Home > Solved Please > Solved: Please Help With My HJT Log

Solved: Please Help With My HJT Log

Logged DavidR Avast √úberevangelist Certainly Bot Posts: 76875 No support PMs thanks Re: please help with malware infestation, hjt log « Reply #12 on: October 22, 2008, 01:58:01 PM » Quote You're the best!Terry Logged Pentium Dual-Core 2.5 GHz, 250GB HDD, 2 GB RAM, WinXP Pro SP3, reasonable caution/adequate paranoia, Mozy, Firefox, IE8, CCleaner, Avast! Click OK then Apply and OK. Please post your HijackThis log as a reply to this thread and not as an attachment. Source

Double click Aboutbuster.exe, click OK, click Start then click OK. You will need them to refer to in safe mode. * Restart your computer into safe mode now. If you need this topic reopened, please contact a member of the HJT Team and we will reopen it for you. ThanksLogfile of HijackThis v1.99.1Scan saved at 10:05:40 AM, on 6/7/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\wscntfy.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\WINDOWS\System32\hkcmd.exeC:\WINDOWS\system32\dla\tfswctrl.exeC:\Program Files\BroadJump\Client Foundation\CFD.exeC:\Program Files\Dell\Support\Alert\bin\NotifyAlert.exeC:\WINDOWS\system32\wuauclt.exeC:\Documents and Settings\Evelyn Johnson\Desktop\hjt\HijackThis\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet

You must follow these directions exactly and you cannot skip any part of it. Click Apply, and then click OK. But I'll be back.You're welcome.If you are having problems accessing security sites it is possible the HOSTS file has been modified to block this.HOSTS file redirect - 127.0.0.1 check your HOSTS It is a self extracting file.

Once its done, close the program. Can't solve this one, HJT Log attached Started by kc_at , Jun 05 2005 01:12 PM Please log in to reply 8 replies to this topic #1 kc_at kc_at Members 12 Thanks in advance for any helpful replies.P.S. I then installed Spyware Terminator (in safe mode--it wouldn't install in normal mode), scanned in safe mode, and was able to remove KGBkeylogger.

Logged Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/avast! Member Posts: 248 huh? Copy these instructions to notepad and save them on your desktop for easy access. Click here to Register a free account now!

Thanks. Do not run any of them until instructed to do so: Click here to download cwsserviceremove.zip: http://castlecops.com/zx/flrman1/cwsserviceremove.zip Unzip it to your desktop and have it ready to run later. *Download Cleanup If it finds anything that it cannot clean have it delete it or make a note of the file location so you can delete it yourself. Several functions may not work.

Site Changelog Community Forum Software by IP.Board Sign In Use Facebook Use Twitter Need an account? a fantastic read Please re-enable javascript to access full functionality. How does it feel to you? Thanks Logfile of HijackThis v1.99.1 Scan saved at 7:18:39 PM, on 12/12/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe

Please re-enable javascript to access full functionality. http://bornsunsoft.com/solved-please/solved-please-help-w-hjt-log.html If it is there, select that entry and click the "Delete" button. Tech Support Guy is completely free -- paid for by advertisers and donations. Avast community forum Home Help Search Login Register Avast WEBforum » Other » Viruses and worms (Moderators: Pavel, Maxx_original, misak) » [SOLVED?] please help with malware infestation, hjt log «

It seems to be getting better, but there is obviously more to be done. Note: You may get an error here when trying to access the properties of the service. Just update the program for later. have a peek here DO NOT run it yet.

Since it has been a few days since you scanned your computer with HijackThis, we will need a new HijackThis log. Choose Paste from the menu. HJT attached:Logfile of HijackThis v1.99.1Scan saved at 2:44:28 PM, on 6/5/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\savedump.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\sysan32.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\wscntfy.exeC:\Program Files\Common Files\Dell\EUSW\Support.exeC:\Program Files\Common Files\Real\Update_OB\realsched.exeC:\WINDOWS\system32\sysoa32.exeC:\PROGRA~1\STOMPS~1\SPYWAR~1\PPControl.exeC:\PROGRA~1\STOMPS~1\SPYWAR~1\PPMemCheck.exeC:\Program Files\Dell\Media Experience\PCMService.exeC:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exeC:\Program Files\MUSICMATCH\MUSICMATCH

Click Properties.

Make a note of the file location of anything that cannot be deleted so you can delete it yourself. - Save the results from the scan! You don't stop laughing when you get old; you get old when you stop laughing.A Member of U-N-I-T-E (Unified Network of Instructors and Trained Eliminators)Malware Removal University Masters GraduateJoin The Fight Click on the brand model to check the compatibility. I can't get to the internet to run a online virus scan or install AVG or do any Updates.

Go here and do an online virus scan: http://housecall.trendmicro.com/ Be sure and put a check in the box by "Auto Clean" before you do the scan. Re: please help with malware infestation, hjt log « Reply #10 on: October 22, 2008, 05:58:27 AM » Again, thank you! It just stops connecting after a few minutes. Check This Out Logfile of HijackThis v1.99.1 Scan saved at 7:56:04 PM, on 12/11/2005 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe

I am always leery of opening attachments so I always request that HijackThis logs are to be posted as a reply to the thread. Click here to download AboutBuster created by Rubber Ducky: http://www.majorgeeks.com/AboutBuster_d4289.html Unzip AboutBuster to the desktop then click the "Update Button" then click "Check for Update" and download the updates and then If you need the other two logs redone, please let me know. Logged Core2Duo E8300/ 4GB Ram/ WinXP ProSP3/avast!

mobile security polonus Avast √úberevangelist Maybe Bot Posts: 28639 malware fighter Re: please help with malware infestation, hjt log « Reply #7 on: October 21, 2008, 11:55:42 PM » Hi t Cheeseball81, Dec 12, 2005 #4 LazyNinja Thread Starter Joined: Jul 17, 2003 Messages: 22 Here is a new HJT Log. HELP! Doubleclick the smitRem.exe and it will extract the files to a smitRem folder on your desktop.

Click Apply and then OK. Now press "Custom Level." In the ActiveX section, set the first two options "Download Signed and Unsigned ActiveX controls" to 'Prompt', and "Initialize and Script ActiveX Controls not marked as Safe" I installed and updated the current version of MBAM, which found and removed a few more items. I am following with another boot time scan to see if anything else has crawled out of the woodwork.VirusTotal didn't have anything scary to say about c:\windows\system32\nwprovau.dll.DavidR, thanks for the HOSTS

I installed it today hoping for some additional removal, but it says it won't run unless it is updated, and it is unable to update.Terry Logged Pentium Dual-Core 2.5 GHz, 250GB Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quietO4 - HKCU\..\Run: [SVCHOST.EXE] C:\WINDOWS\System32\drivers\svchost.exeO4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator] Narrator.exe (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator] Narrator.exe (User 'Default user')O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dllO9 My daughter's father had purchased a 2-year subscription nearly two years ago when he gave her the laptop as a gift, and she didn't want to switch to avast! or read our Welcome Guide to learn how to use this site.

Need help with my HJT log...please Started by neednhlp , Aug 23 2008 01:30 PM Please log in to reply No replies to this topic #1 neednhlp neednhlp New Member Members Under "Web Pages" you should see an entry checked called something like "Security info" or similar. Register now! Avast Evangelists.Use NoScript, a limited user account and a virtual machine and be safe(r)!

Thread Status: Not open for further replies. On your Desktop, click on Cleanup40.exe icon. Do not run any other programs or open any other windows while doing a fix. Go here: http://www.spywareinfo.com/~merijn/winfiles.html Download SDHelper.dll Copy the file to the folder containing your Spybot S&D program (normally C:\Program Files\Spybot - Search & Destroy) Check in the C:\Windows\system32 folder to be sure

© Copyright 2017 bornsunsoft.com. All rights reserved.