This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

Bearshare issues

19 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi dreux,

That looks normal. We'll check a folder and see if anything shows up in it.

Open SystemLook

  • Copy the content of the following codebox into the main textfield
  • Do not copy the word CODE , please note the script starts with the :
    :dir
    C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\l3m6oc5z.default\extensions
  • Click the Look button to start the scan.
  • When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.
Note: The log can also be found on your Desktop entitled SystemLook.txt
Hi oldman960, here is that log: SystemLook 30.07.11 by jpshortstuff Log created at 11:32 on 25/09/2011 by Owner Administrator - Elevation successful ========== dir ========== C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\l3m6oc5z.default\extensions - Parameters: "(none)" —Files— None found. —Folders— {20a82645-c095-46ed-80e3-08825760534b} d—— [19:33 29/01/2011] -= EOF =-
Hi dreux,

Make sure your Firefox browser is closed before you click the "Run Fix" button. Reboot after OTL has finished.

Next, Double click on OTL.exe
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
  • Do Not copy the word CODE
  • please note the fix starts with the :
:Services

:Files
C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\l3m6oc5z.default\searchplugins\SearchResults.xml
C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml

Then click the Run Fix button at the top
  • Let the program run unhindered
  • Please save the resulting log to be posted in your next reply.
  • Reboot your computer
Please post the OTL fix log .

How is it now?
Hi oldman960, bearshare is still there. here is the OTL log; ========== FILES ========== C:\Documents and Settings\Owner\Application Data\Mozilla\Firefox\Profiles\l3m6oc5z.default\searchplugins\SearchResults.xml moved successfully. C:\Program Files\mozilla firefox\searchplugins\SearchResults.xml moved successfully. OTL by OldTimer - Version 3.2.27.0 log created on 09252011_123056
Hi oldman960, I unistalled and reinstalled firefox and still get the bearshare screen. I'm assuming that I could reload windows xp pro and that would do the trick. I realize that I would have to reinstall various programs but that's not that big of a deal since I don't have that much on the computer to begin with. would taking an image of the hard drive be worth doing? thanks again for all your help.
Hi oldman960, no, I did not create a new profile, I didn't know that was possible. thanks for informing me about that. I did create a new profile which I'm now using and everything seems normal………so far, anyway. if not I'll get back to you. I'll use the default profile for a reference to find sites and bookmarks, etc. I'm assuming that once I get all I need out of the old profile I can delete it. if that's not the case let me know. I'm going to study this entire correspondence in the future to get a better idea of the process. if you have any books, websites you would recommend relating to these issues I would like to hear about them. otherwise, I think the problem has been solved so thanks again for all your help. dreux
Hi dreux,

Good job. The link I gave you also contains some other links to information on moving your stuff from the old profile to the new one. Just be careful what you import. These can be found in the 2nd paragragh in green text. Once done with the old profile you can delete it.

There is a link near the end of this reply that you may find useful in preventing infections, I suggest you read it. Most malware removal forums such as this one(WhatTheTech), Geeks2Go, TechSupportForum, TechSupportGuy, BleepingComputers, etc have topics on how to protect yourself. You may want to visit those sites or similar and have a look around. You are using Avast as your antivirus program. They also have a very good forum not only on the product but on malware, programs to avoid. The FireFox forum is also very good with tips on using and securing FireFox.

We'll clean up the tools.

From your desktop, please delete, if present
  • any notepads/logs that we created
  • MBR.dat
  • MBR.zip
  • aswMBR.exe
  • SystemLook

Next

* Create a new restore point

You must be logged on to an administrator account
  • Go to Start - All Programs - Accessories - System Tools - System Restore.
  • Click Create a restore point, and then click Next.
  • In the text box labeled Restore Point Description, type a name for this restore point
  • click create
* Remove old restore points

  • Go to Start - All Programs - Accessories - system tools.
  • Launch the Disk Cleanup tool and let it run.
  • When it finishes a box with tabs will appear, select the more options tab.
  • On this tab you will find a section for System Restore.
  • If you press the Clean Up button for that section, Windows will delete all restore points except for the most recent one.

Next

Open OTL then click the Clean Up button. You may get prompted by your firewall that OTL wants to contact the internet - allow this. A cleanup.txt will be downloaded, a message dialog will ask you if you want to proceed with the cleanup process, click Yes. This will do some clean up tasks and delete some of the tools you have downloaded plus itself.

Updates and upgrades

Your java is out of date. Click your start button, open Control panel.
  • Locate the Java icon (it looks like a coffee cup)
  • double click it to open it
  • click the Update tab
  • Click update now

After the java is updated, reboot your computer if not prompted to.

Next, clear the java cache

To clear the Java Plug-in cache:
  • Click Start > Control Panel.
  • Double-click the Java icon in the control panel.
  • On the General tab, Click Settings under Temporary Internet Files.
  • On the Temporary Files Settings screen, Click Delete Files.
  • check all boxes
  • Click OK


Some Recommendations and prevention tips

Basic security consists of 1 antivirus program, 1 resident antispyware program, 1 on demand antispyware program and a firewall. Just add a firewall to what you have.

* If you are behind a router Windows firewall should be fine. Otherwise a 3rd party firewall with outbound monitoring is recommended.

Click FIREWALL for links and tutorials to good, free and paid for firewalls. (Note: Zone Alarm is becoming bloatware)


You can use Spybot to reinstall a Custom Hosts file that will help prevent access to and from malicious sites.
1-Left-click the "Spybot - Search & Destroy" shortcut to open the program
2-Right-click an item in the list of immunizations and click "Deselect All."
3-Scroll down to the bottom of the list and click the checkbox to the left of "Global (Hosts)" under the "Windows" header.
4-Click "Immunize" on the Spybot toolbar.

OR

A guide to understanding and using the hosts file.

Learn how your Hosts file can protect you and how you can protect it.
Besides the Hosts file information, there are links to a very good updated hosts file, a host file manager. and some programs that can protect your hosts file.
HOSTS

Please read the info on disabling the DNS Client before installing a custom hosts file.


-Secure your Internet Explorer

From within Internet Explorer click on the Tools menu and then click on Options.
  • Click once on the Security tab
  • Click once on the Internet icon so it becomes highlighted.
  • Click once on the Custom Level button.
  • Change the Download signed ActiveX controls to Prompt
  • Change the Download unsigned ActiveX controls to Disable
  • Change the Initialize and script ActiveX controls not marked as safe to Disable
  • Change the Installation of desktop items to Prompt
  • Change the Launching programs and files in an IFRAME to Prompt
  • Change the Navigate sub-frames across different domains to Prompt
  • When all these settings have been made, click on the OK button.
  • If it prompts you as to whether or not you want to save the settings, press the Yes button.
Next press the Apply button and then the OK to exit the Internet Properties page.


- Keeping your Windows up-to-date is crucial to your computer's security. Please go to the Windows Update Site (using Internet Explorer) and download and install all critical updates on a regular basis


- Make sure you have reset Automatic Updates to your chosen optionClick your start button > Control Panel > System


- Keep your antivirus program updated, as well as any other security programs you have.


-More tips and programs can be found HERE

Please post back if you have any problems.

Take care :adios:

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI