[hoggamoose]

Hello,

I am having trouble removing a virus or spyware from my computer. I have tried many different tools, but nothing is working. My main problem is if I try to download and run Ad-Aware, Spybot or run my anti-virus (Trend Micro free trial) they will search for updates and I get a message saying "cannot connect to the internet, no internet connection found". I get this message for any anti-virus or spyware removal tool. I can get online wih no problem.

Another issue is that I can download and install hijack this, spybot, etc., but when I try to run the program nothing happens.

Also, when I do a search on google or yahoo for a certain subject and then click the link from google or yahoo it takes me to another search site, a site that has nothing to do with the subject or says "page not found".

Any help is greatly appreciated!
Thank you!

[NeonFx]

Hi there. Have you tried running HijackThis in Safe Mode? If you can, save it as a text file and then reboot so you can go online and post it here by copy and paste from the file. Do not reboot "with networking support"

Reboot your computer in Safe Mode

• If your computer is running, shut down Windows, then turn the power off.
• Wait 30 seconds, then turn the computer on, and begin tapping the F8 key (if this doesn't work try the F5 key).
• The Windows Advanced Options Menu appears.
• Select Safe Mode using the up/down arrow keys.
• Press Enter.
• Log on with an account that has administrator priviledges, usually your own account (NOT the account named Administrator).

[hoggamoose]

Hello, I was able to run Hi-Jack this, This is what I came up with:




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:30:41 PM, on 11/23/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Safe mode
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
E:\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\explorer.exe
E:\mbam-setup.exe
E:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/customize/ie/.../www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll
O4 - HKLM\..\Run: [UfSeAgnt.exe] "C:\Program Files\Trend Micro\Internet Security\UfSeAgnt.exe"
O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Spybot - Search & Destroy\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~4\Office10\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Spybot - Search & Destroy\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Filter hijack: text/html - {c59833d0-2d9a-4139-b3fc-9d8dd77a001f} - C:\WINDOWS\system32\iehlpr32.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\SfCtlCom.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Trend Micro Inc. - C:\Program Files\Trend Micro\BM\TMBMSRV.exe
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Internet Security\TmProxy.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
--
End of file - 3330 bytes

[telecom69]

Try to download and run this http://www.download.com/Malwarebytes...-10804572.html

[hoggamoose]

Thank you, I tried to download that already. When I try to run the program nothing happens. I double-click the icon to run the program and I get the hourglass, but then it disappears and the program does not start. That is the same for adaware and spybot too.

[telecom69]

Strange one this,something is obviously stopping them running,wondering if its your firewall or antivirus ? can you disable them temporarily while you try again ? its worth a try at least ...have you tried running any of them in safe mode perhaps ?whether you can or not I dont know,at this stage its just a suggestion .....

[NeonFx]

or a .exe associations problem, but he was able to run hijackthis. I have reported this post so that it may be moved to the malware removal thread.

[telecom69]

Trouble is with that,its difficult nowadays to get help in that forum because of the need to have a gold badge to give help,and there are too many problems and far too few helpers to guarantee any help in there now,its a matter of luck really ....

[NeonFx]

I'm currently in training for that gold shield... ill get there eventually.

Sorry for the thread hijack.

[telecom69]

I wish you well they need all the help they can get in there nowadays,with so many problems being posted good luck,look forward to seeing you bouncing that malware in the near future

[hoggamoose]

I will try disabling the anti-virus and rerunning again. I did run the anti-virus and nothing was found. It can't be updated because the connection to the internet is being blocked. Thank you again!

[atnskyline]

download avast home from www.download.com and run a boot time and memory scan