Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] Scan after Scan after Scan - I'm still not clean :/

[Fixed] Hijackthis! Logs - [Fixed] Scan after Scan after Scan - I'm still not clean :/ posted in the Security & Safety forums; Originally Posted by NeedingHelpHere The look2me remover keeps freezing... But it found alot of entries in my registry but then... it froze again. Both progs run successfully. So in the ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #29  
Old 04-22-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,046
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Originally Posted by NeedingHelpHere
The look2me remover keeps freezing...
But it found alot of entries in my registry but then... it froze again.

Both progs run successfully.

So in the end they both run succesfully? If not then do a Spysweeper scan and post the log from that:

http://www.pchelpforum.com/118559-post3.html

That is also able to kill any L2M problems if still present.

These two can be fixed with hjt: (in safemode)

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe
O16 - DPF: {AE9DCB17-F804-11D2-A44A-0020182C1446} (IntraLaunch.MainControl) -
And i would disable the windows messenger service:

Please download Shoot The Messenger

Download and run the small (22 kbyte) "ShootTheMessenger.exe" utility. It will display the current status of your system's Messenger Service. The button near the bottom of its window will allow you to set the service to whichever state — running or disabled — that you desire.

If, for any reason, you should ever choose to re-enable the Windows Messenger Service, simply re-run ShootTheMessenger to do so.
And i also would uninstall FreeRAM XP Pro , apps like that really arent nessecairy with XP and probebly does more harm then good.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #30  
Old 04-23-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

I found spysweeper pretty useless before and i DLed it again - still nothing found. disabled the messenger and the freeramXP - now doing the hjt fix.


  #31  
Old 04-23-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

Done all steps. What happens on startup?

*You need to verify your email address with windows messenger*
*ZoneAlarm is turned off*

Im getting slightly annoyed here :/


  #32  
Old 04-23-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,046
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Have a look with these 2 rootkit scanners and see if they find anything:

http://www.f-secure.com/blacklight/try.shtml

http://www.greatis.com/unhackme/download.htm

And report back if they find anything please.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #33  
Old 04-24-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

already have unhackme. DLing blacklight now


  #34  
Old 04-28-2006
Bronze Member
 
Join Date: Apr 2006
Posts: 43
NeedingHelpHere - See this Members User comments on their Profile page
Default

Nothing found...

And since i deleted those HJT entries my pc is running unbearably slow nd progs keep crashing more than ever. Where they spyware entries or just "un-needed"?


  #35  
Old 04-30-2006
ladygreenwitch's Avatar
HR Director
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 5,499
PC Experience: PC Illiterate
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default

Hey Guys,

@NHH, Joe had you fix those two entries because they are listed as malware. It may be that with the extensive infections and repairs, some of your system files have been damaged. It is also possible that your computer is still responding to infections.

Let's start by checking out your sytem files. Click on Start, Run, and type in

sfc /scannnow

exactly as shown. You will need to have the Operating System CD in the drive during the scan. This utility will look for damaged and/or missing system files and replace them.

If you see no improvement, I would want Joe to take another look at your logs for malware, it may be that you will need to try a Repair install, (which is the type that does not harm your files,) and see if that solves the damage.

Looking forward to your reply,

TTFN

LGW



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 02:30 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top