Hijacked Gmail - HJT Log attached

[macx]

Friend of mine with XP who uses MSN and Gmail has found that someone
has been able to use his email to send emails, and he said he has read other
Gmail users with the same problem. He says his security is something called
WebRoot, something I've never heard of.

About 2 weeks ago we went thru the 8 step process and found very little in
any of the scans, nothing more than tracking cookies etc, but he has recently found that the email hijacking is still occurring. I don't know enough to tell if anything that came up in HJT might be related.

I downloaded the latest HJT version last nite and did a scan.
Thanks for any info!

Oh, he changed his password last nite, too. I understand that Gmail may
be vulnerable just thru passwords rather than actually hacking into it?

I attached the log into the original post "Hijacked Gmail" last nite and
now the forum won't let me reattach it here, so please go to the
original post and check it out.

Thanks!

`

 

[Tmagic650]

"About 2 weeks ago we went thru the 8 step process"...

So where are your 3 logs?

 

[macx]

and found very little in
any of the scans, nothing more than tracking cookies etc,

`

we'll do them over if you want to read tracking cookies

 

[Tmagic650]

How about posting the Hijackthis log... Pretty please!

 

[macx]

I had already posted it in the original thread "Hijacked Gmail" and then realized nobody would know there was a log in there, so created this thread and tried to post it again, even with a changed name, but the Forum kept telling me I had already posted it and it wouldn't let me post it again (?)

So, It's in the original thread a little ways down titled "Hijacked Gmail" -

Thanks for asking!

 

[Tmagic650]

There is a program called Combofix. It is very powerful but you have to be very careful to read the instructions carefully. Here is help:
Guide to running Combofix

Good luck