Member Panel

elvin815 · 05:42 AM

Im having a spyware problem. Please review these logs and let me know what to fix.. Thanks in advance for the help!

---I tried doing as much pre-work as possible.. did everything except for Ewino - had trouble with that program....

Scouse

Hi Elvin,

One of the log specialists will return a post for you today mate.

joe5

Hya Elvin815.

Click Start>Run and type in: services.msc
Click OK
In the Services window find: Local Security Authority Subsystem Service
Select/highlight and right click the entry, and choose: Properties
On the General tab, under Service Status click the Stop button
Beside: Startup Type, in the drop menu, select: Disabled
Click Apply, then OK
Open HJT and click config > misc tools > ?delete an NT service?
Copy and past: lsass
Click OK.

And then post a new hjt log to check please.

PS , what was the problem you had when running Ewido?

elvin815 · 08:36 AM

attached are the new logs for HJT and ewido after doing that other correction. thanks for the help.

joe5

Looks great to me.

Do you still have any problems with youre pc?

elvin815

thanks for the help. no new problems, just one recurring one, if you've ever seen it: every so often, a new "program" will appear momentarily on the start menu taskbar - it will show up and disappear a second later. There is no program title on it, but it does have as its icon the "window not responding" icon (like an all-white command prompt). looks like some kind of spyware that shows up for some process and then disappears - any recommendations?

joe5

Does that happen randomly or only when running a specific app maybe?

Have a look if these two rootkit scanners find anything:

http://www.greatis.com/unhackme/downloadbeta.htm
http://www.f-secure.com/blacklight/try.shtml

If they do , report back what they find please.

And also do a Panda online AV scan here , and post back the log from it please:

http://www.pandasoftware.com/products/activescan

Member Panel

Sponsors and Ads

Join the Team

Live Tag Cloud