E-MAIL WARNING

[Pancake]

Ok.From the log you sent me things dont look to bad.Just need a cleanupand that should fix things.

[color=bLUE]Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.[/color]

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE

Reboot.....

To complete the cleanup and when you have time download the trial version of/AVG Anti-Spyware 7.5
 here:
http://www.ewido.net/en/download/
Install it, and update the definitions to the newest files.

Next, reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Select the first option, to run Windows in Safe Mode.

For additional help in booting into Safe Mode, see the following site:
http://www.pchell.com/support/safemode.shtml

Once in Safe Mode, run AVG, and run a full scan. During the scan it will prompt you to clean files, click OK.

[Suninfrance]

Hi Pancake - thank you for all your help on that.  As you said in your e-mail "To complete the cleanup and when you have time download the trial version of/AVG Anti-Spyware 7.5".  It didn't take that long to download the programme but I was amazed at how long it took to run, especially in Safe Mode.  Anyway it's all done now.  It found 12 infections

TrackingCookie.2o7

TrackingCookie.Bfast

TrackingCookie.Atdmt

TrackingCookie.Serving-sys

TrackingCookie.Estart

Adware.Comet

Adware.DriveCleaner

I know that's not twelve but one location had 5 of the same thing.  I recall that DriveCleaner was the one that downloaded itself.

I wasn't even aware that AVG had a free version of Anti-Spyware.  I purchase a two year licence for their AntiVirus and Firewall, so maybe when that comes up for renewal I'll get the full package,

Just two more questions

When AVG AntiVirus was testing I got two Warning messages.  1st was

Partition Table (MBR)

Object: Changed

2nd was:

C:\Windows\System32\kernel32.dll

Object: Changed

Original Size 961 KB (984064 bytes)

New Changed Size 960.5 KB (983552 bytes).

Does that mean anything to you?  I have clicked the Ignore button so far, but should I be permitting the change?

Again, thanks, and to everyone who has helped me out on this.

Jan

[Pancake]

C:\Windows\System32\kernel32.dll
Object: Changed
Original Size 961 KB (984064 bytes)
New Changed Size 960.5 KB (983552 bytes).

Thats fine.What has happened it that they where changed by one of the infections,either Comet or Drive Cleaner,and it has now been changed back to its original size.You should be fine now.[:D]

[Suninfrance]

Thanks Pancake

Just one more thing - my PC won't shut down properly - it takes about 15mins and eventually I have to shut it down using Ctrl+Alt+Del and doing it through the task manager.

[AnOther]

This is a whole different ball game not necessarily associated with your previous problem at all and you might actually want to start a new thread for it.
As a starter for 10 have a look here and see if it helps.

http://www.aumha.org/win5/a/shtdwnxp.htm
See section "SHUTDOWN WORKS, BUT IT'S REAL SLOW"

One trick is to create another user and see if shutdown is OK with that, is so you'll know it's to do with your particular profile.

[Suninfrance]

I think you might have something there.  Although I did create my OH as another user last night and when I went in to check everything today, I thought my PC was going to crash - so I've deleted him as a user for the moment.  It may have been something to do with the fact that my AntiVirus was going through it's startup scan which slows things down a bit anyway.

Interesting to note that I am now using Firefox as my browser and not a single pop-up.  Had to go onto Wanadoo.fr yesterday to check a friends e-mails (their computer melted when their caravan caught fire).  As soon as the Wanadoo.fr home page came up, so did "Fade Voyage", "Ski Rental", some kind of car purchase site and "eliminate Porn from your PC completely - download this programme".  So it's obviously something to do with Wanadoo.  I have had a couple of e-mails from them recently, selling their spam and anti-virus stuff, but I ignored it.

I haven't downloaded Thunderbird yet, but I might.  OH is struggling with the concept that I have changed the browser to Firefox and he can't find his favourites because they are called something different, so I'll let him get used to that first before I introduce yet something else that is new.

I will certainly have a look at the link you sent when I get back from the CPAM this afternoon.

Jan

[Pancake]

Get NoAds.Next time you get those popups from Wanadoo just open up NoAds and add the url by clicking it in the window and then hit the 'Add To Targets' button and you wont be troubled by them again.

http://www.southbaypc.com/NoAds/