Honorary Members
  • Content count

  • Joined

  • Last visited

About Lunora

  • Rank
    Advanced Member
  • Birthday 06/18/1992

Contact Methods

  • Website URL
  • ICQ

Profile Information

  • Location
  1. Hello Exile I'm glad I double read!! I started to do the first one--the autorun thingy! Thankfully the second one your provided got rid of the folder And I clicked that thread and searched my files and didn't find any left overs! It's worked like a charm! Thanks! And thanks for also helping Szgr Lunora
  2. Hello, How do you remove Zone Alarm 100%? I've tried manually deleting the folder that was lefter over after uninstalling Zone Alarm ages ago, but I can't. It won't let me. Does anyone know how to get rid of ZA? Lunora
  3. But can I remove them? Will it do any harm? Do I remove all 3? I looked further at the second link I provided in my first post, and found that the Wireless Zero Configuration is enabled and the option for Windows to manage my Wireless is there. Maybe this is why my wireless will not work? If I get rid of Intel proset would my wireless work? Removing the second one was disasterous. My internet wouldn't work and I had to do a System Restore. I'm waiting for help from now on. Finally got Intel® PROSet for Wireless removed. And no more End Program - Sample at turn off or Reset.
  4. I thought that I was getting 'End Program - Sample' from AVAST. But, then I noticed that when I turned off or restarted our other computer--which also has AVAST--that wouldn't pop up. So I googled it and found these two threads: End Program: Sample hangs every time I turn off End Program-Sample on Shutdown My laptop does have Intel PROset, however, the wireless for my laptop has not worked since the Comcast guy came and changed how our router was set up about a year ago. Instead of fighting with the routers wireless capability we just use lan cables for my laptop and Dad's computer. With that said, it's fairly annoying to have "End Program - Sample" pop up every time I want to turn off or restart my computer. And if I don't press enter my computer won't turn off or restart. So, I went to Add/Remove programs to get rid of Intel PROset...but, there's 3 things for it--and I'd prefer a smart/professional telling me what to do so I don't screw things up : Intel® Extreme Graphics 2 Driver Intel® PRO Network Adapters and Drivers Intel® PROSet for Wireless Are the 3 things that pop up when I go to add/remove programs. None of the intel stuff ever opens when I click on it, just the logo comes up...and stays there. I want to remove it, but will my computer still get internet through the Lan cable or what? Some one, please help?
  5. Didn't have to reinstall. It's been working just fine. I guess it was just angry with me for a while.
  6. I did all that yesterday So my compy should still be fine on the defrag as I haven't saved anything and I ran Ccleaner to get rid of registry files and the internet stuff too. I also did MBAM, Superantispyware, and a thourough Avast scan~ so my computer should still be as fit as a fiddle.
  7. I had GIMP, Windows Live, Itunes, and Firefox open. Then I went to open Paint and when I pressed ctrl+e to set the width and height Paint froze. Then GIMP froze. Then Windows Live. Then Itunes. Then Firefox. Windows Live and GIMP would force quit, but not Gimp, Itunes or Firefox. So I pressed the power key down for 10 seconds and rebooted. Everything started up fine...but Firefox won't open at all. Internet Explorer will though... I even checked the processes and didn't see Firefox in it at all and I also tried to start it in Safe Mode. Can someone please help me fix Firefox?? Edit: It just randomly appeared in the processes so I chose 'end task' and clicked on FF to see if it'll open... FF did open =/
  8. So I'm all good just deleting it from quarantine?
  9. So it doesn't do anything for Internet Explorer? That's what I thought it was for; but so long as it's in quarantine and her computer isn't malfunctioning it's safe to leave it? Is there no way to fix it/disinfect it?
  10. So I can just leave it there? Or would it be safer to remove it? And what does iehelper.dll do exactly?
  11. Ran HJT, checked and 'fixed' em We use Avast!. My brother was listening to something in a pop-up music player--he said it was from or something like that--when Avast! popped up with it's "bio-hazard" alert and gave me the option to either delete the .dll or place it in quarantine. 2 more viruses popped up afterwards, but I managed to remove those on my own. Right now its in the quarantine, but from in the virus chest, Avast! says its original location was C:\WINDOWS\system32. Here's a screenie of it in the virus chest.
  12. On the 20th grams got a virus in iehelper.dll. She quickly got a virus in the System Volume Information and a program called Online Services. She also had a few malware (one of them being a fake-scanner (sysguard.exe) which MBAM removed. I posted a thread here on the day she got infected, but haven't got any help. So, I took a gander at it myself. The one in the System Volume Information was easily removed by turning the System Restore off, removing the file from avast!'s virus chest, restarting, turning the System Restore back on and restarting again. Avast hasn't detected any viruses moving back in that area. Then the one in the program was called 'ppal33ppc.exe', I removed the program, deleted the file from the virus chest and ran CCleaner. Avast! also hasn't detected any viruses moving back in that area. And MBAM hasn't found anything since the first scan, here is the log from 4-20 (just in case): But, I don't know how to fix the infection in the iehelper.dll. I downloaded Firefox unto her computer 'cause it's safer than IE and I wanted to try my luck at getting a reply for trying Combo Fix or Dr. Web Cure It; plus I'm not really sure if letting that file out of the virus chest without knowing a thing about it to try and do those scans is a good thing... Here's the most recent HJT log: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 8:51:25 PM, on 4/24/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\WINDOWS\arservice.exe C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe C:\WINDOWS\eHome\ehRecvr.exe C:\WINDOWS\eHome\ehSched.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\HP\HP Share-to-Web\hpgs2wnf.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo! R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O1 - Hosts: ::1 localhost O1 - Hosts: O1 - Hosts: O1 - Hosts: O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O2 - BHO: HpWebHelper - {AAAE832A-5FFF-4661-9C8F-369692D1DCB9} - (no file) O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1 O4 - S-1-5-18 Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'SYSTEM') O4 - .DEFAULT Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL O9 - Extra button: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (file missing) O9 - Extra 'Tools' menuitem: Internet Connection Help - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Pml Driver HPH11 - HP - C:\WINDOWS\system32\HPHipm11.exe O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe -- End of file - 5792 bytes
  13. Please delete/close this topic. The computers issues have changed and I'm posting a new thread.
  14. Yea I know ._. I guess just having her computer infected makes me worry more. Especially when everyones demanding I fix it and asking why it isn't fixed already. x.x; (It shouldn't take a week for someone to reply....right??) Anyhoo, and thankies for all your help!
  15. Very nice and quick at replying and making sure you understand what he's saying ^^