Possible trojan?

By deathfromabove
Jun 23, 2006
Topic Status:
Not open for further replies.
  1. Hi, a friend of mine sent me here to get some help. The game servers I play on keep booting me because they say I have a trojan or a virus. I have run the following scans:

    Housecall
    Kaspersky
    McAfee
    Ad Aware
    Spybot Search and Destroy
    Ewido anti-spyware


    These security scans found a little, but I am still being booted from the game servers. I was wondering if someone could take a look at my HJT logfile and possibly give me a point in the right direction. Let me know below or in email please.

    Jody P. "DeathFromAbove"
  2. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Hello and welcome to Techspot.

    Go HERE and follow the instructions.

    Post a fresh HJT log as an attachment.

    Regards Howard :wave: :wave:
  3. deathfromabove

    deathfromabove Newcomer, in training Topic Starter

    HJT Logfile C.O. Howard Hopkins

    I greatly appreciate this. You guys are Gods among mere mortals.
  4. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

    Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

    O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

    O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

    O9 - Extra button: Support - {62ECBCB9-1010-40FD-95F1-A45F1A4CD58B} - http://www.comcastsupport.com (file missing) (HKCU)

    O9 - Extra button: ComcastHSI - {9C3765C6-5255-40D3-8F58-FB1EF6C1AAB4} - http://www.comcast.net (file missing) (HKCU)

    O9 - Extra button: Help - {9E21BA81-B69D-42A4-BB94-089E8DA847C8} - http://www.comcast.net/memberservices/ (file missing) (HKCU)

    O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
    O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130688741933

    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

    Click on the fix checked button.

    Close HJT.

    Other than the above non dangerous entries, your HJT log is clean.

    Regards Howard :)

    P.s I merged your other thread into this one.
  5. deathfromabove

    deathfromabove Newcomer, in training Topic Starter

    Problems Persist

    I fixed all of the above, rebooted, then attempted to join a game server. Same problem, same message. Any suggestions?
  6. howard_hopkinso

    howard_hopkinso Newcomer, in training Posts: 25,948   +19

Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.