16 replies to this topic

[kgrumpy]

Hi, I have used the malwareremoval forum and my helper from there told me to try here. He was unable to help me any further. My son's laptop will not play videos like from Yahoo home page I also cannot get pop ups from drop down menus like when registering for the forum. I am not sure what else to do with the lap top I am at the end of my rope I have even taken it in to a repair place ad spent big money for nothing. The help I recieved before did more than the service place. Any help would be GREAT! My son uses the lap top for school. I am posting a HJT log also. I am hoping I have posted in the correct place if not I am very SORRY I also can not use anything that has ActiveX


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:21:06 PM, on 4/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 SP2 (7.00.6000.16574)
Boot mode: Normal
EDITED by paws..HJT log removed and uploaded as an attachment
 HJT.txt   4.55KB   286 downloads

Edited by paws, 25 April 2008 - 11:05 AM.

[paws]

Hi and welcome to the WTT forums

We don't analyse HJT logs here on this subforum,, so if you need to post an HJT log for analysis then its best to go back to MRU or try here:
http://forums.whatth...ers_t34502.html
Once your son's machine has been declared clean of malware please post back here in this thread if you are still having issues with it and we will do our best to help .
Regards
paws

[kgrumpy]

It has been found clean of malware. I was unsure if a HJT was needed. Sorry

[paws]

Hi , no problem, its good news if your son's laptop computer has been declared free from malware.. and it means that there is no need to post another HJt (unless it has been reinfected!) Please post a link to the topic in MRU where your son's machine was declared clean and where they referred you to us here. Regards paws

[kgrumpy]

Here ya go.
http://www.malwarere...=292043#p292043

Thank you.

[paws]

Thanks, if you implemented all the recommendations made by Bio Hazard you will have already reset all your Internet Security configurations.
however it still might be worthwhile to:

1, close all applications,
2 then opening IE7, setting all security to default and then see if this helps: (Tools>Internet Options>Securitry reset all Zones to default and OK out.
3 Now close the browser, reboot and see how you go.

4 Next check that your firewall is correctly configured and is allowing access not only to your network if applicable but also IE and other legitimate applications that need access.
5 check that your security products are not blocking...pop up stoppers are often included with security products and toolbars etc.

6 Next you will need your Microsoft windows XP installation disc with SP2 included to be handy.
7 Start>Run>Type in the white box
sfc /scannow
(note the space its essential)
OK

8 The sfc scanner will now run and check that all Windows Protected System files are in the right place with none missing or damaged. If the scanner finds problems with the protected files it will attempt to copy over good copies of the files from other parts of your machine, if it cannot locate good copies it will ask you to insert the Microsoft disc referred to above.
9 The scan will take approx 20 minutes or so to run, there is no "output report" file (as such) so keep an eye on it whilst it's running....the fixes will be applied automatically.
10 When it has finished, reboot your computer and see how you go. NOTE you may need to repeat this procedure if errors are found. (if you can't locate the correct disc, it's OK to borrow one from a chum, as long as it's the correct version for your machine (WIN XP Pro or HOME with SP2)

11 I see you do not hava Java installed...it might be wise to go here:
http://java.sun.com/...loads/index.jsp
this is the version needed.
Java Runtime Environment (JRE) 6 Update 6
(The Java SE Runtime Environment (JRE) allows end-users to run Java applications. )

12 as its possible that a repair installation of Windows may be required at some stage in the future, so it would be wise to check that your back up/archive/copy of all important stuff
(anything that would create a problem if it was lost) on the machine is 100% up to date, accurate and reproducible. Use of external media is recommended for this. Even if it is only a day or so out of date take the opportunity now to correct it just to be on the safe side
Post back and let us know how you go
Regards
paws

Edited by paws, 27 April 2008 - 02:50 AM.

[kgrumpy]

I don't have the disk can I still run the scan?

[paws]

Yes,
but if damaged, or missing protected system files are found, and new or good undamaged versions need copying into your system and they are unavailable elsehere in your computer , then you will need the disc.
However:

(if you can't locate the correct disc, it's OK to borrow one from a chum, as long as it's the correct version for your machine (WIN XP Pro or HOME with SP2)

so generally it is no problem.
Regards
paws

[kgrumpy]

I need to find someone with a disk both of our computers came with it already on here. I have done all the steps above and no change yet. Any other suggestions?

[paws]

Hi, Yes you will need to do this, so borrow one from a chum.

The next steps would be to make sure your Flash Player is up to date so visit their website and download any updates
http://www.tutorials...Explorer-72290/
Have a look here and follow the directions, and disable your add ins on IE7
But make sure you run the SFC as its important. You can run it without having the disc, but if it asks you to insert the disc to copy across good files then you know you must visit a chum as soon as possible.

Just in case your son needs, at some time in the future, to repair or even reinstall his operating system to ensure full functionality, it would be wise to check that his back up/archive.copy of all important stuff on his machine (anything that would be a problem or inconvenience to him if it was lost) is 100% up to date accurate and reproducible. Even if the back up/archive/copy is only a day or two old it is recommended to bring it up to date immediately and keep it safe on removable media.
Regards
paws

[kgrumpy]

Is there something specific I need to be looking for on the link you sent? I am confused. Sorry to be a pain I just don't want to mess up.

[paws]

Here's the extract from the link I gave you that I wanted you to look at...also Have you borrowed the disc yet ?(for SFC)

Start by removing any installed toolbars (Control Panel --> Add/Remove 
Programs). 
The biggest offenders are Yahoo! and Google toolbar. Uninstall these 
toolbars and test the browser. If it works and you would like to keep the 
toolbars just simply reinstall them and all should be well. 

Also go to the "Control Panel" --> "Internet Options" -->"Advanced tab" and 
under the "Browsing" section, uncheck "Enable 3rd Party Browser Extensions".

Regards
paws

[kgrumpy]

I have not found a disk to borrow yet. I am hoping to have found one by the end of the day.

[paws]

[kgrumpy]

There was nothing for Browsing in the internet options. It was empty. This is how the computer makes me feel.