[Resolved] Adware HBHelper / Browser Hijacker Desktop

No. But I went to normal mode and came back. (to see how things were running>)

What mode did you just try and run ComboFix in?

Sorry I missed this last post. Was waiting since I last posted. I ran combo fix in safe mode. Can't run it in normal.

What happened when you tried to run ComboFix in Normal Mode?

Some how your avast installation got damaged in the clean-up process. I would like for you to download the avast installation file, and the avast uninstall utility.

We are going to need to use the avast uninstall utility first to remove all of the remedies of your avast installation that got corrupt, and then we need to reinstall avast.

After you have downloaded these two files I would like for you to disconnect yourself from the internet so that you don't get infected again. The easiest way to do this may be to physically disconnect the internet connection by removing the plug from your computer.

Once you've done this go ahead and first run the avast uninstall utility and then reboot your computer. Make sure you reboot your computer before starting the installation of avast again. After installing avast on your computer reboot it again and then run a full scan with avast. Make sure that you are still disconnected from the internet during the scan.

Below you will find the links to download the two programs as well as instructions for how to use the avast uninstall utility.

1. Please visit this link and download a copy of the avast installation file.


2. avast! Uninstall Utility

Sometimes it's not possible to uninstall avast! the standard way - using the ADD/REMOVE PROGRAMS in control panel. In this case, you can use our uninstallation utility aswClear.

• Download aswClear.exe on to your desktop
• Start Windows in Safe Mode
• Open (execute) the uninstall utility = aswClear.exe
• If you installed avast! in a different folder than the default, browse for it. Note: Be careful! The content of any folder you choose will be deleted!
• Click REMOVE
• Restart your computer

Please let me know if you have any questions with the above instructions.

Let me know how it goes.

SweetTech.

I can't run CF in normal. I get the permission access error.

DL'ed disconnected. Uninstalled rebooted. installed avast rebooted. Tried running avast. It won't run or turn on. (Unsecured.,Fix now messages in avast UI). But start program does not work. Cheers

Hi SweetTech. Do you think we might start to think about a clean XP install now that you eliminated the virus? Perhaps my reg is too far gone. What do you think?

Hi Results of Avast this morning I deleted the files C:\system volume Information\_restore{3DBB06D3-42C7-4B23-A7EC-AF2905085F1F}\RP27A0017745.cmd C:\system volume Information\_restore{3DBB06D3-42C7-4B23-A7EC-AF2905085F1F}\RP34\A0024391.cmd

Hello Shenlord, Good Afternoon! How is your system currently running? Are you still experiencing problems when running your computer regularly meaning in Normal mode? SweetTech.

Hi SweetTech. I hope you are well today. The computer in Normal mode is still unable to run setup.exe files. I ran avast quick scan again and found found another virus in system restore. Same # as the other 2 different ending: RP41\A0030305.CMD. Deleted.

Try to delete the setup.exe file and download a fresh one. I believe you said it was a HijackThis installer file?

I'm backing up my important files (webs, photos, music etc). I am scanning the files with Avast and will copy them to a detachable drive. What is the danger of propagating my problems? and how can I best do this safely?

I can't download anything in normal mode: none of my browsers open now. It is not just one setup.exe. It's all setup.exes, as well as the start/search, start/run, user accounts (in control panel), other functions in CP. What do you think we should do overall?

At this point, I think the best solution for you to take right now would be to reformat and reinstall your operating system. This would allow you to start with fresh with a clean system and would elevate the issues you are currently experiencing.

I would suggest that you download and run the program below on your flash drive (if that is the device you are going to be using to back-up your files)

Running Flash Disinfector
Download Flash_Disinfector.exe by sUBs from HERE and save it to your desktop.

• Double-click Flash_Disinfector.exe to run it and follow any prompts that may appear.
• The utility may ask you to insert your flash drive and/or other removable drives including your mobile phone. Please do so and allow the utility to clean up those drives as well.
• Wait until it has finished scanning and then exit the program.
• Reboot your computer when done.

Note: Flash_Disinfector will create a hidden folder named autorun.inf in each partition and every USB drive plugged in when you ran it. Don't delete this folder…it will help protect your drives from future infection.


I would also like to mention that we have an excellent guide here at WTT for How to Reformat and Reinstall your Operating System which you may find beneficial to look at.


Please let me know if this is the route you would like to take.

Hello SweetTech. I think that a clean install will be the best route too. We had a great run here and you taught me a huge amount. You have spent so much time helping me out . Thank you very much for that. It's also always wonderful for me to see the internet community of good people helping one another out. I find it quite amazing and hope-giving. I'm going to take my time doing the install: a few days. I will post when I'm all ready to go. Thanks again and fair winds on all your journeys. Jean-Paul