Hijackthis

[casptaingogo]

I just scanned my computer and attached a file. Wat am I gonna do next? Thanks.
Gogo

 

[tomrca]

hello casptaingogo.
go here and follow all the instructions, then make a fesh hjt log and re-post, looks like there are a few probs. (it wont be me that replies with any fix instructions)

 

[casptaingogo]

here the new file after following your steps.
Thanks!
So what´s gonna be my next step?

 

[howard_hopkinso]

Hello and welcome to Techspot.

You have not followed the instructions properly in the link provided by tomrca. However, follow these instructions exactly.

Download and install Ewido http://www.ewido.net/en/download/
Double-click the Ewido icon on your desktop to run it.
On the top of the main screen click Shield. Click the word active to change it to inactive.
On the top of the main screen click 'Update'. Then click on 'Start update'. The update will start and a progress bar will show the updates being installed.
If you are having problems with the updater, you can get the manual update at http://download.ewido.net/ewido-signatures-full-current.exe
When you have finished updating, exit Ewido.

Turn off system restore.(XP/ME only) See how here.> http://www.bleepingcomputer.com/forums/tutorial56.html

Boot into safe mode, under your normal user name(NOT THE ADMINISTRATOR ACCOUNT). See how here.> http://www.bleepingcomputer.com/forums/tutorial61.html

In Windows Explorer, turn on "Show all files and folders, including hidden and system". See how here.> http://www.bleepingcomputer.com/forums/tutorial62.html


Make sure all windows are closed. Run Ewido.
Click 'Scanner'. Then click 'Complete System Scan' to begin scanning.
When the scan is complete click 'Recommended Action' and change it to 'Quarantine'.
Then click 'Apply all actions'.
Once finished, click the 'Save report' button. Then click 'Save Report As' and save it to your desktop.

Reboot into normal mode and turn system restore back on and rehide your protected OS files.

Post the Ewido report and a fresh HJT log as attachments.

Regards Howard :wave: :wave:

This thread is for the use of casptaingogo only. Please don`t post your own virus/spyware problems in this thread. Instead, open a new thread in our security and the web forum.