hijack log

Discussion in 'Malware Help (A Specialist Will Reply)' started by subverse, Dec 5, 2005.

  1. subverse

    subverse Private E-2

    after following the directions found here:
    http://forums.majorgeeks.com/showthread.php?t=38752

    it appeared as if i had won the battle and a final scan with S/D showed no spyware. About 15 min later my browser showed some evidence of adware and
    i did another SD scan and found that i again had about 10 entries.
    entries are:
    avenue A, Inc.
    BFast
    FastClick
    ValueClick

    also a.tribalfusion loads alot of adds and my browser often bogs down because it is waiting for a.tribalfusion.com

    my log file is attached any help is appreicated thanks
     

    Attached Files:

  2. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Are you in China? At least your home page would indicate that you are.
     
  3. subverse

    subverse Private E-2

    yeah ive been living in china for about the last year now. currently in beijing studying chinese.
     
  4. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Do you recognize C:\Program Files\±±_c3ÇEDEEµaxEѶODI_1«E_\Dr.COM ¿i'o¿I»§¶E\ishare_user.exe

    It would appear that the follow is realted to the above program:
    O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog1.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdog1.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdogr0.dll
    O10 - Unknown file in Winsock LSP: c:\windows\system32\tcpipdogr0.dll
     
  5. subverse

    subverse Private E-2

    Yeah, Dr. com is an essential program. Its from my isp and its used to connect to the net.

    another thing i forgot is that my pc has started to make a sort of double click sound on its own. (its not the harddrive killing itself) but is an auctual double click sound from the speakers same as when i open a folder. Dont know what the means but its sure annoying.
     
  6. Shadow_Puter_Dude

    Shadow_Puter_Dude MG Authorized Malware Fighter

    Scan with HijackThis and fix the following:
    Follow the direction for Running Spy Sweeper

    Post the Spy Sweeper log and a fresh HijackThis log when done.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds