Member Panel


Sponsors and Ads

Join the Team

Live Tag Cloud

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [FIXED] Anything Here That Shouldn't be?

[Fixed] Hijackthis! Logs - [FIXED] Anything Here That Shouldn't be? posted in the Security & Safety forums; I'm having a few problems with my pc. The biggest is that it crashes when I try to download my mail in Outlook Express. Also it often fails to connect ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 09-23-2005
Bronze Member
 
Join Date: Sep 2005
Posts: 4
g-awat - See this Members User comments on their Profile page
Send a message via Yahoo to g-awat
Default [FIXED] Anything Here That Shouldn't be?

I'm having a few problems with my pc. The biggest is that it crashes when I try to download my mail in Outlook Express. Also it often fails to connect to the internet unless i restart the machine. It has slowed down too and most of the time i have to refresh each web page before it will open any links that I click.

I have run uptodate versions of:

Norten internet Security
Adaware
spybot search and destroy
ccleaner

I was unable to run ewido as i have windows 98

I have attached my hijack this log here. It means nothing to me so if someone has time to look through it for me I would be very grateful.

thanks
ed
Attached Files
File Type: txt hijackthis.log.txt (9.7 KB, 2 views)


  #2  
Old 09-23-2005
ladygreenwitch's Avatar
Elite Member
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 4,643
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default Re: Anything Here That Shouldn't be?

:-D Hi Ed,

Welcome to PCHF. We have a whole team of great folks on this site, and I'm sure we can help you resolve this.

Let me take a quick look at your HJT log and I'll be right back.

TTFN

T


  #3  
Old 09-23-2005
ladygreenwitch's Avatar
Elite Member
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 4,643
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default Re: Anything Here That Shouldn't be?

:-D Hey Ed,

I'm back.

There are just a couple of things on your HJT log. But I would still like you to do a couple of other things before you fix these, just to make sure there isn't something else that HJT isn't picking up. Can you please download and install Spy Sweeper from my signature.

Then run a scan with Housecall, also in my signature. Let Housecall fix whatever it finds. Then run Spy Sweeper. Under Options, select Sweep Options, make sure that all of your harddrives are selected, and that all options are checked. Then click on Sweep Now, and Start. Let it also fix everything it finds.

Then I would like you to boot into Safe Mode (keep tapping the F8 key as you boot up, and choose Safe Mode from the menu) Run CCleaner, making sure that all options are available, including Advanced. Answer Yes to any warnings. Let it clean everything it finds.

Then run HijackThis again and fix the following entries

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...ww.yahoo.co.uk
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tiscali.co.uk/broadband/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://uk.red.clientapps.yahoo.com/c...ww.yahoo.co.uk
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://uk.red.clientapps.yahoo.com/c...o/bt_side.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://uk.red.clientapps.yahoo.com/c...ww.yahoo.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://uk.red.clientapps.yahoo.com/c...ww.yahoo.co.uk
O2 - BHO: Big Fish Games - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLL
O3 - Toolbar: Big Fish Games - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - C:\PROGRA~1\BFGTOO~1\BFGTOO~1.DLLO4 - HKLM\..\Run: [autoclk] autoclk.exe
Close HijackThis and delete the above items in bold. Run CCleaner again, letting it clean all.
Then boot into Normal Mode. Please post a new HJT log. I think there may also be some maitenance things that need to be addressed, but let's get the malware fixed first.

Look forward to your reply,

TTFN

T


  #4  
Old 09-23-2005
Bronze Member
 
Join Date: Sep 2005
Posts: 4
g-awat - See this Members User comments on their Profile page
Send a message via Yahoo to g-awat
Default Re: Anything Here That Shouldn't be?

Hi TJNBARBOUR,

Many thanks for getting back to me so fast!

I'm going to do all that now then I'll get back to you

cheers ed


  #5  
Old 09-23-2005
ladygreenwitch's Avatar
Elite Member
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 4,643
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default Re: Anything Here That Shouldn't be?

:-D No worries, our evil master, Hengis, beats us if we aren't fast LOL

We'll be looking for you.

TTFN

T


  #6  
Old 09-24-2005
Bronze Member
 
Join Date: Sep 2005
Posts: 4
g-awat - See this Members User comments on their Profile page
Send a message via Yahoo to g-awat
Default Re: Anything Here That Shouldn't be?

Good Morning,

Ive followed the instructions you gave me last night. I have attached my new HJT log here.

Houscall found a couple of security vulnerabilities and gave patches from microsoft. One of these was for 2000+ only and the other seems to be a bad link.

Spysweeper and ccleaner found a few things and cleaned them ok.

Found those lines in HJT and have deleted all of those.

time for some coffee

thanks ed
Attached Files
File Type: txt hijackthis3.log.txt (8.4 KB, 1 views)



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 06:12 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top
Loans
Loans information and advice from the experts, Moneyexpert.

News
Workwide news from the UK paper - the mirror.

Debt
Debt advice from moneyextra.