|
|
|
Warning! S Detected On Your Computer.............help!!!
|
|
|
blueduke
Junior Member
|
23. June 2008 @ 23:36 |
Link to this message
|
|
Don't forget to tell me how to get the time clock changed from military time to regular time
This message has been edited since posting. Last time this message was edited on 23. June 2008 @ 23:40
|
|
Advertisement
|
|
|
|
AfterDawn Addict
|
24. June 2008 @ 00:25 |
Link to this message
|
|
Hey blueduke,
I?m gonna let cdavfrew finish what he started with Deckard, etc. He knows more about his plan than I do at this point???.
As far as your clock:
To change the way your computer displays the time:
Open Regional and Language Options, click Start, click Control Panel, and then double-click Regional and Language Options.
On the Regional Options tab, under Standards and formats, click Customize.
in Time format, (drop down box) select a format using lowercase h for 12 hour time or uppercase H for 24 hour time.
2OG
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
|
blueduke
Junior Member
|
24. June 2008 @ 00:40 |
Link to this message
|
Originally posted by 2oldGeek:
Hey blueduke,
I?m gonna let cdavfrew finish what he started with Deckard, etc. He knows more about his plan than I do at this point???.
As far as your clock:
To change the way your computer displays the time:
Open Regional and Language Options, click Start, click Control Panel, and then double-click Regional and Language Options.
On the Regional Options tab, under Standards and formats, click Customize.
in Time format, (drop down box) select a format using lowercase h for 12 hour time or uppercase H for 24 hour time.
2OG
Thanks. Both you guys have been a huge help to me
This message has been edited since posting. Last time this message was edited on 24. June 2008 @ 00:41
|
Senior Member
|
24. June 2008 @ 02:51 |
Link to this message
|
Sorry 2oldgeek, for kicking you out of this unintentionally. Hope you won't mind. :)
Hey blueduke
It seems that after these final steps, you should be totally clean. Don't worry: it seems that you only got infected by one rogue antispyware, and it was pretty much destroyed by Adaware during your first scan. All that was left were traces and hidden settings.
Don't worry about Spybot anymore. You can uninstall it if you want to.
Boot into safe mode. Delete these registry entries from the place you took the screenshot.
antispyware
c:\windows\system32\phclrej0cp6p.bmp
c:\windows\system32\phclrej0cp6p.bmp
phclrej0cp6p.bmp
divicodec
Also delete this entry:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntiSpyware
If deleting this entry results in problems again, please use a startup manager like those posted on this page: http://www.download.com/3120-20_4.html?q...g=srch&tg=dl-20
Use this startup manager to disable the Antispyware entry.
After that, you should be clean!
Best Regards :D
|
AfterDawn Addict
|
24. June 2008 @ 03:13 |
Link to this message
|
|
Hey, hey, cdavfrew, you didn?t kick me out, I simply relinquished my spot?.. LOL
It?s been a couple of years since I?ve worked with malware and I?m behind the times?.
I have all the computers that I deal with BLOCKED and don?t have the chance to get experience with removing Bad guys anymore. That?s why I got back on here. To have a little FUN????. :)
2OG
There are three kinds of men: The ones that learn by reading; The few who learn by observation;
The rest of them have to pee on the electric fence and find out for themselves... |
Senior Member
|
24. June 2008 @ 03:16 |
Link to this message
|
|
Haha... ok, if you say so, 2oldgeek.
Now is as good a time as any to learn how to fight malware again! Newer tools, newer malware, it is indeed a great game! I have fun too!
Cheers! :)
|
|
blueduke
Junior Member
|
24. June 2008 @ 05:23 |
Link to this message
|
Originally posted by cdavfrew:
Sorry 2oldgeek, for kicking you out of this unintentionally. Hope you won't mind. :)
Hey blueduke
It seems that after these final steps, you should be totally clean. Don't worry: it seems that you only got infected by one rogue antispyware, and it was pretty much destroyed by Adaware during your first scan. All that was left were traces and hidden settings.
Don't worry about Spybot anymore. You can uninstall it if you want to.
Boot into safe mode. Delete these registry entries from the place you took the screenshot.
antispyware
c:\windows\system32\phclrej0cp6p.bmp
c:\windows\system32\phclrej0cp6p.bmp
phclrej0cp6p.bmp
divicodec
Also delete this entry:
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntiSpyware
If deleting this entry results in problems again, please use a startup manager like those posted on this page: http://www.download.com/3120-20_4.html?q...g=srch&tg=dl-20
Use this startup manager to disable the Antispyware entry.
After that, you should be clean!
Best Regards :D
Thanks for your help. Have one quick question: the HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AntiSpyware entry....where do I delete it from? Hijack this? Another thing.... on the infected computer (Ive been using a different one when conversing with you guys)pop up ads are starting to come up. Thing is they're popping up in IE. I've been using Mozilla Firefox exclusively but a friend had used IE. I take it deleting the above entires will take care of it? The ads are for Best Buy and places like that though
|
Senior Member
|
24. June 2008 @ 05:38 |
Link to this message
|
Hi blueduke.
Delete the registry entry using regedit, not HijackThis.
No, deleting those entries will probably not solve your popup problem. Please note that pop ups can either be part of spyware, or could be a website or ISP problem.
If this is spyware, it means that there is still spyware on your system that we do not know about. If you still have Superantispyware and A-squared, do a scan with both of them in safe mode and post the scan log. Quarantine all detected items found by Superantispyware, but ignore A-squared's detected items.
Also, please be reminded of the fact that the spyware is disguised as something we view as harmless. The only two programs I can think of on your system is Kiwee Toolbar and ErrorSmart.
Can you rule this out as a ISP problem? Also, go to IE, Tools, Manage Add-ons, Enable and Disable Add-ons. Either post a screenshot of all your add-ons, or list them one by one.
Best Regards :D
PS: Shouldn't your google, yahoo, and kiwee toolbars block popups?
Edit: Please also remove ErrorSmart and RegistrySmart off your system. It seems that they are indeed bad programs, as indicated by Spybot and A-squared.
This message has been edited since posting. Last time this message was edited on 24. June 2008 @ 05:40
|
|
blueduke
Junior Member
|
24. June 2008 @ 17:57 |
Link to this message
|
|
Should I still make a new restore point for sys restore?
|
|
blueduke
Junior Member
|
24. June 2008 @ 21:00 |
Link to this message
|
Latest spyware scan:
Quarantined them
This message has been edited since posting. Last time this message was edited on 24. June 2008 @ 21:01
|
|
blueduke
Junior Member
|
24. June 2008 @ 21:15 |
Link to this message
|
|
Uh oh...........removed SuperAntiSpyware from the computer. A box appeared wanting to know if I wanted to remove the spy logs and quarantined items and I clicked "no". Did I just do something outrageously stupid? Few more questions.........should I set a new system restore point? If so any suggested day and time to set it to? Also, when you quarantine a file should you delete it as well?
This message has been edited since posting. Last time this message was edited on 24. June 2008 @ 21:55
|
Senior Member
|
25. June 2008 @ 06:58 |
Link to this message
|
Hi blueduke.
No, you did not do something dumb. When you clicked "no", it means that those files are still isolated in quarantine, and anytime you reinstall Superantispyware, the files will be there for you to have the option of restoring them.
Yes, set a new restore point. Just disable system restore, and then reenable it. That will do the trick.
You should be good by now. If you have any more problems, just post it. Also, please consider cleaning up your computer by using tool such as ATF Cleaner and Advanced Windowscare.
Best Regards :D
|
|
Advertisement
|
|
|
Senior Member
|
28. June 2008 @ 23:16 |
Link to this message
|
|
great advise on this thread, learned much myself also.
|
|
