also @ TechSpot: ThinkPad on a Budget, Meet the Edge 13" Notebook - Reviewed
Welcome to the TechSpot OpenBoards. Please read the FAQ if you have any questions. Login to participate.

Go Back   TechSpot OpenBoards > Tech Support > Virus and Malware Removal

Virus hijack - Help I dont know what to do

Closed Thread
Bookmark Thread Tools
  #1  
Old 10-10-2008
Newcomer, in training
 
Member since: Oct 2008, 3 posts
ok, so i was getting trapcode particular off the internet, and like a ***** i download from an anonymous site that i was pretty sure was guna get me a virus, but in dire hope i did it anyways...

so know i have like 100 viruses and trojans and crap...
ill list the "symptoms"
@ Start Up: Windows refresh every 5 seconds
Icons dissapear
Backround disappears
taskbar dissapears
won't run any windows except AIM
ANTIVIRUS 2009 shows up (cleared that up tho)
avast and PC Doctor both say i have Rogue Anti Virus but when i go to the location they stated its no there C:\ProgramFiles\Antivirus

ITs only on my account to

and also when i start up it says HP conncetions.exe is missing '-' the app id seperator
and just recently 3 more error messages showd up but i forgot what they were

I restored my computer but the last restore dates are 10/3/08 (day i got virus...)
and 2\7\2007 (day i got my computer) so i dont want to restore it and lose all the stuff i have

thats my hijackthis log file...
im running on VISTA SP1 Home Premium

Last edited by momok; 10-11-2008 at 02:59 AM.. Reason: merged
  #2  
Old 10-10-2008
tw0rld's Avatar
TechSpot Enthusiast
 
Member since: Oct 2007, 555 posts
That doesn't look like the full log. However go here; http://www.techspot.com/vb/topic58138.html follow the instructions then return here then post the required logs.
To remove this ad, sign in. To register for a new account, click here.
  #3  
Old 10-10-2008
Bobbye's Avatar
TechSpot Evangelist
 
Location: Clearwater, FL
Member since: Mar 2007, 7,176 posts
Quote:
so know i have like 100 viruses and trojans and crap...
You need to run the full malware cleaning, in the order given and then ATTACH the logs:
http://www.techspot.com/vb/post645589-1.html

When through, see this: How to post your Hijackthis log-file as an ATTACHMENT http://www.techspot.com/vb/topic19133.html

When you rerun HijackThis, please include the entire log in the attachment. The middle section of your log is missing.

Quote:
I restored my computer
You should not use the System Restore feature when you have malware.
  #4  
Old 10-11-2008
Newcomer, in training
 
Member since: Oct 2008, 3 posts
ok well then i guess i wont ever restore my comp with virus, thanks fer tht

Hokay, lets do this shi*
pwn some viruses YEAH!

here are the 3 logs that the link told meh to do
Attached Files
File Type: txt mbam-log-2008-10-11 (13-44-25).txt (2.1 KB, 3 views)
File Type: log SUPERAntiSpyware Scan Log - 10-11-2008 - 14-28-29.log (10.1 KB, 3 views)
File Type: log hijackthis.log (7.8 KB, 3 views)
  #5  
Old 10-12-2008
Bobbye's Avatar
TechSpot Evangelist
 
Location: Clearwater, FL
Member since: Mar 2007, 7,176 posts
Quote:
ok well then i guess i wont ever restore my comp with virus, thanks fer tht
The reason is because you don't know when the malware got on the system. You may clean some of it out, but the restore points are protected files, so the cleaning programs don't remove any malware from those files. That's why we remove the old restore point when through. If cleaning had started and you use System Restore with malware, the system would get infected- again!

I see that mbam removed some Trojans. Also note in SuperAntispyware that there are 3 different users getting the Tracking Cookies. You can have the program remove all of them, but you need each account to reset their Cookies:

For each account: shayan, anaheet and beeta, do this same setting
[QUOTE]Control Panel> Internet Options> Privacy tab> Click on Advanced button and make the following changes:
Quote:
CHECK 'override automatic Cookie handling'
CHEK 'allow first party Cookies'
CHECK Block third party Cookies
CHECK 'allow per session Cookies'
Please re-open HiJackThis and scan.**Check the boxes next to all the entries listed below:.
Quote:
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2009] c:\program files\uniblue\registrybooster\StartRegistryBooster.exe
O4 - HKCU\..\Run: [RunSpySweeperScheduleAtStartup] "C:\Windows\system32\msfeedssync.exe" /ScheduleSweep=User_Feed_Synchronization-{D91F989D-135D-4CD0-BDE9-87C65BFF4A0A}
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JR1916~1.0_0\bin\ssv.dll
These Real Time prgrams ,running at startups, should be disabled for the scans, shouldn't running for the scans.

The Java entry is old. It should be uninstalled, then the updated:
http://www.java.com/en/download/manual.jsp

Edit: correction of last sentence: Never keep the auto-update for Real Player, Adobe, Java. They are useless and use your resources.

Last edited by Bobbye; 10-12-2008 at 06:32 PM.. Reason: correction
  #6  
Old 10-12-2008
Newcomer, in training
 
Member since: Oct 2008, 3 posts
ok, ill do that thanks but idk why spysweeper is running, that thing finished its subscrition like 7 months ago and i uninstalled it, and i edeleted uniblue cause it sucks

so yeah, thanks so much, and illl reset the cookies, mmmm, for mine, and my sisters account

shugashayne
To remove this ad, sign in. To register for a new account, click here.
Closed Thread


Tags
virus need to remove, virus/spyware
Thread Tools


Similar Topics
Topic Category Replies Last Post
Infected/hijack log/virus please help Virus and Malware Removal 2 02-24-2008 05:52 AM
Hijack this log please!!!!!!!! I think i ve got virus Virus and Malware Removal 20 11-14-2007 11:52 AM
Hijack virus help Virus and Malware Removal 1 06-10-2007 03:05 PM
Here is my hijack this log, and I still dont understand where to get my minidump. Virus and Malware Removal 12 08-16-2006 05:19 PM
Im new. Please help me where to post my HIJACK THIS log..I dont know where to do it. Virus and Malware Removal 4 03-05-2006 03:30 AM


All times are GMT -4. The time now is 12:31 AM.