Need help with Alexa toolbar here!!!!
-
-----
-
have you tried to manual delete the plugin?
-
-----
-
Make sure all opened programs are closed when you uninstall Alexa toolbar, otherwise it will come back.
If you have CCleaner, do this:- [*]Click on Tools on the left hand side.
[*]Click on Uninstall.
[*]Click on Save to text file... button.
[*]It will prompt you to save. Save this list to a convenient location. By default, it's named install.txt and it's saved at C:\Program Files\CCleaner.
[*]Post this log here. -
If you don't have CCleaner, do this instead:
Copy and paste this into Notepad:
cd C:\Program Files
dir > results.txt
notepad results.txt
Save it as show.bat
In the Save as type field, select All Files from the drop-down list.
Double click on show.bat
It will produce a notepad file.
Copy and paste the contents of this Notepad file here. -
--
free
-
Looks good. Alexa toolbar isn't in the list.
If it's still there, try this:
Start > Run and type in regedit
Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
Look on your right hand side. If you see Alexa, delete it.
Reboot your computer in Safe Mode and search for any Alexa related files and delete them. -
-----
-
Looks like some programs are keeping Alexa installed.
Please download HijackThis 1.99.1 from here and save it to your desktop.
Double click on HijackThis.exe to run it. Select Do a system scan and save a logfile. Please post this HijackThis log in your next reply. -
---
-
O20 - AppInit_DLLs:
That's a nasty infection that you've gotten. This infection replaces common files with the virus files, so it would appear that your system is clean.
Although it's still possible to clean, there's no telling what will happen to your PC. It's best to reformat your PC and reinstall those programs to be sure.
Otherwise, if you want to attempt cleaning, I can give it a shot, although there's no guarantee.
Please download FindAWF by noahdfear and save it to your desktop.
Double click to run it.
When FindAWF is done running, Notepad will open.
Please post the contents of this Notepad file. -
----
-
Please download DelDomains.inf, Protocol Reset.reg and fixawf.bat and save it to your desktop.
Right click on DelDomains.inf and select Install.
Double click on ResetProtocolDefaults.reg. It will prompt you to merge. Click Yes.
Double click on fixawf.bat. A command prompt window will open and close quickly.
Run FindAWF again. Post back the contents of the awf.txt -
---
-
Did you run the fixes?
-
mayi really can be IT consultant liao
knows all
moving IT encyclopedia sia -
LOL, how I wish I am.
-
fixawf.bat? Yes I did.Originally posted by ndmmxiaomayi:Did you run the fixes? -
Not just fixawf.batOriginally posted by strado:fixawf.bat? Yes I did.
The rest are also needed. -
Yes, I did. For all.Originally posted by ndmmxiaomayi:Not just fixawf.bat
The rest are also needed. -
Deleted.
-
Deleted. Please do not do anything until further instructions are given.
-
Double checked the log files. Everything went smoothly.
Please download OTMoveIt by OldTimer and save it to your desktop.
Select the contents of the below file list, then press Ctrl + C to copy it to the clipboard.
Double click on OTMoveIt to open it. In OTMoveIt, click in the left-hand pane and press Ctrl + V to paste the file list into the program.code:C:\Program Files\QuickTime\bak
C:\Program Files\Symantec AntiVirus\bak
C:\Program Files\Common Files\Symantec Shared\bak
C:\Program Files\VIA\RAID\bak
C:\WINDOWS\ime\imjp8_1\bak
C:\Program Files\Java\jre1.5.0_06\bin\bak
C:\WINDOWS\system32\IME\PINTLGNT\bak
C:\WINDOWS\system32\IME\TINTLGNT\bak
C:\Program Files\Java\jre1.5.0._03\bin\bak
C:\Program Files\Java\jre1.5.0_06\bin\bak
Then click on MoveIt button. Copy and paste the results of MoveIt into Notepad and save it.
_________________________________________
Right click on HijackThis and select Rename. Name it stupid or any name you like and press Enter.
Open stupid (HijackThis), and select Do a system scan and save a logfile.
__________________________________________
In your next reply, please post back the OTMoveIt results and a new HijackThis log (after it has been renamed). -
---
-
C:\Documents and Settings\Dunchen\Desktop\HijackThat.exe
C:\Documents and Settings\HeeeeeeeeeYang\Desktop\HijackThis.exe
Why is it from a different user? Each user has different kinds of infections even if it's on the same PC.
Can you please post a log from HeeeeeeeeeYang's account, with HijackThis renamed.
For Dunchen's account, please do this:
Please download SmitFraudFix.exe by S!Ri and save it to the desktop.- [*]Double click on SmitfraudFix.exe.
[*]Press 1 then hit the Enter key.
[*]It will create a report named rapport.txt, usually at C drive.Anyway, can you tell me why my computer time will switch itself back to 2005 each time i on it, and I have to manually adjust it back to the current date?
It might be the spyware problems that is causing the date and time to be haywire. Once the spyware problems and if the same thing is happening, we will look into that.
Please post back rapport.txt from Dunchen's account and a new HijackThis log from HeeeeeeeeeYang's account.