Hi,
Let's proceed.
Note : Windows Vista require user to right click > run as administrator to run the program.
First,
Remove programs.
Please Click
Start >
Control Panel >
Programs and Features
Remove these programs by clicking
Uninstall/Change.
Java(TM) SE Runtime Environment 6
Adobe Reader 8.1.7
If some programs listed are not present, please do not panic and proceed to next step.
Next,
Java SE Runtime Environment (JRE).
Please download from
HERE.
- Find Java SE Runtime Environment (JRE) 6 Update 16.
- Click on Download.
- Choose the correct Platform and Multi-language. Next, check the box that says I agree to the Java SE Runtime Environment 6 License Agreement.
- Click the Continue button.
- Click on the filename under Windows Offline Installation and save it to your desktop.
- Close all active windows.
- Install the program.
Next,
Update Adobe Reader
- Recently there have been vunerabilities detected in older versions of Adobe Reader.
- It is strongly suggested that you update to the current version: Adobe Reader 9.2
- You can download it from HERE
Note : Adobe 9 is a large program and if you prefer a smaller program you can get Foxit 3 instead from
Foxit Software
Reminder : Do not install anything dealing with
AskBar presented as an installation option.
Next,
Important.
WEATHERBUG
WeatherBug is a system tray icon that offers weather information and includes built-in ads.
WeatherBug is controlled by AWS Convergence Technologies (weatherbugmedia.com). There is some controversy over whether
WeatherBug should be targeted by anti-parasite software. AWS strongly deny their software is 'spyware', and by the definition used here, it is not, as it does not leak information back to its controlling servers. However,
WeatherBug has in the past been silently installed by the FavoriteMan parasite and Freeze.com screensavers, and more recently has been bundled by software such as AIM and Blubster. This makes it 'unsolicited', and since it is installed to raise money for its creators through the built-in ads it is certainly 'commercial'. So it does meet the definition for 'parasite': unsolicited commercial software. It is nonetheless listed as a borderline case because it is not overtly harmful and many people do install it deliberately.
WeatherBug bundles the MySearch parasite in its standalone distribution and has in the past, installed Gator and SVAPlayer.
I recommend that you uninstall
WeatherBug and choose one of these alternatives:
Please uninstall
WeatherBug now.
Next,
Fix entries.
- Go to HiJackThis Main menu.
- Click at Do a system scan only button.
- Search for below entries and tick it.
O2 - BHO: agcore.AGUtils - {0bc6e3fa-78ef-4886-842c-5a1258c4455a} - mscoree.dll (file missing)
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
- Close any other program and leave HiJackThis alone.
- Click Fix checked
Next,
Delete folder
- Navigate to the directory as below.
- Delete the file or folder in red color (if exist).
Folders :
C:\Program Files\AWS
Next,
RSIT.
Please download
Random's System Information Tool by
random/random from
HERE and save to the desktop.
- Right click on RSIT.exe and run as administrator to run the tool.
- Click Continue at the disclaimer screen.
- Once it finishes, two logs will open...
- log.txt will be opened maximized
- info.txt will be opened minimized
- Please post the contents of both logs in your next post.
***You can find manually the log at
C:\rsit
Next,
GMER.
Please download from
HERE and save to the desktop.
- Unzip/extract the file to its own folder.
- Disconnect from the Internet and close all running programs.
There is a small chance this application may crash your computer so save any work you have open. - Right click on Gmer.exe and run as administrator to start the program.
- Allow the gmer.sys driver to load if asked.
- If it gives you a warning at program start about rootkit activity and asks if you want to run a scan,click NO.
- Click on >>> symbol and choose on the Rootkit tab.
- Look at the right hand side (under Files) and uncheck all drives with the exception of your C drive.
- Make sure all other boxes on the right of the screen are checked, EXCEPT for "Show All".
- Click on the Scan and wait for the scan to finish.
Note: Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while this scan completes. Also do not use your computer during the scan. - When completed, click on the Copy button and right-click on your Desktop, choose "New" > Text document. Once the file is created, open it and right-click again and choose Paste or Ctrl+V. Save the file as gmer.txt and copy the information in your next reply.
- Note: If you have any problems, try running GMER in SAFE MODE"
Important! Please do not select the "Show all" checkbox during the scan..
Next,
Checklist.
Please post.
- Content of log.txt.
- Content of info.txt
- Content of GMER.txt
xixo_12
