Help Don't know what else to "run"

[Anthony Diodati]

Last Night I tried to play this streaming video about spark plugs, and it
said it couldn't play it,Needed to install this codec that popped up. I
think It said something about active X.
I tried to install it, but AVG defected a threat, so I closed it, at the
same time or a while later The XP up dates popped up so I installed them.
Today I have some kind of crap where music will play,and there doing some
kind of interview about a tattoo shop, then something I think about a ford
truck, and I don't know what all else.
There is no web page open other than my home page yahoo mail.
I ran AVG and it said it found 4 and removed 4 threats, also ran ad
aware,and it removed some cookies.
I also saw this " Viewpoint something or other in ask manager,(processes)
and removed it in add remove programs.
Thought all was well, but when I came home tonight the music and the
interview started again.
One other thing,when I 1st tried to bring up task manager, it said it was
disabled, and when I goggled it, found the hot fix on I think it was Sandy's
page from Doug, for that problem.
I have not tried system restore yet, because I did not want to wipe out my
updates.
Any one ever have something like this.
This is the 1st real problem I have had since I started running XP and IE 7.
Thanks Tony

 

[Anthony Diodati]

Oh yea, don't know if it's related, but now also I keep getting"no
connection to the internet adavabile" /Retry / work off line.

 

[PA Bear [MS MVP]]

Unexplained computer behavior may be caused by deceptive software
http://support.microsoft.com/kb/827315

Run a /thorough/ check for hijackware, including posting your hijackthis log
to an appropriate forum.

Checking for/Help with Hijackware
http://aumha.org/a/parasite.htm
http://aumha.org/a/quickfix.htm
http://aumha.net/viewtopic.php?t=5878
http://wiki.castlecops.com/Malware_Removal_and_Prevention:_Introduction
http://mvps.org/winhelp2002/unwanted.htm
http://inetexplorer.mvps.org/data/prevention.htm
http://inetexplorer.mvps.org/tshoot.html
http://www.mvps.org/sramesh2k/Malware_Defence.htm
http://defendingyourmachine2.blogspot.com/
http://www.elephantboycomputers.com/page2.html#Removing_Malware

When all else fails, HijackThis v2.0.2
(http://aumha.org/downloads/hijackthis.exe) is the preferred tool to use.
It will help you to both identify and remove any hijackware/spyware with
assistance from an expert. **Post your log to
http://forums.spybot.info/forumdisplay.php?f=22,
http://castlecops.com/forum67.html,
http://forums.subratam.org/index.php?showforum=7,
http://aumha.net/viewforum.php?f=30, or other appropriate forums for review
by an expert in such matters, not here.**

If the procedures look too complex - and there is no shame in admitting this
isn't your cup of tea - take the machine to a local, reputable and
independent (i.e., not BigBoxStoreUSA) computer repair shop.

 

[Ron Badour]

I'd give SpyBot a shot and if that won't clean it up then try Robear's
suggestion. By the way, I would continue to run scans with both AVG and
SpyBot until they both come up clean.
http://www.safer-networking.org/en/index.html

 

[V Green]

You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

 

[PA Bear [MS MVP]]

[Actually, it's prolly a Zlob infection with Vundo and SDBot along for the
ride.]

 

[Anthony Diodati]

Yea(Damm thing just woke me up at 6:00 AM)
Zlob WM was one of the things AVG reported finding yesterday.
Along with AdloadEZ.
Tony

[Actually, it's prolly a Zlob infection with Vundo and SDBot along for the
ride.]

You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

 

[Anthony Diodati]

Well just ran Vundo Fix, Came up with 0 files found.
Hijack this is showing a "bootrunonce.dll" Looks like it "may be something I
don't want on my machine.
Tony

Yea(Damm thing just woke me up at 6:00 AM)
Zlob WM was one of the things AVG reported finding yesterday.
Along with AdloadEZ.
Tony

[Actually, it's prolly a Zlob infection with Vundo and SDBot along for
the ride.]

You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

Last Night I tried to play this streaming video about spark plugs, and
it
said it couldn't play it,Needed to install this codec that popped up. I
think It said something about active X.
I tried to install it, but AVG defected a threat, so I closed it, at
the
same time or a while later The XP up dates popped up so I installed
them.
Today I have some kind of crap where music will play,and there doing
some
kind of interview about a tattoo shop, then something I think about a
ford
truck, and I don't know what all else.
There is no web page open other than my home page yahoo mail.
I ran AVG and it said it found 4 and removed 4 threats, also ran ad
aware,and it removed some cookies.
I also saw this " Viewpoint something or other in ask
manager,(processes)
and removed it in add remove programs.
Thought all was well, but when I came home tonight the music and the
interview started again.
One other thing,when I 1st tried to bring up task manager, it said it
was
disabled, and when I goggled it, found the hot fix on I think it was
Sandy's page from Doug, for that problem.
I have not tried system restore yet, because I did not want to wipe out
my
updates.
Any one ever have something like this.
This is the 1st real problem I have had since I started running XP and
IE
7. Thanks Tony

 

[PA Bear [MS MVP]]

Follow the instructions in my first reply. You're going to need expert
assistance to get this machine cleaned up, Anthony. (You should remember me
from your Win98 days.)
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Well just ran Vundo Fix, Came up with 0 files found.
Hijack this is showing a "bootrunonce.dll" Looks like it "may be something
I
don't want on my machine.
Tony

Yea(Damm thing just woke me up at 6:00 AM)
Zlob WM was one of the things AVG reported finding yesterday.
Along with AdloadEZ.
Tony

[Actually, it's prolly a Zlob infection with Vundo and SDBot along for
the ride.]

V Green wrote:
You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

Last Night I tried to play this streaming video about spark plugs, and
it
said it couldn't play it,Needed to install this codec that popped up.
I
think It said something about active X.
I tried to install it, but AVG defected a threat, so I closed it, at
the
same time or a while later The XP up dates popped up so I installed
them.
Today I have some kind of crap where music will play,and there doing
some
kind of interview about a tattoo shop, then something I think about a
ford
truck, and I don't know what all else.
There is no web page open other than my home page yahoo mail.
I ran AVG and it said it found 4 and removed 4 threats, also ran ad
aware,and it removed some cookies.
I also saw this " Viewpoint something or other in ask
manager,(processes)
and removed it in add remove programs.
Thought all was well, but when I came home tonight the music and the
interview started again.
One other thing,when I 1st tried to bring up task manager, it said it
was
disabled, and when I goggled it, found the hot fix on I think it was
Sandy's page from Doug, for that problem.
I have not tried system restore yet, because I did not want to wipe
out
my
updates.
Any one ever have something like this.
This is the 1st real problem I have had since I started running XP and
IE
7. Thanks Tony

 

[Anthony Diodati]

Yes I do remember you from " My Win98 days"
LOL
Have to say so far XP seems a lot smoother.

Thanks for everyone's help,
"Think" It may be gone.
Time will tell.
SpyBot search & Destroy did find Zlob, and removed it.
I had Hijack this remove "bootrunonce.dll" but when I re-scanned, it was
back.
Ran it in save mode, and it stayed gone.
As I said, ran Vundo Fix, Came up with 0 files found.

One other thing (well 2)
I am not getting the "No connection to the internet" warning, And
also,before, Ad watch "Monitoring" was CONSTANTLY reporting registry
mods,Now it is not.
So, Like I said , I'll know in a few days and let you know.
Thanks, Tony

Follow the instructions in my first reply. You're going to need expert
assistance to get this machine cleaned up, Anthony. (You should remember
me from your Win98 days.)
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Well just ran Vundo Fix, Came up with 0 files found.
Hijack this is showing a "bootrunonce.dll" Looks like it "may be
something I
don't want on my machine.
Tony

Yea(Damm thing just woke me up at 6:00 AM)
Zlob WM was one of the things AVG reported finding yesterday.
Along with AdloadEZ.
Tony

[Actually, it's prolly a Zlob infection with Vundo and SDBot along for
the ride.]

V Green wrote:
You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

Last Night I tried to play this streaming video about spark plugs,
and
it
said it couldn't play it,Needed to install this codec that popped up.
I
think It said something about active X.
I tried to install it, but AVG defected a threat, so I closed it, at
the
same time or a while later The XP up dates popped up so I installed
them.
Today I have some kind of crap where music will play,and there doing
some
kind of interview about a tattoo shop, then something I think about a
ford
truck, and I don't know what all else.
There is no web page open other than my home page yahoo mail.
I ran AVG and it said it found 4 and removed 4 threats, also ran ad
aware,and it removed some cookies.
I also saw this " Viewpoint something or other in ask
manager,(processes)
and removed it in add remove programs.
Thought all was well, but when I came home tonight the music and the
interview started again.
One other thing,when I 1st tried to bring up task manager, it said it
was
disabled, and when I goggled it, found the hot fix on I think it was
Sandy's page from Doug, for that problem.
I have not tried system restore yet, because I did not want to wipe
out
my
updates.
Any one ever have something like this.
This is the 1st real problem I have had since I started running XP
and
IE
7. Thanks Tony

 

[Anthony Diodati]

OK I lied, Still getting the "no connection warning" when I tried to refresh
OE.
No tattoo shop interviews yet though......................!!!
..............LOL

Yes I do remember you from " My Win98 days"
LOL
Have to say so far XP seems a lot smoother.

Thanks for everyone's help,
"Think" It may be gone.
Time will tell.
SpyBot search & Destroy did find Zlob, and removed it.
I had Hijack this remove "bootrunonce.dll" but when I re-scanned, it was
back.
Ran it in save mode, and it stayed gone.
As I said, ran Vundo Fix, Came up with 0 files found.

One other thing (well 2)
I am not getting the "No connection to the internet" warning, And
also,before, Ad watch "Monitoring" was CONSTANTLY reporting registry
mods,Now it is not.
So, Like I said , I'll know in a few days and let you know.
Thanks, Tony

Follow the instructions in my first reply. You're going to need expert
assistance to get this machine cleaned up, Anthony. (You should remember
me from your Win98 days.)
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Well just ran Vundo Fix, Came up with 0 files found.
Hijack this is showing a "bootrunonce.dll" Looks like it "may be
something I
don't want on my machine.
Tony
Yea(Damm thing just woke me up at 6:00 AM)
Zlob WM was one of the things AVG reported finding yesterday.
Along with AdloadEZ.
Tony

[Actually, it's prolly a Zlob infection with Vundo and SDBot along for
the ride.]

V Green wrote:
You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

Last Night I tried to play this streaming video about spark plugs,
and
it
said it couldn't play it,Needed to install this codec that popped
up. I
think It said something about active X.
I tried to install it, but AVG defected a threat, so I closed it, at
the
same time or a while later The XP up dates popped up so I installed
them.
Today I have some kind of crap where music will play,and there doing
some
kind of interview about a tattoo shop, then something I think about
a
ford
truck, and I don't know what all else.
There is no web page open other than my home page yahoo mail.
I ran AVG and it said it found 4 and removed 4 threats, also ran ad
aware,and it removed some cookies.
I also saw this " Viewpoint something or other in ask
manager,(processes)
and removed it in add remove programs.
Thought all was well, but when I came home tonight the music and the
interview started again.
One other thing,when I 1st tried to bring up task manager, it said
it
was
disabled, and when I goggled it, found the hot fix on I think it was
Sandy's page from Doug, for that problem.
I have not tried system restore yet, because I did not want to wipe
out
my
updates.
Any one ever have something like this.
This is the 1st real problem I have had since I started running XP
and
IE
7. Thanks Tony

 

[PA Bear [MS MVP]]

Time to post your HijackThis log in an appropriate forum, Anthony. If
Spybot found Zlob, there's a very good chance it didn't detect and remove
all traces of it. Plus Zlob is usually accompanied by it's friends Vundo
and SDBot these days. All of this requires expert guidance to remove. Good
luck.

OK I lied, Still getting the "no connection warning" when I tried to
refresh
OE.
No tattoo shop interviews yet though......................!!!
.............LOL

Yes I do remember you from " My Win98 days"
LOL
Have to say so far XP seems a lot smoother.

Thanks for everyone's help,
"Think" It may be gone.
Time will tell.
SpyBot search & Destroy did find Zlob, and removed it.
I had Hijack this remove "bootrunonce.dll" but when I re-scanned, it was
back.
Ran it in save mode, and it stayed gone.
As I said, ran Vundo Fix, Came up with 0 files found.

One other thing (well 2)
I am not getting the "No connection to the internet" warning, And
also,before, Ad watch "Monitoring" was CONSTANTLY reporting registry
mods,Now it is not.
So, Like I said , I'll know in a few days and let you know.
Thanks, Tony

Follow the instructions in my first reply. You're going to need expert
assistance to get this machine cleaned up, Anthony. (You should
remember
me from your Win98 days.)
--
~Robear Dyer (PA Bear)
MS MVP-IE, Mail, Security, Windows Desktop Experience - since 2002
AumHa VSOP & Admin http://aumha.net
DTS-L http://dts-l.net/

Anthony Diodati wrote:
Well just ran Vundo Fix, Came up with 0 files found.
Hijack this is showing a "bootrunonce.dll" Looks like it "may be
something I
don't want on my machine.
Tony
Yea(Damm thing just woke me up at 6:00 AM)
Zlob WM was one of the things AVG reported finding yesterday.
Along with AdloadEZ.
Tony

[Actually, it's prolly a Zlob infection with Vundo and SDBot along
for
the ride.]

V Green wrote:
You're infected by Vundo.

Go here:

http://vundofix.atribune.org/

for starters.

Good luck. It's one nasty SOB to get rid of.

If you need help, use the forums there.

Last Night I tried to play this streaming video about spark plugs,
and
it
said it couldn't play it,Needed to install this codec that popped
up. I
think It said something about active X.
I tried to install it, but AVG defected a threat, so I closed it,
at
the
same time or a while later The XP up dates popped up so I installed
them.
Today I have some kind of crap where music will play,and there
doing
some
kind of interview about a tattoo shop, then something I think about
a
ford
truck, and I don't know what all else.
There is no web page open other than my home page yahoo mail.
I ran AVG and it said it found 4 and removed 4 threats, also ran ad
aware,and it removed some cookies.
I also saw this " Viewpoint something or other in ask
manager,(processes)
and removed it in add remove programs.
Thought all was well, but when I came home tonight the music and
the
interview started again.
One other thing,when I 1st tried to bring up task manager, it said
it
was
disabled, and when I goggled it, found the hot fix on I think it
was
Sandy's page from Doug, for that problem.
I have not tried system restore yet, because I did not want to wipe
out
my
updates.
Any one ever have something like this.
This is the 1st real problem I have had since I started running XP
and
IE
7. Thanks Tony