Question about E-Machines eMachines Desktop PC

4 Answers

Virus protect- secuirty toolbar HELP!!!!

Ive been hyjacked!!! Im full of viruses, scan everything in the whole system, deleted them a million times. I cant get rid of that stupid balloon from Virus Protect or the security toolbar 7.1. I cant find it and I dont recognize my processes in the task bar.... Please help!!!!!!

Posted by on

  • 3 more comments 
  • tpnicholson Feb 05, 2008

    Somzy, cant find trend micro in my computer- but did do the uncheck misconfig- didnt work. I tried uncheckin suspicious stuff, and rebooting it in normal mode. Nothing worked. , any other suggestions?

    any ideas what to look for? I dont know what all that stuff means in there to even know what Im looking for to uncheck....



    Nick I will try to dl the cc cleaner- but if i understand correctly, you want me to do the msconfig again? what do I uncheck? I know how to start in safe mode, but ugh, Im so not a computer geek.....Thanks fellas for your help! keep the suggs coming!

  • tpnicholson Feb 09, 2008

    here somzy, this is what it came up with, let me know what else you think i should do. that blinkin icon sheild was gone for a few days, and its back again today.... my windows defender and the AVG is not getting rid of it, at least not all of it, and the security tool bar is still here, its not gone anywhere.... anyway, thanks for your help!!! heres the report....



    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 4:27:40 PM, on 2/8/2008
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16574)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Windows Defender\MsMpEng.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    C:\Program Files\Verizon\VSP\VerizonServicepoint.exe
    C:\Program Files\Windows Defender\MSASCui.exe
    C:\Program Files\Verizon\McciTrayApp.exe
    C:\Program Files\Digital Media Reader\shwiconem.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
    C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\WINDOWS\system32\ctfmon.exe
    c:\progra~1\crawler\ssaver\CSSaver.exe
    c:\progra~1\crawler\ssaver\CSSaver.exe
    c:\progra~1\crawler\ssaver\CSSaver.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\SLIDES~1.SCR
    c:\progra~1\crawler\ssaver\bin\2DSaver\2DSaver.scr
    c:\progra~1\crawler\ssaver\bin\2DSaver\ssfxmodul\ssfxmodul.scr
    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
    c:\progra~1\crawler\ssaver\bin\2DSaver\2DSaver.scr
    c:\progra~1\crawler\ssaver\bin\2DSaver\2DSaver.scr
    C:\WINDOWS\explorer.exe
    C:\Program Files\Internet Explorer\IEXPLORE.EXE
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=6...
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=5...
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=5...
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=6...
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:0
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL
    O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLL
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: (no name) - {C2A1C5CB-C0EF-4689-9436-F62CCA1C5383} - C:\Program Files\Video Add-on\isfmdl.dll (file missing)
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
    O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLL
    O3 - Toolbar: IE Custom Tools - {8113B5DE-F7EB-4154-A311-497FB80D8BD0} - C:\Program Files\Video Add-on\ictmdl.dll
    O4 - HKLM\..\Run: [LXCFCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCFtime.dll,_RunDLLEntry@16
    O4 - HKLM\..\Run: [VerizonServicepoint.exe] "C:\Program Files\Verizon\VSP\VerizonServicepoint.exe" /AUTORUN
    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    O4 - HKLM\..\Run: [Verizon_McciTrayApp] C:\Program Files\Verizon\McciTrayApp.exe
    O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\2.bin\m3SrchMn.exe" /m=2 /w
    O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [PopularScreensaversWallpaper] rundll32 C:\PROGRA~1\MYWEBS~1\bar\2.bin\F3SCRCTR.DLL,LES
    O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
    O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredit...
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ietoolgate.com/redirect.php (file missing)
    O9 - Extra 'Tools' menuitem: IE Anti-Spyware - {9034A523-D068-4BE8-A284-9DF278BE776E} - http://www.ietoolgate.com/redirect.php (file missing)
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {01113300-3E00-11D2-8470-0060089874ED} (Support.com Configuration Class) - https://activatemydsl.verizon.net/sdcCom...
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache...
    O16 - DPF: {B64F4A7C-97C9-11DA-8BDE-F66BAD1E3F3A} - http://cab.contraviruspro.com/install247...
    O22 - SharedTaskScheduler: esperantido - {67dc0736-075a-4647-95f5-d5421b838fed} - C:\WINDOWS\system32\svxmhpz.dll
    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: lxcf_device - Unknown owner - C:\WINDOWS\system32\lxcfcoms.exe
    O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
    O23 - Service: Radialpoint Unicorn Update Service (RPSUpdaterR) - Radialpoint Inc. - C:\Program Files\Verizon\PC Security Checkup\rpsupdaterR.exe

    --
    End of file - 7680 bytes

  • tpnicholson Feb 15, 2008

    to Somzy and Nick,

    I appreciate all your help, I dont know if it was the processes that i ran or the msconfig, but something, somehow, worked. all I can say is that one day a few days ago, I turned it on, and the toolbar was gone, as well as that blinkin icon. everything is back to speed, and I dont know if yall did it or what but either way, it worked. If it was you guys, thanks a bunch. I will ALWAYS come back to this site for help. I really appreciate it.

    Virus free tpnicholson.....



    FIXYA!!!!!!

  • parsuramrout Aug 18, 2008


    AT THE START TIME MONITER SHOW THE PROGRAM
    ERROR LOADING C:\PROGRAM~1\MY WEBS~1\BAR\5.BIN\M3 PLUGIN.DLL


  • Anobik Som May 11, 2010

    Plz post the name of Virus/Trojon and which anti virus u use on which operating system?

×

4 Answers

  • Level 1:

    An expert who has achieved level 1.

    Corporal:

    An expert that has over 10 points.

    Mayor:

    An expert whose answer got voted for 2 times.

    Problem Solver:

    An expert who has answered 5 questions.

  • Contributor
  • 17 Answers

I agree with somzy, but if you alreddy have done that, also i recomend getting a good anti-virus, it may slow down your computer a little, but so this doesint happen again i recomend a anti-virus like Advast from www.Advast.com its FREE 100% if you dont want to pay, but if you want strong and trusted anti-virus'es you should get Nortan 360 from www.Northan.com or you should get one of the Mcafee Internet Securitys, from www.Mcafee.com ,
Hope That Helped,
Thanks for your time!

Posted on Mar 16, 2009

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that got 5 achievements.

    Vice President:

    An expert whose answer got voted for 100 times.

    Novelist:

    An expert who has written 50 answers of more than 400 characters.

  • Expert
  • 166 Answers

Download Malwarebytes from download.com and run it. This has helped me dispose of some nasty malware.

Posted on Mar 12, 2009

  • Level 2:

    An expert who has achieved level 2 by getting 100 points

    MVP:

    An expert that got 5 achievements.

    Governor:

    An expert whose answer got voted for 20 times.

    Hot-Shot:

    An expert who has answered 20 questions.

  • Expert
  • 136 Answers

Go to start>Run type "msconfig" and then try to find any mistrious programme. check off it. then Restart PC.

Posted on Feb 03, 2008

  • Anobik Som Feb 07, 2008

    download "Hijack this"....and after installation run this and post report here

  • Anobik Som Feb 16, 2008

    Hi tpnicholson,



    Sorry... I'm late.....

    Run Trend Micro HijackThis v2.0.2

    than select all 08 and 09 entries



    Thank click on "Fixed Check"



    Restart windows



    this process should be solve your problem



    otherwise...... post log file again after restart

×

  • Level 3:

    An expert who has achieved level 3 by getting 1000 points

    MVP:

    An expert that got 5 achievements.

    Master:

    An expert who has achieved Level 3.

    Sergeant:

    An expert that has over 500 points.

  • Master
  • 440 Answers

Go to trendmicro run that run windows live one care ok then dl ccleaner run that cheak msconfig under start and run startups uncheak them also boot in safe mode f8 scan more in safe mode thx nick

Posted on Feb 03, 2008

  • nick helpap
    nick helpap Feb 05, 2008

    msconfig u can do that but u stilll nee dto run cleaners man asap

×

Add Your Answer

Uploading: 0%

my-video-file.mp4

Complete. Click "Add" to insert your video. Add

×

Loading...
Loading...

Related Questions:

1 Answer

I cannot rid my computer of vgrabber program


1, Run a FULL Scan with your Up-To-Date Anti Virus Software, Delete ALL results. 2, Download MALWAREBYTES freeware at: http://www.filehippo.com/download_malwarebytes_anti_malware/ In the install UNCHECK the TRIAL PRO version, you want the freeware version. Run a FULL Scan, Delete ALL results, reboot. If you are unable to download using your broswer, BOOT IN SAFE MODE WITH NETWORKING and download MALWAREBYTES, install, run full scan, delete all results, reboot. ALSO, Open Control Panel, Internet Options, Programs tab, open Manage Add ons, Toolbars and Extentions, Disable ALL unnessary Toolbars and Extentions, toolbars and extra search providers will kill broswer speed, next open Search Providers, Remove ALL but Google, look at the left bottom of page Check both boxes. Close, Apply if highlighted, resetat IE.

Feb 15, 2013 | PC Desktops

Tip

Protect your COMPUTER by VIRUS


How to protect your computer by Virus?

Few tips.

1. Try to updated your anti- virus always.

2. Use original anti-virus support.

3. Minimum try full system scan 3 days a week.

4. Before open any external memory device ( Example : hard drive,pendrive, memory card, mobile, etc ) don't forget to scan.

5. Symbol of virus infected device is Auto Run option. ** if you use a pen-drive then just right click on drive, if your seen the top option is Auto Run / there is 2 time showing Auto Run that's mean the device infected by virus."

6. If you think the system not going fast then before just run scan only SYSTEM 32 folder which is located inside C: drive> windows> system32.

7. Weekly once clean your temp internet files, recent use document etc.

Thanks .
Regards,
Rajdeep.

on Jan 30, 2010 | PC Desktops

1 Answer

My home page keeps changing


Open Control Panel, Internet Options, General tap, set your home page, apply. open the Programs tab, click on Manage Add ons, In Toolbars and Extentions, Disable/remove ALL toolbars, open Search Providers, Disable/Delete ALL except Google, set Google as DEFAULT,in the bottom left check both boxes. I think you have some Malware on your machine. I suggest you download Freeware MALWAREBYTES at : http://www.filehippo.com/download_malwarebytes_anti_malware/ In the install UNCHECK the TRIAL PRO version, you want the freeware version. Run a FULL SCAN, DELETE ALL RESULTS, Reboot. Run a FULL Scan with your UP-TO-DATE Anti Virus, Delete ALL results. Let us know the results.

Jan 14, 2013 | PC Desktops

1 Answer

Remove produtools from computer


First remove ALL TOOLBARS from your broswers, they will kill your broswer. Download MALWAREBYTES at: http://www.filehippo.com/download_malwarebytes_anti_malware/, In the install, uncheck the trial pro version, you want the freeware version. Run a FULL SCAN, depending on the size of your HDD may take hours. DELETE ALL RESULTS. Before you reboot Run a FULL SCAN with YOUR UP-TO-DATE Anti Virus. Download CCLEANER at : http://www.filehippo.com/download_ccleaner/. Clean the junk from your computer. In TOOLS, STARTUP, Disable ALL unnessary Startup programs and Uninstall ALL unnessary TOOLBARS. For further assistance respond to this post.

Dec 08, 2012 | PC Desktops

1 Answer

I have a problem with Google!


Reinstall Windows, your system is hopelessly infected.

Dec 21, 2009 | Compaq PC Desktops

3 Answers

How to get rid of trojans , spyware that keeps popping up interfering with internet use it is called antivirus plus


google spybot and **** cleaner install both and run them .....ive never had a problem with them running. (Dont need to install the toolbars for them to work)

Oct 24, 2009 | E-Machines T6420 PC Desktop

3 Answers

Dell Computer; Have possible virus listed as high risk in compressed file


That is in a system restore point. I would delete that restore point, but before you do you need to run a virus scan and make sure you get any that are on your system now, then create a new system restore point. If you go to the system restore area in your Help & Support section of the computer you will find the option to delete restore points and create them.

Jun 01, 2009 | Dell PC Desktops

1 Answer

I have a gateway and am not very good with it yet. when i turn it on it shows a threat detected, trojan horse psw generic.bejdc./roger/locals //temp/123.dll. i have avg 7.5 virus protection ihave used both...


Check to see if AVG has the option to scan the computer before windows start. I would also download and install a Spyware Scanner and run it. Usually when you are running a Spyware scan it will also pick up some of the Trojans and help your virus scanner detect and clean more viruses. I personally use SuperAntispyware ( www.superanitspyware.com) and SpyBot ( www.safer-networking.org/ ). Do a full scan and delete everything that if finds. If for some reason you are still having this issue, try restarting your computer into safe mode ( by pressing F8 when computer is booting up) and scanning every in safe mode.

Hope this helps.

Apr 15, 2009 | Gateway PC Desktops

2 Answers

Computer viruses


hi im wesley. what you do is go into your anti virus if you have one and scan when it pops up with a virus click on quarrantine or if it gives the option delete rather if not then the next time your anti virus updates it will delete the virus if you have avg anti virus put it in the vault then go to your hard disk in my computer make sure hidden folders are viewable go into vault and delete the virus manually.

Jul 21, 2008 | E-Machines eMachines Desktop PC

Not finding what you are looking for?
E-Machines eMachines Desktop PC Logo

Related Topics:

330 people viewed this question

Ask a Question

Usually answered in minutes!

Top E-Machines PC Desktops Experts

joecoolvette
joecoolvette

Level 3 Expert

5660 Answers

Brian Sullivan
Brian Sullivan

Level 3 Expert

27725 Answers

Michael Thomas
Michael Thomas

Level 3 Expert

3051 Answers

Are you an E-Machines PC Desktop Expert? Answer questions, earn points and help others

Answer questions

Manuals & User Guides

Loading...