Please Help with spyware

Hi rcnyst

1 - Clean temp files

• Please download TFC to your desktop
• Save any unsaved work. TFC will close all open application windows.
• Double-click TFC.exe to run the program.
• If prompted, click Yes to reboot.

NOTE: Save your work.TFC will automatically close any open programs, let it run uninterrupted. It shouldn't take longer take a couple of minutes, and may only take a few seconds. Only if needed will you be prompted to reboot.

2 - Eset online scannner

You can use either Internet Explorer or Mozilla FireFox for this scan.

Note: If you are using Windows Vista, open your browser by right-clicking on its icon and select 'Run as administrator' to perform this scan.

• Please go here then click on:
• Select the option YES, I accept the Terms of Use then click on:
• When prompted allow the Add-On/Active X to install.
• Make sure that the option Remove found threats is NOT checked, and the option Scan archives is checked.
• Now click on Advanced Settings and select the following:

• Scan for potentially unwanted applications
  
• Scan for potentially unsafe applications
• Enable Anti-Stealth Technology


• Now click on:
• The virus signature database... will begin to download. Be patient this make take some time depending on the speed of your Internet Connection.
• When completed the Online Scan will begin automatically.
• Do not touch either the Mouse or keyboard during the scan otherwise it may stall.
• When completed select Uninstall application on close if you so wish, make sure you copy the logfile first!
• Now click on:
• Use notepad to open the logfile located at C:\Program Files\ESET\EsetOnlineScanner\log.txt.
• Copy and paste that log as a reply to this topic.

3 - Run Hijackthis
Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad

4 - Status Check
Please reply with

1. the Eset online scannner report
2. a fresh HijackThis log

Thanks peku006

I cannot get to the eset website at all. I have everything disabled and still cannot get there.

Hi rcnyst

Please download radix_installer.zip to a conveniant location and extract it to your Desktop.

• Double click on radixgui.exe to start the application.
• Then without making any changes click the Check button to start the scan.
• Once it has completed click the Save Log... button and save that to your Desktop.
• Close the application.
• Now the Log saved will be a very large logfile, so zip a copy of it and attach it to your next reply please.
• How to Zip: Right click on the saved Log and Send To >> Compressed (zipped) Folder.
• Note: Your installed security applications might warn about Radix requiring internet access, please allow.

!!!Caution: The Radix scanner has numerous settings and options, including many that can cause quick and permanent corruption to your operating system. Avoid the temptation to try any other options, scans or settings when using it.

Thanks peku006

here it is

Hi rcnyst

Let´s try this

• Open Notepad by click start
• Click Run
• Type notepad into the box and click enter
• Notepad will open
• Copy and Paste everything from the Code box into Notepad:

Windows Registry Editor Version 5.00



[-HKEY_CURRENT_USER\Software\Classes\.exe\shell\open\command]



[-HKEY_CURRENT_USER\Software\Classes\secfile\shell\open\command]



[-HKEY_CLASSES_ROOT\.exe\shell\open\command]



[HKEY_CLASSES_ROOT\.exe]

@="exefile"

"Content Type"="application/x-msdownload"



[-HKEY_CLASSES_ROOT\secfile]

• Go to File > Save As
• Save File name as Fix.reg
• Change Save as Type to All Files and save the file to your desktop
• Close Notepad, and double-click Fix.reg on your Desktop
• When it asks if you want to merge the info to the registry, hit YES/OK

Then update MBAM and run a FULL Scan with it

Thanks peku006

ran that but still cannot update mbam

Hi rcnyst

Another way to get the most current database definitions is to install MBAM on a clean computer, launch the program, update through MBAM's interface, copy the definitions (rules.ref) to a USB stick or CD and transfer that file to the infected machine. Copy rules.ref to the location indicated for your operating system.

* XP: C:\Documents and Settings\All Users\Application Data\Malwarebytes\Malwarebytes' Anti-Malware
* Vista: C:\Documents and Settings\Users\All Users\Malwarebytes\Malwarebytes' Anti-Malware

Thanks peku006

a lack of response,