Possible trojan?

[deathfromabove]

Hi, a friend of mine sent me here to get some help. The game servers I play on keep booting me because they say I have a trojan or a virus. I have run the following scans:

Housecall
Kaspersky
McAfee
Ad Aware
Spybot Search and Destroy
Ewido anti-spyware


These security scans found a little, but I am still being booted from the game servers. I was wondering if someone could take a look at my HJT logfile and possibly give me a point in the right direction. Let me know below or in email please.

Jody P. "DeathFromAbove"

 

[howard_hopkinso]

Hello and welcome to Techspot.

Go HERE and follow the instructions.

Post a fresh HJT log as an attachment.

Regards Howard :wave: :wave:

 

[deathfromabove]

HJT Logfile C.O. Howard Hopkins

I greatly appreciate this. You guys are Gods among mere mortals.

 

[howard_hopkinso]

Run HJT with no other programmes open. Have HJT fix the following, by placing a tick in the little box next to(if there).

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

O4 - Global Startup: QuickBooks Update Agent.lnk = C:\Program Files\Common Files\Intuit\QuickBooks\QBUpdate\qbupdate.exe

O9 - Extra button: Support - {62ECBCB9-1010-40FD-95F1-A45F1A4CD58B} - http://www.comcastsupport.com (file missing) (HKCU)

O9 - Extra button: ComcastHSI - {9C3765C6-5255-40D3-8F58-FB1EF6C1AAB4} - http://www.comcast.net (file missing) (HKCU)

O9 - Extra button: Help - {9E21BA81-B69D-42A4-BB94-089E8DA847C8} - http://www.comcast.net/memberservices/ (file missing) (HKCU)

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?LinkId=39204&clcid=0x409
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1130688741933

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

Click on the fix checked button.

Close HJT.

Other than the above non dangerous entries, your HJT log is clean.

Regards Howard

P.s I merged your other thread into this one.

 

[deathfromabove]

Problems Persist

I fixed all of the above, rebooted, then attempted to join a game server. Same problem, same message. Any suggestions?

 

[howard_hopkinso]

Does the message give you any details of the supposed trojan?

You might want to try doing the following.

Boot into safe mode. See how HERE. http://www.bleepingcomputer.com/forums/tutorial61.html

Turn off system restore.(XP/ME only) See how HERE. http://www.bleepingcomputer.com/forums/tutorial56.html

Run your scanners again, and delete whatever they find. Then, reboot into normal mode and turn system restore back on.

See if that helps.

Regards Howard