Scan your PC for Errors

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed]Unwanted Pop up's

[Fixed] Hijackthis! Logs - [Fixed]Unwanted Pop up's posted in the Security & Safety forums; Hi Lay18 , you have posted the old Ewido log instead of the Spysweeper log , can you post the spysweeper log with youre next post? Where did you get ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #8  
Old 03-07-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hi Lay18 , you have posted the old Ewido log instead of the Spysweeper log , can you post the spysweeper log with youre next post?

Where did you get that Spysweeper version from? Did you get an enterprise edition of spysweeper , instead of the demo? And did you update/scan with it?

The Look2me infection is still present and Spysweeper should get rid of that easely.

Please run spysweeper again , then fix these with hjt (in safemode) :

R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=
O4 - HKCU\..\Run: [order_Shell] D:\Documents and Settings\Josh\order_mfjy.exe

And delete the file in bold.

Then post a new hjt log plus the spysweeper log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #9  
Old 03-07-2006
Bronze Member
 
Join Date: Mar 2006
Posts: 7
lay18 - See this Members User comments on their Profile page
Default

Thanks for all of your help so far.

First of all, i had to download the enterprise version as i still was unable to use that link.

I've deleted order_mfjy.exe, and here are the two logs.

Spy Sweeper Session Log.txt

hijackthis2.txt


  #10  
Old 03-07-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Did you update Spysweeper? And is it an legit version? There is something wrong there atleast , it doesn't even see the look2me..

And those entrys i posted all have to be fixed with hjt , it looks like you only manually deleted the file in bold?


First please download and run this L2m remover:

http://www.simplytech.it/L2MRemover/index_e.htm

Then putt a check infront of all 3 lines in hjt:

R3 - Default URLSearchHook is missing
F2 - REG:system.ini: Shell=
O4 - HKCU\..\Run: [order_Shell] D:\Documents and Settings\Josh\order_mfjy.exe
Press "fix checked" , close hjt and then manually delete the file in bold.

And then post a new hjt log again.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #11  
Old 03-08-2006
Bronze Member
 
Join Date: Mar 2006
Posts: 7
lay18 - See this Members User comments on their Profile page
Default

thanks again, i have done as instructed and here is the hiJack this log

hijackthis.log


  #12  
Old 03-08-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Ah , that is alot better. The Look2me is gone now.
And it looks like youre malware free now. :smiley:


But it seems you have no firewall , to be better protected from things like this you really should have one. Have a look in our download section for some free ones. I would also recommend to update windows.


One last thing , i think i would remove that spysweeper again. There is something wrong with it , if it doesn't see/remove the Look2me infection.

Do you still have any problems?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #13  
Old 03-08-2006
Bronze Member
 
Join Date: Mar 2006
Posts: 7
lay18 - See this Members User comments on their Profile page
Default

thank you so much. I will download a firewall now.

You've been a really big help.


  #14  
Old 03-08-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Youre welcome. And see you around the forum.



Marked as Fixed.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 09:50 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top