Hijack This

[pcali]

how do i post hijack this log file for someone to look at? Thanks

 

[pcali]

Can someone please tell me what to fix in this log file

I am trying to post log file for review thanks

 

[howard_hopkinso]

Hello and welcome to Techspot.

Before you post a HJT log, go and have you computer scanned HERE

Then, go and read both these threads by RBS. Follow all the instructions exactly.

How to remove Trojans and its ilk! and How to remove Begin2search / coolwebsearch and other nasties.

Then see. How to post your Hijackthis log-file as an ATTACHMENT.

Regards Howard :wave: :wave:

 

[pcali]

Hijack This Log File

Thank you i hope this worked i followed all the instructions.

 

[howard_hopkinso]

Can`t see any HJT log.

Regards Howard

 

[pcali]

Sorry it was a log file not allowed saved as txt now should be there. Thanks for your patience.

 

[RealBlackStuff]

You have a nasty keylogger.

First Read: Use these HJT-instructions when asked
The text underneath goes between the dotted lines of that post.
...................................................................................................
/P/ O4 - HKLM\..\Run: [System Messaging Queue] SMCSS.EXE
O4 - HKCU\..\RunOnce: [System Messaging Queue] SMCSS.EXE
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)
...................................................................................................

 

[pcali]

Sorry

i hate to be a pain in the **** but i have no idea what /p/ and /s/ means is there anyway you could call me on the phone and try and explain what to do thanks.

 

[pcali]

Please Help I Have Tried Everything

i guess this forum is above my head. is there a step by step instruction on what you are asking me to do. there are no dotted lines in my hijack this after i run it so i dont know where to insert the post you sent back. please i have read and installed everything that you have suggested but dont understand what i am supposed to do. Thanks

 

[pcali]

well i finally figured out how to quick reply so i guess i am making progress

 

[pcali]

can you help me i dont understand what im being asked to do.

 

[howard_hopkinso]

What RBS means is.

Boot into safe mode.

open the task manager by pressing the control, alt, and delete keys together.

Select the processes tab and click on the entry SMCSS.EXE if there, and click on the end process button, followed by yes. Now close the task manager.

Run Hijackthis, and let hijackthis fix the following by putting a tick in the little box next to, if still there.

O4 - HKCU\..\RunOnce: [System Messaging Queue] SMCSS.EXE
O4 - Global Startup: Digital Line Detect.lnk = ?
O9 - Extra button: WeatherBug - {AF6CABAB-61F9-4f12-A198-B7D41EF1CB52} - C:\WINDOWS\system32\shdocvw.dll (HKCU)

After you have done that, exit HJT, and reboot normally.

Regards Howard

 

[pcali]

thank you i didnt know what all the /s/ and /p/ stuff was. that will remove the keylogger?

 

[pcali]

did all that but i am still having a problem with regedit opening and closing after a quick second. any ideas?