This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

vus removal

11 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Hi judewynn
Well I am glad we are getting somewhere.Your doing a great job.
I am going to study your log. A fast look so far looks good. while I am gone read this:
You do have Viewpoint Manager on the system which is now considered spyware - I suggest you remove it.

Go to Start > Settings > Control Panel > Add/Remove Programs[ and remove the following programs if present.
Viewpoint
Viewpoint Manager
Viewpoint Media Player


Delete this folder in REDif found:
C:\Program Files\Viewpoint
Also there is no rule about running F-secure more than once. You can and should maybe run it at least once or twice a week for a while.
====================================================
Also just curious did you find any of these:

Lets start with the add/remove programs and see if we have any signs of these if you do remove:
BargainBuddy
Elite tool bar
NEXT:
go to windows explorer and see if any of these are there delet the folders in RED
C:\WINNT\EliteToolBar\xml\images\casino-ico.bmp
C:\WINNT\EliteToolBar\xml\images\casino.bmp
C:\WINNT\EliteToolBar\xml\images\dating-ico.bmp
C:\WINNT\EliteToolBar\xml\images\dating.bmp
C:\WINNT\EliteToolBar\xml\images\drugs-ico.bmp
C:\WINNT\EliteToolBar\xml\images\drugs.bmp
C:\WINNT\EliteToolBar\xml\images\fav-ico.bmp
C:\WINNT\EliteToolBar\xml\images\fav.bmp
C:\WINNT\EliteToolBar\xml\images\virus.bmp
If BargainBuddy was not found in add/remove lets do a search for it using the window search engine.
Here is how :
Click on start, then click on files and folders, type in BargainBuddy and click search.
if found delte or uninstall it

When I return I will have some good things for you to do to keep it clean.
Good luck mschroe919

i removed viewpoint. I had some of those other things on the computer, but i cant temember no which ones. whichever it was, i removed it. one more question for you… any idea why none of my sims programs will work now? I tried unintstaling and reinstaling, but its telling me i need to put in a disk that doenst exist. i didnt remove anyhting that had anything to do with the sims as far as i know. The whole time we were having a problem with the viruses, we didnt play it, the computer was running too slow. Thanks for any more help u give me!
Hi judewynn,
First off can you help me understand something.
I get confused easy. Why did you go from the ID:
judewynn to Melsalynn
Also can you tell me why :
Your log shows it as a XP:

Logfile of HijackThis v1.99.1
Scan saved at 4:42:34 PM, on 2/7/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

But it has running processes as a windows 2000?
XP uses

C:\WINDOWS\System32\

Your logs shows:

C:\WINNT\System32\

Was this PC original Win 2000, upgrated to XP?
Next please tell me about your sims programs as to how you installed them to begiin with.
If you downloaded them you may have to go to add/remove and uninstall them. Then istall them the same way you did when you got them.
Also send me another log from HJT
Thanks mschroe919
sorry, melsalynn is my id, i made judewynn for fixing my moms computer, because i'm currently using my name to fix my bf's computer. i logged in under melsalynn to check that post, and didnt fix it before responding to you. my bad. use the info for judewynn to fix this problem. thats the system she has. i've been the one doing all the work anyway, she wont do anything, shes afraid to mess it up, this way she can yell at me if i mess up her computer!! sorry for the confusion. as for the sims, i did get it to work, i had to uninstal and reinstall, just like u said. I'll send u a hjt log when i get back to that computer. and the name judewynn! thanks.
Okay I will be looking for the log, also did you know if that PC was a 2000 windows upgraded to XP. When you send the log tell me how your PC is doing now. good luck mschroe919
we bought the computer with windows xp media center edition on it. as far as i know thats what it started with. i dont know why it's coming up different. but it's now running much better, doesnt need restarted, no popups. thanks!
Hi judewynn.
I studied your last log and your PC looks clean. You did a great job.
As I do with everyone after being clean I post my all clean post.

Now that you are clean, please follow these simple steps in order to keep your computer clean and secure:

Note you may have some of theses programs allready, if so just a reminder to keep updated.

FIRST:
You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.
===================================================================
NEXT:
Make your Internet Explorer more secure - This can be done by following these simple instructions:

1. From within Internet Explorer click on the Tools menu and then click on Options.
2. Click once on the Security tab
3. Click once on the Internet icon so it becomes highlighted.
4. Click once on the Custom Level button.

1. Change the Download signed ActiveX controls to Prompt
2. Change theDownload unsigned ActiveX controls to Disable
3. Change the Initialise and script ActiveX controls not marked as safe to Disable
4. Change the Installation of desktop items to Prompt
5. Change the Launching programs and files in an IFRAME to Prompt
6. Change the Navigate sub-frames across different domains to Prompt
7. When all these settings have been made, click on the OK button.
8. If it prompts you as to whether or not you want to save the settings, press the Yes button.

Next press the Apply button and then the OK to exit the Internet Properties page.
====================================================================

Use an Anti Virus Software
It is very important that your computer has an anti-virus software running on your machine. This alone can save you a lot of trouble with malware in the future. See these links for a listing of some on line & their stand-alone anti virus programs:
If you don't have one here are some of the better AV products.

Symantec/Norton Antivirus: http://www.symantec.com/nav/nav_9xnt/
Kapersky AV: http://www.kaspersky.com/buyonline.html?info=25
Nod32 : http://www.nod32.com/home/home.htm
Panda AV: http://www.pandasoftware.com/
McAfee Virusscan: http://us.mcafee.com/root/package.asp?pkgid=100
AVG Anti-Virus (Free version available) http://www.grisoft.com/

Update your Anti Virus Software - It is imperitive that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out.
============================================================
NEXT:

Use a Firewall - I can not stress how important it is that you use a Firewall on your computer. Without a firewall your computer is susceptible to being hacked and taken over. Simply using a Firewall in its default configuration can lower your risk greatly.
If you don't have one see link below for a free firewall:

ZoneAlarm:
http://www.zonelabs.com/store/content/cata….jsp?lid=nav_za

Sunbelt Kerio:
http://www.sunbelt-software.com/Kerio.cfm

OutPost:
http://www.agnitum.com/products/outpostfree/download.php
================================================================================

Install Spybot - Search and Destroy - Install and download Spybot - Search and Destroy with its TeaTimer option.

This will provide real-time spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with program on a regular basis just as you would an anti virus software

Get the download and tutorial for Spybot S&D here:
http://www.bleepingcomputer.com/tutorials/tutorial43.html
=========================================================================

Install Ad-Aware
Install and download Ad-Aware. You should also scan your computer with the program on a regular basis just as you would an anti virus software in conjunction with Spybot. The download and tutorial on installing & using Ad-aware can be found here:
http://www.bleepingcomputer.com/tutorials/tutorial48.html

====================================================================

Install SpywareBlaster
SpywareBlaster will added a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. A article on anti-malware products with links for this program and others can be found here:

http://www.javacoolsoftware.com/spywareblaster.html
========================================================================

Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.

Follow this list and your potential for being infected again will reduce dramatically.
Happy surfing the net

I only ask one thing….please
Please post back and let us know what you think about our forum, we are all volunteers and would like a little smile.


Good luck Mschroe919
Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI