branding




Security >> HijackThis logs help and analysis

 |  Print Thread
bricatModerator
HijackThis Helper


Reg'd: Wed
Posts: 31982
Loc: belfast
Re: Hijack This Log
      Fri Dec 23 2005 12:52 AM

Quote:

PS - How did you know it was VX2?




after you have looked at thousands of logs you get a sixth sense. but probably the unknown 020 entry




Rerun HJT,and put a checkmark beside these :-

O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O20 - Winlogon Notify: ntfat8 - C:\WINDOWS\SYSTEM32\ntfat8.dll
O20 - Winlogon Notify: Reinstall - C:\WINDOWS\system32\jt8807lue.dll (file missing)
O23 - Service: CWShredder Service - Unknown owner - C:\Documents and Settings\Bob\Application Data\Microsoft\Internet Explorer\Quick Launch\CWShredder.exe (file missing)

now close all windows and browsers and click FIX CHECKED


Then boot up in SAFE MODE

Then navigate to and delete these files\folders in BOLD


C:\WINDOWS\SYSTEM32\ntfat8.dll
C:\Program Files\winupdates<----folder


then reboot and post a fresh Hijackthis log.

--------------------
IF I HAVE SAVED YOU MONEY, PLEASE CONSIDER GIVING A DONATION TO HELP IN MY FIGHT AGAINST MALWARE.

When the only tool you own is a hammer, every problem begins to look like a nail.

Post Extras Print Post   Remind Me!     Notify Moderator
Rate this thread

Jump to


Entire topic
Subject Posted by Posted on
* Hijack This Log RobA Wed Dec 21 2005 01:33 PM
. * * Re: Hijack This Log bricatModerator   Wed Dec 21 2005 09:09 PM
. * * Re: Hijack This Log RobA   Wed Dec 21 2005 10:37 PM
. * * Re: Hijack This Log bricatModerator   Thu Dec 22 2005 12:09 AM
. * * Re: Hijack This Log RobA   Thu Dec 22 2005 07:51 PM
. * * Re: Hijack This Log bricatModerator   Thu Dec 22 2005 09:02 PM
. * * Re: Hijack This Log RobA   Fri Dec 23 2005 12:19 AM
. * * Re: Hijack This Log bricatModerator   Fri Dec 23 2005 12:52 AM
. * * Re: Hijack This Log RobA   Fri Dec 23 2005 08:10 PM
. * * Re: Hijack This Log bricatModerator   Fri Dec 23 2005 10:45 PM
. * * Re: Hijack This Log RobA   Mon Dec 26 2005 01:06 AM
. * * Re: Hijack This Log bricatModerator   Mon Dec 26 2005 09:43 AM

Extra information
0 registered and 21 anonymous users are browsing this forum.

Moderator:  putasolutions, bricat, AndrewC, Joe_London, John_McKenna, Mouse, Hello_There, TheFatControlleR, Noviciate 


Print Thread
Forum Permissions
      You cannot start new topics
      You cannot reply to topics
      HTML is disabled
      Mark-up is enabled

Rating:
Thread views: 0

Contact Us | Privacy statement Main website



Search

© Copyright IPC Media Limited 2009, All rights reserved