Ok..probably a good idea to check out the HJT forum. Please read the following thread first as it contains some good advice:
http://www.techsupportforum.com/sec...lease-read-before-posting-hijackthis-log.html

Save

rundll32.exe is a process which executes DLL's and places their libraries into the memory, so they can be used more efficiently by applications. This program is important for the stable and secure running of your computer and should not be terminated. this is from the process library.com, is it a bug ?

Save

samual

Discussion Starter · #8 · Jan 26, 2007

Scanned File

Status

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP5\A0001149.COM

Infected with: BehavesLike:Win32.FileInfector

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP5\A0001149.COM

Disinfection failed

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP5\A0001149.COM

Deleted

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP5\A0001150.EXE

Infected with: BehavesLike:Win32.FileInfector

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP5\A0001150.EXE

Disinfection failed

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP5\A0001150.EXE

Deleted

C:\System Volume Information\_restore{2E5BC0E5-2B38-4761-AE38-96706F6F67AC}\RP6\A0001691.COM

Infected with: BehavesLike:Win32.FileInfector

See less See more

Save

nickster_uk

· #9 · Jan 26, 2007

Rundll32.exe is a valid XP file but rundll.exe isn't...it's usually a sign of a backdoor infection.

The log files you posted highlight that your system restore files have become infected so it will be a good idea to get your machien clean then clear the System Restore points then create a clean entry.

Save

samual

Discussion Starter · #10 · Jan 26, 2007

sorry some where down the line i forgot to ad 32 to it ,as u see i still had some problems which i cant understand only last week i ran smit threw it and turned off my system restore , also spy doc didnt pick anything up as escan, avast, mcafee,avg, abit strange.

Save

Geekgirl

· #11 · Jan 27, 2007

Just to be safe, Look over the First Steps at Removing Malware , then post a HJT log in the HiJackThisLog Help Forum

Save

samual

Discussion Starter · #12 · Jan 28, 2007

i ran in safe mode and it was black instead off blue is thay normal.

Save

Geekgirl

· #13 · Jan 28, 2007

i ran in safe mode and it was black instead off blue is thay normal.

What are you asking? What was Black instead of Blue? If your referring to the screen color, yes it is black. Minimum drivers are loaded when you enter Safe Mode. Safe mode is the Windows diagnostics mode. When you start the computer in Safe mode, only the specific components that are needed to run the operating system are loaded.
Safe mode also loads a standard video driver at a low resolution. Due to the low resolution, your programs and the Windows desktop may look different than usual and the desktop icons may have moved to different locations on the desktop.

Save

samual

Discussion Starter · #14 · Jan 29, 2007

also when it loads up in safe mode it gives me the option to go in as admin, or normalwhy is this, there are no pass words just one acount wich is my acount admin,

Save

nickster_uk

· #15 · Jan 29, 2007

It's referring to the default admin account 'Administrator'....most machines have that, it's nothing to worry about.

Save

samual

Discussion Starter · #16 · Jan 29, 2007 (Edited)

i ran a boot scan with avast found pskavs.dll win32ctx deletedit hope all is ok. also spyware doc hasnt updated in 4 days states system needs attention when i update is states im up to date.

Save

1 - 16 of 16 Posts

Status: Not open for further replies.

Top Contributors this Month