What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

time for a cleanup, please

13 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #16
Removed adaware and avg. Avg hangs on in the taskbar with an exclamation point in its icon; also in Control Panel->add/remove programs list. Doesn't really seem uninstalled, just turned off. I will be asking my wife if she uses "Recipe Hub" and "Free Ride Games," which seem to do their own connecting to the net, with concommitant "script not working" popups. Here is MBAM, claiming nothing to fix: Malwarebytes Anti-Malware 1.75.0.1300 www.malwarebytes.org Database version: v2013.05.26.03 Windows XP Service Pack 3 x86 NTFS Internet Explorer 7.0.5730.13 SAL :: ALBERTEINSTEIN [administrator] 5/26/2013 7:06:49 AM mbam-log-2013-05-26 (07-06-49).txt Scan type: Quick scan Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM Scan options disabled: P2P Objects scanned: 290295 Time elapsed: 7 minute(s), 19 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) (end)
Post #17 last edited
Use this to remove all of AVG (top one)
http://www.avg.com/gb-en/utilities

Don't forget the ESET log.
Post #19
HI No link in your post for the avg removal, but I was just looking online and found such a thing. (It's still there, urging me to do a scan). ESET has been running for an hour. I'll get my wife to report on the computer's behavior after she's used it awhile today.
Post #21
C:\Documents and Settings\SAL\Desktop\DDA\sites\S + P\libraries.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\Desktop\DDA\sites\S + P\schedule.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\agency.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\album.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\bio.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\booking.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\bookingnope.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\house.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\index.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\indexQ.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\libraries.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\press.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\pressX.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\recordings.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\reviews.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\schedule.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\theme.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\weddings.htm JS/Tivso.Gen trojan C:\Documents and Settings\SAL\My Documents\Desktop\D\SITES\S+P\Xlinks.htm JS/Tivso.Gen trojan
Post #22 last edited
Got rid of aVG, thanks.

Also Free Ride Games.

She uses Recipe Hub.
I notice on boot-up, Recipe Hub causes a pop-up about a script not working. So is it hooking up to the internet and using RAM, or something? I do not see it in the icon tray.

And I can certainly say that browser windows are now opening right up, so that's faster!
Post #23

She uses Recipe Hub.
I notice on boot-up, Recipe Hub causes a pop-up about a script not working. So is it hooking up to the internet and using RAM, or something? I do not see it in the icon tray.

If you want to keep that there is not much we can do with that error.

Any other problems?
Post #24
Hmm. She's been hanging around upstairs with her Tablet. I'll encourage her to try the desktop this evening. I expect it's much better than was, and satisfactory.
Post #25
She's spent some time on the desktop and says it seems okay so far. Not being effusive…but she didn't do a lot of stuff. I'm sure the worst of its behavior is fixed, just in that things open quickly. Now, did we deal with that list of trojans? Was it ESET that found them? I don't remember if there was a fixit stage to that. Out of curiosity, did further steps deal with all the junk—I mean crud—that the first scan turned up? more steps to go? thanks
Post #26

Now, did we deal with that list of trojans? Was it ESET that found them? I don't remember if there was a fixit stage to that.

They are possibly false positives, if you wish to remove them you can just run ESET again and tick the box to remove found threats, won't do any harm either way. http://news.softpedia.com/news/NOD32-And-T…rms-58909.shtml

What you could do to be sure is to upload a couple of them to virustotal and see if any other scanners say they are malware https://www.virustotal.com/en/


Out of curiosity, did further steps deal with all the junk—I mean crud—that the first scan turned up?

We got rid of all the crud that was showing in the OTL log along with a ridiculous 6gb of temp files but as you didn't want to remove some things there maybe still some left,

You could run this tool which is similar to adwareremover if you wish, be aware though this one deletes everything it finds, does not give you a choice to keep stuff.

[external image: Posted Image] Please download Junkware Removal Tool to your desktop.

Right click and select "Run as Administrator".
  • Shut down your protection software now to avoid potential conflicts.
  • The tool will open and start scanning your system.
  • Please be patient as this can take a while to complete depending on your system's specifications.
  • On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
  • Post the contents of JRT.txt into your next message.
Post #27
Could you tell me how, in future, to clean up temp files? Are they always just something used in passing, and appropriate to delete without thought? (and how do they mess anything up?) And I will check out the trojans. OK. Well, if she is happy with the improvement, I'm going to consider the job well done. I'll post back if she runs into any problems in the next couple days. Thanks a bunch, mowman! denno
Post #28
You can delete temp files at any time with no bother at all, I do it weekly with this program as they just fill up your hard drive.. http://www.atribune.org/?option=com_conten…5&Itemid=25

I will leave the topic open for 2 days to let you reply back if any problems, below are instructions to remove combofix and OTL.



ComboFix - Cleanup
Time for some housekeeping
  • Click Start…select Run from the menu.
  • Copy and paste the following into the text entry box:
    Combofix /Uninstall
  • Click the OK button. (See image below as reference.)
🖼Click to load external image (Posted Image)





Clean up with OTL:
  • Double-click OTL.exe to start the program.
  • Close all other programs apart from OTL as this step will require a reboot
  • On the OTL main screen, press the CLEANUP button
  • Say Yes to the prompt and then allow the program to reboot your computer.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI