Attached Files

	hijackthis.log (11.9 KB, 3 views)
	SUPERAntiSpyware Scan Log - 07-28-2007 - 18-03-18.log (17.7 KB, 2 views)
	avg report 11.txt (91.3 KB, 2 views)

Hi jnowlin5,
Welcome to PCH Forum, thankyou for your reports as soon as one of our Staff Members come online or become available they will look at your report and get back to you.
Enjoy your stay In PCHF

Thankyou

Cart

Hello jnowlin, and welcome to PCHF.

Please run HijackThis and place a checkmark by the following entries:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http:/ red.clientapps.yahoo.com/customize/ie/defaults/sb/sbcydsl/*Yahoo! SearchBar Home Page
O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} - C:\WINDOWS\system32\ipv6mons.dll
O4 - HKLM\..\Run: [RecoverFromReboot] C:\WINDOWS\Temp\RecoverFromReboot.exe

Close all other windows except HijackThis and press "Fix Checked". Then close HijackThis and restart the computer.

1. Please download the Killbox.
2. Unzip it to the desktop but do NOT run it yet.
3. Then please reboot into Safe Mode by restarting your computer and pressing F8 as your computer is booting up. Then select the Safe Mode option.
4. Once in Safe Mode, please run Killbox.
5. Click "Delete on Reboot".
6. Paste the following into the top "Full Path of File to Delete" box.

   C:\WINDOWS\system32\ipv6mons.dll

7. Click the red-and-white "Delete File".
8. Click "Yes" at the Delete on Reboot prompt.
9. Click "No" at the Pending Operations prompt.

Post a new HijackThis log back into your next reply.


P.S. Do you do online banking or any other form of financial transactions on your computer?

hey thank you so much for helping!

I ran hijack this and deleted the R1 and 04 but i noticed ----O2 - BHO: (no name) - {73364D99-1240-4dff-B12A-67E448373148} -
C:\WINDOWS\system32\ipv6mons.dll-----wasnt in the log anymore so i dont know what exactly happened but i ran hijack again and attached my new log for you

also we dont do online banking that i know of..I have in the past but its not a regular thing...why do you ask?

THANK YOU SO MUCH!

Attached Files

hijack 31st.txt (11.1 KB, 1 views)

I asked because one of the trojans detected on your computer can steal confidential data. That poses a threat if you carry out regular financial transactions through your computer.

Please download SmitfraudFix (by S!Ri)
Extract the content (a folder named SmitfraudFix) to your Desktop.

Open the SmitfraudFix folder and double-click smitfraudfix.cmd
Select option #1 - Search by typing 1 and press "Enter"; a text file will appear, which lists infected files (if present).
Please copy/paste the content of that report into your next reply.

Note : process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool"; it is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
http://www.beyondlogic.org/consulting/proc...processutil.htm