Recommended Driver Scanner

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] A troublesome virus

[Fixed] Hijackthis! Logs - [Fixed] A troublesome virus posted in the Security & Safety forums; You can have a look if youre AV is blocking it by temporary disableling auto protect , or else give this a go: 1. start HijackThis 2. click on 'Config' ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #22  
Old 11-18-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

You can have a look if youre AV is blocking it by temporary disableling auto protect , or else give this a go:


1. start HijackThis
2. click on 'Config'
3. click on 'Misc Tools'
4. Put a check in 'List also minor sections (full)'
5. click on 'Generate StartupList log'
6. click on 'yes' to make the log
7. Then copy the resulting log to a post here


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #23  
Old 11-18-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default

Okay, here is the log. Hope it helps out.
Attached Files
File Type: txt startuplist.txt (15.1 KB, 2 views)


  #24  
Old 11-18-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Looks also clean , do you stil have any problems?
And if yes , what are they?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #25  
Old 11-18-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default

Other than an Anti-Virus notification popping up every now and then, things seem to be fine. Should I copy and paste the locations here?


  #26  
Old 11-18-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default

C:\WINDOWS\SYSTEM32\$SYS$CAJ.DLL

C:\WINDOWS\SYSTEM32\$SYS$UPGTOOL.EXE

Those are the the things that AntiVir keeps telling me about.


  #27  
Old 11-18-2005
ladygreenwitch's Avatar
HR Director
My PC
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 5,764
PC Experience: PC Illiterate
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default

Hi Gray,

Those two refer to a copy right infringement "Trojan" that was installed with some CD you ran or downloaded. Here is information about removing the files and associated infection. However, please keep in mind that this does not relieve you of your legal responsibilities.

http://club.cdfreaks.com/showthread.php?t=151461

TTFN

LGW


  #28  
Old 11-18-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Yup , that should do the trick. O0


XCP2 (First 4 Internet) http://www.xcp-aurora.com/

How to identify: There will be a file called “VERSION.DAT” if this is opened with Note Pad it will say something like “VERSION=XCP2, Version 1.7

Win98/ME/2K & XP

Step 1. Press F8 during startup to boot into safe mode.

Step 2: On windows partition (where Windows is installed default is C:/ drive) Search for a file called “$sys$caj.dll” and delete it.

The default path is C:\WINDOWS\system32\$sys$caj.dll

Step 2: Reboot PC and go to “Device Manager” and uninstall all CD/DVD drives and then rescan for hardware changes.

Now the XCP protection is permanently disabled.



Only also delete the other one , they don't mention that one:

C:\WINDOWS\SYSTEM32\$SYS$UPGTOOL.EXE





But you could also leave it for a couple of days (its nothing nasty anyway) and weight untill an official uninstaller is availeble here:
(that will remove all files , there are alot more files that youre AV doesn't pick up)

http://cp.sonybmg.com/xcp/english/form14.html


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Last edited by joe5; 11-18-2005 at 06:19 PM.

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 03:39 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top