Solved Do I have the w32 Blaster?

[Prescottbob]

I'm calling it a night unless you've got a hot lead.

 

[Prescottbob]

IE screen IS back to normal.

 

[cottonball]

Any traces of either McAfee or AVG in the main console of Revo?

In Revo, click Tools, and select: Autorun Manager

Any traces of McAfee or AVG there? If so, right-click and delete.

In Internet Explorer, go to Tools (at the top) select: Manage add-ons

In the Add-on types area on the left, go thru each Add-on type and look for anything McAfee or AVG. Nuke it, if found.

Any progress?

 

[cottonball]

Got to get some Zzzzzssss also.

We'll press on tomorrow.

IE screen IS back to normal.

What do you mean? Is the darn message "...contained a virus..." gone?

 

[Prescottbob]

NO, AVG is not coming up anymore. Revo and IE addons are clear of AVG but IE does have a McAfee Phishing Filter shown as diabled.

 

[cottonball]

Do this tomorrow (daytime)...

Go to Safe Mode:
Tap F8 as soon as the computer starts, and before Windows comes up
From the Advanced Boot Options Menu, select Safe Mode

Find the following folders (in color), and remove them:
c:\program files (x86)\common files\avg secure search
c:\program files (x86)\avg safeguard toolbar
c:\program files\mcafee
c:\windows\system32\drivers\avgtpx64.sys

Restart the computer normally.



Next, take action Downloading HijackThis
Save to the Desktop.
Right-click and select: Run as Administrator

Accept the License Agreement if you decide to run the program.

When the HijackThis console opens, press the following button: Do A system scan and save a logfile

When done scanning, a log opens in Notepad, and also appears on your Desktop.

>>Please post the HijackThis log in your reply.<<

 

[Prescottbob]

Name: McAfee Phishing Filter
Publisher: Not Available
Type: Browser Helper Object
Architecture: 32-bit and 64-bit
Version: Not available
File date: Not available
Date last accessed: ‎Today, ‎May ‎15, ‎2013, ‏‎2 minutes ago
Class ID: {27B4851A-3207-45A2-B947-BE8AFE6163AB}
Use count: 0
Block count: 119
File: MSKAPB~1.DLL
Folder: c:\PROGRA~1\mcafee\msk

 

[cottonball]

Can you remove:
c:\program files\mcafee

Or is it not found?

 

[cottonball]

Please press the Windows key and the R key.
In the Run box type: services.msc

When the services console shows up, are there any services for:
avg
avgtp
avgtpx64
AVG Technologies
ToolbarU Application
AVG Secure Search
AVG SafeGuard
VProtect Application
vToolbarUpdater
mcafee

If you find any of the above, post back which ones.

Calling it quits for sure. See you later.

 

[Prescottbob]

View attachment hijackthis.log

 

[Prescottbob]

Answer to #389

c:\program files\mcafee is in the Run box. This is the EMPTY mcafee folder.

I saw the McAfee Phishing Filter on the hijack log.

Answer to #388----search shows c:\program files\mcafee and the folder is empty

 

[Prescottbob]

Got some work to do, will be back around 11am PST.

 

[cottonball]

Once again, please run HijackThis, and Scan

Check the box to the left of the following entry:

O2 - BHO: McAfee Phishing Filter - {27B4851A-3207-45A2-B947-BE8AFE6163AB} - c:\progra~1\mcafee\msk\mskapbho.dll (file missing)

Select: Fix checked

Close out of HijackThis.

Restart the computer.

Did you check the Services to make sure there is no AVG, McAfee, or any of the following there:
avg
avgtp
avgtpx64
AVG Technologies
ToolbarU Application
AVG Secure Search
AVG SafeGuard
VProtect Application
vToolbarUpdater
mcafee

There are probably none, but, just want to check.

 

[Prescottbob]

I'm back, ready for your orders!

 

[cottonball]

Orders??? Oh no!!! Those days are long gone...retired!


Look at the post above you.

Restart, check IE...still get the "...contained a virus"?

 

[Prescottbob]

'PHISH" WAS DELETED. IE still gets "virus & deleted" after restart.

 

[Prescottbob]

HIJACK did not delete the PHISH. I'll try again.

 

[Prescottbob]

Hijack does not show the phishing filter now but the phish still appears in IE add-ons as disabled. IE still has the virus detected message.

 

[cottonball]

Please download IE 10:
Download Internet Explorer 10 from Official Microsoft Download Center

Click the Download button on the page to start the download.

Then, do one of the following:
•To start the installation immediately, click Open or Run this program from its current location
Follow the prompts to install...

Close all Windows!!

•To copy the download to your computer for installation at a later time, click Save, or Save and Run, and save the program to the Desktop.

 

[Prescottbob]

"IE setup cannot continue because a more recent version of IE is installed on your computer" TAKE THAT Y'ALL