Scan your PC for Errors

Member Panel



Join the PC Help Forum Team

Join PC Help Forum on Facebook

Join the PCHF Distributed Computing Teams

Try the NEW PC Help Forum Dark style

Link to PCHF from other parts of the Internet
PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] Something odd...

[Fixed] Hijackthis! Logs - [Fixed] Something odd... posted in the Security & Safety forums; After uploading my friend's HJT log, this new thing called .exe has showed up on my computer. Some help would greatly be appreciated. I think there are other virii are ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 11-30-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default [Fixed] Something odd...

After uploading my friend's HJT log, this new thing called .exe has showed up on my computer.

Some help would greatly be appreciated. I think there are other virii are on this computer and I'll try to post up an AntiVir log soon.


  #2  
Old 11-30-2005
Elite Member
 
Join Date: Nov 2005
Posts: 502
btalman - See this Members User comments on their Profile page
Default

Hmmm not a good thing. Thje hjt experts will solve your problem I'll hope. I'll close this one beacuse you're going to post a hjtlog (the only solution to your problem)
Good luck, Bram


__________________
  #3  
Old 12-01-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

You say it started to show up after you posted the hjt log , so that means it isn't in the log you posted?

If yes , then please run a new hjt log and post it in the hjt thread you already made.

But before doing that , also please remove "RXToolBar" from add/remove programs , and "Newdotnet" there aswell if present. If not then try the instructions here:

http://www.newdotnet.com/removal.html

But it looks like the Newdotnet infection already has been removed , there is only one "file missing" 010 entry left of it. It looks like a anti spyware app has tried to remove the Newdotnet infection and messed up the net connection in the process.
So if the instructions on the page above don't restore the net connection , only then , try this:

  1. Please download LSPFix from here.
  2. Disconnect from the internet and run the LSPFix.exe that you have just downloaded.
  3. Check the I know what I'm doing box.
  4. In the Keep box you should see one or more instances of newdotnet4_80.dll
  5. Select every instance of newdotnet4_80.dll and move each one to the Remove box by clicking the >> button.
  6. When you are done click Finish>>.


And see if youre connection works again.




Then run Ccleaner and then run a new hjt scan and post the log please.

Also what is the name of that .exe file?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Last edited by joe5; 12-01-2005 at 01:05 AM.
  #4  
Old 12-01-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default

Alright, I'll be sure to follow the instructions when I go to fix her computer tonight or Friday.

As for my log, here it is:


And, I'm not sure of the name of the file, it just says .exe...if an AntiVir notification pops up, I'll put the name of the Virus.
Attached Files
File Type: log hijackthis.log (7.8 KB, 4 views)


  #5  
Old 12-01-2005
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Ah , i see whats goin on here. Lol , took me a minute to figure out.
It are 2 separete problems on 2 pc's.


OK , so the instructions i posted above are for youre friends pc's hjt log.
And the .exe file you mentioned runs on youre own pc.


And, I'm not sure of the name of the file, it just says .exe...if an AntiVir notification pops up, I'll put the name of the Virus.
If you could give some extra info from antivir or anythin that could help. Youre own hjt log looks clean and with just ".exe" to go on , then i don't know what to do with it im afraid.
Was it Antivir in the first place that flagged that file or where you saw it?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #6  
Old 12-01-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default

Sorry for the confusion there...

It was AntiVir that flagged the problem, although no such notification has come up since then.

I followed the instructions that you gave me for her computer; however, I couldn't find RxToolbar. I used the program that you suggested and got rid of that program. Sadly, she still can't connect to the Internet. When we tried, it said that the IP address had to be renewed.

As for my problem, AntiVir seems to freeze up after a bit, so it may be a while before I can bring in a log.

I almost forgot, here is my friend's log.
Attached Files
File Type: log hijackthis.log (6.3 KB, 2 views)



Last edited by Gray; 12-01-2005 at 07:15 AM.
  #7  
Old 12-01-2005
Silver Member
 
Join Date: Oct 2005
Location: Where the President never stays...
Posts: 177
Gray - See this Members User comments on their Profile page
Send a message via Yahoo to Gray
Default

I nearly forgot...here is my log as well. Something weird called hwclock.exe is now on the computer.

Sometimes, fixing computes feels like
Attached Files
File Type: log hijackthis.log (8.1 KB, 2 views)



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 05:51 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top