I have this red shield trimmed in white with a white "X" in it. I know it's not supposed to be there, can't get rid of it. Keeps popping up saying security out of date. Sometimes it says update windows, sometimes it mentions my antivirus. Please help.
Here's a fresh HJT log & Fresh Ewido Report:
Logfile of HijackThis v1.99.1
Scan saved at 3:09:55 PM, on 5/21/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
+ Created on: 4:28:40 PM, 5/21/2006
+ Report-Checksum: 2F6D9D75
+ Scan result:
C:\!KillBox\dcomcfg.exe( 3) -> Downloader.Zlob.nw : Cleaned without backup
C:\!KillBox\dcomcfg.exe( 6) -> Downloader.Zlob.nw : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@advertising[1].txt -> TrackingCookie.Advertising : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@as.casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@citi.bridgetrack[2].txt -> TrackingCookie.Bridgetrack : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@edge.ru4[1].txt -> TrackingCookie.Ru4 : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@fastclick[1].txt -> TrackingCookie.Fastclick : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned without backup
C:\Documents and Settings\Guest\Cookies\guest@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@2o7[2].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@allstarhealth.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@as-us.falkag[1].txt -> TrackingCookie.Falkag : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@data1.perf.overture[2].txt -> TrackingCookie.Overture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wfk4oidzgbq.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wfkochc5mgp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wgkoukcjakp.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wjkykjajabp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wjmigncjelo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wjny-1jcjod.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wjny-1sczmd.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@e-2dj6wjnyakd5obo.stats.esomniture[2].txt -> TrackingCookie.Esomniture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@tacoda[2].txt -> TrackingCookie.Tacoda : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@trafficmp[2].txt -> TrackingCookie.Trafficmp : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Cleaned without backup
C:\Documents and Settings\Jerrold\Cookies\jerrold@vitacost.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@2o7[2].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@adrevolver[3].txt -> TrackingCookie.Adrevolver : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@ads.pointroll[2].txt -> TrackingCookie.Pointroll : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@as.casalemedia[1].txt -> TrackingCookie.Casalemedia : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@bluestreak[2].txt -> TrackingCookie.Bluestreak : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@casalemedia[2].txt -> TrackingCookie.Casalemedia : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@edge.ru4[2].txt -> TrackingCookie.Ru4 : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned without backup
C:\Documents and Settings\Rocky\Cookies\rocky@z1.adserver[1].txt -> TrackingCookie.Adserver : Cleaned without backup
C:\WINDOWS\SYSTEM32\1024\ld374A.tmp -> Downloader.Zlob.ju : Cleaned without backup
C:\WINDOWS\SYSTEM32\1024\ldFC25.tmp -> Downloader.Zlob.ju : Cleaned without backup
Unzip it (folder named SmitFraudFix) to your desktop:
Open the folder SmitfraudFix and doubleclick smitfraudfix.cmd Choose option #1 - Search by typing 1 and pressing "Enter"; a textfile opens and lists the infected files (if those exist)
Post the contents of this textfile to here.
(Some antiviruses recognises process.exe as a malware. It is not malware, it is a program that stops processes)
I've downloaded the program an unzipped it; however I can not run the program. I've had the same problem with SmitRem. The Command prompt icon will appear on my taskbar for less than a second....then it disappears. I've never been unable to open SmitFraudFix. Are there any setting I may change or another option? I've already disabled my antiviruses and even tried opening in safe mode but neither worked.
SmitFraudFix will not open. I redownloaded and reextracted. I disabled McAfee, TeaTimer, Spyware Doctor, etc. but a comman prompt window opens for about a 1/2 second and closes. There are now two icons on the task bar that should not be there. Both are shiedls with white borders. one is red with a white "X" in the center and the otheer is yellow with a black ! in the center. Please tell me I hav esome other option that SmitFraudFix as it just won't work for me and I have no idea what else I could change.
1. Updating the scanner (close the eScan window if open) -> Go to My Computer
-> C:\
-> Kaspersky
-> Run the file kavupd.exe, it starts downloading updates
-> When downloading is finished, go to C:\Downloads -> Copy all the files in the Downloads folder by pressing CTRL+A and then CTRL+C -> Then go back to the C:\Kaspersky folder and paste the files by pressing CTRL+V -> Answer Yes to all when it asks about replacing files
-> Now the scanner has been updated
2. Scanner settings -> Go to folder C:\Kaspersky and run the file mwavscan.com (or mwavscan.exe)
-> The scanner window opens
-> Select the same settings than in this picture -> http://koti.mbnet.fi/pattaya1/eScan6.jpg -> When ready, press the Scan Clean button
-> Scanning for infections begins
3. Posting the results -> When the scan has finished (scan may take a quite long time), you'll need to post the findings
-> Copy all the text in this field -> http://koti.mbnet.fi/pattaya1/eScan10.jpg -> Click the field, press CTRL+A, CTRL+C
-> Then open Notepad and paste the findings into a new document by pressing CTRL+V
-> Save the document to your desktop
-> Post the contents of that textfile to here
