Computer bleeps and turns off

Download and install CCleaner
Don't use the program at this moment.

You have not installed Hijackthis in a permanent folder.
Since Hijackthis makes a backups-folder of any entries you fix, you should create a folder just to hold the HijackThis program and its backups.
Go to "My Computer", click on C:\ and then go to the "File" menu, choose New -> Folder. Name the folder "HJT" or something like that and then extract the hijackthis.exe into that folder.

Run Hijackthis, click on 'Do a system scan only
check only the items listed below:

R3 - Default URLSearchHook is missing
O4 - HKLM\..\Run: [AQ3HelperStartUp] C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE /partner AQ3
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

Click on 'Fix checked

Make sure your explorer is set to show hidden and system files and folders:
Open Explorer or "My Computer" and click Tools -> Folder Options… and then select the View tab and check the next settings:

Uncheck: Hide protected operating system files
Uncheck: Hide file extensions for known file types
Select: Display the contents of system folders (Windows XP)
Select: Show hidden files and folders

Reboot your pc into safe mode

Safe mode for Windows XP
*Restart the computer.
*just before Windows starts to load begin tapping the F8 (or F5) key until the Advanced Options menu appears.
*Use the arrow keys to select the Safe mode menu item
*press Enter.


You can use Windows Explorer to find and delete this folder
(Do not be concerned if they do not exist)

C:\PROGRA~1\AQUATI~1 . the folder begins with those letters…

Start Ccleaner.
Select in "Windows" at least the next items:
Internet Explorer:
- Temporary Internet Files
System:
- Empty Recycle bin
- Temporary Files
Click in Ccleaner on "Run Cleaner".

Reboot the PC in normal mode, run HijackThis and please post a new log.

I have done as instructed but not sure if I have saved hijack this in a permanent folder.

You did the right thing

No let's see if we can get that antispywareprograms running again…

Download CWShredder to your desktop.

Start CWShredder and click ”I Agree” > click “Update”

Start CWShredder and Click Fix

Click Next and let it fix everything.

It hat tool will not work we are dealing with an aggressive variant and you first have to download and run the CoolWWWSearch.SmartKiller removal tool.
Then run CWShredder again.

Reboot the computer.

If your version of Spybot still does not work you can uninstall it via > control panel > software


Download AdAware and you can look here for the AdAware Tutorial

Install the program, update it and launch it.

1. Launch Ad-Aware SE and run the WebUpdate feature. (Click on the Globe icon > Click connect > Click OK > Click Finish.)
2. Set up the Configurations as follows:
– Click the Gear wheel at the top of the Ad-Aware window
– Click General > Safety & Settings: Check (Green) all three.
– Click Tweak > Cleaning Engine > UNcheck "Always try to unload modules before deletion".
3. Click "Proceed"
4. Click "Scan Now"
5. Deselect "Search for negligible risk entries" as negligible risk entries (MRU's) are not considered to be a threat.
6. Select "Search for low-risk threats"
7. Run the scanner using the Full Scan (Perform full system scan) mode.
8. When the scan has completed, select Next.
9. In the Scanning Results window, select the "Scan Summary" tab.
10. Check the box next to each "target family" you wish to remove.
11. Click next > Click OK.


Download Spybot Search & Destroy and you can look here for the Spybot S&D; tutorial
Install the program and launch it.

Go to Start > Programs >Spybot > Search & Destroy and choose Spybot S&D
Close ALL windows except Spybot S&D
Click the button to "Search for Updates" and download and install the Updates.
Next click the button "Check for Problems"
When Spybot is complete, it will be showing "RED" (RED) entries "BLACK" entries and "GREEN" (GREEN) entries in the window
Put a check mark beside the RED (RED) entries ONLY.
Choose "Fix Selected Problems" and allow Spybot to fix the (RED) entries.

Hello again, have just done a Panda active virus scan…here is the report…I hope it can be of some use. Once I get this all sorted out I think I will have to sort out my downloads as I feel in the past I may have downloaded more harmful programs than good in the effort to fix this computer. Fingers crossed….s Incident Status Location Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Guest\Cookies\[removed][2].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Guest\Cookies\guest@atdmt[1].txt Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Guest\Cookies\guest@belnk[1].txt Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Guest\Cookies\guest@burstnet[2].txt Spyware:Cookie/Casalemedia Not disinfected C:\Documents and Settings\Guest\Cookies\guest@casalemedia[2].txt Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Guest\Cookies\[removed][2].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Guest\Cookies\guest@doubleclick[2].txt Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Guest\Cookies\guest@hitbox[1].txt Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Guest\Cookies\[removed][2].txt Adware:Adware/Gator Not disinfected C:\Program Files\Common Files\reljbhnt\rpfnejjnet\fhlplacph.exe Adware:Adware/Gator Not disinfected C:\Program Files\Common Files\reljbhnt\tlancber\nnlnlbal.exe Potentially unwanted tool:Application/MyWebSearch Not disinfected C:\Program Files\MSN Messenger\riched20.dll Adware:adware/2search Not disinfected C:\WINDOWS\system32\2search.exe Adware:Adware/2Search Not disinfected C:\WINDOWS\system32\2search.exe[main.exe] Adware:Adware/2Search Not disinfected C:\WINDOWS\system32\2search.exe[uninstall.exe] Adware:Adware/2Search Not disinfected C:\WINDOWS\system32\2search.exe[plugin.dll] Adware:Adware/2Search Not disinfected C:\WINDOWS\system32\2search.exe[get.exe] Potentially unwanted tool:Application/RealSpy Not disinfected C:\WINDOWS\system32\actskn45.ocx Adware:Adware/Nububuw Not disinfected C:\WINDOWS\system32\up200.exe Thank you

Go to Start > Settings > Control Panel >Add/Remove Programs
Remove the following:
(Do not be concerned if they do not exist)
Gator

Also search for those folders in program files and delete them as well.


You can delete all the files of
C:\WINDOWS\system32\2search.exe


You may want to print out these instructions for reference, since you will have to restart your computer during the fix.

Please download AproposFix from Swandog.


Save it to your desktop but do NOT run it yet.

Then please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8 (or F5).
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.


Once in Safe Mode, please double-click Aproposfix.exe and unzip it to the desktop. Open the Aproposfix folder on your desktop and run RunThis.bat. Follow the prompts.

When the tool is finished, please reboot back into normal mode, and post a new HijackThis log, along with the entire contents of the log.txt file in the Aproposfix folder.

Yes, it looks fine

If the computer is running well you can follow this advice:


For Windows XP

Reset and Re-enable your System Restore to remove infected files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing those files. This is the only way to clean these files: (You will lose all previous restore points which are likely to be infected)

1. Turn off System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

2. Reboot.

3. Turn ON System Restore.
On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
UN-Check *Turn off System Restore*.
Click Apply, and then click OK.

I think the problem has been fixed…the bleeping sound was due to the computer overheating. It was running at 89 degrees celcius. Every time that I tried to run spybot it would run faster, over heat and shut down. It seems that the vent and fan were full of fluff and dust and this was not allowing air flow in to cool the motor. Plus we have been having quite a few days of 38 to 40 degrees. I had an experienced friend undo the computer and vacuum all the fluff and the dust out and unblock the vent. So this along with all the programmes we have been running seems to have solved the problem. It is now running at 52 degrees. Another thing that I have just found out is that when spybot is running and you see all the programmes along the bottom flashing through as it runs, means that that is what it is searching for…not…what is on the computer. So the coolwww etc was what spybot was looking for not what is on my computer. So…now…thanks to all your hard work and the removal off the dust and fluff my computer is now running well. Thank you again…tomcoyote is a great site and I will not hesitate to use it again in the future. Many thanks…S.

It was a pleasure to help you

Here are some tips, please follow these simple steps in order to keep your computer clean and secure:

• Update your AntiVirus Software - It is imperative that you update your Antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software then it will not be able to catch any of the new variants that may come out.
  
  
• Visit Microsoft's Windows Update Site Frequently - It is important that you visit windowsupdate.com regularly. This will ensure your computer has always the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
  
  
• Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option. This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an antivirus software.
  
  A tutorial on installing & using this product can be found here:
  
  Using Spybot - Search & Destroy to remove Spyware , Malware, and Hijackers
  
  
• Install Ad-Aware - Install and download Ad-Aware. ou should also scan your computer with program on a regular basis just as you would an antivirus software in conjunction with Spybot.
  
  A tutorial on installing & using this product can be found here:
  
  Using Ad-aware to remove Spyware, Malware, & Hijackers from Your Computer
  
  
• Install SpywareBlaster - SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs.
  
  A tutorial on installing & using this product can be found here:
  
  Using SpywareBlaster to protect your computer from Spyware and Malware
  
  
• Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.

At this page you can check if spyware is running at your computer; Spyware check!

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php