branding




Security >> HijackThis logs help and analysis

 |  Print Thread
John_McKennaModerator
HijackThis Helper


Reg'd: Wed
Posts: 7430
Loc: England
Re: Please check this log.
      Mon Sep 05 2005 10:53 PM

Hi blessa and welcome to Webuser.

You have two problems here. The Kelvir worm which probably arrived via MSN Messenger and a Lop adware/hijacker which is commonly bundled with a program called Messenger Plus (which I'm presuming you've since removed).

We'll deal with the Kelvir worm first.

Download the KELVIR REMOVAL TOOL.

Close all the running programs and disconnect the computer from the internet.
  • Double-click the FxKelvir.exe file to start the removal tool.
  • Click Start to begin the process, and then allow the tool to run.
  • Restart the computer.
  • Run the removal tool again to ensure that the system is clean.
  • Reboot and post a fresh HJT log in this thread please.


** Please also confirm whether you've uninstalled Messenger Plus recently and also how many user accounts this machine has please.

** I'd also like you run the below file through Jotti's Malware Scan. Just paste the entire filepath into the Submit box at the top and paste the results back here please.

C:\WINDOWS\system32\Config2500.exe

--------------------
.

Click here before posting a HijackThis Log - Important !!

My Site

Edited by John_McKenna (Mon Sep 05 2005 10:58 PM)

Post Extras Print Post   Remind Me!     Notify Moderator
Rate this thread

Jump to


Entire topic
Subject Posted by Posted on
* Please check this log. blessa Mon Sep 05 2005 02:34 PM
. * * Re: Please check this log. blessa   Thu Sep 08 2005 08:01 PM
. * * Re: Please check this log. John_McKennaModerator   Thu Sep 08 2005 10:32 PM
. * * Re: Please check this log. blessa   Sat Sep 10 2005 11:31 AM
. * * Re: Please check this log. John_McKennaModerator   Sat Sep 10 2005 12:37 PM
. * * Re: Please check this log. blessa   Sun Sep 11 2005 02:56 PM
. * * Re: Please check this log. John_McKennaModerator   Sun Sep 11 2005 03:57 PM
. * * Re: Please check this log. blessa   Sun Sep 11 2005 08:23 PM
. * * Re: Please check this log. John_McKennaModerator   Sun Sep 11 2005 09:49 PM
. * * Re: Please check this log. blessa   Tue Sep 13 2005 12:59 PM
. * * Re: Please check this log. John_McKennaModerator   Tue Sep 13 2005 02:32 PM
. * * Re: Please check this log. blessa   Tue Sep 13 2005 03:53 PM
. * * Re: Please check this log. John_McKennaModerator   Tue Sep 13 2005 05:39 PM
. * * Re: Please check this log. blessa   Wed Sep 14 2005 03:46 PM
. * * Re: Please check this log. John_McKennaModerator   Wed Sep 14 2005 06:24 PM
. * * Re: Please check this log. blessa   Fri Sep 16 2005 04:17 PM
. * * Re: Please check this log. blessa   Fri Sep 16 2005 05:31 PM
. * * Re: Please check this log. John_McKennaModerator   Sat Sep 17 2005 11:10 AM
. * * Re: Please check this log. blessa   Sat Sep 17 2005 03:43 PM
. * * Re: Please check this log. John_McKennaModerator   Sat Sep 17 2005 08:14 PM
. * * Re: Please check this log. blessa   Mon Sep 19 2005 03:02 PM
. * * Re: Please check this log. John_McKennaModerator   Mon Sep 19 2005 05:46 PM
. * * Re: Please check this log. blessa   Tue Sep 20 2005 01:52 PM
. * * Re: Please check this log. John_McKennaModerator   Tue Sep 20 2005 08:25 PM
. * * Re: Please check this log. blessa   Tue Sep 27 2005 04:56 PM
. * * Re: Please check this log. John_McKennaModerator   Tue Sep 27 2005 07:15 PM
. * * Re: Please check this log. John_McKennaModerator   Mon Sep 05 2005 10:53 PM
. * * Re: Please check this log. blessa   Wed Sep 07 2005 02:11 PM
. * * Re: Please check this log. blessa   Wed Sep 07 2005 02:14 PM
. * * Re: Please check this log. John_McKennaModerator   Wed Sep 07 2005 06:56 PM

Extra information
1 registered and 55 anonymous users are browsing this forum.

Moderator:  putasolutions, bricat, AndrewC, Joe_London, John_McKenna, Mouse, Hello_There, greysts, TheFatControlleR, Noviciate 


Print Thread
Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      Mark-up is enabled

Rating:
Thread views: 214

Contact Us | Privacy statement Main website



Search

© Copyright IPC Media Limited 2009, All rights reserved