Having trouble with Virus and spyware

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by juniorbilko, Dec 15, 2005.

  1. juniorbilko

    juniorbilko Private E-2

    Hi

    Ive recently had some spyware and virus trouble, ive managed to remove most I think, hopefully, but Im really no expert and believe there is still some on my computer but im not sure so could anyone please check my hijackthis log please.

    here it is:

    Edit by chaslang: Inline log removed

    Thanks for your help

    from juniorbilko
     
    Last edited by a moderator: Dec 15, 2005
    juniorbilko, Dec 15, 2005
    #1
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Please follow our standard cleaning procedures which are necessary for us to provide you support. Also there are steps included for installing, running, and posting HijackThis logs as attachments. No logs should be posted without running the READ & RUN ME and all logs must be attachments.

    Please follow the steps below:

    - Run ALL the steps in this Sticky thread READ & RUN ME FIRST Before Asking for Support

    Make sure you check version numbers and get all updates.

    - Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.


    After doing ALL of the above you still have a problem make sure you have booted to normal mode and run the steps in the below link to properly use HijackThis and attach a log:

    Downloading, Installing, and Running HijackThis

    .
     
    chaslang, Dec 15, 2005
    #2
  3. juniorbilko

    juniorbilko Private E-2

    Done steps to clear spyware etc, couldnt remove somethings, hers my logs

    Hi

    thanks for the reply to my last thread chaslang,

    I've gone through the steps here

    http://forums.majorgeeks.com/showthread.php?t=35407

    removed what there was expect trojan-downloader-hochladen that spysweeper found.

    After the steps it said I could post my logs so I've attached my hijackthis log and panda scan log,

    thanks

    from juniorbilko
     

    Attached Files:

    juniorbilko, Dec 16, 2005
    #3
  4. AbbySue

    AbbySue MajorGeeks Administrator

    @ juniorbilko..I have merged your threads together...please stay in one thread to avoid confusion. Thanks!:)
     
    AbbySue, Dec 16, 2005
    #4
  5. juniorbilko

    juniorbilko Private E-2

    Sorry about that and thanks,

    also I forgot to reboot into normal mode with all process running and then do a hijackthis log, so I'm attaching a new hijackthis log while running in normal mode, I appologise for this too,

    thanks for the help

    from juniorbilko
     

    Attached Files:

    juniorbilko, Dec 16, 2005
    #5
  6. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    If you are using WinXP or WinMe, make sure you have system restore disabled (per the tutorial).
    For all OS types, make sure viewing of hidden files is enabled (per the tutorial).

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:
    O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)
    O20 - Winlogon Notify: msctl32.dll - C:\WINDOWS\system32\msctl32.dll (file missing)

    After clicking Fix, exit HJT.
    Boot into safe mode and use Windows Explorer to delete (if found):
    C:\WINDOWS\system32\msctl32.dll
    C:\WINDOWS\system32\scmt16_0.#xe

    If you get an error when deleting a file. Right click on the file and check to see if the read only attribute is checked. If it is, uncheck it and try again. Other wise open Task Manager and kill the process if running then delete the file.

    Now run Ccleaner (installed while running the READ ME FIRST). Now if running Win XP goto c:\windows\Prefetch and delete all files in this folder.

    Now reboot in normal mode and post a new HJT log. And tell us how things are working.
     
    chaslang, Dec 17, 2005
    #6
  7. juniorbilko

    juniorbilko Private E-2

    Hi

    thanks for your reply and your help.

    Firstly not long after posting my new hijackthis log microsofts antispyware updated and and removed the trojan-downloader-hochladen that spysweeper wouldnt remove which is good.

    So on the new hijackthis log the line:
    O20 - Winlogon Notify: msctl32.dll - C:\WINDOWS\system32\msctl32.dll (file missing)

    no longer exists.

    Upon fixing the line:
    O2 - BHO: (no name) - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - (no file)

    with hijackthis the file C:\WINDOWS\system32\scmt16_0.#xe disapperead so I guess that got rid of that for me.

    Both files were removed so werent found when searching for them with explorer.

    I'll post my new Hijackthis log and the ms antispyware log to show you what it removed.

    Thanks for your help, very much appreciated,

    Excellent Job!!! Excellent Forum!!!
     

    Attached Files:

    juniorbilko, Dec 18, 2005
    #7
  8. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Your log is clean! Are you having any other malware problems?
     
    chaslang, Dec 18, 2005
    #8
  9. juniorbilko

    juniorbilko Private E-2

    Hi

    non at all everything seems completly cleared thanks, even though you didnt need to do much it was still a big help for me.

    Well i know exactly where to go if I ever have any more problems but from what I can read on here about protection advice and all this different software I cant see myself having much of a problem anymore.

    Your help is very much appreciated

    thanks

    from juniorbilko. :)
     
    juniorbilko, Dec 18, 2005
    #9
  10. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    You're welcome. No protection schemes are absolutely perfect but they can help especially when couple together with a more educated user that surfs more wisely. ;)

    You should check out the below:

    How to Protect yourself from malware!
     
    chaslang, Dec 18, 2005
    #10

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds