My hijackthis log

[VV_Gary_VV]

Was hoping someone could let me know if there is anything here that should be erased. Thanks.

 

[howard_hopkinso]

I am by no means an expert, but your log looks clean to me.

RBS is the main man around here when it comes to HJT logs.

Regards Howard :grinthumb

 

[RealBlackStuff]

Boot in Safe Mode.
Switch System restore OFF.
Press Ctrl/Alt/Del simultaneously, select Taskmanager/Processes, select the process (if there), click "End Process" for:
PartyPoker.exe

Next, UNinstall anything to do with this:
C:\Program Files\GAMES\Party Poker\PartyPoker.exe

Next, run a HJT scan and place a tick-mark in the little square before (if still there):
...................................................................................................
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\GAMES\Party Poker\PartyPoker.exe
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\GAMES\Party Poker\PartyPoker.exe
O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {F229AB32-7BF9-4225-B78F-B4680AE6FC23} (Snapfish File Upload ActiveX Control) - http://www.snapfish.com/SnapfishUpload.cab
...................................................................................................
Now click on the Fix Checked button in HJT.

When done, from between the dotted lines, delete the highlighted bold directory \GAMES\ with everything in it, including that directory itself.
Delete all files and directories from: C:\Documents and Settings\[username]\Local Settings\Temp
Repeat this for ALL [usernames].
Boot normal. When all OK, switch System Restore back on.

 

[VV_Gary_VV]

Thanks

What's the danger of partypoker though? It's a legit online poker game as far as I know. I actually play alot on there. The directory "GAMES" I actually made and it's where I install all of my game programs just for organization. symantic is for norton systemworks so I think I'll leave that, and snapfish is nothing, just some little online photo site. So I guess my computer is clean, thanks for looking at my log, appreciate it.

 

[RealBlackStuff]

Be my guest with your infected pokergame.

 

[VV_Gary_VV]

Is it infected or is the program itself unsafe in general? I'll do everything you just said, then reinstall and see what comes up. Thanks

 

[RealBlackStuff]

I have not tested it myself, as I would not let anything like that near MY PC.
But the trend amongst my fellow HJT-problem-solvers is to get rid of these partypoker extensions and their ilk.
It's up to you, as I said before.