I'm Infected. Please help

Status
Not open for further replies.

jmmessin

Posts: 12   +0
Other than my computer seems to run a bit slower, I don't seem to have any visual or other performance problems with the computer but I noticed in the "hijack this" log that there is an entry which doesn't look right; O18 Filter Hijack.
I ran the 8 steps and created the 3 log files. Please review these logs and advise.
Thanks
 

Attachments

  • hijackthis1-26-10Resend.log
    10.6 KB · Views: 2
  • mbam-log-2010-01-27 (06-28-56)Resend.txt
    894 bytes · Views: 2
  • SUPERAntiSpyware Scan Log - 01-27-2010 - 07-29-31Resend.log
    1.5 KB · Views: 2
Its better

I ran combo-fix and it fixed the O18 entry. What does this entry mean? Is this something I need to worry about?
I need you to review these log files attached and advise on anything else to fix.
Thanks so much.
 

Attachments

  • combo-fixlog1-27-10.txt
    13.8 KB · Views: 1
  • hijackthis1-27-10PM.log
    9.8 KB · Views: 2
The 018 entry was bad, do you want it back?

Lets remove these entries from the hijack this log:
O9 - Extra button: Help - {97809617-3937-4F84-B335-9BB05EF1A8D4} - http://online.comcast.net/help/ (file missing)
O9 - Extra button: Support - {8828075D-D097-4055-AA02-2DBFA9D85E8A} - http://www.comcastsupport.com/ (file missing)
O9 - Extra button: ComcastHSI - {669B269B-0D4E-41FB-A3D8-FD67CA94F646} - http://www.comcast.net/ (file missing)
O8 - Extra context menu item: &Search - ?p=ZS
O3 - Toolbar: (no name) - {F5735C15-1FB2-41FE-BA12-242757E69DDE} - (no file)
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - (no file)
R3 - URLSearchHook: (no name) - _{37D2CDBF-2AF4-44AA-8113-BD0D2DA3C2B8} - (no file)
R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://my.netzero.net/s/search?r=minisearch
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://my.netzero.net/s/search?r=minisearch
 
Fixed everything except two

I checked and tried to fix all the ones you suggested.
However, there were two which did not get fixed. It appears like my McAfee Antivirus blocked it based on what is in the log file. I'm attaching the "AccessProtectionLog1-28-10.txt" which shows the blocking and another "hijackthis" log.
What do I do next?
 

Attachments

  • hijackthis1-28-10.log
    9.2 KB · Views: 1
  • AccessProtectionLog1-28-10.txt
    2.5 KB · Views: 1
Status
Not open for further replies.
Back