|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help. |
 |
|
|
Thread Tools |
01-03-2007, 07:50 PM
|
#1 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
Help My PC is running slow
HI ,
This might be an issue for McAfee, because its my belief their Spamkiller service is running amok (98% cpu usage constantly) via MSKSrvr.exe file, however it would be nice if you all had a quik peek to double check my drive. here is the HJT log Logfile of HijackThis v1.99.1 Scan saved at 10:20:50 PM, on 1/3/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\mcafee.com\agent\mcagent.exe C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe C:\Program Files\McAfee.com\VSO\mcvsshld.exe C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe C:\Program Files\Analog Devices\Core\smax4pnp.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\McAfee.com\VSO\oasclnt.exe C:\PROGRA~1\mcafee.com\mps\mscifapp.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe C:\WINDOWS\system32\igfxpers.exe C:\WINDOWS\system32\hkcmd.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe C:\WINDOWS\system32\dla\tfswctrl.exe C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe c:\progra~1\mcafee.com\vso\mcvsescn.exe C:\PROGRA~1\MUSICM~1\MUSICM~3\MMDiag.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe C:\PROGRA~1\DELLSU~1\DSAgnt.exe C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\MUSICMATCH\Musicmatch Jukebox\mim.exe C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe c:\program files\mcafee.com\agent\mcdetect.exe c:\PROGRA~1\mcafee.com\vso\mcshield.exe C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe c:\PROGRA~1\mcafee.com\agent\mctskshd.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe C:\Program Files\Netscape Internet Service\ncupdatesvc.exe C:\WINDOWS\system32\HPZipm12.exe C:\WINDOWS\system32\svchost.exe C:\Documents and Settings\Mollie L. Murray\Desktop\HijackThis.exe C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://cavtel.net/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer provided by Yahoo! R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http= R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll O2 - BHO: McAfee PopupKiller - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll O2 - BHO: PBlockHelper Class - {4115122B-85FF-4DD3-9515-F075BEDE5EB5} - C:\PROGRA~1\NETSCA~1\NETSCA~1\pbhelper.dll O2 - BHO: McAfee AntiPhishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll O2 - BHO: X1IEHook Class - {52706EF7-D7A2-49AD-A615-E903858CF284} - C:\Program Files\NetZero\qsacc\X1IEBHO.dll O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll O2 - BHO: CBrowserHelperObject Object - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - c:\Program Files\GoogleAFE\GoogleAE.dll O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - C:\Program Files\NetZero\Toolbar.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe" O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe O4 - HKLM\..\Run: [MimBoot] C:\PROGRA~1\MUSICM~1\MUSICM~3\mimboot.exe O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup O4 - HKLM\..\Run: [IntelMeM] C:\Program Files\Intel\Modem Event Monitor\IntelMEM.exe O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup O4 - HKLM\..\Run: [DVDLauncher] "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe O4 - HKLM\..\Run: [Corel Photo Downloader] C:\Program Files\Corel\Corel Photo Album 6\MediaDetect.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [DellSupport] "C:\PROGRA~1\DELLSU~1\DSAgnt.exe" /startup O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe O8 - Extra context menu item: Display All Images with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/228" O8 - Extra context menu item: Display Image with Full Quality - "res://C:\Program Files\NetZero\qsacc\appres.dll/227" O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O11 - Options group: [INTERNATIONAL] International* O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} (McAfee.com Operating System Class) - http://download.mcafee.com/molbin/sh...1/mcinsctl.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{540F9D3B-4CCE-4832-AE18-C0F59C8FC45F}: NameServer = 209.137.172.20,64.83.1.10 O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe O23 - Service: McAfee.com McShield (McShield) - McAfee Inc. - c:\PROGRA~1\mcafee.com\vso\mcshield.exe O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe O23 - Service: Netscape Update Service (NCUpdateSvc) - Netscape Communications Corporation - C:\Program Files\Netscape Internet Service\ncupdatesvc.exe O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\PROSetWired\NCS\Sync\NetSvc.exe O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe thank you so much in advance gman |
|
     
|
|
01-05-2007, 06:10 AM
|
#2 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
Hello gman,
Your hijackthis log appears to be clean. Let's try the following: STEP 1. ====== PCPitStop Please register (it's free, don't worry) with PCPitStop and run the full tests here. When the tests are complete, a results page will pop up. Click "Share these results with TechExpress" on the left-hand side. Then copy the URL provided and post (reply) with it here for me.
__________________
  Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
|
01-05-2007, 03:39 PM
|
#3 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
pc pitstop results
Susan,
I ran PC pitstop with the McAfee MSKSrvr.exe application disabled. This was the app ususing 98% of the CPU, it was so sluggish with this spamkiller goin on that it took forever to open my homepage and some windows apps wouldnt respond at all. Let me know if you want me to try running pcpitstop with this pgm enabled http://www.pcpitstop.com/techexpress...17FWRTL6WSBS1J glenn Last edited by atcgman : 01-05-2007 at 03:39 PM. Reason: forgot url to pc pitstop |
|
|
|
|
01-06-2007, 05:22 PM
|
#4 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
Your PCPitstop results were very good. Go ahead and defragment your drive and adjust the browser cache if you have not done so.
We know that enabling your McAfee MSKSrvr.exe is not going to help. Have you emailed McAfee tech support by any chance to ask about the spamkiller hogging the CPU? I would be curious as to what response you would receive. Or I believe there may be an online chat option with McAfee. Sometimes online chat is a pain--slower than talking via the phone but it is free and you do not have to wait for email response which may be a few days. You can hope maybe they have a fix. You are not alone from what I can find. http://forums.mcafeehelp.com/viewtopic.php?t=52851 http://www.file.net/process/msksrvr.exe.html
__________________
Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
|
01-06-2007, 07:32 PM
|
#5 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
pc running slow
susan,
will run disk defrag tonight how do i increase browser size? have not had a response from mcafee yet . am holding off total removal of their pgm becuase this hasnt been the norm |
|
|
|
|
01-07-2007, 07:07 AM
|
#6 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
http://www.pcpitstop.com/pcpitstop/IntCache.asp
Just follow the manual adjustments. The only other thing I can suggest is running an online scan to check for malware just to double-check things. Now run this online scan using Internet Explorer: Kaspersky Online Scanner from http://www.kaspersky.com/virusscanner Next Click on Launch Kaspersky Online Scanner You will be prompted to install an ActiveX component from Kaspersky, Click Yes.
__________________
Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
|
01-10-2007, 05:11 PM
|
#7 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
manual adjustments?
susan,
sorry i have been away on the road. will run the suggested (kaparskey?) please tell me how to manually adjust the cache size. i nmay have stumbled across it yrs ago but i dont remember. BTW Mcafee was totally useless, they wanted to know why the subs was canceled. i was tried 5 times to get a answer out of them. no one really had a reason or fix as to why their spamkiller was doing the Godzilla on my desktop. glenn |
|
|
|
|
01-10-2007, 05:40 PM
|
#8 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
No problem! Hope you have a chance to relax some after being on the road.
http://www.tweakxp.com/article37101.aspx This also shows how to adjust your cache. Maybe you already have it adjusted. Sorry about the McAfee frustrations. I will watch for your Kapersky log.
__________________
Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
|
01-11-2007, 03:37 PM
|
#9 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
Kapersky
susan,
not sure whats going on with the website (kapersky) it asks me to install active x controls which i do then up comes this message after the install is performed ( can see the movmt in the tray) Welcome to the Kaspersky Online Scanner! Use it to scan your PC for viruses and other malware for free Warning: if you have installed Kaspersky Online Scanner BETA, please manually uninstall it using "Add/Remove Programs" before installing this version! Otherwise this version will not function correctly. Benefits: Kaspersky Anti-Virus exceptional detection rates and thorough scanning Hourly AV database updates available each time the Online Scanner is launched Heuristic analysis to detect unknown viruses Simple installation (just click on a link) Requirements and limitations: When using this service for the first time, you have to run with Administrator privileges in order to install the product. Also, you will need to download and install files about 400 KB in size (about 1 minute on a 57.6 kbps connection) followed by 7 MB of virus definitions. However, if you use the Online Scanner again, you will only need to download the files that have been updated the is no start button to go to the next step. i am tottaly at a loss glenn |
|
|
|
|
01-12-2007, 06:30 AM
|
#10 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
Hi atcgman,
I believe your slowness problem is due to the Mcafee spamkiller. I suggested scan just as another check. I would not be too concerned about Kapersky not running. Let's just try another scan. This scan works with Internet Explorer. STEP 1. ====== Panda Active Scan Please go to Panda ActiveScan. Once you are on the Panda site click the Scan your PC button A new window will open...click the Check Now button
__________________
Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
|
01-12-2007, 03:24 PM
|
#11 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
panda wont scan
susan,
i am wondering if Windows Xp is the problem here. i get to the active x control with panda ( just like Karpersky) click on run then it brings up a pop sales pitch but no active x download. please help do i need to relax the security in windows? glenn |
|
|
|
|
01-12-2007, 03:48 PM
|
#12 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
ref panda woes
susan,
finally got panda to run. all i had to do was close the browser then go back to the site. here is the report . can you help with the cleansing or do i have to purchase the panda? glenn |
|
|
|
|
01-12-2007, 05:27 PM
|
#13 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
Please post the report. We help with the cleaning.
__________________
Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
|
01-12-2007, 05:45 PM
|
#14 (permalink) |
|
Registered User
Join Date: Sep 2006
Posts: 89
OS: windows vista
|
panda results
oops my bad here they are
Incident Status Location Adware:adware/24-7-search Not disinfected c:\windows\system32\unPPC.exe Adware:adware/oemji Not disinfected Windows Registry Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@ad.yieldmanager[2].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@adrevolver[1].txt Spyware:Cookie/PointRoll Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@ads.pointroll[2].txt Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@advertising[2].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@atdmt[2].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@doubleclick[1].txt Spyware:Cookie/Adrevolver Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@media.adrevolver[1].txt Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@mediaplex[2].txt Spyware:Cookie/Traffic Marketplace Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@trafficmp[1].txt Spyware:Cookie/Tribalfusion Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@tribalfusion[1].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Mollie L. Murray\Cookies\mollie_l._murray@zedo[1].txt |
|
|
|
|
01-13-2007, 04:21 AM
|
#15 (permalink) |
|
Analyst, Security Team
Join Date: Nov 2006
Posts: 215
OS: WinXP Pro
|
Hi atcgman
These are minor things. I was concerned when you wanted to post(reply) with the Panda log. But let's get started cleaning the items up. STEP 1. ====== Deletion of cookies To delete a cookie
Notes
STEP 2. ====== Deletion of unPPC.exe Please set your system to show all files; please see here if you're unsure how to do this. Reboot into Safe Mode: please see here if you are not sure how to do this. Using Windows Explorer, locate the following files/folders, and delete them: c:\windows\system32\ unPPC.exe Exit Explorer, and reboot as normal afterwards. STEP 3. ====== Regscan Please download RegScan. Within RegScan.zip you will find the file regscan.vbs You may have to allow this script to run or disable anti-spyware again in order for it to run. A window will open titled RegFinder.vbs and you will see place to input search terms. Please enter the search terms: oemji After the search has completed a window titled Results.txt will open. Please copy the results and post(reply) back. Please reply with the results from the regscan and a new hijackthis log.
__________________
Proud member of ASAP since 2005 If you feel we've helped you, Please donate to the forum |
|
|
|
