#1
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
IE pops a blank all the time? Estalive?
HiSP2 (WinNT 5.01.2600)Ad -Aware 2007\aawservice.exehttp://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://search.aol.co.uk/web?isinit=true&query=%s http://www.update.microsoft.com/wind...?1194849721708 http://www.update.microsoft.com/micr...?1194858202803 Ad -Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad -Aware 2007\aawservice.exeWAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
Didn't find the information you thought to find?Similar Threads
#2
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi eMad
Quote:
I also keep getting this false positive Estalive on my AOL spyware protection
If you know it's a false/positive set your AOL spyware to ignore it.
#3
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Hi Geri
Last edited by eMad; 26th November 2007 at 05:50 .
#4
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi eMadscan only . Check the boxes next to all the entries listed below. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/APPS/IE/offline/uk.htm close all windows other than HiJackThis , then click Fix Checked. HJT .
#5
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Quote:
Originally Posted by
scan only[/b]. Check the boxes next to all the entries listed below. R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = file:///C:/APPS/IE/offline/uk.htm
Didnt work Geri, sorry.
#6
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi eMadHJT , You need to do a couple things.Disable MS Defender until the computer is clean Tools and then General Settings Real Time Protection Options uncheck Turn on real-time protection Save Don't forget to re-enable it, when your computer is clean. Disable Spybot's TeaTimer. This is a two step process. First step: Right-click the Spybot Icon in the System Tray (looks like a blue/white calendar with a padlock symbol)
If you have the new version 1.5, Click once on Resident Protection , then Right click the Spybot icon again and make sure Resident Protection is now Unchecked . The Spybot icon in the System tray should now be now colorless.
If you have Version 1.4, Click on Exit Spybot S&D Resident
Second step, Open Spybot S&D
Click Mode , choose Advanced Mode
Go To the bottom of the Vertical Panel on the Left, Click Tools
then, also in left panel, click Resident shows a red/white shield.
If your firewall raises a question, say OK
In the Resident protection status frame, Uncheck the box labeled Resident "Tea-Timer"(Protection of over-all system settings) active
OK any prompts.
Use File, Exit to terminate Spybot
Reboot your machine for the changes to take effect.
Don't forget to re-enable it, when your computer is clean. HJT fix.Jotti File Submission: Please go to Jotti's malware scan
Copy and paste the following file path into *the *"File to upload & scan" box on the top of the page:C:\WINDOWS\system32\drivers\Icon.exe
Click on the submit button
Please post the results in your next reply.
#7
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Hi GeriSP2 (WinNT 5.01.2600)Ad -Aware 2007\aawservice.exehttp://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://search.aol.co.uk/web?isinit=true&query=%s http://www.update.microsoft.com/wind...?1194849721708 http://www.update.microsoft.com/micr...?1194858202803 Ad -Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad -Aware 2007\aawservice.exeWAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
#8
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi eMadHJT log.Deckard's System Scanner (dss .exe) Note: You must be logged onto an account with administrator privileges to complete the following. Close all other windows before proceeding. Double-click on dss .exe
When it has finished, dss main.txt and extra.txt -- please copy and then paste the contents of main.txt
#9
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Hi GeriAd -Aware Restore Point 2007-11-24 16:46:30SP2 (WinNT 5.01.2600)Ad -Aware 2007\aawservice.exedss .exehttp://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://search.aol.co.uk/web?isinit=true&query=%s http://www.update.microsoft.com/wind...?1194849721708 http://www.update.microsoft.com/micr...?1194858202803 Ad -Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad -Aware 2007\aawservice.exeWAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe.js - unable to read key .js - unable to read key .txt - unable to read key .txt - unable to read key LAN CardPCI \VEN_1814&DEV_0201&SUBSYS_25601814&REV_01\4&16793A72&0&08F0LAN CardPCI \VEN_1814&DEV_0201&SUBSYS_25601814&REV_01\4&16793A72&0&08F0www.007guard.com www.008k.com www.00hq.com www.032439.com
#10
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi eMadscan only . Check the boxes next to all the entries listed below. R1 - HKLM\Software\Microsoft\Internet Explorer\Main,First Home Page = C:\Program Files\AOL Toolbar\welcome.html close all windows other than HiJackThis , then click Fix Checked. HJT .
#11
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Hi Geri
#12
SuperGeek
Profile: Join Date: Apr 2003
Location: New Bremen, Ohio U.S.A.
Posts: 12,523
Computer Experience:
Sorry for intruding, but I'd like a sample of that icon.exe file. Please upload it to my submission channel . Leave a link back to this topic.
#13
Staff
Profile: Join Date: Mar 2003
Location: Washington State
Posts: 4,633
Computer Experience:
Hi eMad
Quote:
unistall the AOL toolbar!!!And its all gone now, no more blank pages.
That's great! AOL First , The true infection is adware...But I see no files or registry entries in your logs that Estalive puts on a system when it infects one.Second, It seems to be a AOL spyware problem and Spyware Doctor. Spyware Doctors protection has it listed in the data base so that it would detect it before it infects a system, AOL spyware is picking up that as the infection and sends you a warning.HERE Once you are on the Panda site click the Scan your PC button
A new window will open...click the Check Now button
Enter your Country
Enter your State/Province
Enter your e-mail address and click send
Select either Home User or Company
Click the big Scan Now button
If it wants to install an ActiveX component allow it
It will start downloading the files it requires for the scan (Note: It may take a couple of minutes)
When download is complete, click on My Computer to start the scan
When the scan completes, if anything malicious is detected, click the See Report button, then Save Report and save it to a convenient location. Post the contents of the ActiveScan report
#14
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Quote:
Originally Posted by
noahdfear
Sorry for intruding, but I'd like a sample of that icon.exe file. Please upload it to
my submission channel . Leave a link back to this topic.
Thanks!
C:\WINDOWS\system32\drivers\Icon.exe
Hi
#15
Inactive
Profile: Join Date: Nov 2007
Posts: 13
Computer Experience:
Hi Geri
All times are GMT +1. The time now is 09:28 .
You may have had problems removing them with HJT, You need to do a couple things.
I'll check this then.
, which ill be doing soon when i change my ISP.
