TechSpot

Hijack This

By pcali
Oct 12, 2005
  1. how do i post hijack this log file for someone to look at? Thanks
     
  2. pcali

    pcali TS Rookie Topic Starter

    Can someone please tell me what to fix in this log file

    I am trying to post log file for review thanks
     
  3. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

  4. pcali

    pcali TS Rookie Topic Starter

    Hijack This Log File

    Thank you i hope this worked i followed all the instructions.
     
  5. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Can`t see any HJT log.

    Regards Howard :)
     
  6. pcali

    pcali TS Rookie Topic Starter

    Sorry it was a log file not allowed saved as txt now should be there. Thanks for your patience.
     
  7. RealBlackStuff

    RealBlackStuff TS Rookie Posts: 6,503

    You have a nasty keylogger.

    First Read: Use these HJT-instructions when asked
    The text underneath goes between the dotted lines of that post.
    ...................................................................................................
    /P/ O4 - HKLM\..\Run: [System Messaging Queue] SMCSS.EXE
    O4 - HKCU\..\RunOnce: [System Messaging Queue] SMCSS.EXE
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)
    ...................................................................................................
     
  8. pcali

    pcali TS Rookie Topic Starter

    Sorry

    i hate to be a pain in the **** but i have no idea what /p/ and /s/ means is there anyway you could call me on the phone and try and explain what to do thanks.
     
  9. pcali

    pcali TS Rookie Topic Starter

    Please Help I Have Tried Everything

    i guess this forum is above my head. is there a step by step instruction on what you are asking me to do. there are no dotted lines in my hijack this after i run it so i dont know where to insert the post you sent back. please i have read and installed everything that you have suggested but dont understand what i am supposed to do. Thanks
     
  10. pcali

    pcali TS Rookie Topic Starter

    well i finally figured out how to quick reply so i guess i am making progress
     
  11. pcali

    pcali TS Rookie Topic Starter

    can you help me i dont understand what im being asked to do.
     
  12. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    What RBS means is.

    Boot into safe mode.

    open the task manager by pressing the control, alt, and delete keys together.

    Select the processes tab and click on the entry SMCSS.EXE if there, and click on the end process button, followed by yes. Now close the task manager.

    Run Hijackthis, and let hijackthis fix the following by putting a tick in the little box next to, if still there.

    O4 - HKCU\..\RunOnce: [System Messaging Queue] SMCSS.EXE
    O4 - Global Startup: Digital Line Detect.lnk = ?
    O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)

    After you have done that, exit HJT, and reboot normally.

    Regards Howard :D
     
  13. pcali

    pcali TS Rookie Topic Starter

    thank you i didnt know what all the /s/ and /p/ stuff was. that will remove the keylogger?
     
  14. pcali

    pcali TS Rookie Topic Starter

    did all that but i am still having a problem with regedit opening and closing after a quick second. any ideas?
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...