Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] hijackthis log help

[Fixed] Hijackthis! Logs - [Resolved] hijackthis log help posted in the Security & Safety forums; Hi, there is a problem with my downloading speeds, and I've got a trojan on my pc called "downloader-avq", most probably those problems are related to each other. I read ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 04-23-2006
Bronze Member
My PC
 
Join Date: Apr 2006
Posts: 4
patelski - See this Members User comments on their Profile page
Default [Resolved] hijackthis log help

Hi, there is a problem with my downloading speeds, and I've got a trojan on my pc called "downloader-avq", most probably those problems are related to each other.

I read somewhere I should do a hijackthis scan, I've done that, but I can't see what to do with it. so I give you me logfile, hopefully you can see what stuff from that trojan I should delete, and maybe you even discover some other bad stuff on my pc.

Thanks!!!
Attached Files
File Type: txt hijackthis.txt (10.7 KB, 2 views)


  #2  
Old 04-24-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hya Patelski , welcome to PCHF.

Doesn't look that bad , should be clean in no time.


Please download Process Explorer by Systernals from HERE.

Also download KillBox by Option^Explicit from HERE.


Then boot up in SAFE MODE and stay in safe mode (hit f8 when booting up), untill the entire fix is done.

Unzip Process Explorer and double click on procexp.exe

In the top section of the Process Explorer screen double click on winlogon.exe to bring up the winlogon.exe properties screen. Click on the Threads tab at the top.
Once you see this screen click on each instance of senssrv.dll once and then click the kill button.
After you have killed all of the senssrv.dll's under winlogon click OK.

Next In the top section of the Process Exlporer screen again , double click on explorer.exe and again click once on each instance of senssrv.dll then click the kill button.
Once you have done that click OK again.

Next run HijackThis and place a check beside each of the following:

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - {4D25F926-B9FE-4682-BF72-8AB8210D6D75} - (no file)
O2 - BHO: (no name) - {A5366673-E8CA-11D3-9CD9-0090271D075B} - (no file)
O20 - Winlogon Notify: SensSrv - C:\WINDOWS\SYSTEM32\senssrv.dll
Double click on Killbox.exe and then check the delete on reboot button.

Enter the following filepath and filename into the Full path of file to delete box:

C:\WINDOWS\SYSTEM32\senssrv.dll

Click the red circle with the white x and allow your computer to reboot.
(if killbox doesn't reboot on its own then please reboot manually)

After your computer has rebooted please run Hijackthis again and post a new Hijackthis log.


Also i see you have both NOD32 and Mcafee running , to prevent conflict problems i would disable/uninstall one of them.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #3  
Old 04-26-2006
Bronze Member
My PC
 
Join Date: Apr 2006
Posts: 4
patelski - See this Members User comments on their Profile page
Default re:

ok, I didn't get any notifications anymore from mcafee telling me it can't delete downloader-avq, so I guess it's gone. Thanks!!!!

but my download speeds are still low (I know it is not certain they are caused by a virus or something like that, but I tried all other possible errors without any improvement).
Attached Files
File Type: txt hijackthis2.txt (10.1 KB, 1 views)


  #4  
Old 04-26-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Youre hjt log is clean.

What is youre ISP , and what kind of connection do you have? And have a look at these two sites to test the speed you are getting:

http://www.speedtest.nl/
and:
http://www.beelinebandwidthtest.com/nederlands/

And please report back what the result is.


And to do an extra check , please do a Panda online AV scan here and post the log from it:

http://www.pandasoftware.com/products/activescan


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #5  
Old 04-27-2006
Bronze Member
My PC
 
Join Date: Apr 2006
Posts: 4
patelski - See this Members User comments on their Profile page
Default

Wanadoo adsl, the wireless icon indicates a speed of 11 Mbps

speedtest.nl: 312.9 KB/s

beeline: 472 Kbps

I did a panda scan, but it found nothing serious, just some "bad" cookies. I added the logfile.

probably the problem lies with my ISP.
Attached Files
File Type: txt Activescan.txt (10.4 KB, 1 views)


  #6  
Old 04-28-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Originally Posted by patelski
Wanadoo adsl, the wireless icon indicates a speed of 11 Mbps
That probebly just is the speed that the networkcard can handle max , but what subscription do you have from Wanadoo?


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -

  #7  
Old 04-28-2006
Bronze Member
My PC
 
Join Date: Apr 2006
Posts: 4
patelski - See this Members User comments on their Profile page
Default

wanadoo adsl family: 20 Mbps



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 11:07 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top