Free PC Performance Scan

Member Panel


Sponsors and Ads

Noticeboard

PC Forum PC Help Forum » Security & Safety » [Fixed] Hijackthis! Logs » Spyware Installed...I have hjt and combofix logs

[Fixed] Hijackthis! Logs - Spyware Installed...I have hjt and combofix logs posted in the Security & Safety forums; I need your help. Someone in the spyware/adware forum told to get a combofix log and re post with my hijackthis log. So they are attached... My problem: My computer ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
  #1  
Old 11-04-2007
livinirie84's Avatar
Bronze Member
My PC
 
Join Date: Oct 2007
Location: San Diego
Posts: 35
PC Experience: Experienced in General PC Tasks
livinirie84 - See this Members User comments on their Profile page
Default Spyware Installed...I have hjt and combofix logs

I need your help. Someone in the spyware/adware forum told to get a combofix log and re post with my hijackthis log. So they are attached...

My problem:
My computer was fine and then all of a sudden I was being inundated with pop up windows acting like virus infection notices and offering me virus protection for a fee. This went on for a while. Now occasionally I get porn pop ups too. I can see in my start menu that a program called Seekmo has been installed on my computer. A toolbar was also installed in Internet Explorer but I just realized that it is no longer showing. I have run SuperAntiSpyware, AVG, CCleaner, HijackThis and ComboFix most recently and now I dont see the toolbar. I dont know what that means but maybe one of you will. Let me know if I am leaving anything out that you may need to know. Thank you in advance for your help.
Meagan
Attached Files
File Type: txt AVG log.txt (11.0 KB, 1 views)
File Type: txt ComboFix log.txt (8.3 KB, 3 views)
File Type: txt HJT log.txt (9.9 KB, 2 views)


  #2  
Old 11-05-2007
livinirie84's Avatar
Bronze Member
My PC
 
Join Date: Oct 2007
Location: San Diego
Posts: 35
PC Experience: Experienced in General PC Tasks
livinirie84 - See this Members User comments on their Profile page
Default Re: Spyware Installed...I have hjt and combofix logs

Ok...now I'm even more confused. I haven't deleted anything from my HijackThis log and I havent really done anything else except wait for a reply from one of you; however, the 'toolbar' that was installed is now gone and the program called Seekmo is no longer in my start menu. I haven't received pop ups in a few hours. I still need a lot of help because I know I am not in the clear but how could seem like it just solved itself??


  #3  
Old 11-05-2007
valis's Avatar
Senior Security Analyst
My PC
 
Join Date: Jan 2007
Location: texas, USA
Posts: 2,672
PC Experience: PC Illiterate
valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page
Default Re: Spyware Installed...I have hjt and combofix logs

combofix probably took those out. could you post a new hjt log please? One with the latest version of hjt, as below:

Please do this:

Please download HijackThis to your desktop.. http://www.trendsecure.com/portal/en...HJTInstall.exe
Alternate link
http://download.bleepingcomputer.com...HJTInstall.exe
This program will help us determine if there are any spyware/malware on your computer. Double-click on the file you just downloaded.
Click on the "Unzip" button to install. It will by default install to the directory - C:\Program Files\Trend Micro\HijackThis
Upon install, HijackThis should open for you.
Should it not open, navigate to C:\Program Files\Trend Micro\HijackThis and double click on HijackThis.exe
1. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'.
2. If you don't get the intro screen, just hit Scan and then click on Save log.
3. Post the hijackthis.log file here. Do not fix anything in HijackThis since they may be harmless.

thanks,

v


__________________
M.C.S.A.
M.C.P - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

  #4  
Old 11-06-2007
livinirie84's Avatar
Bronze Member
My PC
 
Join Date: Oct 2007
Location: San Diego
Posts: 35
PC Experience: Experienced in General PC Tasks
livinirie84 - See this Members User comments on their Profile page
Default Re: Spyware Installed...I have hjt and combofix logs

Ok...Here is a new HijackThis log.

I am also experiencing a new problem. When IE is the only thing running, I keep getting this pop up message that says "Internet Explorer has encountered a problem with an add-on and needs to close. The following add-on was running when this problem occured: Flash9d.ocx, Adobe Systems Incorporated, Adobe Flash Player." Something prompted me to download the newest version of Adobe Flash Player because its said that might be the problem. I did this but the same pop up window showed up immediately afterwards. I am still not getting the original pop us and the toolbar is still gone.

Thanks again.
Attached Files
File Type: txt HJT log 11-6.txt (9.9 KB, 1 views)


  #5  
Old 11-06-2007
valis's Avatar
Senior Security Analyst
My PC
 
Join Date: Jan 2007
Location: texas, USA
Posts: 2,672
PC Experience: PC Illiterate
valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page valis - See this Members User comments on their Profile page
Default Re: Spyware Installed...I have hjt and combofix logs

Please copy this page to *Notepad* and save to your desktop for reference as you will not have any browsers open while you are carrying out portions of these instructions.
It's IMPORTANT to carry out the instructions in the sequence listed below.

1. Close any open browsers.
2. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

Open *notepad* and copy/paste the text in the quotebox below into it:


DirLook::
C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\2ACA5CC3-0F83-453D-A079-1076FE1A8B65
Save this as CFScript.txt, in the same location as ComboFix.exe which is on the Desktop.


Refering to the picture above, drag CFScript.txt into ComboFix.exe
Restart your computer.
When finished, it shall produce a log for you at C:\ComboFix.txt
Please copy and paste the ComboFix.txt along with a fresh HijackThis log in your next reply please.

*Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall*


__________________
M.C.S.A.
M.C.P - MS Server 2k3, Network Architecture

"Ask Bill why the string in function 9 is terminated by a dollar sign. Ask him, because he can't answer. Only I know that."
- Gary Kildall

  #6  
Old 11-06-2007
livinirie84's Avatar
Bronze Member
My PC
 
Join Date: Oct 2007
Location: San Diego
Posts: 35
PC Experience: Experienced in General PC Tasks
livinirie84 - See this Members User comments on their Profile page
Default Re: Spyware Installed...I have hjt and combofix logs

I'm sorry but I am a little confused. I think the problem is that I dont have ComboFix on my desktop. When I downloaded it from the "Prework" the program just ran and a log popped up. I dont see it in my start menu or on my desktop. Am I not downloading it the right way?


  #7  
Old 11-07-2007
livinirie84's Avatar
Bronze Member
My PC
 
Join Date: Oct 2007
Location: San Diego
Posts: 35
PC Experience: Experienced in General PC Tasks
livinirie84 - See this Members User comments on their Profile page
Default Re: Spyware Installed...I have hjt and combofix logs

Ok...disregard my last post. I was able to save ComboFix to my desktop.

Your directions said to drag that file into ComboFix and then restart the computer; however, once I dropped the file in ComboFix, the program immediately ran a scan. I decided to let it run and I saved the log. Then I restarted my computer and ran another ComboFix scan and saved that one as well. Then I ran HijackThis and attached the log.
Thanks again.
Meagan
Attached Files
File Type: txt combofix log 11-6.txt (9.0 KB, 0 views)
File Type: txt ComboFix 11-6 (2).txt (8.8 KB, 1 views)
File Type: txt HJT log 11-6.txt (9.8 KB, 0 views)



Reply
Satellite TV on your PC - over 3000 Channels! Click Here!

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

All times are GMT +1. The time now is 11:48 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top