Home > Hijackthis Log > HijackThis Log And SpywareGuard Log

HijackThis Log And SpywareGuard Log

That may cause it to stall **NOTE - I recommend you allow the Recovery Console to be downloaded and installed if or when prompted. I could use some help resolving the above issues. or read our Welcome Guide to learn how to use this site. Most of the problems related to the original virus attack seemed to go away. have a peek here

Here's the log: ComboFix 09-01-19.05 - Administrator 2009-01-20 8:27:38.1 - NTFSx86 NETWORK Microsoft Windows XP Home Edition 5.1.2600.0.1252.1.1033.18.503.394 [GMT -5:00] Running from: c:\documents and settings\Administrator\Desktop\majorfix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . It has done this 1 time(s). 1/12/2009 11:23:53 PM, error: Service Control Manager [7034] - The Application Layer Gateway Service service terminated unexpectedly. Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password? No, create an account now.

Check this link for your applicable programs. I had some pictures on an SD card that I wanted to put in the computer. I checked all the settings and they seemed to be intact.

IE: {{d81ca86b-ef63-42af-bee3-4502d9a03c2d} - http://wwws.musicmatch.com/mmz/openWebRadio.html . ************************************************************************** catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2009-01-20 08:31:09 Windows 5.1.2600 NTFS scanning hidden processes ... Pete C Microsoft MVP Internet Explorer 2004 - 2011 Keep all responses to BBS posts on the BBS so that others may benefit If we have helped you please consider a Because it could be possible that files in use will be moved/deleted during reboot.After reboot, post the contents of the log from Dr.Web you saved previously in your next reply with Many services load under that executable, and they are divided amongst the number of svchost.exe processes running.

By continuing to use this site, you are agreeing to our use of cookies. Please be patient as this can take several minutes. Lawrence Abrams Don't let BleepingComputer be silenced. Log in or Sign up Forums Forums Quick Links Search Forums Recent Posts Members Members Quick Links Notable Members Registered Members Current Visitors Recent Activity Donate User Guide User

Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password? Please do the following:Please make sure that you can view all hidden files. IF REQUESTED, ZIP IT UP & ATTACH IT DDS (Ver_09-01-18.01) Microsoft Windows XP Home Edition Boot Device: \Device\HarddiskVolume2 Install Date: 9/30/2005 7:51:53 AM System Uptime: 1/19/2009 9:21:48 AM (6 hours ago) c:\windows\system32\bszip.dll c:\windows\system32\drivers\TDSSrfdc.sys c:\windows\system32\TDSSblat.dat c:\windows\system32\TDSSnmxh.log c:\windows\system32\TDSSofkl.dll c:\windows\system32\TDSSovba.dll c:\windows\system32\TDSSqkhc.dll c:\windows\system32\TDSSqomd.log c:\windows\system32\TDSSshbr.log c:\windows\system32\TDSStnyq.dll c:\windows\system32\TDSSurkv.dll c:\windows\system32\TDSSxnpb.dll c:\windows\system32\twex.exe . ((((((((((((((((((((((((((((((((((((((( Drivers/Services ))))))))))))))))))))))))))))))))))))))))))))))))) . -------\Service_TDSSserv.sys -------\Legacy_TDSSserv.sys ((((((((((((((((((((((((( Files Created from 2008-12-20 to 2009-01-20 ))))))))))))))))))))))))))))))) . 2009-01-19 11:52

Share this post Link to post Share on other sites Portmore    New Member Topic Starter Members 5 posts ID: 3   Posted August 6, 2009 Is anyone available to check Somehow spyware guard 2009 blocked that user from accessing the task manager. - This may be nothing but I'm seeing 5 or more copies of scvhost running. You can change your cookie settings at any time. dirtclod, #1 2009/01/19 PeteC SuperGeek Staff Joined: 2002/05/10 Messages: 28,538 Likes Received: 354 Trophy Points: 1,093 Location: Staffordshire, UK Computer Experience: Usually not enough Please do not Double Post.

Please post a DDS log run while logged onto each of the other accounts on the computer. navigate here I routinely use Ad-Aware, SpywareGuard, SpywareBlaster and just installed TrojanRemover (suggested that I "fix" sockspy.exe - which I did not- just in case...) Thank you for your assistance, bd Logfile of More... You can delete DDS and any other logs that were created/saved too.

This action will also reset the System Restore points, removing any infected files there as well. Here is the log from SpywareGuard:NEW BHO DETECTION ALERTOn 11:12:39 07-03-2004 a new BHO installation attempt was detected.BHO: {288F063F-AA56-44C1-9DF2-8940FE4BD256}ProgramID: n/aFile Location: C:\WINDOWS\System32\drmszor.dllUser Action Taken: REMOVE BHOI haven't found any information about Quick Links HelpWithWindows.com RoseCitySoftware.com Recommended Links Menu Log in or Sign up Search Search titles only Posted by Member: Separate names with a comma. Check This Out I could use some help resolving the above issues.

If there is some abnormality detected on your computer HijackThis will save them into a logfile. I got windows updated, downloaded Dell's maintenance software, then I loaded a new firewall and AV from Comodo. Ok, I found your "ignore that instruction." Here they are: UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.

Quote Report Back to top Posted 12/15/2004 9:11 PM #6714 bd Member Date Joined Nov 2016 Total Posts: 3 Ooops!

But I got sidetracked. It has done this 1 time(s). scanning hidden autostart entries ... When I put the card in, the computer was recognizing it had the card in the slot, but it wouldn't automatically bring up the software.

I have also done HijackThis test and this is the outcoming log:Logfile of HijackThis v1.97.7Scan saved at 15:03:57, on 2004-07-03Platform: Windows XP Dodatek SP. 1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 So I tried to use Restore. Yes, my password is: Forgot your password? this contact form WindowsBBS Forums > Security > Malware and Virus Removal > Malware and Virus Removal Archive > This site uses cookies.

Dave Microsoft MVP - Internet Explorer 2006-2007-2008-2009 noahdfear, #11 (You must log in or sign up to reply here.) Show Ignored Content Share This Page Tweet Log in with Facebook Log As a new member with less than 10 posts any post you make which contains a URL requires approval (moderation) before it is visible. I could not update the Anti-Malware because there is a problem with the internet connection as well, it says there is limited connectivity. It has done this 1 time(s).

Hang with us on LockerDomeCircle BleepingComputer on Google+!How to detect vulnerable programs using Secunia Personal Software Inspector Simple and easy ways to keep your computer safe and secure on the Internet After a few more minutes, the warning cleared on its own. Completion time: 2009-01-20 8:32:38 ComboFix-quarantined-files.txt 2009-01-20 13:32:28 Pre-Run: 62,173,573,120 bytes free Post-Run: 62,339,076,096 bytes free WinXP_EN_HOM_BF.EXE [boot loader] timeout=2 default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS [operating systems] c:\cmdcons\BOOTSECT.DAT= "Microsoft Windows Recovery Console" /cmdcons multi(0)disk(0)rdisk(0)partition(2)\WINDOWS= "Microsoft Windows I got rid of it with Malwarebytes but there's some leftovers I need help with.

CONTRIBUTE TO OUR LEGAL DEFENSE All unused funds will be donated to the Electronic Frontier Foundation (EFF). We keep you safe and we keep it simple. Using the site is easy and fun. Back to top Back to Virus, Trojan, Spyware, and Malware Removal Logs 0 user(s) are reading this topic 0 members, 0 guests, 0 anonymous users Reply to quoted postsClear BleepingComputer.com

I also see that the computer tag is inserted into the user names in various places. Then I went about updating everything. Dave Microsoft MVP - Internet Explorer 2006-2007-2008-2009 noahdfear, #5 2009/01/20 dirtclod Inactive Thread Starter Joined: 2009/01/19 Messages: 9 Likes Received: 0 Trophy Points: 76 Computer Experience: intermediate Thanks noahdfear! WindowsBBS Forums > Security > Malware and Virus Removal > Malware and Virus Removal Archive > This site uses cookies.

The following corrective action will be taken in 100 milliseconds: Restart the service. 1/12/2009 11:18:55 PM, error: Service Control Manager [7031] - The Symantec Event Manager service terminated unexpectedly. WindowsBBS.com is completely free, paid for by advertisers and donations. Have run Malwarebytes' Anti-Malware 2 times now and it said it was getting rid of it, but the spyware still came up after it was done. Digital Media Edition Installer Microsoft Plus!