Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > OS & Software > Security and the Web

Another victim to Spyware

Reply
Bookmark / Share this page
Thread Tools
  #1  
Old 10-10-2008
Newcomer, in training
 
Member since: Oct 2008, 3 posts
Another victim to Spyware

Hi everyone,

I read some posts in here and followed the directions regarding Spyware/Malware removal.

I received the Spyware that caused a white "X" on top of a red circle with a pop-up message, "Windows has detected a spyware infection!" I got this infection after my sister plugged in her iPod. I thought she had one with viruses or malicious software that came with the unit when it was sold. Apparently, there was a few released after September 2006.

I downloaded, installed, and executed the recommended software (CCleaner, Malwwarebytes' Anti-Malware, SUPERAntispyware, and HijackThis). The "X" pop-up message is gone and I'm also able to use Windows Task Manager. Everything looks okay but I wanted to double check with you guys who are more experienced in PC technology than I.

Any help you can provide would be greatly appreciated.

Thank you.
Attached Files
File Type: log hijackthis.log (9.7 KB, 2 views)
File Type: txt mbam-log-2008-10-10 (01-41-51).txt (8.9 KB, 2 views)
File Type: log SUPERAntiSpyware Scan Log - 10-10-2008 - 04-38-13.log (4.0 KB, 1 views)
Reply With Quote
  #2  
Old 10-10-2008
tw0rld's Avatar
TechSpot Enthusiast
 
Member since: Oct 2007, 472 posts
Your Mbam Log says "No action taken". run mbam again and remove the threats that are found.
Post a New HJT log after Mam scan and remove, also post Mbam log.
Reply With Quote
You can remove this banner by registering, join the TS Community for free.
  #3  
Old 10-11-2008
Newcomer, in training
 
Member since: Oct 2008, 3 posts
Re-scan with new log files

So my computer clock is showing military time. How do I change that? Was that changed by a malicious software?
Attached Files
File Type: log hijackthis.log (9.6 KB, 4 views)
File Type: txt mbam-log-2008-10-10 (23-35-52).txt (4.1 KB, 4 views)
Reply With Quote
  #4  
Old 10-14-2008
TechSpot Booster
 
Location: Illinois, USA
Member since: Feb 2007, 651 posts
System specs
Military Time - use control panel
Control panel > regional & language options > regional options > customize > time

When you fix O4 entries, Hijackthis will not delete the files associated with the entry. Instead, you must delete these manually afterwards, usually by having the user first reboot into safe mode. File RENAME is another way to "remove" a file. (e.g.. exe >> exx). Complete deletion iwhen no loss of function is seen.
Code:
O4 - HKCU\..\Run: [cmdchk] C:\WINDOWS\system32\wvujmdsx.exe
No info found.  Recommend delete - unless it is known to you
When you fix o3 types of entries, HijackThis not delete the offending file listed. It is recommended that you reboot into safe mode and delete the offending file.

Quote:
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://my.netzero.net/s/sp?r=al&cf=s...0.5&N=PLOC&O=A
O3 - Toolbar: ZeroBar - {F0F8ECBE-D460-4B34-B007-56A92E8F84A7} - (no file)
It is a guess that o3 is related to netzero - no info found. Remove it.

Last edited by rf6647; 10-14-2008 at 04:43 AM.
Reply With Quote
Reply
Thread Tools

Forum Jump

Similar Topics
Thread Thread Starter Forum Replies Last Post
Yet another WHATABOUTADOG victim Eclipse08 Security and the Web 10 05-02-2008 10:16 PM
Yet another victim of PC-antispyware cliffside81 Security and the Web 7 04-05-2008 05:52 PM
Another CiD ad victim pajoe Security and the Web 6 03-26-2008 06:25 PM
Another CiD Victim mixx Security and the Web 1 05-26-2007 12:06 AM
WORM victim! mgodin Security and the Web 6 09-21-2005 09:48 AM


All times are GMT -4. The time now is 06:50 AM.