HSA removal - housecleaning done, please check HJT log.

gary barker · Dec 22, 2005

I followed the "do this first" cleaning procedures to clean HSA infection. Please check my Hijack log and advise if it appears clean. Thanks in advance!

Edit by chaslang: Cleaning steps not run. Inline logs removed

chaslang · Dec 22, 2005

Please follow forum procedures and guidelines and do not post any logs inline. Also HJT logs must only be attached after the READ & RUN ME FIRST Before Asking for Support sticky steps have been run.

However note, on quick glance I did not see any signs of an HSA hijacker. But it does seem strange tha HJT would show the below:
O1 - Hosts file is located at: C:\WINNT\System32\drivers\etc\hosts

This is not normally shown especially if it is the default file with default contents.

gary barker · Dec 23, 2005

Thanks for looking at the log. I have run sticky steps, will post logs as attachments. Under a bit of time crunch at the moment.

chaslang · Dec 23, 2005

gary barker said:

Thanks for looking at the log. I have run sticky steps, will post logs as attachments. Under a bit of time crunch at the moment.
Click to expand...

Okay! But are you actually still having problems with HSA. I did not notice any HSA related info in your HJT log. That does not mean that there are no other hidden files from it on your PC. It just means that HJT is not showing anything because the infection is no longer showing itself as usual. It could be dormant. Are you sure you had an HSA hijacker?

Log in or Sign up

HSA removal - housecleaning done, please check HJT log.

gary barker Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

gary barker Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member