I'd like to do a complete clean up on my comp, how do i do that?

I'm a newbie, and my computer is really starting to get ******* up! I can't uninstall programs, i can't install programs, certain programs won't work anymore and a message comes up saying the program must close. I've got tons of virus scanning on my computer, but i'm pretty sure i've got something hidden in there that adaware, spybot, and norton isn't picking up. I tried zone alarm, but it just protected my computer more so than fixing anything. My adobe acrobat reader only installs 3/4 of the way than has to close, my msn messenger will sign in but i can't send messages or recieve them. So i tried installing ICQ and it will only install 3/4 too. So then i try to uninstall it and it won't do it cause its missing a file. I've now got some stupid msn plus 3 toolbar i can't get rid of for the life of me. My Nikon digital camera program won't open but it says it has loaded. All this and it says my computer is as clean as a whistle. So instead of paying someone to come in, take a look, charge a lot of money and try to push new programs that the family really doesn't need, i was hoping someon would be able to assist me on how to, step by step do a complete thorough clean of my comp and get back to normal, no msn, no icq, no stupid toolbars, and installing software as easily as i once did. If there is a website, that would be great, but as i said, i'm a newbie, so i need it step by step, inch by inch. Sorry if i come off a little rough sounding, but i'm getting perturbed. I'm running windows 98SE, i've got adaware, spybot, norton, registry cleaner and a clean up HD programs to keep the computer clean. I run scandisk and the defragmenter everyweek. Anyways, if you need more info or anything else, please ask, and please up.
Thanks a lot
jordan

 

Best to only have one active AV program. Start with uninstalling unused/unwanted programs. After uninstalling, look in C:\Program Files and delete any folders associated with programs that are gone. Open My Computer, right click Local Disk C: and choose properties, then disk cleanup. Check all boxes except compress old files and OK.
Reboot.
Again get to the properties of Local Disk C: How much used/free space?

Which registry cleaner are you using?

Download HijackThis from the CWShredder link in my signature. Place it in a permanent folder(I create a new folder in C:\ named HJT). Open and hit scan, then save log. Once it is saved it will open in notepad. Select all from the edit button, copy and paste the results here. Don't fix anything with it yet! Someone experienced with the logs will tell you what/how to fix.

 

If you want to do a complete cleanup of all temp files, Restart in Dos Mode and do these commands, pressing Enter at the end of each line. BEWARE OF TYPOS, THEY CAN BE FATAL.
smartdrv
del c:\*.chk
deltree c:\windows\cookies
deltree c:\windows\history
deltree c:\windows\temp
deltree c:\windows\tempor~1
deltree c:\windows\shelli*
del c:\windows\win386.swp
scanreg /opt
scanreg /fix
Type a Y when prompted to delete, check for typos at this time. Note the del command appears to do nothing when done correctly.
When you get the message that 'windows has repaired the registry', reboot. All the files and folders that were deleted will be recreated, except for CHK files, if they were there to delete.

 

Hey guys, thanks for the quick help, so i got 5.12GB of used space, and 32.1GB of free space. I'm using microsoft registry cleaner utility. And my hijack this log is:
Logfile of HijackThis v1.97.7
Scan saved at 4:56:34 AM, on 6/4/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\SYSTEM\PSTORES.EXE
C:\WINDOWS\LOADQM.EXE
C:\PROGRAM FILES\GLOBALACEACID\ERROR DEAD.EXE
C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
C:\WINDOWS\SYSTEM\DDHELP.EXE
C:\MY DOCUMENTS\MY RECEIVED FILES\HIJACKTHIS.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchweb2.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchweb2.com/searchbar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchweb2.com/passthrough/index.html?http://www.hotmail.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchweb2.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchweb2.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchweb2.com/searchbar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchweb2.com/searchbar.html
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {9D31F7EC-307B-7519-8A7D-038147E4320C} - C:\PROGRAM FILES\INTRA MEMO GRAM\DOWNLOAD BEEP.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: testmapi - {35A02BA1-9007-45E6-73BA-5D3FA8F083B9} - C:\PROGRAM FILES\INTRA MEMO GRAM\DOWNLOAD BEEP.DLL
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\Run: [SixthSite] C:\PROGRA~1\GLOBAL~1\Error Dead.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe "
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37923.7378356481
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab

That searchbar tool is from that stupid messeng plus 3, and i can't get rid of it. Let me know, thanks again
jordan

 

Remove these using HijackThis.


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchweb2.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchweb2.com/searchbar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchweb2.com/passthrough/i...ww.hotmail.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchweb2.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchweb2.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchweb2.com/searchbar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchweb2.com/searchbar.html
O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe "
These items below I could find no info on using Google, if they are unknown to you, remove them. Actually, remove them anyway, you can always put them back, as HijackThis makes backups of items removed. They could be related to your problem, maybe other folks here has some info on them. It is not uncommon for these malwares to have more than one thing going.
O2 - BHO: (no name) - {9D31F7EC-307B-7519-8A7D-038147E4320C} - C:\PROGRAM FILES\INTRA MEMO GRAM\DOWNLOAD BEEP.DLL
O3 - Toolbar: testmapi - {35A02BA1-9007-45E6-73BA-5D3FA8F083B9} - C:\PROGRAM FILES\INTRA MEMO GRAM\DOWNLOAD BEEP.DLL
O4 - HKLM\..\Run: [SixthSite] C:\PROGRA~1\GLOBAL~1\Error Dead.exe

Reboot and delete the folder C:\Program Files\Messenger Plus! 3. If those 3 items are unknown, delete the C:\PROGRAM FILES\INTRA MEMO GRAM and C:\PROGRA~1\GLOBAL~1 [this name is actually longer, but is in 8.3 filename form] folders.

 

I see Mark posted while I was preparing this, so some of it may just be a repeat.

Download CWShredder from the link in my sig. We'll use it later.

Scan with HJT again and place a check next to the following entries. Close ALL other windows and click fix.


R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchweb2.com/searchbar.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchweb2.com/searchbar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://searchweb2.com/passthrough/i...ww.hotmail.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchweb2.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchweb2.com/searchbar.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchweb2.com/searchbar.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchweb2.com/searchbar.html
O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe "
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background


Open MSN Messenger and click tools>options. On the general tab, uncheck 'automatically run Messenger when I log onto Windows' and OK out.

Open CWShredder and click fix.

Reboot.

Open C:\Program Files and delete the folder Messenger Plus! 3.


Do you know what the program named below is? If not, include the entry to be fixed with HJT and delete the folder GLOBALACEACID after reboot.


O4 - HKLM\..\Run: [SixthSite] C:\PROGRA~1\GLOBAL~1\Error Dead.exe
C:\PROGRAM FILES\GLOBALACEACID


Open C:\Windows\Applog, select all and delete. Run Disk Cleanup again.

I recommend you now download and install RegSeeker. Open and click clean registry. When scan is complete, verify the backup box is checked in the lower left corner, select all, and delete by right clicking in the results window. Reboot and test the programs you have installed for functionality. If anything that was working is not now, you can reinstall the backup from RegSeeker, reboot and try it again. Exclude related entries on future scans and continue cleaning. Run it and delete all until you get a clean scan, rebooting and rechecking programs on each run. In the future, you should be able to just clean without fear of harming anything since excludes will be in place. I personally have never had RegSeeker remove anything I needed, and haven't had to exclude anything, but one never knows.


When you're all done cleaning the registry, run scan disk and defrag. Reboot and make a new HJT log and post it, along with any comments related to how things are working and if original problem has been fixed.

 

Very cool guys, thanks a lot. That stupid toolbar from messenger plus is gone, and that regseeker found 505 files, actually plus 25. My msn still won't work, haven't tried re-installing the adobe yet, i'll just wait to re-install once you guys have looked through this second log. But every other program is opening like usual. So here is the 2nd hijackthis log:
Logfile of HijackThis v1.97.7
Scan saved at 6:22:57 PM, on 6/4/04
Platform: Windows 98 SE (Win9x 4.10.2222A)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\SYSTEM\KERNEL32.DLL
C:\WINDOWS\SYSTEM\MSGSRV32.EXE
C:\WINDOWS\SYSTEM\MPREXE.EXE
C:\WINDOWS\SYSTEM\mmtask.tsk
C:\WINDOWS\SYSTEM\MSTASK.EXE
C:\WINDOWS\EXPLORER.EXE
C:\WINDOWS\LOADQM.EXE
C:\MY DOCUMENTS\MY RECEIVED FILES\HIJACKTHIS.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [LoadQM] loadqm.exe
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: ICQ Pro (HKLM)
O9 - Extra 'Tools' menuitem: ICQ (HKLM)
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/ansi/iuctl.CAB?37923.7378356481
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://www.pestscan.com/scanner/axscanner.cab
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab

Let me know, and i really do appreciate the help.
thanks
jordan

 

Looks squeaky clean to me. Too clean. You have BHO and toolbar references to Norton AV but it's not running. Not even any run references, and there should be. Did you shut it down? Uninstall it? If it's still onboard, it may need uninstalled/reinstalled. Really should put a firewall back in place too.

As in Messenger? Or MSN explorer? May need to uninstall/reinstall it as well. If you are able to download and install properly, I recommend you get both Spybot and Ad-aware. Install and immediately update. Run and delete all they find. Custom full scan configuration for Ad-aware. Use the immunize feature in Spybot and click the SpywareBlaster link on the immunize page and install/update it too. That will leave you pretty well protected against future infections.