Hijackers keep sneaking back

[tjsweeney]

First, thanks for this forum and the resources here. I have had repeated problems with various browser hijackers on my kids basement machine. Followed your 15 step process once before about 4 weeks ago, but a host of problems returned, and NOD32 was firing constant warnings at me, though couldn’t clean things up..

So…, I have once again followed all the recommended steps. This computer is in need of SP2 upgrade (all my others are there), and if you think its clean now, I will do this.

AVG rootkit came up negative, other 2 logs are attached. There are 2 suspicious files left with recent dates in windows\system32 (all others thankfully cleaned out now), SCA.exe and SMT.exe (not sure about these,)

Thanks again
Terry

 

[howard_hopkinso]

Hello and welcome to Techspot.

Your system is far from clean.

You haven`t posted an AVG Antispyware log as per these instructions. Please do so, along with a fresh HJT log.

Regards Howard :wave: :wave:

This thread is for the use of tjsweeney only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.

 

[DelJo63]

typo

Clearly your defensive software needs to be reviewed:

1. upgrade to SP2 (which you're prepared to do )
2. use a router if at all possible
3. activate at least one/only one firewall
4. install Spywareblaster to protect from bad ActiveX code downloads
5. change browser settings to inhibit installs for the LUA users
6. install / use an AV program that scans email

It may be required to monitor the system usage to see which sites are being
visited -- clearly at least one site is infecting your system.

Spybot Search & Destroy has a feature that installs a special HOST file
to ensure known adware and trojan sites can not be accessed.