Possibly Infected?

[Abitibi]

Hello. My system has problems. I cannot run a Trend Micro scan (freezes), or a Panda scan, Nor can I update my F-Secure!

Here's my HJT Analyzer log results:

Log was analyzed using KRC HijackThis Analyzer - Updated on 3/2/05
Get updates at http://www.greyknight17.com/download.htm#programs

***Security Programs Detected***

C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
C:\Program Files\F-Secure\Anti-Virus\FSGK32.EXE
C:\Program Files\F-Secure\Anti-Virus\fssm32.exe
C:\Program Files\F-Secure\Common\FSMA32.EXE
C:\Program Files\F-Secure\Common\FSMB32.EXE
C:\Program Files\F-Secure\Common\FCH32.EXE
C:\Program Files\F-Secure\Common\FAMEH32.EXE
C:\Program Files\F-Secure\Common\FNRB32.EXE
C:\Program Files\F-Secure\Common\FIH32.EXE
C:\Program Files\F-Secure\Anti-Virus\fsav32.exe
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\F-Secure\Common\FSM32.EXE" /splash
O23 - Service: F-Secure Gatekeeper Handler Starter - F-Secure Corp. - C:\Program Files\F-Secure\Anti-Virus\fsgk32st.exe
O23 - Service: F-Secure Network Request Broker - F-Secure Corporation - C:\Program Files\F-Secure\Common\FNRB32.EXE
O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\F-Secure\Common\FSMA32.EXE

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Logfile of HijackThis v1.99.1
Scan saved at 2:36:30 AM, on 3/21/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

O4 - HKLM\..\Run: [Error Nuker] C:\Program Files\Error Nuker\bin\ErrorNuker.exe autostart
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin\npjpi142_05.dll
O15 - Trusted Zone: http://*.windowsupdate.com
O16 - DPF: {04E214E5-63AF-4236-83C6-A7ADCBF9BD02} (HouseCall Control) - http://housecall-beta.trendmicro.com...ll/xscan60.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{30F6E826-92D9-4B96-A52A-88D6CC243E7F}: NameServer = 206.47.244.43 206.47.244.107
O17 - HKLM\System\CS1\Services\Tcpip\..\{30F6E826-92D9-4B96-A52A-88D6CC243E7F}: NameServer = 206.47.244.43 206.47.244.107
O23 - Service: F-Secure Authentication Agent (FSAA) - F-Secure Corporation. All Rights Reserved. - C:\Program Files\F-Secure\Common\FSAA.EXE


End of KRC HijackThis Analyzer Log.

Thank You.

[POADB]

Do you have a firewall that perhaps is blocking these sites and activities? Check the XP Firewall settings.

[Abitibi]

Thanks. I checked my firewall settings, They are unchanged from when my PC was healthy. I just spent about 10 minutes, and about 20 tries to get a browser window open.(Had to restart my system a couple of times). I finally got IE open, and Firefox won't open at all.
This is certainly frustrating. Any suggestions?

[Abitibi]

For some strange and unknown reason, I was finally able to run a Trend Micro scan. And although it found no problems, my system suddenly started working normally when the scan was done. I don't really understand how, but I'm not complaining. Thanks again for your assistance. This post can be removed now.