Home > Hijackthis Log > HijackThis Log - My Brother's Computer

HijackThis Log - My Brother's Computer

This scan can take quite a while to run, so be prepared.Ewido will list any infections found on the left hand side. Back to top StratheGrandmaster CheaterReputation: 0Joined: 16 Aug 2006Posts: 700Location: Middle of nowhere. Place a check against each of the following:R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.fin...siteyouneed.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.findthewebsiteyouneed.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.fin...siteyouneed.comR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.fin...siteyouneed.comR3 - you should have SEEN the mess his computer was in before.

Why do you so strongly (and immediately) suggest virus scan? If you have problems installing the ActiveX control/starting the scan, please read the F-Secure Online Virus Scanner - FAQ. Make sure Temporary Files, Temporary Internet Files, and Recycle Bin are the only things checked.Press OK to remove them.------------------------* Start Ewido...Click on the Scanner tab at the top. Last one of these reboots happened while I was trying to post this reply - I got mad and... https://forums.techguy.org/threads/hijackthis-log-my-brothers-computer.192588/

so on. http://housecall.trendmicro.com/ http://www.pandasoftware.com/activescan/ http://www.ravantivirus.com/scan/ dvk01, Jan 5, 2004 #2 dvk01 Derek Moderator Malware Specialist Joined: Dec 14, 2002 Messages: 50,466 you definitely have agobot virus http://uk.trendmicro-europe.com/consumer/security_info/ve_detail.php?Vname=WORM_AGOBOT.A3 & client man parasite http://www.safersite.com/PestInfo/c/clientman.asp Tech Support Guy is completely free -- paid for by advertisers and donations. None of my programs that run in 256 color mode work.

First it said "blahblah not found, blahblah not found" but then it said that the rootkit had been removed, so - everything's ok, I suppose   Oh, and the LinkOptimizer forced Share this post Link to post Share on other sites TheJoker Forum Deity Boot Camp Mod 14,211 posts Gender:Male Location:Gotham Posted January 10, 2007 · Report post Apart from that... Did you get infected within 2 days? ._. Derek, I'm heading over to my email account now to send the jxpopde.exe (jxpopde.zip) to you.

This will copy the results to your clipboard. Other rootkitrevealers don't.   Please post a new HijackThis log, the 2 logs from Rustbfix, and the results of the GMER scan. Back to top SaifallofjmrGrandmaster Cheater SupremeReputation: 4Joined: 02 Apr 2007Posts: 1450 Posted: Thu May 28, 2009 10:59 pm Post subject: I spotted nothing abnormal with this log, if you are still Please start a New Thread if you're having a similar issue.View our Welcome Guide to learn how to use this site.

A folder by folder scan showed some spyware, I think, but it couldn't be removed :S I tried to install Ad-Aware, but the computer rebooted constantly before finishing the install; switched Eric 0 Back to Virus, Spyware, Malware Removal · Next Unread Topic → Similar Topics 0 user(s) are reading this topic 0 members, 0 guests, 0 anonymous users Reply to quoted We do not know what the problem is, but it seems to be specific to IE 11 and we are hopeful that Microsoft will eventually fix it. When i try to run Maple Story, a box opens saying,"Failed in finding proper screen mode for Gr2D.

When finished, and after reboot, it should open a log, combofix.txt. http://www.spywareinfoforum.com/topic/91807-my-brothers-computer-is-sending-spam/ Smart laddy. _________________ Back to top TimmahI post too muchReputation: 0Joined: 23 Nov 2008Posts: 2405Location: Here but not over there, There but somewhere Posted: Mon May 25, 2009 8:55 am Post Please, do not select the "Show all" checkbox during the scan.   If you're having problems with running GMER.exe, try it in safe mode. Please re-enable javascript to access full functionality.

Post this log in your next reply together with the contents of ewido-log present on your desktop, the log from fixwareout (C:\fixwareout\report.txt) and a new HiJackThis log.You may need more than If your firewall gives an alert, (because this tool will download an additional file from the internet), please don't let your firewall block it, but allow it instead.Then you will be Using the site is easy and fun. This to avoid confusion.

The reboot will probably take quite a while, and perhaps 2 reboots will be needed. Well, I just didn't want to "talk to" this computer for the last two days.   Anyway, I saved the reply in a txt, here it is.   ***EDIT: the GMER Sign Up All Content All Content Advanced Search Browse Forums Guidelines Staff Online Users Members More Activity All Activity My Activity Streams Unread Content Content I Started Search More Malwarebytes.com Malwarebytes http://magicnewspaper.com/hijackthis-log/hijackthis-log-2nd-computer.html Funniest thing of all, I couldn't remove the supposedly infected files by hand because they didn't exist (no, system files were not hidden).

Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - If you're not already familiar with forums, watch our Welcome Guide to get started. SpyBot caught and "cleaned" a few additional ones....) Here's his log.

Announcements We backup daily at 9:00 PM Pacific Time You may notice the forum being unresponsive for a few minutes around 9:00 PM PST (11:00 PM CST, 5:00 AM GMT) while

I actually was able to delete wincffg.exe already, as it kept giving me errors after I ran spybot. I know because some months ago I noticed an unusually high network usage in our shared inet connection; fired up Ethereal to check my brother's network interface and saw the SMTP Please post that in your next reply.   Run the FixLinkoptimizer tool again and reboot afterwards. MY connection was usable again, and since I was busy because of my university exams, I put the problem apart for a while.   A month ago or so, I gave

It is a mostly up-to-date Windows XP SP2 with Avast! Save it to the Desktop. a FREE one?? (heh.) Thanks. ~Jen jenspen, Jan 5, 2004 #5 $teve Joined: Oct 9, 2001 Messages: 9,397 http://www.grisoft.com/us/us_index.php You can download Avg`s free package.............It wont be fully up to Started by IHateAbnormalities , Dec 18 2005 01:14 AM This topic is locked 2 replies to this topic #1 IHateAbnormalities IHateAbnormalities Members 96 posts OFFLINE Local time:03:38 PM Posted 18

When it started acting up, I copied it into a temp directory and changed its name, and then deleted the original. Notifications blocked by Outlook.com, Hotmail, Live, etc Our notifications are blocked by those mail servers. I will probably do it myself when I bring it back. If you bump your thread, we assume that someone is already helping you, so your thread may be ignored.

You're still connected to the network which is connected to other computers? I have scanned with AntiVir Personal Edition, AVG Free Edition, Kaspersky Antivirus Personal 5.0, Spyware Doctor, Ewido Free, Panda Online Scan, F-Secure Online Scan, ETrust online Scan, Microsoft Antispyware Beta, Spybot Since those events, my brother's computer perfomance has been constantly degrading. I've read the FAQ, and I've installed and run Ad-Aware, SpybotSD, Ewido and HijackThis.

UPDATE on Upgrade 02/07/2017 We were somewhat delayed on getting the upgrade done, but it looks like it will now be done in the next few days or possibly even later run hijackthis, tick these entries listed below and ONLY these entries, double check to make sure, then make sure all browser & email windows are closed and press fix checked R3 Home installed; tried a full scan, but it hung up after an hour. Use your arrow keys to move to "Safe Mode" and press your Enter key.* Please set your system to show all files.

Share this post Link to post Share on other sites Sign in to follow this Followers 0 Go To Topic Listing Resolved or inactive Malware Removal All Activity Home Spyware, thiefware, Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - It was sluggish, rebooted itself now and then, and Sygate showed me the blocked connections to port 25, but not the process that was trying to connect.