Scan your PC for Errors

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] Scan after Scan after Scan - I'm still not clean :/

[Fixed] Hijackthis! Logs - [Fixed] Scan after Scan after Scan - I'm still not clean :/ posted in the Security & Safety forums; Hy there NeedingHelpHere. I dont see any trojans , look2me or Elitebar in there , looks clean to me. Please do an Ewido scan , and post the log from ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #8  
Old 04-04-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hy there NeedingHelpHere.


I dont see any trojans , look2me or Elitebar in there , looks clean to me.

Please do an Ewido scan , and post the log from that. You can find a link and instructions in the "Prework" link below.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #9  
Old 04-04-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

Should it be done in safemode or normal?
And the SpywareDoctor, should i reinstall it?



Last edited by NeedingHelpHere; 04-04-2006 at 01:27 PM.
  #10  
Old 04-04-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

***Ewido in normal mode - found nothing***
Attached Files
File Type: txt Scan report_20060404.txt.txt (584 Bytes, 5 views)


  #11  
Old 04-04-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

(The Trojan Was Disguised at MS Office 2003 - but i opened the legit version so i don't get what went wrong)
What app found and deleted that trojan? And what was the files name , and location?
Sounds like it could be a false positive to me.

And what is still being detected now , and what app detects it?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #12  
Old 04-04-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

I never WAS *deleted*
it was detected with spyware doctor, but i have to pay to get it removed.

I'm pretty sure it isnt a false positive... because im having a few probs with fps that i didnt have before... as well as my screen resolution screwing up and my temp folder seems to be emptying without me doing anything :o

The download installed ALOT of stuff on my pc, and im pretty sure housecall didn't get every single thing that was downloaded. Ill repeat the spyware doctor scan and post a screenshot of the results.

EDIT*** See Below



Last edited by NeedingHelpHere; 04-04-2006 at 06:24 PM.
  #13  
Old 04-04-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

Yep, the trojan is still there, but i emptied my temp folder so all the other nasties are gone.

Infection = Trojan.Downloader.Druser
Risk Type = High
Location = HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows##run
Description = Trojan.Downloader.Druser Infects The Users Machine by downloading randomly named files into the system folder.

those "randomly named files" were detected in the previous scan in the temp internet files... the ones i cleared. Looks like the trojan is still there in HKCU... is that a whole seperate drive or something???

And i know it was disguised as MS office because a random popup appeared asking "do you want to install ms office 2003?" - i clicked "X" but every time i open word or publisher i either lag or sometimes my screen resolution goes tiny.


EDIT: Inluding another hijack this log for good measure
Attached Files
File Type: log hijackthiks.log (10.6 KB, 2 views)



Last edited by NeedingHelpHere; 04-04-2006 at 08:45 PM.
  #14  
Old 04-04-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

_UPDATE_

I have subscribed to spyware doctor and the trojan is being removed , consider this solved for now : If i have further problems (anything that got past SD) i will return. Thanks for Your Efforts guys anyway



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 11:47 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top