Mrs. D.

Alan is on this computer all the time. I have no idea where he goes. He has an internet business. Since I have no control over what he does or where he goes, the only thing I specifically warned him about is never to download anything or open up any attachments.

Does he listen? I have no idea. Can't tell him a darn thing. He's 61 and stubborn as a mule. He claims it's his OCD.

So all I can do is continue to run spywares, malware scans, virus scans and the lot.

He'll either blow up the computer or I'll blow him up.

lol

I AM learning more every day about computer stuff. So THAT'S A GOOD THING!! lol

Melody

hey Mel,

I am on it...but I have to make sure I say this.

When we use hijackthis, we have to be very very careful. If you accidentally delete something that is vital, you'll have to reformat.

two, you'll have to follow everything I say verbatim and be very careful and I do want to say that I or NT cannot be held responsible if there is a "mal-function"

I don't work for NT and this is voluntary. Just need you to agree to that if that's OK...this is just a suggestion that I will be making and please do these at your own risks or not...

sorry, didn't wanted to turn this into "business tawk" but have been burnt a few times in the past...

~~~~~~~~~~~~~~~~~~~~~~~

there are a few things that you'll have to do.

1) you need to run a couple of independent anti-spyare mal-wares first.

you can choose to delete them later if you want to

2) you'll need to get a fresh cup of coffee...OK, not really coffee...your "JAVA" is out of date and you have major security issues that are open. It's creating re-directs and the re-directs are coming in and hitting you.

3) after that, we'll run another hijackthis log and see if we need to delete anything that wasn't caught...

4) after all that, you'll need to do a deep cleansing. (I'll show you, no worries. LOL)

5) then, the last step is defrag.

if you can, give Alan a limited account and NOT the admin account...

but don't worry, most of your log looks good...just a few of them....

I am not sure if your keyboard thingy will/is related to this but just based on your log, you really need to run the anti-spywares and the java update and it does look like your residuals are re-creating themselves in your sys32 as new .dll so we'll need to rid of those....

alrighty, headache yet? NO worries, one step at a time...

step 1:

let's run two independent anti-spywares, Mel (not at the same time)

the first one:

Malware Bytes: click here

this one is known to do some really deep registry scanning and gets to the "greywares" that other anti-spy/anti-virus might miss

Double-click mbam-setup.exe and follow the prompts to install the program.
At the end of the install, place a checkmark next to the following two options:
Update Malwarebytes' Anti-Malware make sure you UPDATE!
Launch Malwarebytes' anti-Malware
Click Finish.
MBAM will automatically update and launch, if the above options are checked.

Once the program launches, make sure you click on all your hardrives: C drive and any USB stick, extra memory/storage stuff then
select Perform full scan, then click Scan.
When the scan is complete, click OK -> Show Results to view the scan results.
Pace a checkmark next to all the items found, and then choose the 'Remove Selected' option to move the selected items to the quarantine.
When the scan is finished, a log will open in Notepad with the scan results.
plesae save this log file by cut and pasting it and send it to me and then delete whatever has been quarantined.

~~~~~~~~~~~~~~~~~~~~~

after that, please RESTART your computer and download:

adaware free (click here)

follow the protocols and once it's done, make sure you UPDATE it and after that, run a "FULL/COMPLETE" scan

when it's finished, there will be three tabs. just check whatever is under each tab and hit delete and then finish.

(if it asks you to created a restore point, click yes and if something goes wrong, you can go back and restore)

restart your computer again.

~~~~~~~~~~~~~~~~~~~~~

now, this is something that I would recommend for everyone, it's one of the best FREE backup tools called ERUNT. It backs up your registry and can save you some headaches down the road. It's a great backup system.

download erunt (click here)

Note: To ensure proper operation of ERUNT, you should be logged in as a system administrator.

Start ERUNT, confirm the Welcome message.

Type in the name of a restore folder where the backed up registry files should be saved, or click "..." to browse your computer's drives and select a folder. You can also simply leave the default, which is afolder named ERDNT inside your Windows folder, the advantage being that you have access to this folder from the Windows Recovery Console in case Windows does not boot anymore.

Note that in the folder edit field, ERUNT by default appends a folder named the current date to the restore folder, which allows you to keep as many registry backups as you wish in the same restore folder, separated into the different creation dates. This feature, as well as the appearance of the date string, can be configured via the ERUNT.INI file, described later in this document. If you want the registry backup to be created directly in the folder you select, you can also simply remove the date from the folder edit field before clicking "OK".

Next, select the backup options:

- System registry: The current system registry, usually consisting of the files DEFAULT, SAM, SECURITY, SOFTWARE, and SYSTEM.

- Current user registy: The registry files for the currently logged-on user, usually NTUSER.DAT and USRCLASS.DAT.

- Other open user registries: Sometimes Windows has a few other user registries in memory. Examples for this are "generic" registries, e.g. for user "EVERYONE", or registries of other users if you use Fast Task Switching in Windows XP. Check this option to backup all these additional user registries (if found) as well.

Click "OK" and wait until the backup process is complete. (Note that depending on your system configuration this may take some time, and
that the first bar is NOT a progress bar, just an indicator that the program is still running.) The ERDNT program for later restoration of the registry is automatically copied to the restore folder.

~~~~~~~~~~~~~~~

after this, please run an update of Sunjava:


download sunjava here

your version is truly outdated and that's where I suspect why you are vulnerable to the security issues. There were a lot of re-directs and your browsers have a lot of open sockets it's like opening your door for the hackers and saying to them, hey, come on in and have some "cookies" and "java" LOL

Updating Java:
Download the latest version of Java Runtime Environment (JRE) 6.0 Update 11
Scroll down to where it says "The J2SE Runtime Environment (JRE) allows end-users to run Java applications".
Click the "Download" button to the right.
Check the box that says: "Accept License Agreement".
The page will refresh.
Click on the link to download Windows Offline Installation with or without Multi-language and save to your desktop.
Close any programs you may have running - especially your web browser.
Go to Start > Control Panel double-click on Add/Remove programs and remove all older versions of Java.
Check any item with Java Runtime Environment (JRE or J2SE) in the name.
Click the Remove or Change/Remove button.
Repeat as many times as necessary to remove each Java versions.
Reboot your computer once all Java components are removed.
Then from your desktop double-click on jre newest exe to install the newest version.

please print this page out so you can view better...

after all these, please run another hijack this log and we'll get rid of the rest of the buggers.

My jaw just dropped on the floor.

You do this??? on a regular basis??? I can't do any of this until tomorrow Alan owns the computer in the evenings up until I go to bed. I can try (and I mean try) to do this tomorrow.

One thing I did do today, was the Java update. There was this little message thingee on the bottom right of my desktop telling me my java updates are ready to install.

I clicked on this but I'm not sure if it installed them.

And as far as setting up two separate accounts, well, I don't think Alan would appreciate that. Maybe someday (when I can reason with him).

So I shall try (and again, I say try). I'm going to print out and read and re-read all your instructions. If I think for one minute that this is beyond me, I can't even try.

I don't want to kill this computer.

I wish I were 21 years old again. I wish my son (who is 27 and is computer genius), well I wish he was still here. He would walk me through this.

He has a brain just like you.

A few years ago (when we were on good terms), he once asked me on the phone "do you do your windows updates on a regular basis?" and I said "no the computer does it for me". and he just sighed and said "go over to the computer". I said "are you in front of your?" and he said "No, I'm lying on my bed.

Do you know he walked me through about 30 steps (all from his head), and I did the computer update thing.

I have no idea how a person can do this while he is not in front of his computer. I guess it's like driving a car. You know how to do it and you know what all the dashboard stuff means, and you don't have to be in front of the dashboard to remember what's going on.

So my dear, (and believe me, I thank you from the bottom of my heart)., tomorrow morning will tell the tale.

And I'm glad you think it's not too bad. I shudder to think what might happen if my computer were on fire.

I shall let you know

and once again. Thanks much.

Melody

mel,

one of the things that I enjoy in your posts is your undying learning spirit.

it helps me too to see your attitude. No one will know every single thing not even the so called computer experts. There are so many things out there and it takes someone who's willing to learn and experiement and having the patience and of course, there is the economics of it....

I can't afford to let someone fix my computer so I decided I'd just have to learn it my darned self. I spent countless sleepless days and nights trying to learn the PC and I was a BIG MAC user....

and guess what, just like you, I am still learning...

you can do it...it looks hard but it is just click here and click there as long as we're careful and don't get too clicky happy...LOL

keep up that spirit...

And let me know how it goes and KEEP your "coffee" fresh!

You like my undying learning spirit? Thank you my dear.

right now, my spirit isn't cooperating because I cannot walk. For some unknown reason, the right side of my foot is killing me. It doesn't help that it's probably 100 degrees humidity outside. I have degenerative joint disease, but this has nothing to do with my joints. They are killing me too.

I didn't have this in the a.m. This happened later on in the afternoon. I soaked it in epsom salts. Didn't do a thing.

Then I remembered having something similar (it got me into the emergency room once). It was a pain on the left foot (on the top). The pain was horrible. I remember the doctor telling me it was tendonitis. He said "nothing you can do but put compresses and take an anti-inflammatory".

he was right.

This feels exactly like the same pain. But I had to go outside and take in the garbage pails. I put on my crocs. MUCH BETTER. Made it easier to walk. So I said "okayyyyyy, we have walking going on here, that's a start".

It's not arthritis because it's not a joint. I didn't bang it or bump it. All my friends are in pain because of the weather, and I have no idea why I believe it's tendonitis because I've ruled out just about everything else.

So I'm going to go and do some research on tendons in the right side of the right foot.

My computer stuff will have to wait. But I'll get there!!

UPDATE..... I just looked up tendonitis and the various tendons in the foot. There was a photo of the foot and THERE WAS MY TENDON. It's called the peroneus longus tendon. As soon as I saw the yellow arrow pointing to that particular tendon I said "that's my tendon".

Good thing part of the treatment is to wear the correct shoes. Thankfully I have my crocks, until all this nonsense is over.

I need this like a hole in my head.

lol

Thanks so much my dear.

Melody

Who Moi!!!

I just clicked on the first thing. the Malware Bytes.

Now you said to double click mbam-setup.exe and follow the prompts.

Where exactly on the screen is this mbam-setup.exe?

I looked all over and could not find it.

Thanks, Melody

hmmmm...might need to go backdoor...

is your active X turned on? it's a little line on top of your browser, just say yes when it asks you if you trust this site, blah blah blah...

and then just follow it.

after you say yes to it, a tiny window will pop up...click on "run" not save it

then follow the rest of the prompts

http://www.majorgeeks.com/downloadge...d909666f809b26

[QUOTE=who moi;434586]hmmmm...might need to go backdoor...

is your active X turned on? it's a little line on top of your browser, just say yes when it asks you if you trust this site, blah blah blah...

and then just follow it.

after you say yes to it, a tiny window will pop up...click on "run" not save it
----------------------------------------------------------

Right now, there's a window right on my screen (I did what you said by the way). the window says:

You have chosen to open mbam-setup.exe
which is a: Aplication from http://files4.majorgeeks.com

Would you like to save this file. It does not allow me to click on run. Only save or cancel.

so what do I do now!!!

lol

huh??? *scratching moi's head...LOL

I have no idea what happened to your download... LOL

do NOT save it (you can, but it is more headache..)

OK, try downloading it from the link below:

http://www.download.com/3001-8022_4-...rt=dl-10804572

(you'll get an active X prompt..just click on it and download file. Wait for the window to pop up then hit run, if nothing pops up, see where it says:

"Your download will begin in a moment. If it doesn't, click here to try again."

click THERE, and just click on RUN)

I am not sure why MajorGeek's doing that, maybe they are on vacation...LOL

speaking of which, CastleCop will be closed permanantly...I am very sad about that...I volunteered there and learned a lot from them...it is too bad...*sigh...