TechSpot

PC infected with Spyware Guard 2008 and Winscenter

By Pat49Cuy
Jan 2, 2009
  1. I have followed the 8 steps and attached you can find the requested logfiles.
    What do I have to do next?

    Thanks for your help
     
  2. rf6647

    rf6647 TS Maniac Posts: 829

    It appears that the infection was handled. HTJ informs of minor exceptions.

    I recommend updating both MBAM and SAS and re-scan with both to obtain a clean report (or until somethng that cannot be cleaned).

    Post new logs if problems are still present.

    HJT scan - tick & fix - restart computer to confirm change
    Code:
    O2 - BHO: (no name) - {ac15093c-2c49-441a-bb9f-7bc365792cb5} - (no file)  >> not listed
    If this still remains, then delete service.
    Code:
    O23 - Service: COM+ Messages - Unknown owner - C:\WINDOWS\system32\svchosts.exe (file missing)
    [URL="http://www.systemlookup.com/lists.php?list=8&type=name&search=COM%2B&s="]Listed as malware[/URL]
    

    • Find 'service name'
      • Start > run services.msc > double- click ‘COM+ Messages’
      • >> copy the service name for use in code box
    • Execute code from Command Prompt
      • Start > run cmd
    • Code:
      @echo off 
      sc stop [I]servicename-no-spaces[/I]
      sc delete [I]servicename-no-spaces[/I]
      exit 
      exit
      

    Establish a new clean restore point and Clear your existing System Restore points:
    • New
      • Go to Start > All Programs > Accessories > System Tools > System Restore>
      • Select Create a restore point> OK.
    • Clear Old
      • go to Start > Run > cleanmgr > Select the More options tab >
      • Choose the option to clean up System Restore > OK

        • This will remove all restore points except the new one you just created.
     
Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...