Hijack this log - please need help

Status
Not open for further replies.
Hey Guys,

I need help. I can't seem to run anything that involves internet explorer. When I click internet explorer it opens quickly, I see that url that says runonce - I think you guys know what I mean, then it closes. I can't open microsoft outlook. I even can't uninstall some programs. I can't reload or uninstall quicktime and I can't uninstall The Shield Deluxe which is my anti-virus software. From what I've read so far it sounds like I definitely have issues so I followed the instructions using hijack this and I'm posting the results so hopefully someone can help me.

Now the computer was running fine until yesterday. At work, I ran registry mechanic and it seemed to run fine. I didn't renew my service with registry mechanic until this morning so I wasn't using up-to-date fixes? I guess that would be the word? However I never had issues in the past. After that I shut the computer down.

I didn't go online at work with my computer which is a laptop. I waited till I got home and later on last night I go to use the computer and lo and behold, trouble.
Any help would be greatly appreciated. Thanks guys.

Bigpop
 
It's a pretty big log (of Startups)

Can I suggest that you downlad Startup Control Panel and untick (I'd say everything)
I'd also state to download CCleaner and remove all temp files

Go to add/remove programs (in control Panel) and un-install "Party Poker"
+ un-install any other programs not required (ie any Symantec stuff too)

Restart try again
If it's resolved
Go back to Startup Control Panel, and begin to turn on, the ones you want (restart after each, until you find the faulty startup entry (note you can just leave them all unticked, and just allow Antivirus to start)
 
hijack this log continued

Kimsland,

Thanks for the info. I did what you said but still have the problem. I did not see party poker when I went to the uninstall program, nor did I see Norton anti-virus.

Startup Control Panel: I unticked everything
CCleaner: I left everything checked when I opened the cleaner, which included the temp files, and I let it clean up everything.

I un-installed all the programs that I didn't seem to need. Also, as a side note, I'm still not able to uninstall Quicktime. I don't know if this gives any added ideas but I'm open for anything at this point. Thanks again for your help.

I included the new Hijack log for viewing.

Bigpop
 
Wow a lot easier to read, not sure why all support members don't say to disable and uninstall as much as possible first.

I must say up front that I am not a Spyware removal specialist here. I am helping you until others intervene, or until we find a resolution. (either way is good for both of us!)

I found C:\Program Files\Common Files\Symantec Shared\Support Controls\ssrc.exe still in your log. So there must be a Symantec software application still installed. This is a legitamit file, but if you want to re-check add/remove for any symantec progam, not required, please do.

I can't see any Malware present specifically, but I have not checked all the cabs running. So there may still be there.

I would like to ask you to scan with Malwarebytes.

Download and Run Malwarebytes' Anti-Malware
Please download Malwarebytes' Anti-Malware to your desktop.
  • Double-click mbam-setup.exe and follow the prompts to install the program.
  • At the end, be sure a checkmark is placed next to:
    • Update Malwarebytes' Anti-Malware
    • Launch Malwarebytes' Anti-Malware
  • Then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select Perform full scan, then click Scan.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Be sure that everything is checked, and click Remove Selected.


Reply back once complete
 
Kimsland,

I downloaded and used Malwarebytes as you said. I also removed that symantec exe file. I enclosed the new hijack log for viewing. Also, a little more info.

If I have IE 7 un-installed, I can use my microsoft outlook - calendar, contacts, etc...When I install IE 7 and try to open up outlook, I get an error pop-up window that says Microsoft Office Outlook has encountered a problem and needs to close. When I clicked for more info it stated that the following file will be included in this error report:

C:\DOCUME~1\Owner\LOCALS~1\Temp\4506171.cvr

I also noticed that the search feature on my computer doesn't work - I'm assuming related to the same issue. I do not have the issue with that run once showing up in the url before the IE window closes. It does have google as the home page but it still does the same thing - IE starts to open and then closes quickly.

Thanks again for any help.
 
Are you familiar with PCSecurityShield? I am pretty sure it is listed as rogue antimalware program, but lets check it out just in case.

Upload a File to Virustotal
Please visit Virustotal found HERE
  • Click the Browse... button
  • Navigate to the file C:\Program Files\PCSecurityShield\The Shield Deluxe 2008\avp.exe
  • Click the Open button
  • Click the Send button
  • Copy and paste the results back here please.


Download\install 'SuperAntiSpyware Home Edition Free Version' from HERE
  • Launch SuperAntiSpyware and click on 'Check for updates'.
  • Once the updates have been installed,exit SuperAntiSpyware.

Scan with SuperAntiSpyware
  • Start SuperAntiSpyware.
  • On the main screen click on 'Scan your computer'.
  • Check: 'Perform Complete Scan then Click 'Next' to start the scan.
  • Superantispyware will now scan your computer,when it's finished it will list all/any infections found.
  • Make sure everything found has a checkmark next to it,then press 'Next'.
  • Click on 'Finish' when you've done.

    It's possible that the program will ask you to reboot in order to delete some files.

    Obtain the SuperAntiSpyware log as follows:
    Click on 'Preferences'.
    Click on the 'Statistics/Logs' tab.
    Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
    It will then open in your default text editor,such as Notepad.
    Attach the notepad file here on your next reply
 
Blind Dragon,

Thanks for the post and help. I did as you said and have uploaded 2 files to be viewed. In regards to the SuperAntiSpyware, I stopped the scan at 5 hours - and that's not a misprint. I didn't know if something strange was going on so I stopped it and have uploaded what was scanned. It did find 9 items which I deleted.

Thanks for the help.

Bigpop
 
The file was ok.

That is unusually long. I should not take more than an hour maybe 2 hours maximum.

I would try it again. Sounds like something got stuck
 
Guys,

I've made progress. I was not able to install Itunes' newest version so I searched for help and found a site that suggested, if I remember correctly, adding this into the run mode:

regsvr32 vbscript.dll

After I did this I was able to install the latest version of Itunes. I was also able to install IE7 and run microsoft outlook. Previously with IE7 installed I was not able to run microsoft outlook.

Also, the issue with IE7 opening and closing quickly was resolved from adding the above script.dll.

When I use the search feature on my laptop it nows brings up the window but all that is in it is that little dog at the bottom. There are no boxes for me to enter a file name or anything like that.

I'm not able to run video in IE7 though - for example at you tube. I can run those same videos with Mozilla Firefox. I've un-installed IE7 and re-installed it but still no difference.

Thanks for your help and if you have any suggestions for my current problems, I'm all ears. Thanks.

Bigpop
 
Status
Not open for further replies.
Back