Member Panel


Sponsors and Ads

Live Tag Cloud

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » PLEASE help with this HiJack This Log

[Fixed] Hijackthis! Logs - PLEASE help with this HiJack This Log posted in the Security & Safety forums; I was alerted by Spy Doctor this am that I had a High Risk Malware called Rogue.Antispyware.No and that it had accessed credit card info. I immediately went to work ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 10-31-2007
angelab6067's Avatar
Bronze Member
 
Join Date: Oct 2007
Posts: 5
PC Experience: Some Experience
angelab6067 - See this Members User comments on their Profile page
Exclamation PLEASE help with this HiJack This Log

I was alerted by Spy Doctor this am that I had a High Risk Malware called Rogue.Antispyware.No and that it had accessed credit card info. I immediately went to work on it but I need to be sure it is all gone from my computer. I am attaching the AVG log and HiJack Log. I would appreciate any and all help in this matter as well as any other issues you see after reviewing log.
Attached Files
File Type: txt hijackthis103107.txt (10.7 KB, 2 views)
File Type: log SUPERAntiSpyware Scan Log - 10-31-2007 - 12-58-37.log (464 Bytes, 2 views)


  #2  
Old 10-31-2007
angelab6067's Avatar
Bronze Member
 
Join Date: Oct 2007
Posts: 5
PC Experience: Some Experience
angelab6067 - See this Members User comments on their Profile page
Default Re: PLEASE help with this HiJack This Log

Anyone?


  #3  
Old 11-01-2007
valis's Avatar
Senior Security Analyst
My PC
 
Join Date: Jan 2007
Location: texas, USA
Posts: 2,585
PC Experience: PC Illiterate
valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page
Default Re: PLEASE help with this HiJack This Log

hello angela, and welcome to the forums.

You may want to print these out. please close all other applications, start hjt again, click 'perform system scan only', place a tick next to the following and click 'fix checked'

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: (no name) - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
O2 - BHO: CA Toolbar Helper - {FBF2401B-7447-4727-BE5D-C19B2075CA84} - (no file)
O3 - Toolbar: CA Toolbar - {10134636-E7AF-4AC5-A1DC-C7C44BB97D81} - (no file)
O3 - Toolbar: (no name) - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - (no file)
O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)


Click start > run > services.msc > in the right pane find the service GameConsoleService - WildTangent, Inc. > right click > stop. Close the services window.

Click start > run > appwiz.cpl > remove wild tangent from your program list. Close the add/remove applet.

Right click start > explore > navigate to program folders and delete the Wild Tangent folder.

Reboot, and post a new log.

thanks,

v


__________________

M.C.S.A.
M.C.P.
- MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall
  #4  
Old 11-01-2007
angelab6067's Avatar
Bronze Member
 
Join Date: Oct 2007
Posts: 5
PC Experience: Some Experience
angelab6067 - See this Members User comments on their Profile page
Default Re: PLEASE help with this HiJack This Log

Click start > run > services.msc > in the right pane find the service GameConsoleService - WildTangent, Inc. > right click > stop. Close the services window.

Click start > run > appwiz.cpl > remove wild tangent from your program list. Close the add/remove applet.
Wild Tangent was not started when I looked and when I went to appwiz.cpl it was not listed in the program list for me to remove. I am attaching the new HiJack log & also a copy of what is in my program list.

Also is all of this going to take care of any remnants of the Rogue? I really appreciate all your help.
Attached Files
File Type: txt Program List.txt (7.8 KB, 1 views)
File Type: txt hijackthis110107.txt (10.6 KB, 1 views)


  #5  
Old 11-01-2007
angelab6067's Avatar
Bronze Member
 
Join Date: Oct 2007
Posts: 5
PC Experience: Some Experience
angelab6067 - See this Members User comments on their Profile page
Default Re: PLEASE help with this HiJack This Log

Oh I did not have my hidden system files and folders on when I ran those new logs. Do you need me to do that, rescan and send the newest?


  #6  
Old 11-01-2007
valis's Avatar
Senior Security Analyst
My PC
 
Join Date: Jan 2007
Location: texas, USA
Posts: 2,585
PC Experience: PC Illiterate
valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page
Default Re: PLEASE help with this HiJack This Log

logs pretty clean. Did you go to program files to see if there is a folder called wild tangent? If so, delete it. Let's do a combofix and see what that spits out as well.

Download ComboFix from Here or Here to your Desktop.
  • Double click combofix.exe and follow the prompts.
  • When finished, it shall produce a log for you. Post that log and a HiJackthis log in your next reply
Note: Do not mouseclick combofix's window while its running. That may cause it to stall

thanks,

v


__________________

M.C.S.A.
M.C.P.
- MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

Reply
New! Norton Internet Security 2008 – Download Now Click Here

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
[Pending] Please Help w/ HiJack Log jericl5000 [Fixed] Hijackthis! Logs 17 08-26-2007 12:34 PM
[Fixed] Bloodhound.Exploit.109 detected, Hijack This log included TJDactyl [Fixed] Hijackthis! Logs 8 08-05-2007 05:43 AM
[Pending] May I Get help with my Hijack Log? m56col [Fixed] Hijackthis! Logs 1 06-11-2007 01:48 AM
my hijack log lo232157 Spyware / AdWare 1 12-05-2006 05:35 AM
[Resolved] please help with my hijack log confidential [Fixed] Hijackthis! Logs 14 12-02-2005 12:51 AM


All times are GMT +1. The time now is 12:28 PM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top