[jvrookie]

not sure if i'm on the right forum- i posted this one on the malware removal forum too, but thought i might try it here since i haven't received a response.
hello all. got a question for you. i go into my control panel, then to internet options, click the security tab, then click the restricted sites logo, and then push the sites button, and have 20 kahtrillion weird numbers and websites on there. i tried to manually delete each one, but they keep popping up. how do i get rid of them? should i get rid of them?
obviously i've been having systems issues (go figure), and was wondering what to do. i downloaded regcure but after reading all the negative threads on it, i may go ahead and try to get a refund. already have ccleaner and spybot.
any help would be greatly appreciated.

[stantley]

Originally Posted by jvrookie

should i get rid of them?

No, leave them in there. They're put there by programs like Spybot and SpywareBlaster to prevent you from going to sites that are known to download malware/spyware. Don't run Regcure either, it causes more problems.

You say you have 'systems issues'. Give some details of exactly what problems you're having and how they came about. Also post a HJT log.

Go to this site http://www.trendsecure.com/portal/en...?page=download.

Click on 'Download HijackThis Installer'.

*Save HJTInstall.exe to your desktop, or to the location where you normally download.
*Double-click on HJTInstall.exe.
*Click on Install.
*By default it will install to C:\Program Files\Trend Micro\HijackThis.
*Once installed, it will launch Hijackthis.
*Click on the 'Do a system scan and save a logfile button'. It will scan and the log will open in notepad.
*Click Save to save the log file.
*Click on 'Edit > Select All' then click on 'Edit > Copy' (or Ctrl-C) to copy the entire contents of the log.
*Come back to this thread and Paste (or Ctrl-V) the log in your next reply.

*DO NOT have HijackThis fix anything yet. Most of what it finds will be harmless or even required.

[jvrookie]

thanks for the help. i'll have to do that when i get home as i am at work now. one further question, though. were those sites ones that have been viewed previously on my computer or were they just added by using spybot? also, i know that one problem i was having was at startup i am receiving a system32 error message that ended in /geedc. so, like a rookie, i googled it, and saw the regcure link. like an idiot i paid for it and ran it, but haven't done anything since running it. as usual, i'm a day late and a dollar short, well, make that $39 dollars short. may have to try for a refund since i still have 59 days left on that 60 day guarantee.
still, thanks for all the info.

[stantley]

Originally Posted by jvrookie

were those sites ones that have been viewed previously on my computer or were they just added by using spybot?

No, they're added by Spybot and if it's working like it's supposed to, you couldn't have gone to those sites.

If you just ran a scan with Regcure and didn't delete any registry entries, then you're OK. If you did do some deletions then I would go into the program and restore all of the backups.

[Byteman]

Hi, You are getting help with the Vundo infection in the Malware Removal forum.

You've unfortunately wasted some money and I hope you can get a refund.

You've been given good advice here, it's just that we don't want anyone else posting to help remove malware, as it gets too confusing for us, and you.