Infected & Norton Turned Off/visual Memory Low Too

Looks OK, how is it running now?

My system is running faster than it has in a very long time. I absolutely cannot thank you enough. The problems were severe, and when the hard porn photos showed up, it really scared me. My grandson and I play his games on this computer, and I was afraid that would happen while he was with me. Also, I am concerned about identity theft, and when Norton got turned off, and then tampered with, I was about to re-format the whole system. How can I repay you for your time and effort and knowledge? Money? Do you drink coffee? If so, e-mail me your mailing address and I'll send you some wonderful coffee from my espresso bar & cafe! Thank you! Thank you! Thank you! God bless you for being so helpful and so kind.

We all volunteer to help out here, but you can support the running of the site - there is a link at the top.

Actually, I overlooked an entry in your log - just noticed it whan I was re-reading

With only HJT running, scan and when complete, remove the following entry by checking the box to the left and clicking 'fixed checked':

O4 - HKLM\..\Run: [easywww] C:\windows\easywww2.exe

Click here, for instructions on how to enable hidden files and folders to be visible. After enabling, reboot into safe mode by tapping F8 after the BIOS has loaded, find and delete the following:

C:\windows\easywww2.exe

Reboot when done and you should be good to go - let me know how you get on.

I ran HJT and clicked on that file (easywww2.exe) and clicked on fix. I rebooted and opened in safe mode after opening all my hidden files. In safe mode, hidden files were still closed, but I opened them. The c:\windows\easywww2.exe was not anywhere to be found.

That's OK then - it was just an orphan start-up. You are clean now.

You have my genuine thanks and respect. Bless you my friend! Keep up the good work!

You're welcome - glad to help

To help keep you clean follow the recommendations in Tony's article here:

So how did I get infected in the first place?



As this problem has been resolved the topic will be closed. If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)

The subject of the email must be "Reopen". Include your post username and details about why you need it reopened, with a valid link to your post.