Home > Hijackthis Log > HiJackThis Log And Antivirus XP 2008

HiJackThis Log And Antivirus XP 2008

Also make sure that Word Wrap under Notepad's Format is unchecked. It took me 10 minutes!! I realized what had happened... Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More...

It does not remove any malware it finds.Post back with:-the new OTViewIt logs-the Kaspersky log-a new HijackThis logWith Regards,The Panda If I have been helping you (including trainees) and do not It doesn't even have to be run in safe mode. Please continue to follow my instructions and reply back until I give you the "all clean". or read our Welcome Guide to learn how to use this site.

I am no expert when it comes to computers but with a little bit of patience and a lot of searching came across and downloaded trial vesion of Spyware Doctor from Please stay with me until given the 'all clear' even if symptoms seemingly abate. Then I ran AVG antivirus free edition (version 8 I think). Obviously it's a virus, and a rather persistent one, so I need a bit of help getting rid of this fellow.

I did a full system scan and it cleaned out everything including the pest Anti virus_2008. Stay logged in Techie7 - Free Technical Help Home Forums > Security Help > Spyware, Adware, Viruses and Malware Removal > Home Forums Forums Quick Links Search Forums Recent Posts Members scan completed successfully hidden files: 0 ************************************************************************** [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "C:\\WINDOWS\\system32\\kdlhh.exe"="C:\\WINDOWS\\system32\\kdlhh.exe" . ------------------------ Other Running Processes ------------------------ . This particular rogue software (Antivirus xp 2008) is way more sophisticated than that.

It was able to detect and remove XP antivirus 2008. This just made things worse for me - I even suspected the Spyware and Spyware Doctor were in cahouts! Request blocked. Event Record #/Type36847 / Error Event Submitted/Written: 07/17/2008 10:39:50 AM Event ID/Source: 1000 / Application Error Event Description: Faulting application wmplayer.exe, version 11.0.5721.5145, faulting module , version 0.0.0.0, fault address 0x00000000.

I simply clicked on the forward search tab when I got the "Un-safe web site" message and went straight to the Malwarebyte website. Norton 360 helped somewhat. Please check over this HiJackThis log. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> Quarantined and deleted successfully.   Registry Values Infected: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost.exe (Trojan.Agent) -> Quarantined and deleted successfully.

Also, on my computer c.exe is that annoying bubble "theres is a security problem"! look at this site If you have since resolved the original problem you were having, we would appreciate you letting us know. FW: ZoneAlarm Security Suite Firewall v7.0.473.000 (Check Point, LTD.) AV: ZoneAlarm Security Suite Antivirus v7.0.473.000 (Check Point, LTD.) [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" "%ProgramFiles%\\iTunes\\iTunes.exe"="%ProgramFiles%\\iTunes\\iTunes.exe:*:enabled:iTunes" "C:\\Program Files\\Compaq Connections\\5577497\\Program\\Compaq Connections.exe"="C:\\Program Files\\Compaq Connections\\5577497\\Program\\Compaq Connections.exe:*:Enabled:Compaq Connections" [HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019" Tuesday, August 12, 2008 9:19 PM Reply | Quote 0 Sign in to vote you need spyobt search and destroy!download it from here (http://safer-networking.org/en/mirrors/index.html)once installed run,check for updates,scan when the scan

Further more, you should not be taking any advice relating to this computer from any other source throughout the course of this fix.If you do not understand any step(s) provided, please Premature bump posts will be deleted. And when I tried to search with google all the results redirected me to advertisements. We thought we were going to have to throw the computer away.

HELP PLEASE!!!!   EDIT:  Ok....so what i did is saved a copy of the Malware Bytes on an external hardrive and then used that to download it to the infected computer.  What we need to start cleaning this system, is for you to get to Step 5 and post the main.txt and extra.txt that will be produced by Deckard's System Scanner. __________________ Thursday, September 25, 2008 2:34 AM Reply | Quote 0 Sign in to vote  Make sure you remove files and change registry keys while in safe mode.  Some of the files http://magicnewspaper.com/hijackthis-log/hijackthis-log-problems-accessing-antivirus-malware-removal-tools.html JesusGotCaught2, Aug 30, 2008 #3 Neal Dedicated Member Viewpoint Manager Service Read about it here: CastleCops® Viewpoint Manager Service ViewpointService.exe Run hijackthis and click on "scan system only" button and put

We do not want to clean you part-way, only to have the system re-infect itself. But I am not able to access few of the Web pages. Antivirus XP 2008 Infection Started by sam-my , Oct 06 2008 03:06 PM This topic is locked 4 replies to this topic #1 sam-my sam-my Members 122 posts OFFLINE Local

DO NOT install if it does not recognise your AV software as you will have a bun fight between the AV products.   Run a memory scan only during setup and

This is just a good general practice as it actually sped my computer up.   Restart your computer as you normally do and it should be gone. Wednesday, August 20, 2008 12:05 PM Reply | Quote 0 Sign in to vote It is also worth while running HiJackThis from TrendMicro. Make sure that anything in your MSCONFIG is something that you know, otherwise, you could be re-infecting yourself.   Cheers Tim Wednesday, August 20, 2008 4:45 PM Reply | Quote 0 iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe O23 - Service: avast!

I followed the instructions on the Microsoft Updates website, and it wouldn't let me update because I needed to enable the Automatic Updates and etc. Instead, please start your own topic. I work on a helpdesk and have removed at least 15 of these infections on remote connections!   As listed earlier by Lyonspugs: (great advice!) Step 1: "Go to click Start,Run  Type Event Record #/Type25939 / Error Event Submitted/Written: 07/20/2008 10:42:47 AM Event ID/Source: 7000 / Service Control Manager Event Description: The npkcrypt service failed to start due to the following error: %%2

the window would appear and i had to goto task mgr and turn it off as of now   I got a program that says it will take me to safe This worked for me i tried the online scanner as well and then this just to be safe. danoo94, Sep 1, 2016, in forum: Virus & Other Malware Removal Replies: 1 Views: 451 dbreeze Sep 3, 2016 New help with hijackthis logs markythesparky, Aug 17, 2016, in forum: Virus Trust me.....I am still working on fixing it.

My computer is slow!---My Blog---Follow me on Twitter.Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.DO NOT Have your original OS install disk handy as if there are any corrupted Windows files, these will be taken off the disk and they will overwrite the 'bad' file on your Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast!

Tuesday, August 26, 2008 7:43 PM Reply | Quote 0 Sign in to vote Malware Bytes Anti-malware is the best solution! You can send the log to Trend and they will tell you what to do, or even post the log here and I'll have a quick look for you.   BE Back to top #3 miekiemoes miekiemoes Malware Killer Dog Volunteer Security Advisor 4092 posts Posted 18 August 2008 - 05:50 AM Due to lack of feedback, this topic has been closed. Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy Log in

Yes, my password is: Forgot your password? Similar Threads - Combofix Hijackthis need Solved HELP! 11b1 and bafa issues. The screen telling you, that the computer is infected will be gone after restarting your computer.   Wednesday, September 10, 2008 12:31 PM Reply | Quote 0 Sign in to vote Sunday, August 17, 2008 3:49 AM Reply | Quote 0 Sign in to vote What really galls me is how many anti virus programs (both free and commercial) that just aren't

I started to wonder if they're the ones who circulated it in the first place in order to sell t heir software.  But if that was true you'd think their software My computer is slow!---My Blog---Follow me on Twitter.Asking for help via Private Message or Mail will be ignored - So If you need help, post your problem in the forum.DO NOT It takes a while, but its worth it:   Lavasoft's Spybot Search and Destroy Lavasoft's Ad-Aware Windows Defender Windows Malware Removal Tool   Keep running the scans, updates, then scan again, I am happy to have a look at any Hijack-This logs posted here to help remove this POS.   Hijack this will look at the registry data and other important bits

Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Thursday, October 09, 2008 7:34 PM Reply | Quote 0 Sign in to vote I couldn't agree more - however, be aware that any OEM software that you have, like Office You'd never get it that way.