LinkOptimzer still in Control Panel -> Add and Remove Software

[Ulle_G]

Hi!

I searched quite a lot today but couldn´t find a solution.

I have removed LinkOptimizer some weeks ago but there is still an entry in the Control Panel -> Add and Remove Software saying LinkOptimizer. But as I know it doesn´t help I didn´t use that option.

Is there any way to remove also that entry in the control panel?

Thanks for listening..

[OEM_guy]

http://www.2-spyware.com/remove-grom...FSasYAodxSWUJw
http://www.2-spyware.com/articles/re...guides/87.html

[jholland1964]

Please give us a HiJackThis log.

[Ulle_G]

Hijack this file should be there now.

I startet also this Spy Sweeper...it found still some parts from LinkOptimizer and navexcel navhelper.

But I have no Idea whats left of them.

[jholland1964]

Let's start at the beginning. This is the only way we know that #1 these things ARE on the computer, and #2, we have gotten them all removed.
There ARE entries in your log indicating some nasty items. There are ways to remove all, but steps must be followed correctly, and in order so begin here;
READ ME Before Posting A Request For Assistance!
Follow each step, IN ORDER. Once you have completed all steps, including running all the programs specified in SAFE MODE and having each program fix everything it finds, plus saving any logs noted including running and fixing with Spysweeper and and saving that entire log. Then reboot to normal mode, run a NEW HJT scan and save that log also.
Then post back here with ALL logs and we will see where we stand.
P.S.
Your log shows evidence of both AVG, which I assume is your current Anti-virus program and at least some remainders of Norton Anti-virus indicated by these entries;

O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Programme\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Programme\Norton AntiVirus\NavShExt.dll
Please do a search for all folders and files named Norton and also Symantec and delete all that you find.

There were also three instances of Internet Explorer running when you did your HiJackThis scan. Please be certain that all unnecessary programs, spysweeper, prevx, Motherboard Monitor, zBrowser Launcher, Skype and ALL browsers are closed when you run your next HJT scan.
Also, HiJackThis must be run from it's OWN folder so please be sure you locate it in it's own folder which you create.

[Ulle_G]

Hi!

I ran the whole order of instructions. So far I can say I got rid of quite some infections. And I haven´t found any recently after removing all of them hopefully.

In the log file there are still some empty entries and I have no idea what to do about them.

[jholland1964]

I have asked a couple others to take a look and see what they think here. One of us will get back to you asap.
Judy

[jholland1964]

Still going through the logs. Have YOU personally installed the FamilyKeyLogger program?

[Ulle_G]

Jepp, some years ago "I" was trying that prog. But uninstalled that soon after install.

The problem is to delete some of these registry entries with HighJackThis. All those 3 entries that appear always after restart are also unable to deleted manually in the reg-editor.

O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: (no name) - {DA39029C-D291-A968-3FF4-D0990D5CB5FC} - (no file)

HKLM-Software-Microsoft-Windows-CurrentVersion-Explorer-Browser Helper Objects-{BDF3E430-B101-42AD-A544-FADC6B084872}

<-- that leads to the folder BHO where there is an entry containing something about NAV Helper. That folder can´t be deleted.

All other entries in HJTlog seem to be ok.

[jholland1964]

Ok, you are getting ahead of us here. Let's step back a bit;
I have not done this correctly, I don't believe, because I have neglected to ask several KEY questions;

In your very first post you say that you HAD LinkOptimizer on the computer and removed it...HOW did you remove it? Exact Steps please. Did you use the removal program for this problem or manually remove it? If you DID use a program to remove it, WHAT program did you use and did you follow the instructions EXACTLY?

O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
This entry is a varient of CoolWebSearch.
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
This entry refers to Norton Anti-Virus
O2 - BHO: (no name) - {DA39029C-D291-A968-3FF4-D0990D5CB5FC} - (no file)
This entry refers to LinkOptimizer
HKLM-Software-Microsoft-Windows-CurrentVersion-Explorer-Browser Helper Objects-{BDF3E430-B101-42AD-A544-FADC6B084872}
This again is a remainder of Norton Anti-Virus.
Did you do the MANUAL search on the computer for Norton and Symantec files and delete those found?

Your log may "look" clean but your computer is not.

We really need to know EXACTLY how you removed LinkOptimizer. Every step taken and in what order.

You say in post number 4 that you "started Spysweeper". Now we did not request that you do this, but this is fine, it is an excellent program. But we would prefer that you not run a program or use a program until directed to do so. When you say you started it do you mean that you did an actual SCAN with Spysweeper or just let it run in the background? If you DID scan with it was it done in SAFE MODE?

In post number 6 you say you followed the instructions given on Phillie Phan's thread that I directed you to and that you "got rid of quite some infections"...What infections? Which program removed them and where were they located? We need to know the names as some infections, even though "mostly" removed by a particular program sometimes do need some additional removal steps that would need to be done manually.

In post number 8 you give us this information;
"The last file opened with notepad shows this nice entry:"...and then you give us the information you received...WHAT last file opened and where? I honestly have no idea what last file you are talking about. Last file of the three you noted, or last file from an information site, or last file from a particular scan?
In this very same post you say you are unable to "delete some of these registry entries with HighJackThis" or with reg editor. Please wait to edit the registry until told to do so. This will be the very last step, if necessary. It may not be necessary at all because several of these removal program DO fix registry entries also, if run correctly.
I realize that this is very frustrating and you want to get this computer cleaned up but you must wait to perform specific steps when we tell you to do so. Leaping forward, ahead of time, can make matters worse instead of better.

Now please post back with these answers;
How did you remove LInkOptimizer? Exactly.

What are the names of the viruses that were removed by using the steps in Phillie Phans instructions and what programs removed them?
Did you run Spybot, AdAwareSE, CCleaner, Ewido in SAFE MODE as instructed and have each program remove everything found?

Have you done an actual scan with Spysweeper or just allowed it to run in the background?

When you uninstalled the FamilyKeyLogger program exactly HOW did you install it?

What was this last file opened that you tell us about and how was it opened?

Do not take any other steps just yet, please just answer these questions. You ARE showing at least two trojans still on the system or at least the remnants of them, which means of course they are still there and will continue with their nasty work. But we need the answers to the questions I have just asked BEFORE going on to other steps which we will tell you to do.