Home > Hijackthis Log > Hijackthis Log + Rootrepeal Log: Help Diagnose My Problem

Hijackthis Log + Rootrepeal Log: Help Diagnose My Problem

Any help would be greatly appreciated. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged Under Main choose: Select All Click the Empty Selected button. have a peek here

My ISP is recognizing the emails as infected and rejecting them, sending back an error message to my computer for each one. The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM. Please start a new thread describing your issue and someone will be along to assist you. Double-click that icon to launch the program.

Please fin the reports below. And I'm sure you all have better things to do than to troubleshoot malware issues. However, recently I started getting blue screen errors on shutdown, and the computer would re-start. The list is not all inclusive.

Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O10 - Unknown file All Activity Home Malware Removal Help Malware Removal for Windows Resolved Malware Removal Logs Cant run mbam and cant install hijackthis Privacy Policy Contact Us Back to Top Malwarebytes Community Software Do NOT use the attach feature, please.Reply with copies of contents of C:\Avenger.txt & C:\Combofix.txt Share this post Link to post Share on other sites rizpar    New Member Topic Starter Using the site is easy and fun.

Save it in the same location you have FRST saved to. I'm hoping once I delete that registry key it will stop redirecting every browser but google chrome to ad-ware sites and stop blocking them from downloading antivirus, but I doubt it. Save it as fixlist.txt. Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password?

Posted 19 December 2009 - 02:18 PM Have you tried uninstalling your printer and associated applications and reinstalling them. Thank you Attached Files Addition.txt 51.85KB 4 downloads FRST.txt 94.18KB 4 downloads Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 shelf life shelf life If asked if you want to reboot, click "Yes". I had this problem once before and followed the instructions for MBAM not running - installed and ran Rootrepeal and wiped the vsfoce.sys file then ran MBAM and all was well.

Please include a link to this thread with your request. The error says liscence.txt is used by some other process and cannot be copied. Click the button. If you need this topic reopened, please send a Private Message to any one of the moderating team members.

Thanks!The fixes and advice in this thread are for this machine only. navigate here In Windows XP, the default setting is for the computer to reboot automatically when a fatal error or crash occurs. An error message can be related to a broad number of problems such as driver conflicts, hardware issues, read/write errors, and software malfunctions and malware. Back to top #5 quietman7 quietman7 Elder Janitor & Bug Exterminator Admin 11,540 posts Gender:Male Location:Virginia, USA Posted 20 December 2009 - 08:03 AM I've also disabled the autoreboot, as you

Quads  Tony_Weiss Admin Administrator30 Reg: 07-Apr-2008 Posts: 6,780 Solutions: 210 Kudos: 4,571 Kudos2 Stats Re: Unrecognized virus, downloader or trojan - spamming hevealy on my PC Posted: 13-Jun-2009 | 8:39AM • Advertisement Recent Posts Looking for a MP3 Tag Editor Noyb replied Jan 24, 2017 at 5:57 PM Feature windows 10 update ver 1607 silverado4 replied Jan 24, 2017 at 5:41 PM My ISP is recognizing the emails as infected and rejecting them, sending back an error message to my computer for each one. http://softsystechnologies.com/hijackthis-log/hijackthis-log-please-diagnose-vundo-was-a-problem.html They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".Click on this link to see a list of programs that should be disabled.

Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. I will cross reference the logs and if need be create a script to remove whatever. I repost my HT logfile, Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:47:44, on 2009-06-12Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Norton AntiVirus\Engine\\ccSvcHst.exeC:\WINDOWS\system32\HPZipm12.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Norton

Let it run uninterrupted to completion.

Register now! in that post use the script below instead of the one on the other post, what I have done is to disable the 2 services (including the random) and it will Quads Norton Fighter25 Reg: 21-Jul-2008 Posts: 16,481 Solutions: 182 Kudos: 3,388 Kudos0 Re: Unrecognized virus, downloader or trojan - spamming hevealy on my PC Posted: 13-Jun-2009 | 4:16AM • Permalink Hi When I enable my wireless connection to the internet, some remote server is using the virus to make my computer send out hundreds of emails.

This will ensure more accurate results and avoid common issues that may cause false detections. A list of options will appear, select "Safe Mode."If this doesn't work either, try the same method (above method), but name Combofix.exe to iexplore.exe instead, or winlogon.exe..This because It also happens If you're not already familiar with forums, watch our Welcome Guide to get started. this contact form When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note) The log is automatically saved by MBAM and can be viewed by

Norton remains O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O23 - Service: Norton 2009 Reset (.norton2009reset) - Unknown owner - C:\Documents and Settings\All Users\Application Data\Norton\Norton2009Reset.exe   (Possible rootkit)??    Rootkit In fact, MBAM loses some effectiveness for detection & removal when used in safe mode because the program includes a special driver which does not work in safe mode. Happy Safe Surfing out there. I ran SuperAntiSpyware (safe mode) and Malwarbytes, but still nothing detected.

Join our site today to ask your question. Start ERUNT (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)4.