Re: Please help?

[rvdavis]

Here is my computer delema . I got a new computer I was so proud the day that it arrived. I went out to the net to get some free wall paper in my excitment I picked up a few unsavory characters, to go with it and no new wall paper. After fighting it for so long I had to re-install my CD's. I thought I was ok. But it seemed that new varmits got in. I tried to protect my computer and be careful. I finally sent my brand new computer in to Dell. They checked and sent it back. It is a little Dell laptop 5100 Inspiron. I also got another hard drive. Well I put Google bar at top to protect, I got Sybot and Spyblaster downloaded and signed up for NoAdaware...didn't do any good. Now I presently have:
W32HLLW.RES[:C:\WINDOWS\SYSTEM32\SVCHOSFile. NoAdaware says it is "dangerous"? Yet, NoAdware says each time it successfully wipes it out it is back again. I looked in the C files it looks like something is there rewriting itself alot but don't know if that is this varmit or the other varmit that was there first? That one is DSO EXPOIT...THERE ARE FIVE ENTERIES so Spybot says. They say it is sucessfully wiped out but it has never left 18,19 and 21 are are there! It says HKEY_USERS\S1-5-18\Software\Microsoft\Windows.
What can I do about these pests? Please help!!!....

 

[Cookiegal]

Hi and welcome to TSG,

Please do this. Click here: http://www.majorgeeks.com/download3155.html to download Hijack This. It’s very important that you save it to its own folder on your hard drive, such as program files (not temporary files or the desktop), so that it can create proper back-ups and be able to restore them if necessary.

Close all open windows and open Hijack This. Click “Scan”. When the scan is finished (it only takes a second), the scan button will change to “Save Log”. Click on “Save Log” and then save it to NotePad. Click on “Edit” – “Select all” – “copy” and then “paste” into the thread.

DO NOT FIX ANYTHING YET, most items that appear in the log are harmless or even needed.

 

[rvdavis]

I haven't heard from you in regard to my note that I sent you about the pests that are on my computer. Can you please send me and email and let me know if you have any solutions to my problem????.....rvdavis

 

[rvdavis]

I haven't heard any advise form you could you please send me and email or tell me where to go and look for you answer????

 

[rvdavis]

Is the Cookiegal note your advice for me??? If so explain better don't understand how this will fix my problem???....rvdavis

 

[Cookiegal]

The Hijack This log that I asked you to post is a diagnostic tool and it will usually show what pests we're dealing with.

Once we can see the log, further recommendations will follow.

 

[rvdavis]

Thank you cookiegal....

When I get home tonight, I will attempt to do what you have asked ....rvdavis

 

[Cookiegal]

No problem.

 

[rvdavis]

Hi there...

I sent you a note about the pests in my C file: W32.HLLW.RES/:C\Windows\SYSTEM32\SVCHOSFile. and the Exploit File. You told me to download: http://www.majorgeeks.com/download3155.html. But when I go on this site to download I do not see where you go to download on the page . There are a number of downloads on that page and I tried to download it once and and could not save it in a file in programs, I did't get a chance to save it the way that you said to save it. Please send more detail....

 

[Jakeworld]

This is just a page linking you to download Hijackthis version 1.98.2 so you can check for any foreign objects in your computer. You can submit a log from this program and people on the forum may be able to locate the source(s) to your computer issues. Just download it from any of the three locations located under "Download Locations." And if these links fail for any reason, just go to the hijackthis website and download the program.

 

[Byteman]

hi, Some help maybe.

First make a new folder on the desktop by right clicking an empty spot and select > New> Folder> and rename the new folder to something like HJT. You can do this by just typing what you want to call it while the new folder text is in dark blue (highlighted) or, by right clicking the folder and selecting "Rename" and type in what you want.

This link below will skip going to any sites and pop up a file download box....it is also a non-zippped download ready to use...simply change the download location that shows to reflect the path to the folder like this:
C:\Desktop\your folder name

Run Hijackthis.exe from that folder> simply double click to open \yourfoldername and then click on Hijackthis.exe, a window will open with a SCAN button, use that, and when it ALL finishes (no red text at the top of that window) and the SAVE LOG button is activated, click on that to save the logfile> now here, I usually rename the file like this: change the hijackthis.log line to hijackthis.txt and click Save. The log should open with Notepad as a plain text file....you need to then go online to TSG and find your thread....open a blank Reply here and not a new thread... go back to the hijackthis.txt file, at the top, click Edit> Select All> Copy and, click once in the blank reply space and at the top of the TSG page> click Edit>Paste and you will see all the text of the hijackthis.txt put into the reply for you.. click to submit the post and that's that.

One major difference after you get some advice on what to "fix" with HJT>>>> when you are going to fix items by putting checkmarks next to what items you are advised to>>> have NO other windows, browsers, or beer cans open at all. (that last part is not a requirement but it helps!) The first part IS required... you may be online when you just SCAN and save the log, but not later on when you actually are fixing stuff>>>got it, get it, go on I know you can do this.

Direct download, be ready with folder:

http://tools.radiosplace.com/HijackThis.exe

 

[rvdavis]

How do I go back to see my stored messages?

A couple of days ago you sent me a message on how to get rid of my problem. Well, I was unable to come back in to try it out until tonight. Now I cannot find this note and I was going to try it out tonight . If possible, could you please send me that same advice so I could try it out ?....rvdavis

 

[Cookiegal]

Just click on your user name and a menu will drop down. Choose "find all posts by rvdavis" and then select the one you want.

I will merge them all together now.