Member Panel

Hey guys,

I notice that my webcam locks up after a while and I was wondering if the new Yahoo Messenger is the culprit or what?
Every day I run Spy Sweeper and it seems to find the same spyware.
Does this log look ok? Thanks!

Mike

Hey Mike,

Welcome back! Been about a year right? Hopefully we can get you fixed up this time without resorting to you having to reformat and reinstall your OS.

Can you please follow the instructions for PreWork in my signature and post back the resulting AVG log as well as a new HJT? Thanks,

Looking forward to your reply,

TTFN

LGW

This Logitech keyboard will not function when I hit F8 so I cannot chose Safe Mode to do the AVG scan. Oh well.
This has to be Logitech's worst set yet!

have you got another keyboard you could prehaps use?

If you do not have another keyboard to use, run the AVG scan in normal mode.

Alright, I hooked up another keyboard and ran AVG AS in safe mode and it found 91 items. Wow!
How come I never saw that many when running Spy Sweeper?
Is it because Safe mode finds more?
Anyhow, I let it take care of all of them and then realized I screwed up and didn't follow directions and Quarantined them all as I was supposed to.
So I ran it again and saved the log file attached along with a new HJT log.

Thanks

Mike

It's OK Mike, that happens all the time.

Yes generally scans can find more traces of malware in Safe Mode because many of the RLMs, (rotton little monsters) are desinged to hide from detection.

I would reboot into Safe Mode and give SpySweeper a thorough scan there, making sure that all options under Custom Sweep are selected. Let it fix everything that it finds, and save the log to post back here. Boot back into regular mode.

From the look of the new AVG log, it fixed everything that it found, only showing a few tracking cookies. From the looks of your HJT log, part of your problem with your keyboard is the Logitech Desktop Messenger has run amok. Uninstall that particular program, and delete these files and folders if found;

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

Also, do you have Dynamic Overclocking Technology software installed?
Do you have a Fuji Digital camera?

It also appears that your logitch drivers may have been corrupted, I would reinstall that keyboard.
Please make sure that you gave permissions for this to be a trusted site.
If so, then this entry should be fine, also, if you know that you have an MSI motherboard, these two should be fine otherwise fix the 015 entry as well as
in HijackThis.

The last thing that I would have you do is to download Shoot the Messenger from my signature, run the simple application to disable your Windows Messenger, it is an unnecesary utlity, that leaves you vulnerable to PopUp attacks.

Looking forward to your reply,

TTFN

LGW