limping

Discussion in 'Malware Help (A Specialist Will Reply)' started by loudstudios, Jan 25, 2007.

  1. loudstudios

    loudstudios Private E-2

    hello gracious wizards :wave

    computer seems to freeze up randomly. I believe I did all the steps and I have attached the AVG scan, the bitdefender scan, the panda scan and a link to the hijackthis.log

    http://www.members.shaw.ca/loudstudios/hijackthis.log



    many thank yous in advance
     

    Attached Files:

  2. loudstudios

    loudstudios Private E-2

    oops....do't mind that link....here are the additional files :eek:
     

    Attached Files:

  3. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Run CCleaner and delete all cookies and temp files.

    Please copy the bold text below to notepad. Save it as fixME.reg to your desktop. Be sure the "Save as" type is set to "all files" Once you have saved it double click it and allow it to merge with the registry.
    Do you know what these are?
    C:\Windows\report
    WinSCP3
    C:\WINDOWS\system32\dvcsta~3.dat
    C:\WINDOWS\system32\dvcsta~4.dat

    Delete all old versions of Java including:
    Java 2 Runtime Environment, SE v1.4.2_01"
    Java 2 Runtime Environment, SE v1.4.2_03"
    Java 2 Runtime Environment, SE v1.4.2_05"

    Make sure to reboot after uninstall the above.

    After reboot, now install the current version of Sun Java from: Sun Java Runtime Environment

    Delete:
    Messenger Plus 3
    When we are done you need to update your security and install SP2!!

    Find and delete:
    realsched.exe
    c:\windows\system32\ldcore.dll
    C:\Program Files\Paltalk\pticon1.dll

    Run HijackThis and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot G
    O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeO4 - HKLM\..\Run: [MSN Messenger] C:\WINDOWS\ServicePackFiles\i386\msmsgs.exe
    O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O20 - Winlogon Notify: msldr32 - msldr32.dll (file missing)
    O20 - AppInit_DLLs: c:\windows\system32\ldcore.dll
    O21 - SSODL: Internet Explorer - {F28A40D7-AD0E-034A-C651-5F0ED76232E6} - (no file)

    After clicking Fix, exit HJT.

    attach new logs for"
    ShowNew
    GetRun
    HJT

    Tell us how things are running.
     
  4. loudstudios

    loudstudios Private E-2

    thank you very much for your time. It really is a fantastic service you're doing for folks.

    I took my rig to the shop due to a fast approaching deadline on a project. I didn't get a full explanation of what he did, but here is a log after the fix and some stills he made of stuff he was doing. Not sure if it helps you, but if you would like anything else, just let me know.

    Thank you once again!

    http://www.members.shaw.ca/loudstudios/hijackthis.log
    http://www.members.shaw.ca/loudstudios/major/1.jpg
    http://www.members.shaw.ca/loudstudios/major/2.jpg
    http://www.members.shaw.ca/loudstudios/major/3.jpg
    http://www.members.shaw.ca/loudstudios/major/4.jpg
    http://www.members.shaw.ca/loudstudios/major/5.jpg
    http://www.members.shaw.ca/loudstudios/major/6.jpg
    http://www.members.shaw.ca/loudstudios/major/7.jpg
     
  5. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    Yes, we asked you to run spybot in the instructions.
    We asked you to run BitDefender.
    Ditto for Ad-aware,AVG Anti-spyware (or Counterspy),Panda (as opposed to Xoft), as well as HJT.

    I trust you are clean now.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds