HJT log, i need some help...

[jholland1964]

Things look pretty good. Is the computer running better?

[jholland1964]

• Click START then RUN
• Now type Combofix /u in the runbox and click OK. Note the space between the X and the U, it needs to be there.

When shown the disclaimer, Select "2"

[ali_o]

computer is running much quicker, no more pop ups! thanks so much. i ran the combofix but my firewall (comodo) says this about it: defense + malware heuristic analysis has detected possible malware behaviour in c:\32788R22FWJFW|hidec.exe.

should i let it execute or block

[jholland1964]

Your firewall is saying this about combofix? Are you certain it is saying this about combofix? This should have been removed with the process I just gave you.

[ali_o]

i followed your directions and that is what happend...what is that anyways?

[jholland1964]

Evidently your firewall saw this happening and thought it was a bad program...it isn't of course but Windows and Firewalls can see it as bad.
One thing you need to do is update the java on your system. It is WAY out of date. Go HERE
Download the Offline Install and save it to the desktop.
Then go to Add/Remove and Uninstall ALL older versions of Java that you find there. Once ALL are uninstalled then go back to that install file on the desk top and double click to install the newest version. Once it is complete then go back to the download page and on the right side you will see Verify Now. Click that to go to the verification page to be certain that the install went correctly.

[ali_o]

should i remove J2 Runtime Environment 5.0, is that something to do with java too?

[jholland1964]

Yes those all need to be uninstalled. Then install the new one you downloaded.

[ali_o]

hey, thank you much so much for your help and patience with my problem! thank you again.

[jholland1964]

I am really happy to have helped. Couple more recommendations;
• Spyware Blaster -- A Must Have Tool! Blocks malicious ActiveX installs by implementing a “kill bit” to prevent those ActiveX programs with known CLSIDs from being executed.
And unlike many other anti-spy apps, SpywareBlaster does not have to remain running in the background. Very highly recommended! From Javacool Software.
Just download, install, update and enable all including the Restricted Sites portion of the program. Works both with IE and Firefox. It will protect your computer from spyware, malware, dialers, hijackers, tracking cookies, etc. I wouldn't run my computer without it.
Keep the MBA-M program for weekly scanning, always update before each scan. Quick Scan is usally sufficient but if the Quick Scan finds something then run another Full System scan to be sure all is clean.