Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Boot up problems

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby Dumble » August 16th, 2007, 6:57 am

That was IncrediMail I've removed.
Dumble
Active Member
 
Posts: 13
Joined: August 12th, 2007, 2:19 am
Location: Gloucester
Advertisement
Register to Remove

Unread postby km2357 » August 16th, 2007, 5:08 pm

Your Kaspersky log came back clean, the only thing found was the tool I had you download earlier, SmitFraudFix.

You can remove SmitFraudFix from your computer by deleting its folder off of your Desktop. You can also delete the Kaspersky log as well.


Now for your Blue Screen problem. I want to be clear that we are no longer fixing malware, but starting to troubleshoot your Windows Installation. I will be giving a few steps to do to help solve this problem. I will also be giving you some links to some forums that can help with this problem.

1. If this happens again you can try booting into Last Known Good Configuration to see that solves the problem:

When the computer boots up press F8.

Use the arrow keys to select Last Known Good Configuration, and then press ENTER.

Use the arrow keys to highlight an operating system, and then press ENTER.


2. Run a memory test.

Make a Memtest boot floppy or boot CD and run it.

http://www.memtest86.com/

3. Run chkdsk on the system partition.

Click Start-Run, type cmd in the box that opens and hit Enter. In the window that opens type chkdsk d: and hit Enter.

If it shows any errors, rerun it as chkdsk d: /F and Reboot when it finishes.

4. Run system file checker.

If you have the Full XP SP2 CD, you can try this to see if it fixes your problem.

Click Start-Run, type cmd in the box that opens and hit Enter. In the window that opens type sfc /scannow and hit Enter. (There is a space between the c in sfc and the /)


Finally, here are some forums that can provide additional help:

Computer Trouble here: http://forum.computertrouble.co.uk/index.php
or
TechSupportGuy here : http://forums.techguy.org/21-windows-nt-2000-xp/
or
VirtualDr here: http://discussions.virtualdr.com/forumdisplay.php?f=48
or
PCPitStop here : http://forums.pcpitstop.com/index.php?showforum=3

All may require free registration before posting for help.
User avatar
km2357
MRU Master
MRU Master
 
Posts: 3003
Joined: January 30th, 2007, 2:48 pm
Location: California

Unread postby Dumble » August 17th, 2007, 3:46 am

Thank you for your help. I feel much happier knowing that I can back up my system, without malware. I will follow up your suggestions and hopefully get things running smoothly again.
Dumble
Active Member
 
Posts: 13
Joined: August 12th, 2007, 2:19 am
Location: Gloucester

Unread postby km2357 » August 17th, 2007, 7:03 pm

Glad I was able to help out. Once you have the problem with the Blue Screen error message all fixed and sorted out, can you post back here telling me so, so I can give you the all-clean? And if you run into any more problems which you think maybe malware-related, post that info here as well.

Thanks.
User avatar
km2357
MRU Master
MRU Master
 
Posts: 3003
Joined: January 30th, 2007, 2:48 pm
Location: California

Unread postby Dumble » August 26th, 2007, 12:32 pm

I think I have resolved the problem. After following your suggestions I found a referenence which indicated that InCD which is part of Nero might be the cause. I updated Nero6 Reloaded which did not improve the situation then decided to uninstall InCD. Since then I have not experienced any problems. It has been over a week now and the computer has booted every time without incident.
Dumble
Active Member
 
Posts: 13
Joined: August 12th, 2007, 2:19 am
Location: Gloucester

Unread postby km2357 » August 26th, 2007, 7:41 pm

Hi Dumble.

That's great that you solved your Blue Screen problem and thanks for letting me know.



To clean your computer, I asked you to download some tools.


I would like you to remove these tools that I have listed below from your computer


Tools to Remove:


SmitFraudFix (Delete SmitfraudFix.exe and the SmitFraudFix folder from your desktop)



Please take the time to read my All Clean Post.

Please follow these simple steps in order to keep your computer clean and secure:

  • Disable WinXP System Restore

    Disable your System Restore to remove malware files that have been backed up by Windows. The files in System Restore are protected to prevent any programs changing them. The only way to erase these files is to temporarily disable System Restore. You will lose all previous restore points which are likely to be infected.
    - Right-click My Computer, and then click Properties.
    - On the System Restore tab, put a Check mark in the Turn Off System Restore check box.
    - Click OK twice, and then click Yes when you are prompted to restart the computer.
    If you are not prompted to reboot, do it on your own.
    -----------------------------------------------------------
    After the Reboot,
    Enable WinXP System Restore
    - Right-click My Computer, and then click Properties.
    - On the System Restore tab, Clear the Check mark beside the Turn Off System Restore check box.
    - Click OK twice, and then click Yes when you are prompted to restart the computer.
    The Disable/Re-enable System Restore sequence is not to be done regularly, but only as a Special Case after the removal of malware.
  • Make your Internet Explorer more secure This can be done by following these simple instructions:
    1. From within Internet Explorer click on the Tools menu and then click on Options.
    2. Click once on the Security tab
    3. Click once on the Internet icon so it becomes highlighted.
    4. Click once on the Custom Level button.
      • Change the Download signed ActiveX controls to Prompt
      • Change the Download unsigned ActiveX controls to Disable
      • Change the Initialize and script ActiveX controls not marked as safe to Disable
      • Change the Installation of desktop items to Prompt
      • Change the Launching programs and files in an IFRAME to Prompt
      • Change the Navigate sub frames across different domains to Prompt
    5. When all these settings have been made, click on the OK button.
    6. If it asks you if you want to save the settings, press the Yes button.
    7. Next press the Apply button and then the OK to exit the Internet Properties page.
  • Use IE-SPYAD Install IE SPYAD. Add another level of protection to your Internet Explorer browser by blocking certain sites that are known to contain malware. IE SPYAD puts several thousand sites in your restricted zone so you'll be protected when you visit innocent looking sites that aren't actually innocent at all. If you happen on a site within its list, they can't hijack you or install anything. Program is free and is updated about once a month. Please follow readme instructions for install; it is a little different. Single user PC use IE Spyad1. Multi user XP PC use IE Spyad2.
  • Use An Antivirus Software and Keep It Updated - It is very important that your computer has an antivirus software running on your machine. This alone can save you a lot of trouble with malware in the future. It is imperative that you update your antivirus software at least once a week (Even more if you wish). If you do not update your antivirus software, then it will not be able to catch any of the new variants that may come out.
  • Visit Microsoft's Windows Update Site Frequently It is important that you visit Microsoft Windows Update regularly. This will ensure your computer has the latest security updates available installed on your computer. If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates.
  • You should scan your computer with Spybot S&D on a regular basis just as you would an anti- virus software. A tutorial on installing & using this product can be found here:
    Using Spybot - Search & Destroy to remove Spyware from Your Computer
  • You should scan your computer with Ad-Aware as well as Spybot S&D and your anti-virus program on a regular basis. A tutorial on installing & using this product can be found here:
    Using Ad-Aware SE to remove Spyware & Hijackers from Your Computer
  • Install SpywareBlaster SpywareBlaster will add a large list of programs and sites into your Internet Explorer settings that will protect you from running and downloading known malicious programs. An article on anti-malware products with links for this program and others can be found here:
    Computer Safety on line Anti Malware
  • Use the hosts file: Every version of windows has a hosts file as part of them. In a very basic sense, they are used to locate web pages. We can customize a hosts file so that it blocks certain web pages. However, it can slow down certain computers. This is why using a hosts file is optional. Download mvps hosts file Make sure you read the instructions on how to install the hosts file. There is a good tutorial HERE If you decide to download the hosts file, the slowdown problems can usually be avoided by following these steps:
    1. Click the start button on the task bar at the bottom of your screen
    2. Click run
    3. In the dialog box, type services.msc
    4. hit enter, then locate dns client
    5. Highlight it, then doubleclick it.
    6. On the dropdown box, change the setting from automatic to manual.
    7. Click ok..
  • Use an alternative instant messenger program.Trillian and Miranda IM These are Malware free Instant Messenger programs which allow you to connect to multiple IM services in one program! (AOL, Yahoo, ICQ, IRC, MSN)
  • Please read Tony Klein's excellent article: How I got Infected in the First Place
  • Please read Understanding Spyware, Browser Hijackers, and Dialers
  • Please read Simple and easy ways to keep your computer safe and secure on the Internet
  • If you are using Internet Explorer, please consider using an alternate browser. Mozilla's Firefox browser is fantastic; it is much more secure than Internet Explorer, immune to almost all known browser hijackers, and also has the best built in popup blocker (as an added benefit!) that I have ever seen.
    Another good browser is Opera. Opera 9 comes loaded with the tools to keep you productive and safe. Try it today, it's absolutely free. Some of the Opera features are: Customization, BitTorrent, Content blocker, Add your favorite search engines, Thumbnail preview of tabs, Widgets, Transfer manager, Tabbed browsing, Password manager, Sessions (You can save a collection of open tabs as a session, for later retrieval, or start with the pages you had open when Opera was last closed.), Keyboard Shortcuts, Cookie control, a multitude of languages, Validate code, Toggle graphics and style sheets, and Special features such as Full-screen mode, Kiosk mode.
  • Update all these programs regularly Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released.
  • If your computer was infected by a website, a program, IM, MSN, or p2p, check this site because it is Time To Fight Back.
Follow these steps and your potential for being infected again will reduce dramatically.
Good luck!
User avatar
km2357
MRU Master
MRU Master
 
Posts: 3003
Joined: January 30th, 2007, 2:48 pm
Location: California

Unread postby NonSuch » August 29th, 2007, 4:41 am

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
User avatar
NonSuch
Administrator
Administrator
 
Posts: 27215
Joined: February 23rd, 2005, 7:08 am
Location: California
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 41 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware