Virus? (myspace link????)

raygt13 · Nov 7, 2005

I have a virus that is sending everyyone on my Aol Instant messenger a link to a myspace site
OS xp home

heres a hijack this log

Shadow_Puter_Dude · Nov 7, 2005

Please follow the instructions in the below thread:
Running Ewido Security Suite

raygt13 · Nov 13, 2005

here is the log (it is to large to attach) soo ill type it out...

Inline log attached!

Shadow_Puter_Dude · Nov 11, 2005

Post a fresh HijackThis log.

raygt13 · Nov 12, 2005

heres the bew hijack this log

Shadow_Puter_Dude · Nov 12, 2005

Please run Spybot again make sure you do the following before scanning:

Fixing SpyBot's Ignore Products Bug:
Please run SpyBot and get into the Advanced mode by selecting Mode and then Advanced mode. Then select Settings and the in the left column select Ignore Products. In the right window pane make sure the All products tab is selected. Then in that window, right click your mouse and choose "Deselect all". Now exit Spybot. We will run a scan later.
Click to expand...

Then post a fresh HJT log when that is done.

raygt13 · Nov 15, 2005

heres the new HJT log

Shadow_Puter_Dude · Nov 15, 2005

Scan with HijackThis and fix the following:

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.esearch2005.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.esearch2005.com/sp2.php
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.esearch2005.com/sp2.php
R3 - URLSearchHook: (no name) - {0FD7DAF0-BBEF-4990-B19E-2805D280571F} - (no file)
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O15 - Trusted Zone: www.archiviosex.net
O15 - Trusted Zone: www.skymasters.biz
Click to expand...

Reset your web setting by following the directions in this thread How to Reset Web Settings

Are you disabling startup items with MSConfig? If so, stop using MSConfig to disable startups, we need to see everything so it can be cleaned.

Log in or Sign up

Virus? (myspace link????)

raygt13 Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

raygt13 Private E-2

Attached Files:

Ewido Log.txt

Shadow_Puter_Dude MG Authorized Malware Fighter

raygt13 Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

raygt13 Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

Log in or Sign up

Virus? (myspace link????)

raygt13 Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

raygt13 Private E-2

Attached Files:

Ewido Log.txt

Shadow_Puter_Dude MG Authorized Malware Fighter

raygt13 Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

raygt13 Private E-2

Attached Files:

hijackthis.log

Shadow_Puter_Dude MG Authorized Malware Fighter

Useful Searches