Could someone please check these logs? n_n

Discussion in 'Malware Help (A Specialist Will Reply)' started by Lozzenger2, Jan 4, 2008.

  1. Lozzenger2

    Lozzenger2 Private E-2

    Hey, this isn't the same computer as last time.
    I'd just like to have this one checked through if that's okay.
    It's quite slow, but that may also be due to too many applications running.
    Better to be safe than sorry though =]
     

    Attached Files:

  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

    Uninstall the below old versions of software:
    Java(TM) 6 Update 2

    Make sure you reboot after uninstalling the above! Do not skip this.

    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment


    Run C:\MGtools\analyse.exe by double clicking on it. This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [hide rule] C:\DOCUME~1\Dodd\APPLIC~1\THESIG~1\First Great Less.exe

    After clicking Fix, exit HJT.

    Only the [hide rule] line was from an infection. Other than that you are clean.

    With regards to slowness, see below.

    What are the below for? Do you really need them?
    O4 - HKLM\..\Run: [MacrokeyManager] WTMKM.exe
    O4 - HKLM\..\Run: [BigDogPath323VMSnap] C:\WINDOWS\VMSnap23.exe
    O4 - HKLM\..\Run: [BigDogPath323Domino] C:\WINDOWS\Domino.exe
    O4 - Startup: DeskPins.lnk = C:\Program Files\DeskPins\DeskPins.exe
    O4 - Startup: Last.fm Helper.lnk = C:\Program Files\Last.fm\LastFMHelper.exe

    The below are a waste of system resources and more than likely not needed.
    O4 - HKCU\..\Run: [Yodm3D] C:\Documents and Settings\Dodd\Desktop\Yodm3D\Yod'm 3D\Yodm3D.exe
    O4 - HKLM\..\Run: [BJCFD] C:\Program Files\BroadJump\Client Foundation\CFD.exe
    O4 - HKLM\..\Run: [AGEIA PhysX SysTray] "C:\Program Files\AGEIA Technologies\TrayIcon.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
    O4 - HKCU\..\Run: [TopDesk] C:\Program Files\TopDesk\topdesk.exe
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds