Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

AN OLD COMPUTOR NEWBIE IN DIRE NEED

MalwareRemoval.com provides free support for people with infected computers. Using plain language that anyone can understand, our community of volunteer experts will walk you through each step.

Unread postby beynac » November 8th, 2007, 12:05 pm

It looks as if that worked very nicely. :) Now we need to secure the computer to prevent re-infection.

-------------------------------------------

As I mentioned earlier, you are currently using an unpatched version of Windows XP and are, thus, wide open to infections. It is CRITICAL that you update to Service Pack 1a immediately, so that we are not wasting our time. You can get SP1a here. You will also need to get SP2, but NOT NOW, only after we are sure that your computer is clean. I need to run some more checks before we can be sure of this.

Apply the update and reboot the computer. Please let me know if you have any problems.

-------------------------------------------

There is evidence in the ComboFix logs of McAfee and Norton programs. None of these are running. I would therefore like to see a list of the programs installed on the computer before I make recommendations.

Please open HijackThis
  • Click on the Open the Misc Tools section button
  • Click on Open Uninstall Manager...
  • Click on Save List... (towards the bottom right)
  • Save the text file to a convenient location
-------------------------------------------

Please post, as a reply to this thread:
  • The HijackThis Uninstall list
  • A new HijackThis log
Please let me know how the computer is running now. Are you still getting any popups?
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England
Advertisement
Register to Remove

Unread postby owzatsteve » November 8th, 2007, 1:48 pm

hi beynac
i tried to download sp1 but kept getting an error message saying the product key to install windows is invalid so it wouldent let me

Ad-Aware 2007
Adobe Flash Player 9 ActiveX
Adobe Shockwave Player
ArcSoft PhotoStudio 2000
BroadJump Client Foundation
Dell AIO Printer A940
EPSON Printer Software
Google Toolbar for Internet Explorer
Google Toolbar for Internet Explorer
GoToAssist 8.0.0.480
HijackThis 2.0.2
Information Center
Java(TM) 6 Update 2
Java(TM) SE Runtime Environment 6 Update 1
Microsoft XML Parser and SDK
Net Cribbage 6
Norton Security Scan
OmniPage Pro 9.0
Schedule One 2006 Professional Edition
Solid State ION Internet Explorer Plugin
Uniblue RegistryBooster 2
VersionTracker Pro Windows
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Format Runtime
Windows Media Player 10
Windows XP Hotfix - KB823559
Windows XP Hotfix - KB828741
Windows XP Hotfix - KB834707
Windows XP Hotfix - KB835732
Windows XP Hotfix - KB842773
Windows XP Hotfix (SP1) [See Q282010 for more information]
Windows XP Hotfix (SP1) [See Q329048 for more information]
Windows XP Hotfix (SP1) [See Q329390 for more information]
Windows XP Hotfix (SP1) [See Q329441 for more information]
Windows XP Hotfix (SP1) [See Q329834 for more information]
Windows XP Hotfix (SP1) Q329170
Windows XP Hotfix (SP1) Q810577
Windows XP Hotfix (SP1) Q810833
Windows XP Hotfix (SP1) Q815021
Windows XP Hotfix (SP1) Q817606
Windows XP Hotfix (SP2) [See Q329115 for more information]
WinZip
owzatsteve
Regular Member
 
Posts: 15
Joined: November 5th, 2007, 4:30 pm
Location: royston ENGLAND

Unread postby beynac » November 8th, 2007, 2:14 pm

Are you using a legal copy of Windows? Please have a look and see if there is a Microsoft sticker on the computer case. If there is, it should show your Windows Product Key. Be careful - shut the computer down and switch it off if you have to move it.

A second point: There is a folder we need to delete. Please click on Start > My Computer and open the Program Files folder. Delete the folder called Online Add-on including the contents. Please let me know whether this is successful.

Please also let me know about the situation regarding Windows and the product key.
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England

Unread postby owzatsteve » November 8th, 2007, 2:19 pm

THE COMPUTOR WAS GIVEN TO ME WITH THE WINDOWS PROGRAM ALLREADY ON IT AND NO DISCS and i cant find the file you mentioned only online services but its not in there
owzatsteve
Regular Member
 
Posts: 15
Joined: November 5th, 2007, 4:30 pm
Location: royston ENGLAND

Unread postby beynac » November 8th, 2007, 2:28 pm

It's not the disks that we need, it's a valid product key. The key used when the operating system was installed is not valid (according to Microsoft) but that doesn't mean that there isn't a valid one for the computer. This is what would show on the sticker. Please let me know whether there is a Microsoft sticker on the computer.

Don't worry about the Online Add-on folder. It's gone - that's the main thing. :)
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England

Unread postby owzatsteve » November 8th, 2007, 2:35 pm

cq3yt drrx8 3gcyf 648wc xbcv6 hope this is it
owzatsteve
Regular Member
 
Posts: 15
Joined: November 5th, 2007, 4:30 pm
Location: royston ENGLAND

Unread postby beynac » November 8th, 2007, 3:52 pm

That looks like it. Let's check what is loaded in the system and change it if necessary.

Download Magic Jelly Bean Key Finder from here. Save it on your desktop.

Edit: I have sent you a PM with the instructions in order to safeguard the product key.


Please let me know how you get on.
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England

Unread postby beynac » November 9th, 2007, 4:44 am

Good morning.

I've replied to your PM.
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England

Unread postby owzatsteve » November 9th, 2007, 5:04 am

owzatsteve wrote:PRODUCT KEY hope this is it
owzatsteve
Regular Member
 
Posts: 15
Joined: November 5th, 2007, 4:30 pm
Location: royston ENGLAND

Unread postby beynac » November 9th, 2007, 11:53 am

Good afternoon Steve.

I'm still looking into the best way to get your Windows XP sorted out. In the meantime, we need to get some protection on your computer by installing an antivirus program. I suggest that you try AVG Free as it is very straightforward to use.
  • Download it from here and save the file on your desktop
  • Double-click on the downloaded file to install the program
  • Once it has installed, delete the downloaded installation file
  • Reboot your computer
  • Double-click on the AVG icon on your desktop to open the program
  • Click Check for Updates. There may be several to download. Repeat the operation until all have been received
  • Click on Scan Computer
  • Close the program once the scan has completed
  • Let me know if there are any problems
Run regular scans and check to make sure that the program is up to date.

-----------------------------------------------

I will post again as soon as I have some more information about the Product Key. Please could you let me know how the computer is running. Have the popups stopped?
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England

Unread postby beynac » November 9th, 2007, 12:24 pm

Good afternoon Steve.

Please note my previous post if you haven't already seen it.

Download the Windows Product Key Update Tool from here. Follow the instructions given on that page. Make sure that you carefully enter the Product Key printed on the sticker. Let me know if you have any problems. If it seems to work, reboot and then check that it has worked by using Jelly Bean.

If everything looks good, you will need to re-activate Windows. Make sure that your internet connection is open. There should be a Windows Activation icon in the notification area of your taskbar. Double-click on this to run the activation wizard (If it's not there, click on Start > All Programs > Accessories > System Tools > Activate Windows).
  • Click Yes, let's activate Windows over the Internet now.
  • Click Next
  • Click No, I don't want to register now; let's just activate Windows, and then click Next
  • The wizard establishes a connection with an activation server, and then processes the activation request.
  • When activation is completed you should get a message You have successfully activated your copy of Windows
  • Click OK
Please let me know how you get on.
User avatar
beynac
MRU Honors Grad Emeritus
 
Posts: 1638
Joined: February 14th, 2006, 12:14 pm
Location: Norwich, England

Re: AN OLD COMPUTOR NEWBIE IN DIRE NEED

Unread postby Gary R » November 20th, 2007, 7:25 am

Due to lack of response this topic is now closed.

If you are the originator of this topic, and you need it re-opened please send an email to 'admin at malwareremoval.com', including a link to this topic.

If you have been helped and wish to donate to help with the costs of this volunteer site, please read Donations For Malware Removal

Please do not contact us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.

Gary R
User avatar
Gary R
Administrator
Administrator
 
Posts: 21871
Joined: June 28th, 2005, 11:36 am
Location: Yorkshire
Advertisement
Register to Remove

Previous

  • Similar Topics
    Replies
    Views
    Last post

Return to Infected? Virus, malware, adware, ransomware, oh my!



Who is online

Users browsing this forum: No registered users and 21 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware