Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

[Fixed] Hijackthis! Logs - [Fixed] Infection posted in the Security & Safety forums; Hello, My computer was working slow and the task manager was not working. I followed the steps described in the instructions. I attached the Hijackthis log file. thanks for any ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 05-04-2006
Bronze Member
 
Join Date: May 2006
Posts: 6
rebel_hb - See this Members User comments on their Profile page
Default [Fixed] Infection

Hello,
My computer was working slow and the task manager was not working.
I followed the steps described in the instructions. I attached the Hijackthis log file.
thanks for any help in advance.
Attached Files
File Type: log hijackthis.log (10.3 KB, 3 views)


  #2  
Old 05-04-2006
ladygreenwitch's Avatar
HR Director
My PC
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 5,767
PC Experience: PC Illiterate
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default

Hi Rebel,

Welcome to PCHF. We have a wonderful team of techs here, and I am confident that we will be able to rid your PC of the RLMs (rotton little monsters)

Can you please also post the ewido log you ran?

Thanks, I'll take a look at your HJT log in the meantime.

Looking forward to your reply,

TTFN

LGW


  #3  
Old 05-04-2006
Bronze Member
 
Join Date: May 2006
Posts: 6
rebel_hb - See this Members User comments on their Profile page
Default

I am really glad to join the forum. I attached the ewido report that you asked for.

Thanks for your help,
Attached Files
File Type: txt Scan report_20060504.txt.txt (66.5 KB, 7 views)


  #4  
Old 05-04-2006
ladygreenwitch's Avatar
HR Director
My PC
 
Join Date: Jul 2005
Location: Bay Area California
Posts: 5,767
PC Experience: PC Illiterate
ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page ladygreenwitch - See this Members User comments on their Profile page
Default

We're glad you joined too Rebel.

Please do me a favor, before we go any farther, can you please run the ewido scan again, asking the program to fix everything that it finds, and post the resulting new log back here, as well as a new HijackThis log.

Looking forward to your reply,

TTFN

LGW


  #5  
Old 05-04-2006
Bronze Member
 
Join Date: May 2006
Posts: 6
rebel_hb - See this Members User comments on their Profile page
Default

I will do.
thanks,


  #6  
Old 05-05-2006
Bronze Member
 
Join Date: May 2006
Posts: 6
rebel_hb - See this Members User comments on their Profile page
Default

Hello again,

I did run the Ewido and HiJackThis again as you requested.
Here are the log files.

Thank you very much.
Attached Files
File Type: txt Scan report_20060505.txt.txt (1.5 KB, 3 views)
File Type: log hijackthis.log (10.0 KB, 2 views)


  #7  
Old 05-05-2006
joe5's Avatar
Elite Member
My PC
 
Join Date: Jun 2005
Location: Netherlands
Posts: 9,036
joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page joe5 - See this Members User comments on their Profile page
Default

Hya Rebel.

Lets clean up the leftovers.


Please download LQfix.exe and save it to your desktop.
  • Double-Click LQfix.exe and click Next > Next > Install.
  • Leave the default settings, if you change them, the fix will Fail!
  • Now make sure the "Launch LQfix" box is checked.
  • Click the Finish button, after clicking the Finish button the fix will start.
  • Follow the on-screen prompts.
  • Your system will now reboot afterwards.
  • Please be patient after the reboot, there is a script running in the background that needs to complete.
Then disable the windows messenger service:

Please download Shoot The Messenger

Download and run the small (22 kbyte) "ShootTheMessenger.exe" utility. It will display the current status of your system's Messenger Service. The button near the bottom of its window will allow you to set the service to whichever state — running or disabled — that you desire.

If, for any reason, you should ever choose to re-enable the Windows Messenger Service, simply re-run ShootTheMessenger to do so.



Then boot in safemode and fix these with hjt:
(if still present)

O4 - HKLM\..\Run: [System service79] C:\WINDOWS\\\etb\\pokapoka79.exe
O4 - HKLM\..\Run: [wmplayer] C:\Program Files\wmplayer\wmplayer.exe /auto
O8 - Extra context menu item: &Search - http://kn.bar.need2find.com/KN/menusearch.html?p=KN

Fix this one only if you dont want to keep using that as startpage:
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
Then reboot , and post a new hjt log please to check.


__________________
- PCHF Team. - (NL) - Mal-ware Eradicator! -


Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 03:01 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top