Member Panel

Remember me ?

Forgot password?   

Sponsors and Ads

Live Tag Cloud
PC Forum PC Help Forum » Software » Office Software » [Fixed] Virus disabled email

Office Software - [Fixed] Virus disabled email posted in the Software forums; I had a virus (Trojan.Media-Codec) that messed up my email. I can receive emails, and I can send emals that I create - but I cannot forward emails or send ...

JOIN US NOW to remove these Ads

Post New Thread  Reply
Page 1 of 4 1 2 3 4 >
  #1  
Old 11-01-2007
craigcoda's Avatar
Bronze Member
  
Join Date: Nov 2007
Posts: 16
PC Experience: PC Illiterate
craigcoda - See this Members User comments on their Profile page
Default [Fixed] Virus disabled email
I had a virus (Trojan.Media-Codec) that messed up my email. I can receive emails, and I can send emals that I create - but I cannot forward emails or send attachments. Also, when I send myself a "blank" email (for testing) it comes with an indicator that there is an attachment to it (the paper clip) but there is no attachment.

I've run Spybot, AVG, PandaScan, and SuperAntiSpyWare. However, I'm still having problems. Here is my hijackthis log - and ANY help at all would be greatly appreciated.

Thank you.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:53:11 AM, on 11/1/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb1 0.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\SpywareBot\SpywareBot.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Documents and Settings\Craig Coda\Desktop\HiJackThis.exe
C:\Program Files\Messenger\msmsgs.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Yahoo!
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = Yahoo! SearchBar Home Page
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Yahoo!
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Yahoo!
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: TwcToolbarBhoApp Class - {AA1F9DDB-E605-4ba6-81D4-E427DEE012AD} - C:\WINDOWS\system32\TwcToolbarBho.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\sw g.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7.dll
O4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exe
O4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsers
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exe
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb1 0.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SpywareBot] C:\Program Files\SpywareBot\SpywareBot.exe -boot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
O4 - HKCU\..\Run: [DW4] "C:\Program Files\The Weather Channel FW\Desktop Weather\DesktopWeather.exe"
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [SpywareBot] C:\Program Files\SpywareBot\SpywareBot.exe -boot
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra 'Tools' menuitem: Define - {5DA9DE80-097A-11D4-A92E-006097DBED37} - C:\Program Files\Common Files\Microsoft Shared\Reference 2001\A\ERS_DEF.HTM
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {01A88BB1-1174-41EC-ACCB-963509EAE56B} (SysProWmi Class) - http://support.dell.com/systemprofiler/SysPro.CAB
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/actives...ree/asinst.cab
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAV...oadManager.ocx
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 7703 bytes
  #2  
Old 11-01-2007
Cowburn199's Avatar
Moderator
My PC
 
Join Date: Nov 2005
Location: England - Lancashire
Posts: 1,465
PC Experience: I know a fair amount, always learning
Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page
Send a message via MSN to Cowburn199
Default Re: Virus disabled email
Welcome to PCHF craig
For the mean time, I would try to avoid using your email just to be sure that your emails are not being 'spied' on.
A member of our security team will analyze the log ASAP


__________________
BSOD's - PCHF Rules -Prework
If someone helped you, please consider clicking rate post
  #3  
Old 11-01-2007
craigcoda's Avatar
Bronze Member
  
Join Date: Nov 2007
Posts: 16
PC Experience: PC Illiterate
craigcoda - See this Members User comments on their Profile page
Default Re: Virus disabled email
Thank you very much. What do you mean "spied" on though?
  #4  
Old 11-01-2007
Cowburn199's Avatar
Moderator
My PC
 
Join Date: Nov 2005
Location: England - Lancashire
Posts: 1,465
PC Experience: I know a fair amount, always learning
Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page Cowburn199 - See this Members User comments on their Profile page
Send a message via MSN to Cowburn199
Default Re: Virus disabled email
Well they could be logging your emails, who you send them to, what they contain etc. I say this because of the fact that you said there appears to be a blank attachment. This is not definite though but i'd just be careful.


__________________
BSOD's - PCHF Rules -Prework
If someone helped you, please consider clicking rate post
  #5  
Old 11-01-2007
craigcoda's Avatar
Bronze Member
  
Join Date: Nov 2007
Posts: 16
PC Experience: PC Illiterate
craigcoda - See this Members User comments on their Profile page
Default Re: Virus disabled email
Thanks. That's what I thought you were getting at.

I forgot to post that I also scanned the registry with eusing and cleaned the registry that way.

Also, two other viruses I found were C:/Windows/System32/ccapp.exe and C:/Windows/System32/startup.exe
  #6  
Old 11-04-2007
craigcoda's Avatar
Bronze Member
  
Join Date: Nov 2007
Posts: 16
PC Experience: PC Illiterate
craigcoda - See this Members User comments on their Profile page
Default Re: Virus disabled email
Sorry to pester, but I was wondering (hoping) if this problem is fixable without reformatting the hard drive....

Any thoughts?

Reply
New! Norton Internet Security 2008 – Download Now Click Here
Page 1 of 4 1 2 3 4 >

Bookmarks

« MSO07..can't find mail to myself | [Pending] Default E-mail »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
[Information] How To: Protect your email address from SPAM. faraz_k86 General Application Tutorials 3 11-22-2007 11:46 AM
[Resolved] Computer Slow upgrader [Fixed] Hijackthis! Logs 20 09-21-2006 07:54 AM
[Fixed] winlogon hook ; ; syztem [Fixed] Hijackthis! Logs 14 09-07-2006 12:42 AM
[Fixed] Major Problem, Need Help!!! naqeeb23 [Fixed] Hijackthis! Logs 16 08-12-2006 02:30 PM
Active Virus Shield (Free AV based on Kaspersky) joe5 Anti-Virus (AV) 0 08-09-2006 10:50 PM

Contact Us - PC Help Forum - Site Map - Privacy Statement - Top

All times are GMT +1. The time now is 05:04 AM.
Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO 3.2.0 RC7
All Graphics & Content Copyright © 2004-2008 - PC Help Forum.com


Back to Top