also @ TechSpot: Android 4.0: Tracking Ice Cream Sandwich's Availability on Smartphones

TechSpot
Register now for a live online demo to see how the Office 365 suite of tools
- professional email, calendars, video conferencing, and file sharing -

Do I have a trojan?

Discussion in 'Virus and Malware Removal' started by comwiz, Sep 28, 2006.

Thread Status:
Not open for further replies.
Page 2 of 2

  1. howard_hopkinso Newcomer, in training

    Your HJT log is now clean.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Oct 12, 2006
    #21

  2. dahli Newcomer, in training

    Comwiz,

    You may have been infected with a new virus. Please post a log from AVG Antispyware. Thanks.
    dahli, Oct 18, 2006
    #22

  3. comwiz Newcomer, in training

    Spyware

    some more spyware take a look at the log
    comwiz, Oct 28, 2006
    #23

  4. howard_hopkinso Newcomer, in training

    Your system is badly infected.

    First, go HERE and follow the instructions very carefully.

    Then, go HERE and do likewise.

    Post fresh HJT and AVG Antispyware logs as attachments, only after doing the above.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Oct 28, 2006
    #24

  5. comwiz Newcomer, in training

    cant remove infections

    I cant Remove Smitfraud-C.Toolbar888 & YazzleSudoku

    Please Check Log
    comwiz, Jan 30, 2007
    #25

  6. howard_hopkinso Newcomer, in training

    Download Vundofix from HERE.

    Double click the Vundofix.exe to run it.

    Right click in the vundofix window and click add files.

    Enter the full file path/s to the files you want Vundofix to delete and click the add files button, followed by the close window button. Click the remove vundo button and let Vundofix do it`s stuff.

    These are the filepaths you need to enter into Vundofix.

    C:\WINDOWS\SYSTEM32\winrge32.dll
    C:\WINDOWS\system32\vtsqq.dll
    C:\WINDOWS\SYSTEM32\hggfdbb.dll

    Post a fresh HJT log as well as an AVG Antispyware log As per the instructions in this thread HERE.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Jan 31, 2007
    #26

  7. comwiz Newcomer, in training

    check log

    i think my computer is clean now just check the log
    comwiz, Feb 3, 2007
    #27

  8. howard_hopkinso Newcomer, in training

    Your HJT log is clean. However, I requested that you post an AVG Antispyware log. Please do so, so I can check to make sure your system is clean.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Feb 3, 2007
    #28

  9. comwiz Newcomer, in training

    ewido log

    here's the log
    comwiz, Feb 3, 2007
    #29

  10. howard_hopkinso Newcomer, in training

    Your AVG Antispyware log just shows a few tracking cookies, which are not that bad.

    Run the Ccleaner programme as per the instructions in this thread HERE.

    If you have any further virus/spyware problems, please post in this thread.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Feb 4, 2007
    #30

  11. comwiz Newcomer, in training

    problems with Internet Explorer

    everytime i load up internet explorer i keep getting the about:blank

    nothing is displayed its just a white blank page

    I try and change it back to my home page but no go

    see hijack log
    comwiz, Jun 11, 2007
    #31

  12. howard_hopkinso Newcomer, in training

    You`re running an outdated version of HijackThis. See HERE for the latest version and post a fresh HJT log.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Jun 11, 2007
    #32

  13. comwiz Newcomer, in training

    ok hijackthis updated and renamed

    here is a new log
    comwiz, Jun 12, 2007
    #33

  14. howard_hopkinso Newcomer, in training

    Have HJT fix the following.

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

    O16 - DPF: {88D758A3-D33B-45FD-91E3-67749B4057FA} - http://dm.screensavers.com/dm/installers/si/1/sinstaller.cab

    O16 - DPF: {D77EF652-9A6B-40C8-A4B9-1C0697C6CF41} (TikGames Online Control) - http://www.tikgames.com/real/games/goldfever/goldfever.cab

    Other than the above, your HJT log is clean. Reset your hompage and let me know how your system is running.

    Regards Howard :)

    This thread is for the use of comwiz only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.
    howard_hopkinso, Jun 12, 2007
    #34

  15. comwiz Newcomer, in training

    picked up trojans

    nortons has picked up the following

    W32.polip
    infostealer.bancos
    trojan.dropper

    also the svchost.exe is infected with a trojan horse
    nortons has quarantined it canthis be repaired?

    also the winxplogin is intected too.

    please find attached hjt log

    comwiz
    comwiz, Mar 21, 2008
    #35
Page 2 of 2
Thread Status:
Not open for further replies.