Author Topic: Help me please,i need your help  (Read 18346 times)

0 Members and 1 Guest are viewing this topic.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7333
  • Liverpool FC - YNWA
    • View Profile
Re: Help me please,i need your help
« Reply #45 on: July 16, 2007, 05:21:39 PM »
What sorts of cracked software have you been loading?

I may have missed your answer to this earlier question.  It's pretty clear you have been downloading cracks/warez/etc and got yourself infected.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Mr Mando

  • Full Member
  • ***
  • Posts: 26
    • View Profile
Re: Help me please,i need your help
« Reply #46 on: July 16, 2007, 05:53:35 PM »
yes its true,

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7333
  • Liverpool FC - YNWA
    • View Profile
Re: Help me please,i need your help
« Reply #47 on: July 16, 2007, 07:29:58 PM »
yes its true,

No kidding ...  8)

Perhaps you might give us a few hints about what you downloaded, if for no other reason than to be able to properly assist you.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline Mr Mando

  • Full Member
  • ***
  • Posts: 26
    • View Profile
Re: Help me please,i need your help
« Reply #48 on: July 16, 2007, 07:38:28 PM »
i downloaded a program that opens the webcam for anyone you talk with,but it was a virus.

Offline Corrine

  • The Mystical Rose
  • Administrator
  • Hero Member
  • *****
  • Posts: 20218
  • "Stronger than the past, united in our goal."
    • View Profile
    • Security Garden
Re: Help me please,i need your help
« Reply #49 on: July 16, 2007, 10:30:52 PM »
Ok, Mr Mando.  Let's give this a shot. 

During this process, please change your settings to show hidden files.  You can change the setting back when the cleanup is completed.
  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View Tab.
  • Under the Hidden files and folders heading select Show hidden files and folders.
  • Uncheck the Hide protected operating system files (recommended) option.
  • Click Yes to confirm.
  • Click OK.
Download the Killbox © Option^Explicit.
Unzip it to the desktop

Please uninstall PrivacyGuard since the Dr Web log indicates you installed a crack copy.

Let's take care of the service first.
  • Go to Start > Run and type in Services.msc then click OK
  • Click the Extended tab.
  • Scroll down until you find the service SurferService
  • Click once on the service to highlight it.
  • Click Stop
  • Right-Click on the service.
  • Click on 'Properties'
  • Select the 'General' tab
  • Click the Arrow-down tab on the right-hand side on the 'Start-up Type' box
  • From the drop-down menu, click on 'Disabled'
  • Click the 'Apply' tab, then click 'OK'

Close all programs leaving only HijackThis running.  Place a check against each of the following, making sure you get them all and not any others by mistake:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O3 - Toolbar: Webshots Toolbar - {C17590D2-ECB4-4b15-8820-F58798DCC118} - G:\Webshots\WSToolbar4IE.dll (file missing)
O4 - HKCU\..\Run: [ThePrivacyGuard] "C:\PROGRA~1\THEPRI~1\THEPRI~1.EXE" /startup
O23 - Service: RA Server (Slave) - TWD Industries, LLC - C:\WINDOWS\Slave.exe


Click on Fix Checked when finished and exit HijackThis.

Select "Delete on Reboot".
Place the following line (complete path) in bold in the "Full Path of File to Delete" box in Killbox:
C:\WINDOWS\Slave.exe
Put a mark next to "Delete on Reboot"
Click the red-and-white "Delete File" button.  Click "Yes" at the Delete on Reboot prompt.  Click "No" at the Pending Operations prompt.

If your computer does not restart automatically, please restart it manually.

When you reply, not only do I want to see a fresh HijackThis log, I also want to see a firewall and antivirus software.  Links to free software were posted above. 



Take a walk through the "Security Garden" -- Where Everything is Coming up Roses!

Remember - A day without laughter is a day wasted.
May the wind sing to you and the sun rise in your heart.

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7333
  • Liverpool FC - YNWA
    • View Profile
Re: Help me please,i need your help
« Reply #50 on: July 17, 2007, 10:50:56 PM »
I don't see any signs in the HJT log of Windows Genuine Advantage ...

Do you have a cracked copy of XP running?

Also, it is rare to see a HJT log without any O16 items.  Did you remove all of them prior to posting the log?
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member

Offline MikeW

  • LzD Friends
  • Hero Member
  • *****
  • Posts: 565
    • View Profile
Re: Help me please,i need your help
« Reply #51 on: July 21, 2007, 03:54:05 PM »
Seems like your big gun silenced him winchester73 :D
Win 7 Home Premium  IE11 MSE  Mbam Pro

Offline winchester73

  • Half a bubble off plumb
  • Administrator
  • Hero Member
  • *****
  • Posts: 7333
  • Liverpool FC - YNWA
    • View Profile
Re: Help me please,i need your help
« Reply #52 on: July 21, 2007, 06:39:45 PM »
Indeed ...  :)

Perhaps Mr Mando is on holiday or something.
Speak softly, but carry a big Winchester ... Winchester Arms Collectors Association member