system\driver

helwin · Apr 1, 2005

I have cleaned my computer with Lavasoft, Spybot, McAfee (found two files in my system folder, driver\ntsrv and driver\csrss, (potenially dangerous), (Firewall doesn't like them}and McAfee couldn't delete them, so I quaranteed them), scanned with Trend Micro(found nothing) and I use SpywareBlaster. Something installed while my son was on the computer, it did not prompt, just installed by itself, but he didn't catch what it was. He, of course, downloads a lot of movies and music, and always collects some spyware too!
I am not sure what to delete out this log, so do appreciate someone looking at it and advising me...............

Edit by chaslang: Unrequested, old version, inline log removed

chaslang · Apr 1, 2005

Please read the sticky threads and follow forum guidelines relating to posting HJT logs. You do not even have the proper version.

To help us to best help you, please follow the steps below closely and in the order given and do not skip anything. If you have any difficulty, please post back letting us know what steps you have completed, what you found while doing the scans if anything along with details about any problems you may have encountered in completing the steps. The more details you can provide the better. Don't be afraid to ask for additional help if you don't understand something!

- Run ALL the steps in this Sticky thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal Make sure you check version numbers and get all updates.

- Very Important: Make sure you tell us the results from running the tutorial...was anything found? Were you unable to complete any of the scans?...Were you unable to download any of the tools?...Did you do the on-line scans as suggested? etc.

After doing ALL of the above you still have a problem:

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).

Log in or Sign up

system\driver

helwin Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member