Member Panel


Sponsors and Ads

Live Tag Cloud

[Fixed] Hijackthis! Logs - [Resolved] popups! posted in the Security & Safety forums; i get this popups even when i did a previous scans, i still get one and also i get an error when windows starts up that TA_Start.lnk is missing or ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 06-05-2007
seetheeroam's Avatar
Bronze Member
 
Join Date: Jan 2006
Posts: 37
seetheeroam - See this Members User comments on their Profile page
Default [Resolved] popups!

i get this popups even when i did a previous scans, i still get one
and also i get an error when windows starts up that TA_Start.lnk is missing or its a missing reference/shortcut

i dont know what to do.



Thank you
Attached Files
File Type: txt Report-Scan-20070605-001450.txt (762 Bytes, 2 views)
File Type: txt Spy Sweeper Session Log.txt (4.7 KB, 2 views)
File Type: log hijackthis.log (8.8 KB, 2 views)


  #2  
Old 06-06-2007
madmatt2006's Avatar
PC Dinosaur
 
Join Date: Dec 2006
Location: Shepparton
Posts: 2,585
PC Experience: Elite PC Guru
madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page madmatt2006 - See this Members User comments on their Profile page
Default

Hi have you done the http://www.pchelpforum.com/hijackthi...a-prework.html


__________________
  #3  
Old 06-06-2007
chiaz's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Singapore
Posts: 2,511
PC Experience: PC Guru
chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page
Default

Madmatt, I think seetheeroam has completed the Prework.

seetheeroam, please rename hijackthis.exe to rename.exe. Then double click rename.exe and place a tick by the following entries:
O4 - HKLM\..\Run: [{ZN}] C:\DOCUME~1\Grace1\LOCALS~1\Temp\TICHD003.exe CHD003
O4 - HKLM\..\Run: [Genuine] "rundll32.exe" "C:\WINNT\system32\uqxbpluo.dll",realset
O4 - Startup: TA_Start.lnk = C:\Documents and Settings\Grace1\Local Settings\Temp\TICHD003.exe

Close all other windows except HijackThis and press "Fix Checked". Then restart the computer before posting a new HijackThis log.


  #4  
Old 06-11-2007
seetheeroam's Avatar
Bronze Member
 
Join Date: Jan 2006
Posts: 37
seetheeroam - See this Members User comments on their Profile page
Default

ok i did and here's the new log
Attached Files
File Type: txt hijackthis2.txt (9.1 KB, 1 views)


  #5  
Old 06-11-2007
chiaz's Avatar
Senior Security Analyst
 
Join Date: Jun 2006
Location: Singapore
Posts: 2,511
PC Experience: PC Guru
chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page chiaz - See this Members User comments on their Profile page
Default

Please download VundoFix.exe
to your desktop.
  • Double-click VundoFix.exe to run it.
  • Click the Scan for Vundo button.
  • Once it's done scanning, click the Remove Vundo button.
  • You will receive a prompt asking if you want to remove the files, click YES
  • Once you click yes, your desktop will go blank as it starts removing Vundo.
  • When completed, it will prompt that it will reboot your computer, click OK.
  • Please post the contents of C:\vundofix.txt and a new HiJackThis log.
Note: It is possible that VundoFix encountered a file it could not remove.
In this case, VundoFix will run on reboot, simply follow the above
instructions starting from "Click the Scan for Vundo button." when
VundoFix appears at reboot.


  #6  
Old 06-12-2007
seetheeroam's Avatar
Bronze Member
 
Join Date: Jan 2006
Posts: 37
seetheeroam - See this Members User comments on their Profile page
Default

ok i did the vundo fix and i got an error it was like Cannot import:C:\VundoFix.reg .. There may be a disk or file system error"

this was found for the first time
C:\Windows\System32\byxvvvuclll.dll
C:\Windows\System32\cwyohefbdll.dll
C:\Windows\System32\linddwup.dll
rundll32.exe

for the second time
no items were found
Attached Files
File Type: txt hijackthis3.txt (8.7 KB, 2 views)



Reply
New! Norton Internet Security 2008 – Download Now Click Here

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On


All times are GMT +1. The time now is 10:59 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top