Need help with Alexa toolbar here!!!!

ndmmxiaomayi SG

Deleted.

ndmmxiaomayi SG

Deleted. Please do not do anything until further instructions are given.

ndmmxiaomayi SG

Double checked the log files. Everything went smoothly.

Please download OTMoveIt by OldTimer and save it to your desktop.

Select the contents of the below file list, then press Ctrl + C to copy it to the clipboard.

Double click on OTMoveIt to open it. In OTMoveIt, click in the left-hand pane and press Ctrl + V to paste the file list into the program.

Then click on MoveIt button. Copy and paste the results of MoveIt into Notepad and save it.
_________________________________________

Right click on HijackThis and select Rename. Name it stupid or any name you like and press Enter.

Open stupid (HijackThis), and select Do a system scan and save a logfile.
__________________________________________

In your next reply, please post back the OTMoveIt results and a new HijackThis log (after it has been renamed).

strado SG

---

ndmmxiaomayi SG

C:\Documents and Settings\Dunchen\Desktop\HijackThat.exe

C:\Documents and Settings\HeeeeeeeeeYang\Desktop\HijackThis.exe

Why is it from a different user? Each user has different kinds of infections even if it's on the same PC.

Can you please post a log from HeeeeeeeeeYang's account, with HijackThis renamed.

For Dunchen's account, please do this:

Please download SmitFraudFix.exe by S!Ri and save it to the desktop.

Anyway, can you tell me why my computer time will switch itself back to 2005 each time i on it, and I have to manually adjust it back to the current date?

It might be the spyware problems that is causing the date and time to be haywire. Once the spyware problems and if the same thing is happening, we will look into that.

Please post back rapport.txt from Dunchen's account and a new HijackThis log from HeeeeeeeeeYang's account.

strado SG

---

ndmmxiaomayi SG

OK. Do as instructed.

strado SG

---

ndmmxiaomayi SG

Please copy this set of instructions or print it out as you will not have internet access during the fix.

Restart the computer in Safe Mode

Once in Safe Mode, double-click on SmitfraudFix.exe.

Press 2 and press Enter to delete infected files.

You will be prompted: "Registry cleaning - Do you want to clean the registry ?"; press Y and press Enter in order to start cleaning the cleaning process. Your desktop will be gone for a while cleaning.

The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); press Y and press Enter.

The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart manually into Normal mode.

A text file will appear onscreen, with results from the cleaning process; please copy and paste the contents of that report into your next reply.
The report can also be found at the root of the system drive, usually at C:\rapport.txt

Note to other users: Running option 2 on a clean machine will remove your desktop background.

In your next reply, please post back a new HijackThis log and the contents of C:\rapport.txt.

Cullen[10] SG

off ur pc

ndmmxiaomayi SG

Bump up. Something is wrong with the forum.

ndmmxiaomayi SG

Bump.

Still around?

ndmmxiaomayi SG

Okie.

ndmmxiaomayi SG

Still need help?

coolgeek84 SG

Wah! *applauds* Mayi you rock! I see that log file and Appinit I wanna run away already. You got so much patience and time to troubleshoot and help that guy! Keep it up =)

To all the others out there. Please do not install anything which comes with this stupid Alexa Toolbar. There are many apps which install this toolbar along with themselves and Alexa is one toolbar which was very well designed to stay in your computer.

When isntalling ulu 3rd party apps don't anyhow click Next, Next, Finish to install. See that you uncheck the installation of stupid optional programs which will only cause you headache =)

Cheers.

manyu882 SG

lol.. try system restore la.. save lots of effort. that toolbar is one of a super stubborn adware

« Previous Page