[Resolved] Internet Gamebox

Recently I installed a free program from the internet called Internet Gamebox (you can guess what it is!)

link:http://www.internetgamebox.com/

I found out it was linked to spyware so uninstalled it and now I keep receiving pop ups even though my pop- up blocker is switched on.

First of all, I get these pop ups from a anti virus company called AV System care which I know are from a fake company
see this link: http://remove-avsystemcare.org/?gclid=CIC7…CFQESEgod2T1UDg . I've tried lot's of software to remove this and even the software they suggested on the link above didn't work.

As well as that I keep receving pop ups for stuff like online shopping, mortgae, loans and so on. Please help me.

I've used lot's of software to try and find it.

PS: I'm using AVG Free edition 7.5 and AVG anti - spyware free edition 7.5

Hi vista?,

Please download HijackThis from here:
http://downloads.malwareremoval.com/HJTInstall.exe

Double-click the program and follow the prompts to install it.
After installing, HijackThis will open automatically.

Select Do a system scan and save a logfile - this will produce a HijackThis log in Notepad. Check in Notepad that Format->Word Wrap is UNchecked.

Please post it in a response to this message. Copy the contents of the log by pressing Ctrl-A then Ctrl-C, then paste it into your response by pressing Ctrl-V.

I will review the log and let you know how to proceed.

Thanks. dayam! I jut got an AVSystem Care Pop - Up rightn now. Apoligise If i take a long time due to a lot of things coming

Hi vista?,

Please download F-Secure Blacklight

• Click I ACCEPT and download the graphical user interface version to your Desktop
• Double click the file to run it, choose I accept the agreement then press Scan
• It will create the fsbl-xxxxxxx.log on your desktop containing a list of all items found.
• Do not choose to rename any because legitimate items can also be present.
• Exit Blacklight and post the contents of the log in your next reply.

Now open HijackThis, select Open the Misc Tools section
Press the Open Uninstall Manager… button, then press Save list…
Save the Uninstall log to your Desktop and include a copy in your next response.
Now press Back and Scan and then Save log to create and save a new HijackThis log.

Once complete, please post the Blacklight log, the uninstall list and a new HijackThis log.

By doing what you've instructed, wil it get me rid of all of these pop - ups and the AV System Care pop ups as I can't take it anymore?

F - secure black light log. the log which i f ound on my desktop as soon as i ran F - secure blacklight. 09/02/07 11:04:28 [Info]: BlackLight Engine 1.0.64 initialized 09/02/07 11:04:28 [Info]: OS: 5.1 build 2600 (Service Pack 2) 09/02/07 11:04:29 [Note]: 7019 4 09/02/07 11:04:29 [Note]: 7005 0 09/02/07 11:04:36 [Note]: 7006 0 09/02/07 11:04:36 [Note]: 7011 564 09/02/07 11:04:36 [Note]: 7026 0 09/02/07 11:04:36 [Note]: 7026 0 09/02/07 11:04:36 [Note]: 7024 3 09/02/07 11:04:36 [Info]: Hidden process: C:\windows\system32\crbovkahdl.exe 09/02/07 11:04:38 [Note]: FSRAW library version 1.7.1022 09/02/07 11:06:31 [Info]: Hidden file: c:\WINDOWS\system32\crbovkahdl.dat 09/02/07 11:06:31 [Note]: 10002 1 09/02/07 11:06:31 [Info]: Hidden file: C:\windows\system32\crbovkahdl.exe 09/02/07 11:06:31 [Note]: 10002 1 09/02/07 11:06:31 [Info]: Hidden file: c:\WINDOWS\system32\crbovkahdl_nav.dat 09/02/07 11:06:31 [Note]: 10002 1 09/02/07 11:06:32 [Info]: Hidden file: c:\WINDOWS\system32\crbovkahdl_navps.dat 09/02/07 11:06:32 [Note]: 10002 1 09/02/07 11:07:10 [Note]: 2000 1012

all my programmes: Adobe Flash Player ActiveX Adobe Flash Player Plugin Adobe Reader 7.0 Adobe Shockwave Player AVG 7.5 AVG Anti-Spyware 7.5 BAMZOOKi v3.1 (build 115.158) Biman Bangladesh Airlines Screen Saver Boots Viewer CCleaner (remove only) Creatix V.92 Data Fax Modem Cypress USB Mass Storage Driver Installation DivX Codec DivX Player DivX Web Player EPSON Printer Software FIFA 07 Funspot Google Earth Google SketchUp 6 Google SketchUp 6 GTOneCare High Definition Audio Driver Package - KB888111 HijackThis 2.0.2 Horrible Science Hotfix for Windows Media Player 10 (KB903157) Hotfix for Windows XP (KB888795) Hotfix for Windows XP (KB891593) Hotfix for Windows XP (KB893357) Hotfix for Windows XP (KB895953) Hotfix for Windows XP (KB895961) Hotfix for Windows XP (KB896256) Hotfix for Windows XP (KB896344) Hotfix for Windows XP (KB899337) Hotfix for Windows XP (KB899510) Hotfix for Windows XP (KB902841) Hotfix for Windows XP (KB906569) Hotfix for Windows XP (KB910728) Hotfix for Windows XP (KB912024) Hotfix for Windows XP (KB914906) J2SE Runtime Environment 5.0 Update 8 Java™ 6 Update 2 Java™ SE Runtime Environment 6 LogonStudio Microsoft .NET Framework 1.0 Hotfix (KB887998) Microsoft .NET Framework 1.0 Hotfix (KB930494) Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Microsoft .NET Framework 1.1 Hotfix (KB928366) Microsoft .NET Framework 2.0 Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Text-to-Speech Engine 4.0 (English) Microsoft Works MSXML 4.0 SP2 (KB927978) MSXML 4.0 SP2 (KB936181) MT882 Napster NETEagle Next Generation Visualisations NoAds Norton Protection Center NVIDIA Drivers OCA Client history tool install OEM Logo Manager V1.0 OpenOffice.org 2.2 Paint.NET v3.10 PhotoFiltre Picasa 2 Power2Go 4.0 PowerDVD QuickTime rayman2 Roxio Burn Engine Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) Security Update for Microsoft .NET Framework 2.0 (KB928365) Security Update for Step By Step Interactive Training (KB898458) Security Update for Windows Media Player (KB911564) Security Update for Windows Media Player 10 (KB911565) Security Update for Windows Media Player 10 (KB917734) Security Update for Windows Media Player 10 (KB936782) Security Update for Windows Media Player 6.4 (KB925398) Security Update for Windows XP (KB883939) Security Update for Windows XP (KB890046) Security Update for Windows XP (KB893756) Security Update for Windows XP (KB896358) Security Update for Windows XP (KB896422) Security Update for Windows XP (KB896423) Security Update for Windows XP (KB896424) Security Update for Windows XP (KB896428) Security Update for Windows XP (KB896688) Security Update for Windows XP (KB899587) Security Update for Windows XP (KB899588) Security Update for Windows XP (KB899589) Security Update for Windows XP (KB899591) Security Update for Windows XP (KB900725) Security Update for Windows XP (KB901017) Security Update for Windows XP (KB901190) Security Update for Windows XP (KB901214) Security Update for Windows XP (KB902400) Security Update for Windows XP (KB903235) Security Update for Windows XP (KB904706) Security Update for Windows XP (KB905414) Security Update for Windows XP (KB905749) Security Update for Windows XP (KB905915) Security Update for Windows XP (KB908519) Security Update for Windows XP (KB911280) Security Update for Windows XP (KB911562) Security Update for Windows XP (KB911567) Security Update for Windows XP (KB911927) Security Update for Windows XP (KB912919) Security Update for Windows XP (KB913433) Security Update for Windows XP (KB913446) Security Update for Windows XP (KB913580) Security Update for Windows XP (KB914388) Security Update for Windows XP (KB914389) Security Update for Windows XP (KB916281) Security Update for Windows XP (KB917159) Security Update for Windows XP (KB917344) Security Update for Windows XP (KB917422) Security Update for Windows XP (KB917953) Security Update for Windows XP (KB918118) Security Update for Windows XP (KB918439) Security Update for Windows XP (KB918899) Security Update for Windows XP (KB919007) Security Update for Windows XP (KB920213) Security Update for Windows XP (KB920214) Security Update for Windows XP (KB920670) Security Update for Windows XP (KB920683) Security Update for Windows XP (KB920685) Security Update for Windows XP (KB921398) Security Update for Windows XP (KB921503) Security Update for Windows XP (KB921883) Security Update for Windows XP (KB922616) Security Update for Windows XP (KB922819) Security Update for Windows XP (KB923191) Security Update for Windows XP (KB923414) Security Update for Windows XP (KB923689) Security Update for Windows XP (KB923694) Security Update for Windows XP (KB923980) Security Update for Windows XP (KB924191) Security Update for Windows XP (KB924270) Security Update for Windows XP (KB924496) Security Update for Windows XP (KB924667) Security Update for Windows XP (KB925902) Security Update for Windows XP (KB926255) Security Update for Windows XP (KB926436) Security Update for Windows XP (KB927779) Security Update for Windows XP (KB927802) Security Update for Windows XP (KB928255) Security Update for Windows XP (KB928843) Security Update for Windows XP (KB929969) Security Update for Windows XP (KB930178) Security Update for Windows XP (KB931261) Security Update for Windows XP (KB931768) Security Update for Windows XP (KB931784) Security Update for Windows XP (KB932168) Security Update for Windows XP (KB935839) Security Update for Windows XP (KB935840) Security Update for Windows XP (KB936021) Security Update for Windows XP (KB937143) Security Update for Windows XP (KB938127) Security Update for Windows XP (KB938829) Update for Windows Media Player 10 (KB910393) Update for Windows Media Player 10 (KB913800) Update for Windows Media Player 10 (KB926251) Update for Windows XP (KB894391) Update for Windows XP (KB896727) Update for Windows XP (KB898461) Update for Windows XP (KB900485) Update for Windows XP (KB900930) Update for Windows XP (KB904942) Update for Windows XP (KB908531) Update for Windows XP (KB910437) Update for Windows XP (KB912945) Update for Windows XP (KB914882) Update for Windows XP (KB916595) Update for Windows XP (KB920872) Update for Windows XP (KB922582) Update for Windows XP (KB927891) Update for Windows XP (KB930916) Update for Windows XP (KB931836) Update for Windows XP (KB936357) Update for Windows XP (KB938828) Update Rollup 2 for Windows XP Media Center Edition 2005 USB Storage Adapter FX (SM1) VIA Platform Device Manager Windows Imaging Component Windows Installer 3.1 (KB893803) Windows Installer 3.1 (KB893803) Windows Media Format Runtime Windows XP Hotfix - KB834707 Windows XP Hotfix - KB867282 Windows XP Hotfix - KB873333 Windows XP Hotfix - KB873339 Windows XP Hotfix - KB885250 Windows XP Hotfix - KB885835 Windows XP Hotfix - KB885836 Windows XP Hotfix - KB885884 Windows XP Hotfix - KB886185 Windows XP Hotfix - KB887472 Windows XP Hotfix - KB888113 Windows XP Hotfix - KB888302 Windows XP Hotfix - KB890047 Windows XP Hotfix - KB890175 Windows XP Hotfix - KB890546 Windows XP Hotfix - KB890859 Windows XP Hotfix - KB890923 Windows XP Hotfix - KB891220 Windows XP Hotfix - KB891781 Windows XP Hotfix - KB893066 Windows XP Hotfix - KB893086 Windows XP Hotfix - KB896178 Windows XP Media Center Edition 2005 KB908246 Windows XP Media Center Edition 2005 KB919803 Windows XP Media Center Edition Screen Saver Screen Saver X10 Hardware™

Hi vista?,

By doing what you've instructed, wil it get me rid of all of these pop - ups and the AV System Care pop ups as I can't take it anymore?

Almost certainly


There's quite a bit in this post so please take time to follow the instructions carefully. If you have any problems, please stop and let me know.

• Download BFU.zip from here
• Right click on BFU.zip and click Extract all
• Press Next, change the target folder to C:\BFU, press Next, uncheck Show extracted files and Finish
• Right click here and choose Save Link as to download EGDACCESS.bfu by Metallica
• Save it into C:\BFU as EGDACCESS.bfu

Copy/paste the following quote box into a new Notepad (not wordpad) document. Make sure that Format->Wordwrap is unchecked.

@echo off
If exist temp.reg del /q temp.reg
echo REGEDIT4 > temp.reg
echo.>> temp.reg
echo [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\crbovkahdl] >> temp.reg
echo.>> temp.reg
echo [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run] >> temp.reg
echo "crbovkahdl"=- >> temp.reg
echo.>> temp.reg
regedit /s temp.reg
attrib -r -s -h %windir%\prefetch\crbovkahdl.*
attrib -r -s -h %windir%\system32\crbovkahdl_navps.*
attrib -r -s -h %windir%\system32\crbovkahdl_nav.*
attrib -r -s -h %windir%\system32\crbovkahdl.*
attrib -r -s -h %windir%\system32\crbovkahdl_m2s.*
attrib -r -s -h %WINDIR%\crbovkahdl.exe-*.pf
del /q %windir%\prefetch\crbovkahdl.*
del /q %windir%\system32\crbovkahdl_navps.*
del /q %windir%\system32\crbovkahdl_nav.*
del /q %windir%\system32\crbovkahdl.*
del /q %windir%\system32\crbovkahdl_m2s.*
del /q %WINDIR%\crbovkahdl.exe-*.pf
del /q temp.reg

Save it to your Desktop as "naviclean.bat" (you MUST include the quotes)

It may be a good idea to print the rest of these instructions off as you will be rebooting your computer and will not have internet access while in safe mode

Make sure the Blacklight program is on your Desktop

• Press Start->Run, copy this command into the box and press OK:
  

  "%userprofile%\desktop\fsbl.exe" /expert

• This will launch BlackLight
• Select I accept the agreement
• Click Next>
• Click Scan
• Wait for the scan to finish
• Click on Next>
• Now click on the first item listed and click Rename
• Repeat for the rest of the items listed
• Click Next>
• Tick the box next to I understand the warning
• Click OK
• Click Restart now
• Click OK

Your computer will then restart

Reboot your computer in Safe Mode:
Restart your computer and as soon as it starts booting up again continuously tap F8
A menu should appear, use the arrow keys to select Safe Mode and press enter

Once in Safe Mode:

Locate naviclean.bat on your Desktop and double-click it. A DOS window will open briefly and then close, this is normal

• Go to C:\BFU and double click BFU.exe to start the Brute Force Uninstaller (BFU) by Merijn
• Click on the folder icon [external image: Posted Image]
• Find and select EGDACCESS.bfu
• Click Open
• Click Execute
• Wait for the script to finish executing
• You will get the message Completed script execution.
• Click OK
• Close BFU

Now, restart your computer normally

Make sure Blacklight is on your Desktop
Press Start->Run, copy this command into the box and press OK:

"%userprofile%\desktop\fsbl.exe" /expert

• Choose I accept the agreement, then Next and Scan
• It will create the fsbl-xxxxxxx.log on your desktop.
• The log will have a list of all items found.
• Do not choose to rename any this time
• Exit Blacklight and post the contents of the log in your next reply.

Once complete, please post the last Blacklight log along with a new HijackThis log.

Hi! I tried following your instructions. When you mention going to Safe Mode you say to press F8. When I press F8 on my computer, I end up with a menu like this. What should I choose in order to get to safe mode? Boot Menu == Select a boot First Device == Removable (*) Hard disk (*) CD ROM (*) (*) These are the 3 options. Which should i choose. Urgent help. plus will i need to re do all yours recent instructions?

Hi vista?, You should choose Hard disk. Keep pressing F8 after you select Hard disk and hopefully you should get the Windows boot menu with Safe Mode as an option. You don't need to repeat any instructions, once you get into Safe Mode just continue with the instructions from that point.

As you said, i went on hard disk and the two below options below came: Ch2 M. : WDC WD2500JS 00NCBI Bootable add in cards Please help. Isn't there a way I could get to safe mode without doing this as this may take forever!!! Couldn't you kindly just find something which I type in on Run programmes and as soon as i press ok it restarts my pc in safe mode!

silver please help me!!

Hi vista?,

I'm sorry you are having difficulty, I don't know the menu structure you are dealing with so I can't give you instructions on how to navigate through it.

We'll use a different removal method, please do not continue with instructions from my last post and do the following:

I recommend you save/print these instructions before continuing.

Download Navilog1.exe to your Desktop

• Double-click Navilog1.exe to start the program
• Select English, press Suivant >, then follow the prompts and the program will automatically start.
• A black box will appear and offer language choices, type E and press enter to select English
• Go through to the main menu and type 4 and press enter
• Type the following name exactly:

  crbovkahdl

• Please re-type the name again to make sure
• The fix will now proceed, and your computer will restart - if it doesn't, then restart manually
• Once your machine has restarted, choose your usual account
• Wait for the fix to complete and for the log file to be displayed.
• Post a copy of the log file in your next response - it is stored here: %SystemDrive%\cleannavi.txt (usually C:\cleannavi.txt)

NOTE: After the fix, if your Desktop does not return, then press CTRL-ALT-DELETE, from Task Manager press New Task…, type explorer.exe and press OK.

————————————————————————

Make sure Blacklight is on your Desktop
Press Start->Run, copy this command into the box and press OK:

"%userprofile%\desktop\fsbl.exe" /expert

• Choose I accept the agreement, then Next and Scan
• It will create the fsbl-xxxxxxx.log on your desktop.
• The log will have a list of all items found.
• Do not choose to rename any
• Exit Blacklight and post the contents of the log in your next reply.

Once complete, please post the Navilog1 report, the last Blacklight log along with a new HijackThis log.