Home > Hijackthis Log > Hijackthis Log (am I Infected) If So Would It Effect Pogo.com

Hijackthis Log (am I Infected) If So Would It Effect Pogo.com

No, create an account now. as long as they actually are "Orphaned/Old/Obsolete", it won't speed up your machine thoughStopping services and setting policies can speed up your machine ..... If you encounter any problems just come back and let me know. IF you know how to use them correctly.Removing "Orphaned/Old/Obsolete" registry entries is fine .....

Open the text file and copy/paste the log here. Save it to your desktop. The logs I request can take a while to research, so please be patient.Before we begin...please read and follow these important guidelines, so things will proceed smoothly. If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

I am unable to find anything using the latest versions of Macafee antivirus and spyware, Microsoft Antispyware (beta 1), Adaware, spybot search and destroy, Ewido, Bit Defender, Microtrends online virus search Uncheck the Hide extensions for known file types. I'm having a problem with GMER, not sure what I'm doing wrong.

If you use HJT to fix them, you will save resources and increase system performance. I will give you a link now so you can tighten control on ActiveX in case you have not done so. This item: O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE see this: http://castlecops.co...uplist-180.html you can safely delete the file I have highlited in red to stop this activity. After which running a new complete scan with McAfee (which i have running all the time) and that found nothing.

reply "Yes". We will take care of the System Volume Information items later. All Activity Home Malware Removal Help Malware Removal for Windows Resolved Malware Removal Logs Browser hijacker I need to get rid of Privacy Policy Contact Us Back to Top Malwarebytes Community then press the Scan...button.

Rhapsody Rhapsody Player Engine Scan ScanCraft CS-P Security Update for Step By Step Interactive Training (KB898458) Security Update for Step By Step Interactive Training (KB923723) Security Update for Windows Media Player I will know more once I get those reports. If you don't see anything evil and nasty in my log please let me know either way. If you are on the "scan & fix stuff" page...

Click OK.Try the Jotti/Virus Total step again...Wingman 0 Admin/Teacher at Malware Removal University - - Member of UNITEI seek not to know all the answers...but to understand the questions - Kwai Continued Searching for that lead me to Bleepingcomputer.com where someone else had the same problem. Install ERUNT by following the prompts.Use the default install settings... Your Display Name will now be the only name you have for the forum and, if you used your Username to log in, you will now need to use your Display

However a second (quick) scan now finds nothing. Thanks again and Happy Holidays! pop-up message will appear.Now click on "OK". Right-click on the Start button...

All three items should be running unless you use a third party firewall (then turn off the SP2 Firewall to stop conflictions) If McAfee continues not to load to the System C:\System Volume Information\_restore{F845E3DB-F751-4BE4-A620-64F2CA1BFB5F}\RP23\A0007501.exe (Spyware.Zbot) -> Not selected for removal. Failure to reboot will prevent MBAM from removing all the malware.Step 3.RSIT (Random's System Information Tool) I'd like you to try this again... Yes...the programs you installed all require resources and ewido uses a lot during the trial.

Free malware removal help and training has remained a constant. Free Antivirus MS Security Essentials Startup: WinPatrol Cleaning: CCleanerAdware/Spyware: Malwarebytes' Anti-Malware Spybot S & D Windows Defender SUPERAntiSpywarePersonal Software Update: Secunia Personal Software Inspector FileHippo.com App ManagerPlease report problems with links. Audio UI1) - http://chat.yahoo.com/cab/yacsui.cab O16 - DPF: {7D731A83-6C80-4EA4-9646-5E06A0513274} (Sandlot Loader Control) - http://www.shockwave...gwebinstall.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zon...nt.cab31267.cab O16 - DPF: {8E175C33-D337-4092-99C6-CDEFA8271C9F} (Disk Doctors Live Health Check) -

then click on "YES" to create the folder.Run:This will create a full backup of your registry...

The log can also be found here: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txtCopy and paste the contents of that report in your next reply and exit MBAM.Note: If MBAM encounters a I supplied information about Prefetch, malware writers do like to start stuff there because the average user does not even know they have the it. ewido security suite - Scan report Created on: 5:17:19 PM, 11/26/2005 Good that you are clean, bad that I have no information. It's free.

Part way through my task bar keep turning tan (looking like basic pc) and the computer restarts. The scan will begin and "Scan in progress" will show at the top. If you have the disk space to spare, it is a handy scanner and updates are free for as long as you like. This scan will take a while, so please be patient.

Click Yes... Back to top Page 1 of 3 1 2 3 Next Back to Archived Logs Reply to quoted postsClear The Elder Geek on Windows → Security Discussions → Archived Logs I am writing to you from another computer so as not to disturb scan. as long as you stop and set the right ones, and even then it's debatable if you will notice the improvement.Remove the wrong registry entry, or stop the wrong service, and

Sign In Sign Up Browse Back Browse Forums Guidelines Staff Online Users Members Activity Back Activity All Activity My Activity Streams Unread Content Content I Started Search Malwarebytes.com Back Malwarebytes.com Malwarebytes Make sure you use proper prevention to keep from having problems occur to your computer in the future. My family has been to Pogo.com almost daily (have a subscription there) for over a year. tab.

mfesmfk;c:\windows\system32\drivers\mfesmfk.sys [2006-11-15 40552] S3 scrcap;scrcap;c:\windows\system32\drivers\scrcap.sys --> c:\windows\system32\drivers\scrcap.sys [?] =============== Created Last 30 ================ 2067-02-24 20:21:18 79947 -c--a-w- c:\windows\fw20.vxd 2010-08-06 04:47:57 0 d--h--w- C:\$AVG 2010-08-06 04:25:00 12536 ----a-w- c:\windows\system32\avgrsstx.dll 2010-08-06 04:24:59 52872 I will continue going down your list when I can. I still have problems I guess. Here's some information for you: http://www.pcsupport...om/rootkits.htm http://securityrespo....apropos.c.html http://www.viruslist...scuss=168740859 http://www.google.co...=define:Rootkit http://en.wikipedia.org/wiki/Rootkit http://www.sysintern...tal-rights.html Since you ran swandog46's removal tool, watch for any activity to indicate it's presence.

Please take a look at the logs I posted and see if you find anything. The first one, "log.txt", <

I have printed them out so I can do it just as you said.