Home > Hjt Log > Hjt Log Help Winantispyware?virtumundo?

Hjt Log Help Winantispyware?virtumundo?

MFDnNC, Sep 24, 2007 #2 britdog Thread Starter Joined: Sep 24, 2007 Messages: 12 Thanks for the quick reply. About CNET Privacy Policy Ad Choice Terms of Use Mobile User Agreement Help Center Flag Permalink This was helpful (0) Collapse - Having the same problem with winfixer 2005 by PhuCat67 / September 8, 2005 12:17 AM PDT In reply to: Winfixer 2005 I got Will I lose data? http://softsystechnologies.com/hjt-log/hjt-log-adware-virtumundo.html

This is an Updates thread that you posted into. So I can't use my other computer for internet purposes and have even gone as far as to pull the phone line connection from it. VDF- for 07/26/2005 {11:27:08} by roddy32 / July 25, 2005 11:45 PM PDT In reply to: UPDATES - July 26, 2005 AntiVir PersonalEdition for Windows 98/ME & NT/2000/XPProgram-Release: (MM-DD-YYYY) o Please highlight everything in the notepad, then right-click and choose copy. · Click close and close again to exit the program. · Please paste that information here for me regardless

O4 - Global Startup: eXtreme Fax Call Controller.lnk = C:\Program Files\RingCentral\eXtreme Fax\RCUI.exe O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm O8 - Extra context menu item: &Download we're trying to cure them with our computers! What am I supposed to do with it now?

Can you please help me? part 2 Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by shaynewasdenfan, Sep 21, 2005. Right now on my infected machine the winfixer 2005 tray icon is ticking away the minutes as it tries to download and install itself on a machine that is not even While I was downloading, I got an "Windows Explorer need to shut down" error message.

Press enter. Post a new HJT log aswell 0 OptionsEdit skulk2006 Nov 2005 edited Nov 2005 alrighty, did what you asked and here are the results... There are some good, free AV's available today. Icrontic › All Discussions › Spyware & Virus Removal Talk to Us Twitter @icrontic Facebook Page IRC Channel Steam Group The 5¢ Tour About Us Our Epic History Team Fortress 2

I think this thing is a monster!!!It's a pop-up window that offers a free scan of your computer for internet clean-up or some such thing.I clicked on it for a second I'm stuck. I'd be very interested to hear the response you received from the e-mail you sent them. Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXEO4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXEO4 - HKLM\..\Run: [VTTimer] VTTimer.exeO4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exeO4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exeO4 - HKLM\..\Run: [YBrowser] C:\Program Files\Yahoo!\browser\ybrwicon.exeO4

Do this before continuing. I would really appreciate it, thank you.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 10:39:24 PM, on 3/15/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16473)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil I didn't click on 'yes' to install, I clicked 'no' but a bit later it came back and I clicked on the'x' in the top corner to close it down but Newer Than: Search this thread only Search this forum only Display results as threads Useful Searches Recent Posts More...

Elapsed time 00:00:26 ******** 4:14 PM: | Start of Session, Thursday, November 17, 2005 | 4:14 PM: Spy Sweeper started 4:14 PM: Sweep initiated using definitions version 574 4:14 PM: Starting A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of the SmitfraudFix report into your next reply along with a new HijackThis log. o Click Preferences. A Winfixer icon also came up on the desktop.

All rights reserved. It's website is in http://www.winfix.com/WinFixer 2005 is the Adware product (not recommended to use). Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file)O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file)O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} this contact form select 'Delete an NT Service" ...

I ran Norton AntiVirus. Try to scan the system using Ad-aware SE You can get it from http://www.lavasoftusa.com/support/download/If not, use the removal tool from Symantec http://securityresponse.symantec.com/avcenter/venc/data/trojan.vundo.removal.tool.htmlIf that will not help, I suggest that you post Install and keep updated, Ad-Aware SE, and Spybot S&D.

When msconfig opens, click the Launch System Restore Button.

Attached Files: hijackthis.log File size: 9.7 KB Views: 1 scan results.doc File size: 67 KB Views: 2 shaynewasdenfan, Sep 21, 2005 #1 chaslang MajorGeeks Admin - Master Malware Expert Staff Member Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. Reboot. Iit should look like this VundoFix V2.1 by Atri By pressing enter you agree that you are using this at your own risk Please seek assistance at one of the following

On the page that opens, scroll down to CWShredder Service ... hopefully it looks clean, my computer is running really smoothly now!!!! Is it a virus? It is far more secure than Internet Explorer.

SHOW ME NOW CNET © CBS Interactive Inc.  /  All Rights Reserved.