Problems...

Discussion in 'Malware Help (A Specialist Will Reply)' started by Bleecher, Aug 5, 2005.

  1. Bleecher

    Bleecher Private E-2

    Hi

    The other day Mcafee picked up these on my computer:

    C:\windows\system32 W32/spybot.worm.gen Virus
    C:\windows\system32 Generic Packed Trojan

    Mcafee deleted these.

    After a while i started to get a lsass error which stated that my computer needed to shutown and had a 50 second countdown.

    I downloaded the programs from this thread:

    READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal.

    I run the scanners in safemode i have stopped getting the lsass shutdown error but since the "removal" i can no longer view the taskmgr unless in safemode.

    I have also experienced increased network traffic and lag hevaly in games.

    here is my Hijack this log:

    Edit by bjgarrick: Unrequested, Inline HJT log removed!

    Can you help?

    Advanced appreciation
    The Bleecher
     
    Last edited by a moderator: Aug 5, 2005
  2. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Is that your entire log?

    Download the following two files, create a folder on your desktop, call it TSC. Save these 2 files there!

    Sysclean Package

    Pattern.zip

    Once you have these downloaded into the folder you just created, REBOOT INTO SAFE MODE!

    Once in Safe Mode double click the file sysclean.com. When the system cleaner loads, click SCAN to start the scanner. After you have completed the scan reboot and ATTACH the log along with a fresh HJT log.
     
  3. Bleecher

    Bleecher Private E-2

    I can't go into Tskmgr in normal mode and even though Mcafee says its enabled it does not show in the system tray.

    Thanks for your reply.
     

    Attached Files:

  4. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    Scan with HJT and have it fix this entry:

    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://hsremove.com/done.htm

    Generate a StartupList log using HijackThis.
    Run HJT and on the first screen, click the button that says "Open the Misc Tools section". In the next window first select "List also minor sections (full)" and then click the button that says "Generate StartupList log". CLick Yes to the Do you want to continue prompt. Now a notepad window will come up with the Startuplist.txt file. It is already saved in the the directory HJT is running from. So just come back here and upload the file as an attachment to your next message.
     
  5. Bleecher

    Bleecher Private E-2

    Hey

    Here you go.

    Thanks
    Bleech
     
  6. bjgarrick

    bjgarrick MajorGeeks Admin - Malware Expert

    You didnt attach anything?
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds