Hey, I was wondering if anyone could check out my log. I think I have WINFIX stuff on this machine.

It is not top priority, but thanks for your help!

Attached Files

hijackthis.txt (7.0 KB, 3 views)

:-) Hey Dualdot,

Welcome to PCHF. We have a whole team of wonderful people who are sure to be able to figure out what ever it is you have become infected with.

I'll just have quick look at your HijackThis log and be right back.

TTFN

T

:-) Hey There Dualdot,

I would appreciate it if you would please follow the instructions from the PreWork link in my signature. Make sure that you reinstall HijackThis to a folder of its own, and show all hidden files and folders before reposting it.

Look forward to reading your ewido and HJT logs with your next post.

TTFN

T

Can you tell me if you know these and know why there on youre pc?
They seem bogus and dead:


O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = lookup.go.co
O17 - HKLM\Software\..\Telephony: DomainName = lookup.go.co
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = lookup.go.co
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = lookup.go.co

And in advance of posting the new logs , you can fix this one:

R3 - Default URLSearchHook is missing

:-) Hey Joe!! I saw those as well, but it's not enough for the infection he thinks he has, do you think it could be a problem with not having HJT installed into its own folder that is causing us not to see the infection?

TTFN

T

No , having hjt in a temp folder doesnt effect the scanning but he doesn't have hjt in a (windows) temp folder:

C:\Downloads\HijackThis.exe

And thats the most importend part of it, its handy and cleaner to make a separete folder but aslong it isnt in a temp folder hjt can make backups of the removed entry's and then they are immediatly stored in a "safe" location.



And if he means that he thinks he has the winfixer/vundo infection then there is indeed no trace of it.