Win32 Worm I think!

akpud · Mar 15, 2007

A few days ago, my computer (Gateway Tablet XP) started to freeze after about 30-45 minutes on inactivity. Upon reboot, it was back to normal. Best Buy ran diagnostics and advised that it is not a hardware issue (although the fan is running alot more than normal).

In msconfig Startup I noted an entry "NA" located in HKLM\Software\Microsoft\Windows\Currentversion\Run - which I could not locate in the Registry. It is now gone and has been replaced by a blank where the "NA" used to be - but refers to the same registry location.

I have followed the entire Malware Removal Guide and will upload the remaining logs in a few moments. I was unable to run Panda and it froze twice. Counter Spy picked up two trojans.

Please advise if you see anything in the HJT log.

Many thanks,

AK

akpud · Mar 15, 2007

And here are the remaining logs. I seem to have misplaced the CounterSpy log. I will re-run and attach shortly.

Thanks for all your help,

AK

akpud · Mar 15, 2007

CounterSpy Log attached.

Thanks!
AK

chaslang · Mar 15, 2007

Hardware problems like this are rarely malware related. Yours is no exception.

You need to look elsewhere.

overheating

since you say it happens after being idle, are you having problems with a screen blanker or recovery from sleep mode or hibernate mode....etc

possible software conflicts. Did you install anything new prior to this happening? Don't overlook anything that was updated too since that is also really new.

Either way, you are going to have to continue this in the Hardware Forum since your problem is not malware.

akpud · Mar 15, 2007

Thanks for the response - but can you give me any feedback on the HJT log and especially on that unusual entry in the Startup?

Many thanks,
AK

chaslang · Mar 15, 2007

There were no problems shown in your logs otherwise I would have indicated things to do.

You can uninstall CounterSpy since it is no longer needed. And you could uninstall the old Sun Java version you are running and update to the current Sun Java version. However none of this has anything to do with your problem.

akpud · Mar 16, 2007

Thanks again - I'll move over to Hardware to see if we can troubleshoot there.

AK

chaslang · Mar 16, 2007

You're welcome and good luck!

Log in or Sign up

Win32 Worm I think!

akpud Private E-2

Attached Files:

hijackthis.log

runkeys.txt

newfiles.txt

akpud Private E-2

Attached Files:

bdscan.txt

akpud Private E-2

Attached Files:

Counterspy.txt

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

akpud Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member

akpud Private E-2

chaslang MajorGeeks Admin - Master Malware Expert Staff Member