| Joe_London |
| (HijackThis Helper) |
| Sun Aug 31 2008 07:14 PM |
|
Re: Kindly check my hijack this log
|
Thanks for that information.
It looks as if Combofix may have removed the culprits causing the original issue. perhaps you would let me know.
You appear to have installed some anti-malware programmes Listed in SpywareWarrior's rogue's list.
Spy Cleaner Gold 9.5
XoftSpySE
I can't find any definitive information on this one either although their site is not approved by site advisor:
EMCO Malware Destroyer
Unless you're sure they're OK I recommend uninstalling all of them via the add/remove utility in the control panel. Its always best to stick with the tried and tested programmes.
Also uninstall this old java update:
Java(TM) 6 Update 3
Open Hijackthis, take another scan and place a checkmark next to these entries.
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O15 - Trusted Zone: http://www.kaspersky.com
O15 - Trusted Zone: http://www.pandasoftware.com
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/v...l/installer.exe
The next lines marked blue are restrictions. If you didn't set them yourself or have them set by a software program such as Spybot Search and Destroy then click the check-box on the left. If you intentionally set the restrictions, then leave them alone.
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
Close all open Windows except Hijackthis and click on "fix Checked".
Reboot the computer.
Download CCleaner from here to clean temp files from your computer.
Double click on the file to start the installation of the program.
Select your language and click OK, then next.
Read the license agreement and click I Agree.
Click next to use the default install location.
Click Install then finish to complete installation.
Double click the CCleaner shortcut on the desktop to start the program.
Click Run Cleaner to run the program.
Caution: Uncheck the 'Issues' tab as it's not necessary for the purpose of this fix.
After it has completed it's process, click Exit.
Please download Malwarebytes' Anti-Malware from Here or Here
Double Click mbam-setup.exe to install the application.
- Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select "Perform Quick Scan", then click Scan.
- The scan may take some time to finish,so please be patient.
- When the scan is complete, click OK, then Show Results to view the results.
- Make sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy&Paste the entire report in your next reply.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediatly.
Post the following:
- A new Hijackthis log
- Another Uninstall List.
- The Malbytes log.
This may not remove all the infections present. It is important that you post back and complete the fix.
Please post in this thread for further review and evaluation.
Please provide details of any problems you encountered whilst performing the above steps & update us on how the Computer is running.
Joe.