TechSpot

Possible trojan?

By deathfromabove
Jun 23, 2006
  1. Hi, a friend of mine sent me here to get some help. The game servers I play on keep booting me because they say I have a trojan or a virus. I have run the following scans:

    Housecall
    Kaspersky
    McAfee
    Ad Aware
    Spybot Search and Destroy
    Ewido anti-spyware


    These security scans found a little, but I am still being booted from the game servers. I was wondering if someone could take a look at my HJT logfile and possibly give me a point in the right direction. Let me know below or in email please.

    Jody P. "DeathFromAbove"
     
  2. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Hello and welcome to Techspot.

    Go HERE and follow the instructions.

    Post a fresh HJT log as an attachment.

    Regards Howard :wave: :wave:
     
  3. deathfromabove

    deathfromabove TS Rookie Topic Starter

    HJT Logfile C.O. Howard Hopkins

    I greatly appreciate this. You guys are Gods among mere mortals.
     
  4. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

    Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

    O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

    O9 - Extra button: Support - {62ECBCB9-1010-40FD-95F1-A45F1A4CD58B} - http://www.comcastsupport.com (file missing) (HKCU)

    O9 - Extra button: ComcastHSI - {9C3765C6-5255-40D3-8F58-FB1EF6C1AAB4} - http://www.comcast.net (file missing) (HKCU)

    O9 - Extra button: Help - {9E21BA81-B69D-42A4-BB94-089E8DA847C8} - http://www.comcast.net/memberservices/ (file missing) (HKCU)

    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130688741933

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    Click on the fix checked button.

    Close HJT.

    Other than the above non dangerous entries, your HJT log is clean.

    Regards Howard :)

    P.s I merged your other thread into this one.
     
  5. deathfromabove

    deathfromabove TS Rookie Topic Starter

    Problems Persist

    I fixed all of the above, rebooted, then attempted to join a game server. Same problem, same message. Any suggestions?
     
  6. howard_hopkinso

    howard_hopkinso TS Rookie Posts: 24,177   +19

Topic Status:
Not open for further replies.

Similar Topics

Add New Comment

You need to be a member to leave a comment. Join thousands of tech enthusiasts and participate.
TechSpot Account You may also...