Bill wrote:
> On 20 avr, 17:01, "PA Bear [MS MVP]" <PABear...@gmail.com> wrote:
>> There is a very good chance that you are seeing the affects of a hijackware
>> infection.
>>
>> 1. See if you can download/run the MSRT manually:http://www.microsoft.com/security/ma...e/default.mspx
>>
>> NB: Run the FULL scan, not the QUICK scan!
>>
>> 2. WinXP ONLY!! => Run the Windows Live Safety Center's 'Protection'scan
>> (only!) in Safe Mode with Networking, if need be:http://onecare.live.com/site/en-us/center/howsafe.htm
>>
>> 3. Run a /thorough/ check for hijackware, including posting the requested
>> logs in an appropriate forum, not here.
>>
>> Checking for/Help with Hijackwarehttp://aumha.net/viewtopic.php?f=30&t=4075http://mvps.org/winhelp2002/unwanted.htmhttp://inetexplorer.mvps.org/data/prevention.htm
>> http://inetexplorer.mvps.org/tshoot....moving_Malware
>>
>> **Seek expert assistance inhttp://spywarehammer.com/simplemachinesforum/index.php?board=10.0,http://forums.spybot.info/forumdispl...forum.php?f=30
>> or other appropriate forums.**
>>
>> If the procedures look too complex - and there is no shame in admitting this
>> isn't your cup of tea - take the machine to a local, reputable and
>> independent (i.e., not BigBoxStoreUSA) computer repair shop.
>> --
>> ~Robear Dyer (PA Bear)
>> MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
>> AumHa VSOP & Adminhttp://aumha.net
>> DTS-Lhttp://dts-l.net/
>>
>> Bill wrote:
>>> Hi
>>> Looking for a free fax software I had I installed that is a malware.
>>> Avast doesn't start anymore and can't be started even in the services
>>> window, Same for Zone Alarm and ZSoft Uninstall.
>>> I can't use the Windows "restore to a preceding configuratin "
>>> software, it says that no changes have been made to the system.
>>> I don't see anything strange in Add-Remove Programs.
>>> The only thing I remember is at the installation, there was a program
>>> that asked to execute and it was Qinupgro and there was a another
>>> thign also in the documents settings that asked for execution. If I
>>> told not to execute, the system would not finish loading.
>>> Now I can't go to Internet or even reinstall ZA, Avast or Zsoft
>>> Uninstaller.
>>> The fax was named active fax 3.94
>>> How can I get my system back fast ?
>>> Thanks
>
> I can't go on the internet. None of the 5 browsers installed can go.
> Internet is blocked.
Download one of these to another computer and save to a thumb drive.
Start up the infected machine in Safe Mode, install and run the
programs. (Inserting a thumb drive into your infected machine can cause
the file Autorun.inf to be installed on the thumb drive, and then to any
machine that uses the drive. So leave the drive plugged in during the
repair.
Malwarebytes© Corporation
http://www.malwarebytes.org/mbam/program/mbam-setup.exe
SuperAntispyware
http://www.superantispyware.com/supe...freevspro.html
Here are a few things to try to get Internet access back:
Open Internet Options, Connections tab, click "Lan Settings" button,
deselect all.
Flush DNS
Click Start, Run, type CMD and click the [OK] button. Type each of the
following:
IPConfig /FlushDNS [Press Enter key]
ipconfig /release [Press Enter key]
ipconfig /renew [Press Enter key]
ipconfig /registerdns [Press Enter key]
NETSH
Click Start, Run, type CMD and click the [OK] button. Type the following:
netsh winsock reset
Press Enter key
Restart the system
You can also try this software download from a working machine:
LSP-Fix
http://www.cexx.org/lspfix.htm
--
Joe =o)