Here are a few suggestions for new members. Going back through some of the Solved Hijacks will help you to understand how What the tech forums work. You will see solutions that may appear to be identical to your problem, but each infection causes unique problems on each computer. Everyone has different software on their computer and that makes each HijackThis log different. We recommend that everyone post a HijackThis© log in this forum whether it is just to check that your system is clean or for help with cleaning your computer.

We strongly suggest you do this first.

ERUNT - Download - Homepage
This ensures we have a valid registry backup. ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore if needed. Removing modern malware infections often requires making changes to the registry, and a corrupt registry can prevent a system from booting. Compatible with Windows NT, 2000, 2003, XP, Vista, 32 & 64-bit versions.

1. Download ERUNT
2. Double-click erunt_setup.exe to run.
3. Follow the prompts and install using the default configuration (setup language, install location, shortcuts...).
4. Say No to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later.
   
5. Start ERUNT
6. Choose a location for the backup
   The default location C:\WINDOWS\ERDNT\[today's date] is preferred
   
7. The first two check boxes are ticked by default (System registry and Current user registry).
8. Press OK
9. When prompted, click YES to create a new folder.
10. Progress bars will show backup status.
11. A confirmation window will popup when complete. Click OK to close.

The program HijackThis© modifies the registry and can cause damage to a computers file system if used improperly trying to fix a computer. (Doing a Scan with HijackThis© makes no changes). We advise that you do not attempt to fix your own computer with HijackThis© without first having directions from our trained volunteers.

If you would like to know who is helping you here at WhatTheTech Forums please read The Different Groups Here At WhattheTech and Who Will Help You With Your HijackThis log

To prepare your computer for the help we offer, you can safely do the following before obtaining help:

1. You can get a complete installer that installs HijackThis to C:\Program Files\HijackThis, making an entry in the start menu and also providing a desktop shortcut from http://www.whatthetech.com/hjt202/HJTInstall.exe.
2. Click on the link and select Save, save it to your desktop.
3. Go to the HijackThis Logs and Spyware/Malware Removal
4. Click the
5. Double click the HJTsetup.exe file on your desktop to install it.
6. Open HijackThis and select: Do a system scan and save a log file.
7. When the scan is finished, Click Edit> Select All> Edit> Copy> and paste its contents here please use the button below.
8. Give the thread a title that describes your problem and in the post please explain what is happening to your PC and what you have tried to do so far to fix it.
   Do NOT fix anything that you see in the log (scanning will not make any changes to your computer).

Posting Guidelines:

1. Please copy and paste your log. DO NOT add it as an attachment
2. Post in one thread only. Use Add Reply (another button at the top of the list of posts in the forum, with the New Topic button) to answer or post new logs when they are requested, instead of starting another New Topic.
3. If you have run and fixed anything with any programs please reboot before scanning with HJT
4. Please DO NOT bump your log. Posting in multiple threads may also slow a reply to your post.
5. You can also go to the #whatthetech chatroom to ask for help with your problem, but you will still need to post your HJT log in the forum. You will require an IRC chat program or you can use the Java applet?
6. We will get to you as soon as we can, often within a few hours. At times the forums are very busy and there are not many trained volunteers available, so please be patient.

In preparation for getting help with your computer problems is to follow the suggestions HERE under the heading: Before Posting A Hijackthis Log "self Help"

One of the most important security measures, is to make certain that your copies of Windows, Interet Explorer and Outlook Express are up-to-date. Having the security fixes is vital to defending your computer. Without the security fixes offered by Microsoft your computer has many vulnerabilities that hackers spend their time trying to exploit. Even if you use another browser and do not use IE or OE, they still must be kept updated as IE and OE are bound into Windows. Only having the fixes for Windows, leaves huge holes in your security through IE and OE. To determine if there are any critical updates that you do not have, please go to:
Microsoft Windows and Internet Explorer Updates. If you have Microsoft Office, it also should be kept updated for security. Please go to Microsoft Office Update
for the updates you need.

At any time you may read How To Secure Your PC After An Attack but if it is before you receive help with your computer problem, please do not make any of the changes suggested because at times these changes prevent our fixes from working. When your PC has finished being cleaned, you are welcome to follow all instructions in that thread.

Tips to Getting a Faster Response (credit Little Eagle)

Read the Guidelines above (the comments above with the little ).

When analyst (volunteers), have free time to help you out. They look at older logs with zero replies, topics with no comments added.

• Don't reply to your thread after you start a topic. (do not bump)

Things you can do to help us.

• Don't start more than one topic for one PC. It may get you noticed, that doesn't mean you will be helped quicker. One or the other we will be delete.
• If you have more than one PC you are working on. Please note it in the topic title.
• If you have not gotten a reply in five days don't start a new topic. Add a reply here
• We know your in a hurry but have you read this?
• If you have resolved the issues on your own please lets us know whereas we may close your thread with out analyzing the log-file.
• If you have posted at another forum also Because some of us volunteer our time in other forums. If you received help a another forum or this one, please ask your thread (topic) to be closed.
• If you have a general question that needs an answer use in this thread not
• To remove notifications to this topic or others click My Controls at the top of this page. Under the Subscriptions tab click View Topics place a checkmark in the box scroll down click the box With Selected.

Hope this helps

This post has been edited by LDTate: Sep 2 2008, 03:24 PM

NOTE:

Please DO NOT bump your log.

We look for logs with 0 replies first.


If you are being helped and you haven't replied within 5 days your topic will be closed as inactive.
If that is the case, please start a new topic when you have the time needed to finish all the instructions.