Recommended Driver Scanner

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Fixed] i have been hijacked again

[Fixed] Hijackthis! Logs - [Fixed] i have been hijacked again posted in the Security & Safety forums; spyware quake 2.1 wants to install. it also takes me to their web site when i go on line. what can i do...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 04-22-2006
PCHF Super Donor!!
 
Join Date: Dec 2005
Location: AUBURN CALIFORNIA
Posts: 32
macreal - See this Members User comments on their Profile page
Default [Fixed] i have been hijacked again

spyware quake 2.1 wants to install. it also takes me to their web site when i go on line. what can i do
Attached Files
File Type: log hijackthis.log (9.7 KB, 1 views)



Last edited by macreal; 04-22-2006 at 09:09 PM.
  #2  
Old 04-22-2006
Bronze Member
My PC
 
Join Date: Mar 2006
Location: Dieren (near. Arnhem)
Posts: 75
CyFanate - See this Members User comments on their Profile page
Send a message via MSN to CyFanate
Default

Hello Macreal

Do you have a spyware detector installed? If not, install a spyware detector, like Ewido. Scan your pc. Most likely your computer has been infected with spyware, so you need to scan your pc for it and delete it.


__________________
Life is not hard. It's just hard cause we're trying to understand the reason of all this ****.
  #3  
Old 04-22-2006
Spaceman3750's Avatar
Elite Member
My PC
 
Join Date: Jan 2004
Location: Riverton, IL, USA
Posts: 1,476
PC Experience: Very Experienced
Spaceman3750 - See this Members User comments on their Profile page
Send a message via AIM to Spaceman3750 Send a message via MSN to Spaceman3750 Send a message via Yahoo to Spaceman3750
Default

Hey macreal, welcome back .

If you could please run a HiJackThis scan (you can download HJT here) and upload the logfile, one of our security experts will be around shortly to analyze it.

-Ryan


__________________
- Ryan
http://www.spaceman3750.info
http://www.conglomerate-game.net

Cisco Academy - CCNA student
  #4  
Old 04-22-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Before running anything else download and run Smitrem:

http://noahdfear.geekstogo.com/click...click.php?id=1

Run the installer and then press Start to Extract the
files to the desktop, Do not run it yet.

Also download and unzip , but dont run it yet:

http://castlecops.com/zx/flrman1/FixSQ.zip

Reboot into safe mode (Reboot and keep tapping F8 , then
choose safe mode from the list)

Now double click on the FixSQ.reg file , and allow it to merge with the registry.


Click on the Start Menu
Click on the Control Panel option.
Double-click on the Add or Remove Programs icon.
Find the entry for Spyware Quake 2.0 and double-click on it. Follow the prompts to uninstall the program, but do not allow it to reboot the computer if it asks.
When it has completed uninstalling you can close Add or Remove Programs and your Control Panel.


Now run SmitRem:

Open the SmitRem folder and double click the "RunThis.bat" file to start the tool. Follow the prompts on screen , wait for the tool to complete , and disk cleanup to finish.

The tool will create a log named smitfiles.txt on the drive that you ran Smitrem on, eg; "C:\smitfiles.txt" , or the partition where your operating system is installed on.

Please attach this log to your next reply.

Delete the following files and folders (Do not be concerned if this folder does not exist):

C:\Windows\System32\dxmpp.dll
C:\Windows\System32\ginuerep.dll
C:\Program Files\SpywareQuake



Note: XP users using the XP theme may ex-perience a change to the Classic Windows theme. This can be changed on the themes tab of desktop properties.


You will need to reload your wallpaper as the SmitRem
tool will reset it, you can do this by right clicking
desktop and choosing properties, First check Theme and
set it to Windows XP then click the Desktop tab and
choose the one you want to use and press apply.


When done , please post the Smitrem log plus an Hijackthis log.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #5  
Old 04-23-2006
PCHF Super Donor!!
 
Join Date: Dec 2005
Location: AUBURN CALIFORNIA
Posts: 32
macreal - See this Members User comments on their Profile page
Default

Originally Posted by macreal
spyware quake 2.1 wants to install. it also takes me to their web site when i go on line. what can i do
i am not sure if i am doing this right. but i did upload the new files.
my system is still prety fowled up. acrobat keeps trying to install. whick i think is part of this mess.
let me know what i should do. i never know exactly how to get back to where i should look for the help you are sending me as well as where i should be going to comunicate the results.
i am real inept at the repair aspect of computers.
mark
Attached Files
File Type: txt smitfiles.txt (3.8 KB, 2 views)
File Type: txt hijack this 4 23.txt (9.1 KB, 5 views)


  #6  
Old 04-23-2006
PCHF Super Donor!!
 
Join Date: Dec 2005
Location: AUBURN CALIFORNIA
Posts: 32
macreal - See this Members User comments on their Profile page
Default

did i do it right this time?


  #7  
Old 04-23-2006
Hengis's Avatar
PCHF Head Honcho
My PC
 
Join Date: Jan 2004
Location: Southern England
Posts: 11,459
PC Experience: Always learning
Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page Hengis - See this Members User comments on their Profile page
Send a message via Skype™ to Hengis
Default

A member of the PC Security Team will look at this when they come online.


__________________

Pre-Work
/ System File Checker / Help promote PCHF! / What's inside your PC? / Did we help you? If we did, please consider A Donation

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 03:41 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top