virus help

dubman · Nov 17, 2006

hi folks im after some help with a virus avast is detecting , i followed the link http://forums.majorgeeks.com/showthread.php?t=35407 and hopefully ive done all correctly , any help advice how to remove would be greatly received

dubman · Nov 17, 2006

the virus avast is detecting

http://img151.imageshack.us/my.php?image=vir1qc9.png

http://img151.imageshack.us/my.php?image=vir2kt7.png

http://img175.imageshack.us/my.php?image=vir3dq7.png

chaslang · Nov 17, 2006

Welcome to Majorgeeks!

There are 3 or 4 more logs you need to attach from the READ ME.

CounterSpy - ONLY IF you were not able to run Windows Defender

runkeys.txt - the log from GetRunKey.bat

newfiles.txt - the log from ShowNew.bat

HijackThis

However note that what you are posting from Avast:
- item 1 is just in System Restore
- and the other two items seem to be for something you may have installed. Is HP Tunes something you installed and use?

dubman · Nov 18, 2006

hi thanks for the welcome the two other items are in hp tunes , it was installed on the sytem when i got it , i dont use it tho ! i will sort out the other logs a.s.a.p

dubman · Nov 18, 2006

this may sound dumb but how do i get a windows defender log ! ive ran the scan but cant see how to make a log ? have missed something ?

dubman · Nov 18, 2006

here are the other logs , im not sure how to do defender log.

chaslang · Nov 18, 2006

dubman said:

this may sound dumb but how do i get a windows defender log ! ive ran the scan but cant see how to make a log ? have missed something ?
Click to expand...

We did not ask for a Windows Defender log and it does not have a builtin method of creating one.

chaslang · Nov 18, 2006

Why does your HJT log show:

O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto

But your runkeys.txt log does not show it running! Please attach a current HJT log that was obtained without MSconfig being used to control startups.

Are you having any malware problems?

chaslang · Nov 18, 2006

I don't see any problems, but you should uninstall the below old version of Sun Java. You already have the current version installed.
J2SE Runtime Environment 5.0

dubman · Nov 18, 2006

here's the new log , i shut down msconfig by going to run type msconfig , click ok then going to start up and dissable all , the pc then re-boots , i then ran hi jack this , is this right ??? im not having any malware problems the only thing is this 3 things avast is picking up.

dubman · Nov 18, 2006

thanks

chaslang · Nov 18, 2006

dubman said:

here's the new log , i shut down msconfig by going to run type msconfig , click ok then going to start up and dissable all , the pc then re-boots , i then ran hi jack this , is this right ??? .
Click to expand...

No! You need to do what was given in the READ & RUN ME. You run MSconfig and select Normal Startup! What you did was disable everything which means you are using msconfig to stop things from loading which is the exact opposite.

I don't really need a new HJT log if you are not having any problems.

You can toggle system restore as mentioned in step 8 of the READ & RUN ME. This will remove the item I mentioned that is in System Restore. After that, you should work thru the below to help keep you clean:

How to Protect yourself from malware!

Log in or Sign up

virus help

dubman Private E-2

Attached Files:

Activescan.txt

bdscan.txt

dubman Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

dubman Private E-2

dubman Private E-2

dubman Private E-2

Attached Files:

newfiles.txt

runkeys.txt

hijackthis.log

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

dubman Private E-2

dubman Private E-2

Attached Files:

hijackthis.log2.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member