TechSpot

I'm Infected. Please help

By jmmessin
Jan 27, 2010
  1. Other than my computer seems to run a bit slower, I don't seem to have any visual or other performance problems with the computer but I noticed in the "hijack this" log that there is an entry which doesn't look right; O18 Filter Hijack.
    I ran the 8 steps and created the 3 log files. Please review these logs and advise.
    Thanks
     

    Attached Files:

  2. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,244   +234

  3. jmmessin

    jmmessin TS Rookie Topic Starter

    Its better

    I ran combo-fix and it fixed the O18 entry. What does this entry mean? Is this something I need to worry about?
    I need you to review these log files attached and advise on anything else to fix.
    Thanks so much.
     

    Attached Files:

  4. Tmagic650

    Tmagic650 TS Ambassador Posts: 17,244   +234

    The 018 entry was bad, do you want it back?

    Lets remove these entries from the hijack this log:
    O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
    O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
    O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
    O8 - Extra context menu item: &Search - ?p=ZS
    O3 - Toolbar: (no name) - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - (no file)
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - (no file)
    R3 - URLSearchHook: (no name) - _{37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - (no file)
    R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
     
  5. jmmessin

    jmmessin TS Rookie Topic Starter

    Fixed everything except two

    I checked and tried to fix all the ones you suggested.
    However, there were two which did not get fixed. It appears like my McAfee Antivirus blocked it based on what is in the log file. I'm attaching the "AccessProtectionLog1-28-10.txt" which shows the blocking and another "hijackthis" log.
    What do I do next?
     

    Attached Files:

Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...