Thursday 6.3.2025 / 08:48
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > javascript problem? cannot reply to myspace email, windows messenger, etc.
Javascript Problem? Cannot reply to Myspace Email, Windows Messenger, etc.
Junior Member
17. September 2008 @ 13:57 Link to this message
This is my cousin's computer. When she brought it to me, you could do nothing for pop-ups and virus alerts. She only uses Internet Explorer. I downloaded Firefox and AVG . I ran AVG normally and in Safe Mode, and both showed nothing. Now I'm posting the HijackThis log so that maybe somebody can tell me what's going on.
HijackThis v2.0.0 (BETA)
http://www.yahoo.com/search/ie.html
http://go.microsoft.com/fwlink/?LinkId=54896
http://go.microsoft.com/fwlink/?LinkId=69157
http://go.microsoft.com/fwlink/?LinkId=54896
http://go.microsoft.com/fwlink/?LinkId=54896
http://go.microsoft.com/fwlink/?LinkId=69157
http://us.rd.yahoo.com/customize/ie/defa...//www.yahoo.com
PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
http://ak.exe.imgfarm.com/images/nocache...p1.0.0.15-3.cab
http://lads.myspace.com/upload/MySpaceUploader1005.cab
http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
Advertisement
AfterDawn Addict
17. September 2008 @ 14:59 Link to this message
Hello josiepop,
HJT Log.
ATF Cleaner by Atribune & save it to your desktop.
ATF-Cleaner.exe to run the program.
Main "Select Files to Delete " choose: Select All.
Empty Selected button.
Firefox browser click Firefox at the top and choose: Select All
Empty Selected button.
No at the prompt.
Opera browser click Opera Select All
Empty Selected button.
No at the prompt.
Exit on the Main menu to close the program.
Malwarebytes' Anti-Malware to your desktop.
mbam-setup.exe and follow the prompts to install the program.
Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
Perform full scan , then click Scan.
OK, then Show Results to view the results.
Make sure that everything is checked, and click Remove Selected. <-- Don't forget this.
log-date.txt
* IMPORTANT !!! Place combofix.exe on your Desktop
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe
start > run and Copy and Paste this in exactly, using the picture below for reference, then click OK .
Quote: DO NOTHING while this is happening.
Do not attempt to use the internet or anything else while it's doing its job for you. c:\comboFix.txt
MBAM Log
HJT log in your next reply.
Junior Member
17. September 2008 @ 16:52 Link to this message
Thank you so much!
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-29 97928]
FireFox -: Profile - C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\bzecssn7.default\
Gmer , http://www.gmer.net
Pack 3 NTFS
HijackThis v2.0.0 (BETA)
http://go.microsoft.com/fwlink/?LinkId=69157
http://go.microsoft.com/fwlink/?LinkId=54896
http://go.microsoft.com/fwlink/?LinkId=54896
http://go.microsoft.com/fwlink/?LinkId=69157
http://us.rd.yahoo.com/customize/ie/defa...//www.yahoo.com
PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
http://lads.myspace.com/upload/MySpaceUploader1005.cab
http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
Junior Member
17. September 2008 @ 16:53 Link to this message
Thank you.
This message has been edited since posting. Last time this message was edited on 17. September 2008 @ 17:31
AfterDawn Addict
17. September 2008 @ 18:04 Link to this message
Congratulations josiepop , your log now looks CLEAN Firefox , it?s safer?..
HJT Log to get rid of:
Fix entries using HiJackThis
HiJackThis
Do a system scan only button
O16 - DPF: {A93D84FD-641F-43AE-B963-E6FA84BE7FE7} (LinkSys Content Update) - http://www.linksysfix.com/netcheck/67/install/gtdownls.cab
IMPORTANT: Do NOT click fix until you exit all browser sessions including the one you are reading in right now
HiJackThis
Here are a few other things you must do once you are completely clean: 1. Time for some housekeeping
download the OTMoveIt2 by OldTimer
Save it to your desktop.
Run the tool by clicking on the icon.
Cleanup button.
2. Double-click ATF-Cleaner.exe to run the program.
Main "Select Files to Delete " choose: Select All.
Empty Selected button.
Firefox at the top and choose: Select All
Empty Selected button.
No at the prompt.
Exit on the Main menu to close the program.
3. Now Set a New Restore Point to prevent possible reinfection from an old one. Some of the malware you picked up could have been saved in System Restore. Since System Restore is a protected directory, your tools can not access it to delete these bad files which sometimes can reinfect your system. Setting a new restore point AFTER cleaning your system will help prevent this and enable your computer to "roll-back" to a clean working state.
The easiest and safest way to do this is:
Start > Programs > Accessories > System Tools and click "System Restore ".
Create a Restore Point " on the first screen then click "Next ". Give the R.P. a name then click "Create ". The new point will be stamped with the current date and time. Keep a log of this so you can find it easily should you need to use System Restore.
Start > Run and type: Cleanmgr
OK "
C:
OK
More Options " Tab.
Clean Up " in the System Restore section to remove all previous restore points except the newly created one.
4. Defragment your Hard Drive
Properties.
Defragment Now.
Defragment.
And here are some tips to reduce the potential for spyware infection in the future: firewall to protect your computer from hackers. The Windows firewall only monitors incoming traffic, NOT outgoing. Using a software firewall in its default configuration to replace the Windows firewall greatly reduces the risk of your computer being hacked. Make sure your firewall is always enabled while your computer is connected to the internet.
Note: Comodo Pro Free for the geeks and ZoneAlarm Free for the novice.
Make sure you keep your Windows OS current Windows update
I strongly recommend installing the following applications:
In order to prevent the installation of Trojans and Malware on your machine: Comodo BOClean
Comodo BOClean protects your computer against trojans, malware and other threats. It constantly scans your system in the background and intercepts any recognized trojan activity. The program can ask the user what to do, or run in unattended mode and automatically shutdown and remove any suspected trojan application. Comodo BOClean currently supports more than 59000 malware items and offers automatic daily updates. Other features include updating via network share, tamper protection and stealth mode.
Spywareblaster <= SpywareBlaster will prevent spyware from being installed.
So how did I get infected in the first place?
Junior Member
17. September 2008 @ 18:19 Link to this message
Thank you so, so, SO much! Your directions were so clear and easy to follow. Everything is working perfectly now. You made it so simple, I can't thank you enough.
Advertisement
AfterDawn Addict
17. September 2008 @ 18:25 Link to this message
You are welcome.
afterdawn.com > forums > software, operating systems and more > windows - virus and spyware problems > javascript problem? cannot reply to myspace email, windows messenger, etc.
