I keep getting a windows explorer bar popping up and it has an error message, "there is an unspecified potential risk, would you like to continue?" When I close it, it continues to pop up every few minutes. Ive had alot of problems with my internet explorer or mozilla freezing up the last couple weeks as well. Any help or advice is appreciated.
My name is Extremeboy (or EB for short), and I will be helping you with your log.
If you do not make a reply in 5 days, we will need to close your topic.
Please take note of some guidelines for this fix:
Refrain from making any changes to your computer including installing/uninstall programs, deleting files, modifying the registry, and running scanners or tools.
If you do not understand any step(s) provided, please do not hesitate to ask before continuing. I would much rather clarify instructions or explain them differently than have something important broken.
Even if things appear to be better, it might not mean we are finished. Please continue to follow my instructions and reply back until I give you the "all clean". We do not want to clean you part-way, only to have the system re-infect itself.
Please reply using the [external image: Posted Image] button in the lower right hand corner of your screen. Do not start a new topic. The logs that you post should be pasted directly into the reply.
Old topics are closed after 3 days with no reply, and working topics are closed after 5 days. If for any reason you cannot complete instructions within that time, that's fine, just post back here so that we know you're still here.
Download and Run ATFCleaner
Please download ATF Cleaner by Atribune. This program will clear out temporary files and settings. You will likely be logged out of the forum where you are recieving help.
This program is for XP and Windows 2000 only.
Double-click ATF-Cleaner.exe to run the program.
Under MainSelect Files to Delete choose: Select All.
Click the Empty Selected button.
If you use Firefox browser also…
Click Firefox at the top and choose: Select All
Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt.
If you use Opera browser also…
Click Opera at the top and choose: Select All
Click the Empty Selected button. NOTE: If you would like to keep your saved passwords, please click No at the prompt.
Download and Run OTScanIt
Download OTScanIt by OldTimer to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.
Open the OTScanIt folder and double-click on OTScanIt.exe to start the program. If you are running on Vista then right-click the program and choose Run as Administrator.
Check the Scan all users box at the top left.
Change the Rootkit Scan setting from "No" to Yes.
Click the Extras button under "Additional Scans".
Now click the Run Scan button on the toolbar.
When the scan is complete Notepad will open with the report file loaded in it.
Click the Format menu and make sure that Wordwrap is not checked. If it is then click on it to uncheck it.
Close Notepad (saving the change if necessary).
Use the Add Reply button in the forum and Attach the scan back here (do not copy/paste it as it will be too big to fit into the post). It will be located in the OTScanIt folder and named OTScanIt.txt.
Unzip/extract the file to its own folder. (Click here for information on how to do this if not sure. Win 2000 users click here.
When you have done this, disconnect from the Internet and close all running programs. There is a small chance this application may crash your computer so save any work you have open.
Double-click on Gmer.exe to start the program.
Allow the gmer.sys driver to load if asked.
If it gives you a warning at program start about rootkit activity and asks if you want to run a scan…click NO.
Click the >>>
Click on Settings, then check the first five settings:
System Protection and Tracing
Processes
Save created processes to the log
Drivers
Save loaded drivers to the log
You will be prompted to restart your computer. Please do so.
After the reboot, run Gmer again and click on the Rootkit tab.
Look at the right hand side (under Files) and uncheck all drives with the exception of your C drive.
Make sure all other boxes on the right of the screen are checked, EXCEPT for Show All.
Click on the Scan and wait for the scan to finish. Note: Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan. You will know that the scan is done when the Stop buttons turns back to Scan.
When completed, click on the Copy button and right-click on your Desktop, choose New>Text document. Once the file is created, open it and right-click again and choose Paste. Save the file as gmer.txt and copy the information in your next reply.
Important!:Please do not select the Show all checkbox during the scan..
Please/Attach back with: -OTScanIT log
-GMER Log
-What Problems do you still have?
If you are please follow the instructions in my previous post.
If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.
Please reply back telling us so. If you don't reply within 5-7 days the topic will need to be closed.
The error message no longer comes up but my Internet Explorer and Mozilla still tend to freeze up every couple times I use them.
That may not be malware related but something else that I'm not quite sure currently. If you want me to check if there is any malware on your machine, I can do that but other than that I cannot as this forum is only for malware removal only and not dealing with other problems. If you want help on that you might want to consider starting a new topic in the Microsoft Windows forum.
If you are please follow the instructions in my previous post.
If you still need help, follow the instructions I have given in my response. If you have since had your problem solved, we would appreciate you letting us know so we can close the topic.
Please reply back telling us so. If you don't reply within 5-7 days the topic will need to be closed.
