• Announcements

    • Budfred

      IE 11 copy/paste problem

      It has come to our attention that people using Internet Explorer 11 (IE 11) are having trouble with copy/paste to the forum. If you encounter this problem, using a different browser like Firefox or Chrome seems to get around the problem. We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it.

miekiemoes

Global Moderator
  • Content count

    20,050
  • Joined

  • Last visited

About miekiemoes

  • Rank
    Malware Expert
  • Birthday 07/19/1975

Contact Methods

  • MSN
    ask me
  • Website URL
    http://miekiemoes.blogspot.com/
  • ICQ
    0

Profile Information

  • Gender
    Female
  • Location
    Belgium (Bruges)
  • Interests
    Music, Drawing, Art in general.
  1. Glad we could help. If you need this topic reopened, please tell the moderating team by replying http://www.spywareinfoforum.com/index.php?showtopic=67977'> here with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  2. Hi, With reinstalling, you regained a few extra months, maybe a year - but as you've noticed, you won't be able to really use this old PC as your main computer anymore. I currently use my old computers to test software on. For example, I want a program, but I am not sure if the software does what I want/need - so I use the old computer, install and test the software. If I like it, I install on my main computer. This way, you avoid cluttering your new/main computer with software you don't really need. So maybe that's an idea for you as well.
  3. Yeah, I fear your pc is running on its end. What you can still try is to do a format and clean install, but I fear this won't make a difference either, because it's the age of your pc that is mainly the cause here. However, a clean install could expand it with a few extra months, but that's no promise. My pc died after 5 years of daily usage. It started to error all the time, then I also got BSODs etc etc....Yours seem to last longer.
  4. Hi, As I guessed.. a lot more is going on here... Can you try to do a Windows repair install? http://michaelstevenstech.com/XPrepairinstall.htm This won't delete your data.
  5. Hi, I fear that because of the age of your computer (since you are still running XP - I assume this computer is real old), loads of files (Windows components) have become corrupted here. This is actually a common issue on older PCs. It won't take long before other components will become corrupted as well and you'll get BSODs, or your Windows won't even load anymore. I've seen this in a LOT of cases already. This is why I suggest, as a first step, that you backup your important data, just in case. Then, I suggest you reinstall Internet Explorer 8 again, because these are the components most affected in this case (although, I fear a lot more is going on here). http://www.microsoft.com/en-us/download/details.aspx?id=43 But before you do, I suggest you temporary uninstall your Avira and your Firewall (to avoid any interference) This is certainly not a malware related issue.
  6. Hi, The main reason why you get redirected through searchqu is because you allowed Spotify to install the Searchqu toolbar. This option was present during the Spotify install which you could actually uncheck. That's why it's always a good practice that you read the install screens during a program install, so you don't end up with unnecessary toolbars. Also see here: http://miekiemoes.blogspot.com/2012/01/unwanted-toolbars.html Anyway, please uninstall the Windows Searchqu Toolbar via sofware > add & remove programs. Make sure all your browsers are closed when you uninstall, otherwise it won't uninstall properly Then reboot after uninstall. Then, after uninstall & reboot, delete the C:\Program Files (x86)\Windows Searchqu Toolbar if still present. Also, rerun HijackThis (Run HijackThis as administrator via rightclicking HijackThis.exe > run as administrator) Check the following entries if still present: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.searchqu.com/102 O2 - BHO: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll O2 - BHO: DataMngr - {9D717F81-9148-4f12-8568-69135F087DB0} - C:\PROGRA~2\WIA6EB~1\Datamngr\BROWSE~1.DLLll O3 - Toolbar: Searchqu Toolbar - {99079a25-328f-4bd4-be04-00955acaa0a7} - C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar\searchqudtx.dll O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~2\WIA6EB~1\Datamngr\DATAMN~1.EXE O20 - AppInit_DLLs: C:\PROGRA~2\WIA6EB~1\Datamngr\datamngr.dll C:\PROGRA~2\WIA6EB~1\Datamngr\IEBHO.dll Click the fix checked button below. Also make sure your Browsers are closed when you do this. For remaining leftovers after performing above, please see here how to fix this. Extra note, you will need to update your Sun Java asap since older versions are vulnerable. http://java.com/en/download/manual.jsp <== please select the 64-bit version. Let me know if that solved your issue.
  7. Since the issue appears to be resolved this Topic is closed. If you need this topic reopened, please tell the moderating team by replying here with the address of the thread. This applies only to the original topic starter. Everyone else please begin a New Topic.
  8. Hi, Thank you very much and Glad I could help. Please read my Prevention page with lots of info and tips how to prevent this in the future. And if you want to improve speed/system performance after malware removal, take a look here. Extra note: Make sure your programs are up to date - because older versions may contain Security Leaks. To find out what programs need to be updated, please run the Secunia Software Inspector Scan. Happy Surfing again!
  9. Hi, This is a lot better! Just start HijackThis again and check and fix the following orphaned entries in it: O2 - BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll (file missing) O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll (file missing) O3 - Toolbar: (no name) - !{F3FEE66E-E034-436a-86E4-9690573BEE8A} - (no file) Then, please update your java, flash player and adobe reader: http://java.com/en/download/inc/windows_new_xpi.jsp http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash http://get.adobe.com/reader/ Let me know afterwards how things are now. Also, I suggest you read my blogpost about unwanted toolbars: http://miekiemoes.blogspot.com/2012/01/unwanted-toolbars.html - because this is what mainly happened in your case here. You installed some software, but it looks like you clicked through the installation screens without reading, so you ended up with a lot of unwanted toolbars.
  10. Hi, Your problem is that you have downloaded many apps which installed unwanted toolbars, responsible for redirecting your searches and crashing your browser. I see I have missed a few in my previous post which are unwanted, so please uninstall the following ones as well: Wincore MediaBar Yontoo Layers MediaBar YouTube Downloader Toolbar Make sure your Internet Explorer is closed when you do this. Then reboot. After reboot, RIGHTCLICK HijackThis.exe and select to run as Admininstrator. (Important). Click scan. There, select the following entries if still present: R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.bearshare.com R3 - URLSearchHook: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YouTube Downloader Toolbar\IE\4.9\youtubedownloaderToolbarIE.dll R3 - URLSearchHook: (no name) - {81017EA9-9AA8-4A6A-9734-7AF40E7D593F} - (no file) O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file) O2 - BHO: DataMngr - {B939CF93-F2CB-443d-956C-DC523D85C9DB} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\BROWSE~1.DLL O2 - BHO: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll O2 - BHO: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YouTube Downloader Toolbar\IE\4.9\youtubedownloaderToolbarIE.dll O2 - BHO: Yontoo Layers - {FD72061E-9FDE-484D-A58A-0BAB4151CAD8} - C:\Program Files\Yontoo\YontooIEClient.dll O3 - Toolbar: Wincore Mediabar - {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\ToolBar\wincorebsdtx.dll O3 - Toolbar: YouTube Downloader Toolbar - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files\YouTube Downloader Toolbar\IE\4.9\youtubedownloaderToolbarIE.dll O4 - HKLM\..\Run: [DATAMNGR] C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\DATAMN~1.EXE O4 - HKLM\..\Run: [searchSettings] "C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe" O20 - AppInit_DLLs: C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\datamngr.dll C:\PROGRA~1\BEARSH~1\MediaBar\Datamngr\IEBHO.dll Click the Fix checked button below. Make sure your Internet Explorer is closed when you do this. Reboot and post a new HijackThis log in your next reply.
  11. Glad I could help. Please read my Prevention page with lots of info and tips how to prevent this in the future. And if you want to improve speed/system performance after malware removal, take a look here. Extra note: Make sure your programs are up to date - because older versions may contain Security Leaks. To find out what programs need to be updated, please run the Secunia Software Inspector Scan. Happy Surfing again!
  12. Hi, This looks OK again. How are things now? Please don't forget to update your Flashplayer and Java as I already mentioned in my previous post.
  13. Hi, Please run Malwarebytes again, but this time, let it deal select to remove what it has detected. Reboot afterwards. After reboot, rescan with Malwarebytes again and post the new log in your next reply together with a new DDS Log. Also, you really need to update Java and Adobe flashplayer asap: http://java.com/en/download/inc/windows_new_xpi.jsp http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash But you have to do this after above issues are resolved.