pumhijackho issue

[herbc]

Alright Cottenball i did as you said but i ran a MB scan and it was still there. I ran Hijack this again and now it's showing this.




On another note, Bitdefender didn't work out, for some reason it doesn't seem to work right and i'm always having trouble understanding it.

I went back to Avast free.

I believe Britton 30 is right about that Hijack thing being dormant on my system and it just becomes active after a while. I need to figure out what files to delete to permanently get rid of it.

Maybe an offline rescue disk. The Bit Defender rescue scan never worked because it was never able to connect to the server and showed error no matter what i did.

 

[cottonball]

herbc,

Just do what it says for Vista...right-click and select: Run as Administrator

 

[VistaKing]

herbc

Try running HijackThis inside Safe Mode .

To get into safe mode . While the PC is booting up tap on the F8 key until you are in the Advanced Boot Options screen using the down arrow keys on the keyboard go to Safe Mode and press <enter> . You will see a bunch of white font going down the screen . Logon to your account click yes on the Window inside save mode .

Now try to open HijackThis again .

 

[herbc]

I got it to run inside safe mode but the IE policies was not there since i deleted it earlier. However i'm convinced it's dormant on my system because my google homepage is not showing what it usually does, there are different websites that i have never seen before.

I also just noticed this little dialog box in the upper left portion of the screen when first logging in. It says either setting up personalized settings for web platform customizations or it says removing personalized settings for web platform customizations .

Maybe i should try an offline rescue disk, i don't know anymore.

 

[cottonball]

Can take a look before Windows starts…

Need some info from you:
Do you have the Repair your computer option in the Advanced Boot Options menu?


To find out:
Restart the computer.

As soon as the BIOS is loaded begin tapping the F8 key until the Advanced Boot Options menu appears.
Is the Repair your computer option listed?


If you do not have the option, do you have your Windows installation CD/DVD available?

And last, do you have a USB flash drive available, and access to another computer that is not infected?

 

[herbc]

I have the advanced boot options because i use safe mode to do scans. I do not have original Win 7 disks and i don't really have access to a clean pc, i would need to take it to a repair center.

Is there any other options?

 

[cottonball]

Is the Repair your computer option listed in the Advanced Boot Options menu?

 

[VistaKing]

herbc

Here is a legit Windows 7 Home Premium SP1 64-bit . ISO file

Click the download button
Download



Download the ISO on a clean PC if possible .

 

[Britton30]

Have you done this? http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html#post1424613

You can make your own installer too.
http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html#post16008
Links for w7 .iso files are in the note above number2.

 

[herbc]

herbc

Here is a legit Windows 7 Home Premium SP1 64-bit . ISO file

Click the download button
Download



Download the ISO on a clean PC if possible .

Is that the same link as i used(digital river)? If it is then your saying i should find a clean pc and make a copy and use it on the effected pc? Won't the malware get into the clean iso file from the effected pc as soon as i attempt to reinstall?

 

[herbc]

Have you done this? http://www.sevenforums.com/tutorials/166445-windows-defender-offline.html#post1424613

You can make your own installer too.
http://www.sevenforums.com/tutorials/1649-clean-install-windows-7-a.html#post16008
Links for w7 .iso files are in the note above number2.

Thanks Britton 30, i will keep this info handy.

 

[herbc]

Alright a quick question, if i had a Win 7 iso file burned on a definitely clean computer and used it to reinstall Win 7 on an infected computer would the infection be able to get on to the dvd that was definitely clean when i started to use it.

In other words, is a initially virus free Win 7 iso disk safe to use for future re install's if i chose to do so? Thanks

 

[Britton30]

No, a malware/virus can't infect a CD/DVD, but could hop in a USB flash stick. I would however, recommend a complete wipe and reformat of the the suspected HDD.

 

[herbc]

Thanks Britton, when you say a complete wipe do you mean formatting the entire drive or using a program like Dban ? Is just formatting the drive enough to get rid of rootkits and their variants or is it necessary to use a program like D ban for rootkits and bootkits?

The last question i have is about the Win 7 iso file itself. Should you download a new Win7 iso file every once in awhile or it is pretty much identical regardless of age.

Thanks everybody

 

[Britton30]

Dban is a good choice with multiple overwrites, formatting doesn't wipe the drive.

I think the current w7 SP1 iso will be the last ones.

 

[VistaKing]

herbc

Windows 7 only as SP1 so the link you downloaded the ISO from is dated with the Service Pack . If you want you could manually add the updates to the ISO and then burn the ISO

You could use DISM to add the updates and use isoimg to create the custom iso file

 

[herbc]

The links that were provided to me were not current ? So i need to download again i guess, any updated link you can provide?

 

[VistaKing]

The link inside the OEM CLEAN INSTALL tutorial written by gregrocker has Service Pack 1 . If you want more current that would have to be done manually adding the updates to the disc .

 

[herbc]

Thats the link that i downloaded a few times without success at first but you guys said sometimes it takes a few downloads for a burn to be successful. I finally got it to burn successfully the other day so i'm good right?

I'm a bit confused because that download was from Gregrockers tutorial and had sp1, are there new things i need to add now?

 

[Britton30]

No, you don't need to add anything now. You will have the updates ti grab after the install.