Forums
International: AfterDawn in Finnish | AfterDawn in Swedish | AfterDawn in Norwegian | download.fi
Navigate: Search | Site map
About us: About AfterDawn Ltd | Advertise on our sites | Rules, Restrictions, Legal disclaimer & Privacy policy
Contact us: Send feedback | Contact our media sales team
 
  © 1999-2025 by AfterDawn Ltd.

  IDG TechNetwork