TechSpot

hijack this log help please :)

By ginge51
Apr 11, 2006
  1. hi all :)

    me 1st post so bare with me please if im not posting in the correct forum im sorry if i havent posted right
    heres how i got these trojans and virusses:(
    i was on a gaming forum and a person i was talking to told me to download a file so i downloaded this file and for the 1st time ever i just opened the file instead of scanning them opening it and guess what loads and loads of trojans 5 star 1s ands othetr stuff aswell so heres my hijack this log if theres any thing left over please help thx :)
     

    Attached Files:

  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Go HERE and follow the instructions.

    Then, Go HERE and follow all the instructions exactly.

    Post a fresh HJT log, only after doing the above.

    Regards Howard :wave: :wave:
     
  3. ginge51

    ginge51 TS Rookie Topic Starter

    hi ive done all the above and hears my results thanks for helping
    and ive rescanned my computer again with hijack this again thanks :grinthumb
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    You missed out the Ewido scan.

    Go HERE and follow the instructions.

    Then post a fresh HJT log.

    Regards Howard :)
     
  5. ginge51

    ginge51 TS Rookie Topic Starter

    hi m8 :)

    thanks for helping i finnaly got around to doing that ewido scan and it found 4 dialers loool
    heres me hijact this and ewido log files
    thanks for the help m8 cheers :)
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

    Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

    In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how HERE. http://www.bleepingcomputer.com/forums/tutorial62.html


    Run HJT with no other programme open. Have HJT fix the following, by placing a tick in the little box next to(if there).

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O2 - BHO: (no name) - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - (no file)

    O3 - Toolbar: (no name) - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - (no file)

    O17 - HKLM\System\CCS\Services\Tcpip\..\{6E710E84-7B62-4BEC-9DDB-438196271910}: NameServer = 205.188.146.145 <Only fix this, is it doesn`t belong to your ISP.

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    O20 - Winlogon Notify: winzdn32 - winzdn32.dll (file missing)

    Click on the fix checked button.

    Close HJT.

    Reboot into normal mode and turn system restore back on.

    Regards Howard :)
     
  7. ginge51

    ginge51 TS Rookie Topic Starter

    thanks m8 seems to of worked thanks for helping :slurp:
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...