Please save this page to
Notepad in order to assist you when carrying out the following instructions.
Before beginning the fix,
read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding.
Ensure that there aren't any opened browsers when you are carrying out the procedures below.
It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence.
------------------------------------------------------
Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate.
Please stay with me until given the 'all clear' even if symptoms seemingly abate.
Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper.
------------------------------------------------------
Although McAfee Security Center is showing in your Add or Remove Programs Panel, it appears that you have no antivirus program running. Please inform us of your current state of antivirus protection.
------------------------------------------------------
Quote:
Windows Internal Firewall is enabled.
FW: McAfee Personal Firewall Plus v (McAfee)
|
It appears that you have two firewalls enabled, which can cause system instability. Please disable Windows Firewall via the Security Center in your Control Panel.
------------------------------------------------------
If your system seems sluggish, it is most likely due to low RAM.
Quote:
Percentage of Memory in Use: 70%
Physical Memory (total/avail): 254 MiB / 74.85 MiB
Total Physical Memory: 254 MiB (512 MiB recommended).
|
Please read the following article:
http://users.telenet.be/bluepatchy/m...wcomputer.html
Please visit
Crucial where you can either input your model number or download a small application that will tell you exactly the type of RAM you need.
------------------------------------------------------
I see you have
SpyHunter installed on your system. This application was previously listed as a rogue program because of deceptive advertising. Please read
here
Although no longer listed as such, we recommend uninstalling it via Add or Remove Programs in your control panel and downloading antispyware programs that have proven themselves tried and true. See
here for a list of trustworthy antispyware products.
If you decide to uninstall it, also delete this
Folder if it still exists:
C:\Program Files\Enigma Software Group
------------------------------------------------------
Please uninstall the following via the Add or Remove Panel (Start->(or My Computer)->Control Panel->Add or Remove Programs) if they exist:
Viewpoint Media Player<<<This is considered foistware instead of malware since it is installed without users approval, but doesn't spy or do anything "bad". Please read
here and
here
------------------------------------------------------
Please visit this webpage for instructions on downloading and running ComboFix:
http://www.bleepingcomputer.com/comb...o-use-combofix
Please ensure you read this guide carefully and install the Recovery Console first.
The Windows Recovery Console will allow you to boot up into a special recovery(repair) mode, if needed. This allows us to help you in the case that your computer has a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time.
Once installed, you should see a blue screen prompt that says:
The Recovery Console was successfully installed.
Please continue as follows:
- Close/disable all anti-virus and anti-malware programs so they do not interfere with the running of ComboFix. Get help here
- Please click Yes to continue scanning for malware.
When the tool is finished, it will produce a log for you.
Please post that log,
ComboFix.txt along with a new
HijackThis log so we may continue cleansing the system.
------------------------------------------------------
Open
HijackThis and click on 'Do a System Scan and Save a Logfile'. Save the logfile and post it here.
------------------------------------------------------
Please post the following in your next reply:
C:\ComboFix.txt
new HijackThis log
If you have any questions along the way...STOP and ask them before proceeding.