Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » [Resolved] Nasty Little Virus

[Fixed] Hijackthis! Logs - [Resolved] Nasty Little Virus posted in the Security & Safety forums; Hello everyone. I seemed to have picked up a pretty nasty little virus that was affecting my internet connections. I was not able to go to any web pages, the ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 01-23-2007
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Thumbs down [Resolved] Nasty Little Virus

Hello everyone. I seemed to have picked up a pretty nasty little virus that was affecting my internet connections. I was not able to go to any web pages, the screen just stayed on my homepage. My gmail checker was also unable to connect with the server. i have scanned with avg antivirus and got a few hits, spybot s&d and got some and i also have up to date spyware blaster. it seemed however that i kept deleting the same things. finally it seems that avg antispyware may have fixed the problem as i am not able to go on the internet, but this happened once before and it came back. anywho i did a hijackthis in hope that someone could look it over for me just in case

thanks
Attached Files
File Type: log hijackthis.log (14.2 KB, 1 views)
File Type: txt Report-Scan-20070122-162801.txt (2.1 KB, 1 views)


__________________
  #2  
Old 01-23-2007
Pancake's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 3,556
PC Experience: Elite PC Guru
Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page
Default

Hi

First you will need to remove NEW.NET. Please open Add/Remove programs and uninstall New.Net , NewDotNet, New.net Application, or New.net Domains from there if listed. If it is not listed, follow these instructions:
From a computer that has Internet access, click on the following link:
http://www.new.net/support/uninstall6_90.exe.
· Download and save uninstall6_90.exe to the Desktop.
· Go to the Desktop and double-click on uninstall6_90.exe
· Click on the OK button.
· After removal, you may be prompted to reboot. Please reboot even if not prompted.

Post a new HJt log and also let us know if this has improved things....


__________________
  • An Australian Member of
  • and
My real name is Eddy
  #3  
Old 01-23-2007
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default

thanks for the reply. i dled the unistaller, ran it, rebooted and here are the results
Attached Files
File Type: log hijackthis.log (14.2 KB, 3 views)


__________________
  #4  
Old 01-23-2007
Pancake's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 3,556
PC Experience: Elite PC Guru
Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page
Default

Ok.This should be the last of the cleanup.

Open notepad and copy/paste the text in the quotebox below into it:
@echo off
sc stop WINRPC
sc delete WINRPC
exit
Save this as fix.bat Choose to "Save type as - All Files"
Double click on fix.bat & allow it to run
Then REBOOT! your system.

Have "Hijack This" fix all the following items in the list below by placing a check in the appropriate boxes.Confirm that you have only the listed ones checked, then press <Fix checked> and Close HJT.

O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
O23 - Service: Windows RPC Service (WINRPC) - Unknown owner - C:\WINDOWS\system\winrpc.exe

Open Windows Explorer and delete the following highlighted file/s
C:\WINDOWS\system\winrpc.exe

Reboot and post a new HJT log


__________________
  • An Australian Member of
  • and
My real name is Eddy
  #5  
Old 01-23-2007
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default

thank you again. i did all of that except that file was no where to be found. here is my new log
Attached Files
File Type: log hijackthis.log (14.3 KB, 3 views)


__________________
  #6  
Old 01-23-2007
Pancake's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Victoria, Australia
Posts: 3,556
PC Experience: Elite PC Guru
Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page Pancake - See this Members User comments on their Profile page
Default

Just check in Program Files and remove the Newdot folder if its there and then post a new log.


__________________
  • An Australian Member of
  • and
My real name is Eddy
  #7  
Old 01-23-2007
Daemian's Avatar
Silver Member
 
Join Date: May 2005
Posts: 160
PC Experience: Experienced
Daemian - See this Members User comments on their Profile page
Default

not there either. again thanks for all ur help


__________________

Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 05:16 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top