|
|
|
|
|||||
|
|
|
|
|
|
|||
| Welcome
to Tech Support Forum home to more then 136,000 problems solved. Issues
have included: Spyware, Malware, Virus Issues, Windows, Microsoft,
Linux, Networking, Security, Hardware, and Gaming Getting your
problem solved is as easy as: 1. Registering for a free account 2. Asking your question 3. Receiving an answer Registered members: * See fewer ads. * And much more..
|
| Want to know how to post a question? click here | Having problems with spyware and pop-ups? First Steps |
|
|||||||
| HijackThis Log Help Get Rid Of Malware With Help From Our Analysts. Follow the "First Steps" link at the top right of each page before posting for help. |
 |
|
|
Thread Tools |
06-16-2008, 05:43 AM
|
#1 (permalink) |
|
Registered User
Join Date: Jun 2008
Posts: 4
OS: xp
|
have i done this right
Deckard's System Scanner v20071014.68
Run by daniel manallack on 2008-06-16 22:36:12 Computer is in Normal Mode. -------------------------------------------------------------------------------- -- HijackThis (run as daniel manallack.exe) ------------------------------------ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:36:23 PM, on 16/06/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\a-squared Anti-Malware\a2service.exe C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\Rundll32.exe C:\Program Files\Common Files\LightScribe\LSSrvc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe C:\PROGRA~1\AVG\AVG8\avgrsx.exe C:\PROGRA~1\AVG\AVG8\avgemc.exe C:\WINDOWS\system32\wscntfy.exe C:\Program Files\Windows Live\Messenger\usnsvc.exe C:\PROGRA~1\AVG\AVG8\aAvgApi.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\WINDOWS\explorer.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Documents and Settings\daniel manallack\Local Settings\Temporary Internet Files\Content.IE5\DXXKL14I\dss[1].exe C:\PROGRA~1\TRENDM~1\HIJACK~1\DANIEL~1.EXE O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {0F8F84CF-DCBA-4426-AC18-30A8AB00C526} - C:\WINDOWS\system32\qoMcdCSK.dll O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.0.1225.9868\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O2 - BHO: (no name) - {FF596A1D-DF16-4A17-94A8-762274D6FF25} - C:\WINDOWS\system32\nnnLDVOH.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL O4 - HKLM\..\Run: [ecade1c1] rundll32.exe "C:\WINDOWS\system32\tynwayfb.dll",b O4 - HKLM\..\Run: [a-squared] "C:\Program Files\a-squared Anti-Malware\a2guard.exe" /d=60 O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [BMef9ed25d] Rundll32.exe "C:\WINDOWS\system32\hsvtsoia.dll",s O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/actives.../as2stubie.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1213612138796 O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://sdlc-esd.sun.com/ESD40/JSCDL/...ws-i586-jc.cab O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll O20 - AppInit_DLLs: avgrsstx.dll O20 - Winlogon Notify: qoMcdCSK - C:\WINDOWS\SYSTEM32\qoMcdCSK.dll O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Ahead\InCD\InCDsrv.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe -- End of file - 8446 bytes -- Files created between 2008-05-16 and 2008-06-16 ----------------------------- 2008-06-17 05:40:52 0 d-------- C:\WINDOWS\msapps 2008-06-16 22:10:19 0 d-------- C:\Documents and Settings\All Users\Application Data\TEMP 2008-06-16 22:10:11 118784 --a------ C:\WINDOWS\system32\MSSTDFMT.DLL <Not Verified; Microsoft Corporation; MSSTDFMT Object Library> 2008-06-16 22:10:10 0 d-------- C:\Program Files\SpywareBlaster 2008-06-16 21:20:59 0 d-------- C:\Program Files\Panda Security 2008-06-16 21  53 0 d-------- C:\Program Files\Trend Micro2008-06-16 20:14:23 0 d-------- C:\WINDOWS\LastGood 2008-06-16 20:11:51 0 d-------- C:\WINDOWS\Prefetch 2008-06-16 18:43:09 0 d--h----- C:\$AVG8.VAULT$ 2008-06-16 18:31:11 0 d-------- C:\WINDOWS\system32\drivers\Avg 2008-06-16 18:31:11 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\AVGTOOLBAR 2008-06-16 18:30:59 0 d-------- C:\Program Files\AVG 2008-06-16 17:26:58 0 d-------- C:\Program Files\a-squared Anti-Malware 2008-06-16 08:08:22 86016 --a------ C:\WINDOWS\system32\tynwayfb.dll 2008-06-16 08:03:08 94720 --a------ C:\WINDOWS\system32\hsvtsoia.dll 2008-06-15 21:17:15 0 d-------- C:\Program Files\Alwil Software 2008-06-15 19:55:02 0 d-------- C:\Program Files\Live_TV 2008-06-15 19:54:52 33792 --a------ C:\WINDOWS\system32\qoMdDtsq.dll 2008-06-15 19:53:46 0 d-------- C:\Program Files\Conduit 2008-06-15 19:53:45 0 d-------- C:\Program Files\Online_Radio_TB 2008-06-15 19:40:59 86016 --a------ C:\WINDOWS\system32\owrixrqs.dll 2008-06-15 19:39:56 536365 --ahs---- C:\WINDOWS\system32\HOVDLnnn.ini2 2008-06-15 19:39:46 285696 --a------ C:\WINDOWS\system32\nnnLDVOH.dll 2008-06-15 19:35:34 33792 --a------ C:\WINDOWS\system32\ssqRihIy.dll 2008-06-15 19:34:39 33792 --a------ C:\WINDOWS\system32\qoMcdCSK.dll 2008-06-15 18:43:02 86017 --a------ C:\Program Files\Services.exe <Not Verified; Install; Service> 2008-06-15 16:01:48 2916352 --a------ C:\WINDOWS\UNNMP.exe <Not Verified; Nero AG; Nero Web Engine> 2008-06-15 16:01:11 0 d-------- C:\Program Files\Common Files\LightScribe 2008-06-15 15:59:31 155648 --a------ C:\WINDOWS\system32\NeroCheck.exe <Not Verified; Ahead Software Gmbh; Ahead Software Gmbh NeroCheck> 2008-06-15 15:59:13 0 d-------- C:\Program Files\Common Files\Nero 2008-06-15 15:58:44 2969600 --a------ C:\WINDOWS\UNNeroVision.exe <Not Verified; Nero AG; Nero Web Engine> 2008-06-15 15:58:02 364544 --a------ C:\WINDOWS\system32\TwnLib4.dll <Not Verified; Pegasus Imaging Corp.; TwnLib4> 2008-06-15 15:58:00 38912 --a------ C:\WINDOWS\system32\picn20.dll <Not Verified; Pegasus Imaging Corp.; PEGASUS> 2008-06-06 15:25:47 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Ahead 2008-06-03 14:40:30 0 d-------- C:\Documents and Settings\All Users\Application Data\Ulead Systems 2008-06-03 11 15 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Media Player Classic2008-06-02 21:11:35 0 d-------- C:\Documents and Settings\All Users\Application Data\avg8 2008-06-01 16:02:02 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Syntrillium 2008-05-31 19:38:53 0 d-------- C:\DVD_VIDEO 2008-05-30 19:23:59 0 d-------- C:\Documents and Settings\All Users\Application Data\Messenger Plus! 2008-05-30 19:22:34 0 d-------- C:\Program Files\Messenger Plus! Live 2008-05-28 18:32:47 28160 --a------ C:\WINDOWS\system32\drivers\InCDrm.sys <Not Verified; Nero AG; EasyWrite Reader> 2008-05-28 18:32:47 8704 --a------ C:\WINDOWS\system32\drivers\InCDrec.sys <Not Verified; Nero AG; InCD> 2008-05-28 18:32:47 29056 --a------ C:\WINDOWS\system32\drivers\InCDpass.sys <Not Verified; Nero AG; InCD> 2008-05-28 18:32:47 99456 --a------ C:\WINDOWS\system32\drivers\InCDfs.sys <Not Verified; Nero AG; InCD> 2008-05-28 18:32:47 2916352 --a------ C:\WINDOWS\NuNinst.exe <Not Verified; Nero AG; Nero WebEngine> 2008-05-28 18:32:46 0 d-------- C:\WINDOWS\InCD 2008-05-28 18:31:25 0 d-------- C:\Documents and Settings\All Users\Application Data\Ahead 2008-05-28 18:21:45 106496 --a------ C:\WINDOWS\system32\TwnLib20.dll <Not Verified; Pegasus Software; TWNLIB20> 2008-05-28 18:21:45 471040 --a------ C:\WINDOWS\system32\ImagXRA7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7> 2008-05-28 18:21:45 262144 --a------ C:\WINDOWS\system32\ImagXR7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7> 2008-05-28 18:21:45 1568768 --a------ C:\WINDOWS\system32\ImagX7.dll <Not Verified; Pegasus Imaging Corp.; ImagXpress7> 2008-05-28 18:21:44 0 d-------- C:\Program Files\Common Files\Ahead 2008-05-28 18:21:41 0 d-------- C:\Program Files\Ahead 2008-05-28 13:04:04 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple 2008-05-27 07:45:03 0 d--h----- C:\WINDOWS\PIF 2008-05-26 16:45:26 0 d-------- C:\Program Files\Uniblue 2008-05-25 21:29:06 159232 --a------ C:\WINDOWS\system32\ptpusd.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:24:55 0 d-------- C:\WINDOWS\system32\scripting 2008-05-25 08:24:54 0 d-------- C:\WINDOWS\system32\en 2008-05-25 08:24:54 0 d-------- C:\WINDOWS\system32\bits 2008-05-25 08:24:54 0 d-------- C:\WINDOWS\l2schemas 2008-05-25 08:23:09 0 d-------- C:\WINDOWS\ServicePackFiles 2008-05-25 08:18:44 0 d-------- C:\WINDOWS\system32\ReinstallBackups 2008-05-25 08:15:42 0 d-------- C:\WINDOWS\EHome 2008-05-25 08:12:15 69120 --a------ C:\WINDOWS\system32\wlanapi.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:12:08 50688 --a------ C:\WINDOWS\system32\tspkg.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:12:08 53248 --a------ C:\WINDOWS\system32\tsgqec.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:12:04 20992 --a------ C:\WINDOWS\system32\spupdwxp.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:12:04 7680 --a------ C:\WINDOWS\system32\spdwnwxp.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:12:02 32866 --a------ C:\WINDOWS\system32\slrundll.exe <Not Verified; Smart Link; Soft Modem> 2008-05-25 08:12:01 32768 --a------ C:\WINDOWS\system32\setupn.exe <Not Verified; Microsoft Corporation; Microsoft(R) Windows Media Player> 2008-05-25 08:12:01 10240 --a------ C:\WINDOWS\system32\drivers\sffp_mmc.sys <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:58 290304 --a------ C:\WINDOWS\system32\rhttpaa.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:57 61952 --a------ C:\WINDOWS\system32\rasqec.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:57 76800 --a------ C:\WINDOWS\system32\qutil.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:56 62464 --a------ C:\WINDOWS\system32\qcliprov.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:56 291328 --a------ C:\WINDOWS\system32\qagentrt.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:56 150528 --a------ C:\WINDOWS\system32\qagent.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:54 144384 --a------ C:\WINDOWS\system32\onex.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:50 176640 --a------ C:\WINDOWS\system32\napstat.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:50 193024 --a------ C:\WINDOWS\system32\napmontr.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:50 30208 --a------ C:\WINDOWS\system32\napipsec.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:49 79872 --a------ C:\WINDOWS\system32\msxml6r.dll <Not Verified; Microsoft Corporation; Microsoft(R) MSXML 6.0> 2008-05-25 08:11:49 1306624 --a------ C:\WINDOWS\system32\msxml6.dll <Not Verified; Microsoft Corporation; Microsoft(R) MSXML 6.0 SP2> 2008-05-25 08:11:48 76800 --a------ C:\WINDOWS\system32\msshavmsg.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:48 155136 --a------ C:\WINDOWS\system32\mssha.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:43 33792 --a------ C:\WINDOWS\system32\mmcperf.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:43 106496 --a------ C:\WINDOWS\system32\mmcfxcommon.dll <Not Verified; Microsoft Corporation; Microsoft (R) Windows (R) Operating System> 2008-05-25 08:11:43 397312 --a------ C:\WINDOWS\system32\mmcex.dll <Not Verified; Microsoft Corporation; Microsoft (R) Windows (R) Operating System> 2008-05-25 08:11:42 86016 --a------ C:\WINDOWS\system32\mdmxsdk.dll <Not Verified; Conexant; Diagnostic Interface> 2008-05-25 08:11:38 37376 --a------ C:\WINDOWS\system32\l2gpstore.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:38 61440 --a------ C:\WINDOWS\system32\kmsvc.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:38 6144 --a------ C:\WINDOWS\system32\kbdpash.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:38 6144 --a------ C:\WINDOWS\system32\kbdnepr.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:38 6144 --a------ C:\WINDOWS\system32\kbdiultn.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:38 6144 --a------ C:\WINDOWS\system32\kbdbhc.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:35 144384 --a------ C:\WINDOWS\system32\drivers\hdaudbus.sys <Not Verified; Windows (R) Server 2003 DDK provider; Microsoft® Windows® Operating System> 2008-05-25 08:11:34 20992 --a------ C:\WINDOWS\system32\faxpatch.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 33792 --a------ C:\WINDOWS\system32\eapsvc.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 59392 --a------ C:\WINDOWS\system32\eapqec.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 40960 --a------ C:\WINDOWS\system32\eappprxy.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 180224 --a------ C:\WINDOWS\system32\eapphost.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 94208 --a------ C:\WINDOWS\system32\eappgnui.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 126976 --a------ C:\WINDOWS\system32\eappcfg.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 184832 --a------ C:\WINDOWS\system32\eapp3hst.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 30720 --a------ C:\WINDOWS\system32\eapolqec.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 650752 --a------ C:\WINDOWS\system32\dot3ui.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 132096 --a------ C:\WINDOWS\system32\dot3svc.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 56320 --a------ C:\WINDOWS\system32\dot3msm.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 39936 --a------ C:\WINDOWS\system32\dot3gpclnt.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 9216 --a------ C:\WINDOWS\system32\dot3dlg.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 57856 --a------ C:\WINDOWS\system32\dot3cfg.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:33 26112 --a------ C:\WINDOWS\system32\dot3api.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:32 39936 --a------ C:\WINDOWS\system32\dimsroam.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:32 19456 --a------ C:\WINDOWS\system32\dimsntfy.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:32 48640 --a------ C:\WINDOWS\system32\dhcpqec.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:32 12800 --a------ C:\WINDOWS\system32\credssp.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:30 7168 --a------ C:\WINDOWS\system32\bitsprx4.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:30 233472 --a------ C:\WINDOWS\system32\azroles.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-25 08:11:26 136192 --a------ C:\WINDOWS\system32\aaclient.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-05-24 18:12:07 0 d-------- C:\WINDOWS\system32\DX9 2008-05-24 00:13:01 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Apple Computer 2008-05-24 00:12:47 0 d-------- C:\Program Files\iPod 2008-05-24 00:12:44 0 d-------- C:\Program Files\iTunes 2008-05-24 00:12:34 0 d-------- C:\Program Files\Bonjour 2008-05-24 00:12:08 0 d-------- C:\Program Files\QuickTime 2008-05-24 00:12:07 0 d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer 2008-05-24 00:11:56 0 d-------- C:\Program Files\Apple Software Update 2008-05-24 00:11:41 0 d-------- C:\Program Files\Common Files\Apple 2008-05-19 21:27:48 0 d-------- C:\Program Files\AVG(2) 2008-05-19 20:31:41 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Uniblue 2008-05-19 20:03:21 0 d-------- C:\WinFast -- Find3M Report --------------------------------------------------------------- 2008-06-16 20:02:21 0 d-------- C:\Program Files\Movie Maker 2008-06-16 20:01:34 22720 --a------ C:\WINDOWS\system32\emptyregdb.dat 2008-06-16 20:00:27 0 d-------- C:\Program Files\Windows NT 2008-06-16 18:59:53 2 --a------ C:\WINDOWS\system32\Dvbpws.dll 2008-06-15 21:18:03 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\AdobeUM 2008-06-15 21:18:03 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Adobe 2008-06-15 20:07:08 109249 --a------ C:\Program Files\MSWINSCK.OCX <Not Verified; Microsoft Corporation; Microsoft Winsock Control> 2008-06-15 19:42:23 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\LimeWire 2008-06-15 16:01:11 0 d-------- C:\Program Files\Common Files 2008-06-09 17:40:12 0 d-------- C:\Program Files\Google 2008-06-09 17:35:48 1006 --a------ C:\Documents and Settings\daniel manallack\Application Data\.googlewebacchosts 2008-05-25 08:25:09 0 d-------- C:\Program Files\Messenger 2008-05-25 08:20:36 250048 -rahs---- C:\ntldr 2008-05-19 20:08:39 0 d-------- C:\Program Files\Common Files\InstallShield 2008-05-19 20:08:07 0 d--h----- C:\Program Files\InstallShield Installation Information 2008-05-11 17:30:00 0 d-------- C:\Program Files\Adobe Media Player 2008-05-11 17:29:58 0 d-------- C:\Program Files\Common Files\Adobe AIR 2008-05-11 17:28:12 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Macromedia 2008-05-11 13:03:23 0 d-------- C:\Program Files\DVD Shrink 2008-05-11 13:02:03 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Google 2008-05-11 13:00:07 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Sun 2008-05-11 12:59:46 0 d-------- C:\Program Files\Java 2008-05-11 12:58:13 0 d-------- C:\Program Files\Common Files\Java 2008-05-11 12:53:07 0 d-------- C:\Program Files\LimeWire 2008-05-11 10 40 0 d-------- C:\Program Files\Common Files\Adobe2008-05-11 10:00:52 0 d-------- C:\Program Files\WinFast 2008-05-11 03:01:24 0 d-------- C:\Program Files\Windows Live 2008-05-10 15:37:46 0 d-------- C:\Program Files\Common Files\Ulead Systems 2008-05-10 15:16:23 0 d-------- C:\Program Files\Windows Messaging 2008-05-10 15:07:38 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\ScanSoft 2008-05-10 15:07:37 0 d-------- C:\Program Files\Common Files\ScanSoft Shared 2008-05-10 15:07:19 0 d-------- C:\Program Files\ScanSoft 2008-05-10 15:05:38 0 d-------- C:\Program Files\Canon 2008-05-10 14:37:06 0 d-------- C:\Program Files\Windows Live Toolbar 2008-05-10 14:36:46 0 d-------- C:\Program Files\Windows Live Favorites 2008-05-10 14:26:47 0 d-------- C:\Program Files\Microsoft SQL Server Compact Edition 2008-05-10 14:23:12 0 d--hs--c- C:\Program Files\Common Files\WindowsLiveInstaller 2008-05-10 00:55:47 0 d-------- C:\Program Files\Common Files\ODBC 2008-05-10 00:55:44 0 d-------- C:\Program Files\Common Files\SpeechEngines 2008-05-10 00:55:20 62 --ahs---- C:\Documents and Settings\daniel manallack\Application Data\desktop.ini 2008-05-09 22:31:23 0 d-------- C:\Program Files\Realtek AC97 2008-05-09 22:30:56 49152 --a------ C:\WINDOWS\system32\ChCfg.exe 2008-05-09 22:30:56 315392 --a------ C:\WINDOWS\alcupd.exe <Not Verified; Realtek Semiconductor Corp.; Realtek AC'97 Update driver Tool> 2008-05-09 22:19:31 0 d-------- C:\Program Files\Windows Media Connect 2 2008-05-09 21:46:48 0 d-------- C:\Program Files\InstallShield Installation Information(2) 2008-05-09 21:46:34 0 d-------- C:\Program Files\Microsoft Office(2) 2008-05-09 18:44:56 0 --a------ C:\WINDOWS\ativpsrm.bin 2008-05-09 15:15:41 0 d-------- C:\Documents and Settings\daniel manallack\Application Data\Identities 2008-05-09 15:10:27 0 d-------- C:\Program Files\microsoft frontpage 2008-05-09 15:10:22 0 -rahs---- C:\MSDOS.SYS 2008-05-09 15:10:22 0 -rahs---- C:\IO.SYS 2008-05-09 15:10:22 0 --a------ C:\CONFIG.SYS 2008-05-09 15:10:22 0 --a------ C:\AUTOEXEC.BAT 2008-05-09 15:09:01 0 d--h----- C:\Program Files\WindowsUpdate 2008-05-09 15:08:10 0 d-------- C:\Program Files\Common Files\MSSoap 2008-05-09 15 57 0 d-------- C:\Program Files\Online Services2008-05-09 15 49 0 d-------- C:\Program Files\MSN Gaming Zone2008-04-14 10:12:38 28672 --a------ C:\WINDOWS\system32\verclsid.exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:33 33280 --a------ C:\WINDOWS\system32\rundll32(2).exe <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:11 383488 --a------ C:\WINDOWS\system32\wzcdlg(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:09 102400 --a------ C:\WINDOWS\system32\wmpshell(2).dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows Media Player> 2008-04-14 10:12:09 276992 --a------ C:\WINDOWS\system32\wmphoto.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:08 346112 --a------ C:\WINDOWS\system32\windowscodecsext.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:08 712704 --a------ C:\WINDOWS\system32\windowscodecs.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:08 15872 --a------ C:\WINDOWS\system32\w3ssl(2).dll <Not Verified; Microsoft Corporation; Internet Information Services> 2008-04-14 10:12:08 185856 --a------ C:\WINDOWS\system32\upnphost(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:07 75776 --a------ C:\WINDOWS\system32\strmfilt(2).dll <Not Verified; Microsoft Corporation; Internet Information Services> 2008-04-14 10:12:04 433664 --a------ C:\WINDOWS\system32\riched20(2).dll <Not Verified; Microsoft Corporation; Microsoft RichEdit Control, version 3.0> 2008-04-14 10:12:02 412160 --a------ C:\WINDOWS\system32\photometadatahandler.dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:02 15360 --a------ C:\WINDOWS\system32\ntvdmd(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:12:01 875008 --a------ C:\WINDOWS\system32\netplwiz(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:11:57 18944 --a------ C:\WINDOWS\system32\midimap(3).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:11:54 24576 --a------ C:\WINDOWS\system32\httpapi(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:11:52 367616 --a------ C:\WINDOWS\system32\dsound(2).dll <Not Verified; Microsoft Corporation; Microsoft(R) Windows(R) Operating System> 2008-04-14 10:11:52 375296 --a------ C:\WINDOWS\system32\dpnet(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:11:52 229888 --a------ C:\WINDOWS\system32\dplayx(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 10:11:51 35328 --a------ C:\WINDOWS\system32\corpol(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 03:39:29 438784 --a------ C:\WINDOWS\system32\xpob2res(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> 2008-04-14 03:39:22 187392 --a------ C:\WINDOWS\system32\xpsp1res(2).dll <Not Verified; Microsoft Corporation; Microsoft® Windows® Operating System> -- Registry Dump --------------------------------------------------------------- *Note* empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{0F8F84CF-DCBA-4426-AC18-30A8AB00C526}] 15/06/2008 07:34 PM 33792 --a------ C:\WINDOWS\system32\qoMcdCSK.dll [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A057A204-BACC-4D26-9990-79A187E2698E}] 16/06/2008 06:31 PM 2050816 --a------ C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{FF596A1D-DF16-4A17-94A8-762274D6FF25}] 15/06/2008 07:39 PM 285696 --a------ C:\WINDOWS\system32\nnnLDVOH.dll [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser] "{A057A204-BACC-4D26-9990-79A187E2698E}"= C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL [16/06/2008 06:31 PM 2050816] [-HKEY_CLASSES_ROOT\CLSID\{A057A204-BACC-4D26-9990-79A187E2698E}] [HKEY_CLASSES_ROOT\avgtoolbar.AVGTOOLBAR] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RegistryMechanic"="" [] "ecade1c1"="C:\WINDOWS\system32\tynwayfb.dll" [16/06/2008 08:08 AM] "a-squared"="C:\Program Files\a-squared Anti-Malware\a2guard.exe" [03/06/2008 12:37 PM] "AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [16/06/2008 06:31 PM] "SoundMan"="SOUNDMAN.EXE" [09/05/2008 10:31 PM C:\WINDOWS\soundman.exe] "BMef9ed25d"="C:\WINDOWS\system32\hsvtsoia.dll" [16/06/2008 08:03 AM] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [04/08/2004 10:00 PM] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [31/05/2008 08:37 PM] "msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [18/10/2007 11:34 AM] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] "{0F8F84CF-DCBA-4426-AC18-30A8AB00C526}"= C:\WINDOWS\system32\qoMcdCSK.dll [15/06/2008 07:34 PM 33792] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\dimsntfy] C:\WINDOWS\System32\dimsntfy.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qoMcdCSK] qoMcdCSK.dll 15/06/2008 07:34 PM 33792 C:\WINDOWS\system32\qoMcdCSK.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows] "appinit_dlls"=avgrsstx.dll [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] "Authentication Packages"= msv1_0 C:\WINDOWS\system32\nnnLDVOH [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds] @="Service" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}] @="Volume shadow copy" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^daniel manallack^Start Menu^Programs^Startup^Microsoft Find Fast.lnk] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^daniel manallack^Start Menu^Programs^Startup^Office Startup.lnk] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVG8_TRAY] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ecade1c1] rundll32.exe "C:\WINDOWS\system32\owrixrqs.dll",b [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InCD] C:\Program Files\Ahead\InCD\InCD.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OPSE reminder] "C:\Program Files\ScanSoft\OmniPageSE2.0\EregEng\Ereg.exe" -r "C:\Program Files\ScanSoft\OmniPageSE2.0\EregEng\ereg.ini" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan] SOUNDMAN.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_0 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFast Schedule] C:\Program Files\WinFast\WFDTV\WFWIZ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinFastDTV] C:\Program Files\WinFast\WFDTV\DTVSchdl.exe [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost] eapsvcs eaphost dot3svc dot3svc *Newly Created Service* - RKPAVPROC [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{F146C9B1-VMVQ-A9RC-NUFL-D0BA00B4E999}] C:\Program Files\Services.exe -- End of Deckard's System Scanner: finished at 2008-06-16 22:37:12 ------------ |
|
     |
|
06-18-2008, 06:17 PM
|
#2 (permalink) | |
|
Analyst, Security Team
Join Date: Oct 2007
Location: Georgia
Posts: 1,623
OS: XP SP3
|
Re: have i done this right
Hello and Welcome to TSF.
Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription. Please save this page to Notepad in order to assist you when carrying out the following instructions. Before beginning the fix, read this post completely. If there's anything that you do not understand, kindly ask your questions before proceeding. Ensure that there aren't any opened browsers when you are carrying out the procedures below. It is IMPORTANT that you don't miss a step & perform everything in the correct order/sequence. ------------------------------------------------------ Please note that these fixes are not instantaneous. Most infections require more than one round to properly eradicate. Please stay with me until given the 'all clear' even if symptoms seemingly abate. Kindly follow my instructions and please do no fixing on your own or running of scanners unless requested by a helper. ------------------------------------------------------ Please let us know if you use dial-up for the internet. Thanks. ------------------------------------------------------ Quote:
Save to the Desktop and then Run from the Desktop. Thanks. We will use dss.exe later. Please do the following:
Please visit this webpage for instructions on downloading and running ComboFix: http://www.bleepingcomputer.com/comb...o-use-combofix Please ensure you read this guide carefully and install the Recovery Console first. The Windows Recovery Console will allow you to boot up into a special recovery(repair) mode, if needed. This allows us to help you in the case that your computer has a problem after an attempted removal of malware. It is a simple procedure that will only take a few moments of your time. As part of installing the Recovery Console, ComboFix will begin to run. Follow the prompts to install the Recovery Console. Your desktop may disappear. This is normal. It will return. Once the Recovery Console is installed, this blue window will appear:  Please continue as follows:
Please post that log, ComboFix.txt along with a new HijackThis log so we may continue cleansing the system. ------------------------------------------------------ Open HijackThis and click on 'Do a System Scan and Save a Logfile'. Save the logfile and post it here. ------------------------------------------------------ Please download Deckard's System Scanner (DSS) and Save it to your Desktop. Note: You must be logged onto an account with administrator privileges. Run dss.exe again, but use these instructions(this assumes dss.exe is on your desktop):
Please post the following in your next reply: C:\ComboFix.txt new HijackThis log an attached extra.txt If you have any questions along the way...STOP and ask them before proceeding. |
|
|
|
|
06-19-2008, 09:53 AM
|
#4 (permalink) |
|
Analyst, Security Team
Join Date: Oct 2007
Location: Georgia
Posts: 1,623
OS: XP SP3
|
Re: have i done this right
Thanks for letting us know.
MICROSOFT UPDATES It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft and download all the critical updates to help prevent possible re-infection. ANTIVIRUS PROGRAM It is imperative that you have an AntiVirus program running on your computer. Connecting to the internet without an AntiVirus program is an open invitation for infection. Here are a few very good free Antivirus products which are available: Select one of these, or another of your choice. Download, install, update definitions, and run a full system scan. Do not install more than one AntiVirus program as they will conflict with each other.FIREWALL Using a third-party Firewall will allow you to give/deny access for applications that want to go online. Select one of these, or another of your choice: Do not install more than one Firewall program as they will conflict with each other.SPYWARE PREVENTION This is a good time to set up protection against further attacks. In light of your recent problem, I'm sure you'd like to avoid any future infections. Please read these well written articles: To help protect your computer in the future I recommend that you get the following free programs if you do not already have them:
|
|
|
|
|
| Thread Tools | |
|
|
