Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] I need some help.

[Fixed] Hijackthis! Logs - [Resolved] I need some help. posted in the Security & Safety forums; I heard I could get some good help here. I have some sort of virus/adware problem, and a lot of popups keep coming up. I have run spybot and the ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 04-03-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 4
rkahne - See this Members User comments on their Profile page
Default [Resolved] I need some help.

I heard I could get some good help here. I have some sort of virus/adware problem, and a lot of popups keep coming up. I have run spybot and the thing that continues to appear is "command service" and there are two registry files which will not be deleted. I have attempted to delete them manually, and even in safe mode, they persist. If this helps any, most of the popups come from a website called "Search Inqwire." I have attached my HijackThis log. Any help would be greatly appreciated.

Thank you.
Attached Files
File Type: log hijackthis.log (7.7 KB, 2 views)


  #2  
Old 04-03-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 4
rkahne - See this Members User comments on their Profile page
Default Sorry

I realized that I failed to follow directions. This is the updated log after I did everything listed for me to do.
Attached Files
File Type: log hijackthis.log (8.0 KB, 3 views)


  #3  
Old 04-03-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hya Rkahne , welcome to PCHF.

Yup , you can get great help here.



First please run Smitrem:



Download Smitrem to your desktop:
http://noahdfear.geekstogo.com/click...click.php?id=1

Run the installer and then press Start to Extract the
files to the desktop, Do not run it yet.

Reboot into safe mode (Reboot and keep tapping F8 , then
choose safe mode from the list)

Run SmitRem:
Open the SmitRem folder and double click the "RunThis.bat" file to start the tool. Follow the prompts on screen , wait for the tool to complete , and disk cleanup to finish.

The tool will create a log named smitfiles.txt on the drive that you ran Smitrem on, eg; "C:\smitfiles.txt" , or the partition where your operating system is installed on.
Please attach this log to your next reply.

Then download and run this L2M remover:

http://www.simplytech.it/L2MRemover/index_e.htm

After that , boot in safemode (hit f8 when booting up) and fix these with hjt if still present:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R3 - Default URLSearchHook is missing
F2 - REG:system.ini: UserInit=userinit.exe
O3 - Toolbar: (no name) - {BA52B914-B692-46c4-B683-905236F6F655} - (no file)
O14 - IERESET.INF: START_PAGE_URL=http://www.toshibadirect.com/dpdstart
O18 - Filter: text/html - {CEA53356-C414-4331-A35E-AA4CE9D8DFA2} - C:\WINDOWS\system32\w9seq.dll
O20 - Winlogon Notify: BITS - C:\WINDOWS\system32\c200lcdm1f0a.dll

When done please post the Smitrem log , the Ewido log you made earlier , and a new hjt log.



You will need to reload your wallpaper as the SmitRem
tool will reset it, you can do this by right clicking
desktop and choosing properties, First check Theme and
set it to Windows XP then click the Desktop tab and
choose the one you want to use and press apply.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #4  
Old 04-03-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 4
rkahne - See this Members User comments on their Profile page
Default

ok, here are the things you asked for. I'm not sure if the ewido log is the one you are looking for, but it is the only text file i can find in the program. Thank you for the help.
Attached Files
File Type: log hijackthis.log (7.1 KB, 2 views)
File Type: txt logfile.txt (984 Bytes, 1 views)
File Type: txt smitfiles.txt (3.1 KB, 1 views)


  #5  
Old 04-04-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 4
rkahne - See this Members User comments on their Profile page
Default

I think that fixed it. Thank you so much for all your help!


  #6  
Old 04-04-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Almost there.



Have a look in add/remove programs for "VCClient" and uninstall if present.
Then boot in safemode and fix these with hjt if still present:

O4 - HKCU\..\Run: [CU1] C:\Program Files\Common Files\VCClient\VCClient.exe
O4 - HKCU\..\Run: [CU2] C:\Program Files\Common Files\VCClient\VCMain.exe
When done , please post a new hjt log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 09:35 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top