Go Back   Computer Juice > Computer Software > Virus, Spyware & Security
Register Points Site Spy New Posts Donate Unanswered Posts Search Forum Rules


Reply
 
LinkBack Thread Tools
  #1  
Old 11th Nov 2007, 06:01 AM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

I have run HiJack This as I know I have a virus somewhere doing something but I'm not that great to know what it is lol. Shall I just post the log here? Although I did run it about a week ago and posted it on a forum which failed to get back to me at all so shall I re-run it and post the log or just post the one I already have?
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #2  
Old 11th Nov 2007, 06:16 AM
mbonwick's Avatar
Member Group
Intel Nvidia
mbonwick is offline
Send a message via MSN to mbonwick
 
Join Date: 11th Oct 2007
Last Online: 15th Nov 2008 05:17 AM
Age: 15
Posts: 164
iTrader: (0)
mbonwick is on a distinguished road
Default Virus

Re-run HijackThis and post the log up here. See Guide For Attaching Logs To A Post
Also, did you change Hijackthis.exe file to analyze.exe because some viruses etc can hid from Hijackthis.exe
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #3  
Old 11th Nov 2007, 06:18 AM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

Yes, I have already downloaded it and renamed it to analyse.exe. I will post the log on here soon :) thanks.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #4  
Old 12th Nov 2007, 01:26 PM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

Hey, I've re-run HiJack This.

Any help would be appreciated. Thank you :)
Attached Files
File Type: txt log.txt (9.6 KB, 25 views)
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #5  
Old 12th Nov 2007, 01:45 PM
evilfantasy's Avatar
Moderator Group
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: 15th Jul 2007
Last Online: Today 10:34 AM
Posts: 5,334
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Virus

I think a few of the things you have downloaded came with some extra baggage.

* Please download Combofix by sUBs. Place it on your Desktop. combofix.exe
* Double click combofix.exe & follow the prompts. Enter 1 and press enter at the prompt.
* When finished, it shall produce a log for you. Attach that log in your next reply.

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall.
__________________
.
.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #6  
Old 12th Nov 2007, 02:56 PM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

Have ran that. My computer has been running really weird lately. It's deleted any updates that Internet Explorer or Firefox made and makes it go back to the old versions and sometimes won't let me open programs such as Windows Media Player or any kind of image editing programs and AVG is acting weirdly, also with the updates as it says my computer clock is in front of the AVG update when it's not.
Attached Files
File Type: txt combofix.txt (5.3 KB, 11 views)

Last edited by lolli_pop : 12th Nov 2007 at 02:57 PM.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #7  
Old 12th Nov 2007, 03:00 PM
evilfantasy's Avatar
Moderator Group
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: 15th Jul 2007
Last Online: Today 10:34 AM
Posts: 5,334
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Virus

Without following my instructions and providing logs I can't see where the problems are and know how to instruct you to remove them.

Combofix has backups in C:\qoovox
Go there and get me the log and post it please.

Or run Combofix again and post the log.
__________________
.
.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #8  
Old 12th Nov 2007, 03:09 PM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

I have just posted the log. Is it not the right one?
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #9  
Old 12th Nov 2007, 03:12 PM
evilfantasy's Avatar
Moderator Group
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: 15th Jul 2007
Last Online: Today 10:34 AM
Posts: 5,334
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Virus

Got it, you edited it in and I was already responding to your post.

BRB.
__________________
.
.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #10  
Old 12th Nov 2007, 03:21 PM
evilfantasy's Avatar
Moderator Group
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: 15th Jul 2007
Last Online: Today 10:34 AM
Posts: 5,334
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Virus

OK, post a fresh HijackThis log please.
__________________
.
.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #11  
Old 12th Nov 2007, 03:25 PM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

Ok, thank you.
Attached Files
File Type: txt log 2.txt (9.6 KB, 9 views)
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #12  
Old 12th Nov 2007, 03:41 PM
evilfantasy's Avatar
Moderator Group
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: 15th Jul 2007
Last Online: Today 10:34 AM
Posts: 5,334
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Virus

Open HijackThis and select "Do a system scan only"
Place a check mark next to these entries.
R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\comet\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)

Close all windows except for HijackThis and click "Fix checked"

=====
C:\Program Files\Virgin Broadband\advisor\Broadbandadvisor.exe <--Is this Antivirus?

If it is antivirus you will need to uninstall it. Running two AVs can cause conflicts.

=====

Please follow these directions carefully.

Run the BitDefender Online Scanner[FONT=Arial][SIZE=2]
Agree to the license and then select Scan.
DO NOT CHANGE THE OPTIONS TO SHOW ALL FILES SCANNED.
That will make your logs huge and we don't need to see clean files.
[/SIZE][/FONT]
Once Bitdefender completes the scan:
Click-on the Detected Problems tab.
Then select Click here to export the scan report.

When the window comes up to save the report, change the Save as type: box to:
Text (Tab Delimited) (*.txt) and then in the File name box enter change to bdscan then click Save.

This will save a file named bdscan.txt. I would suggest saving it to the Desktop so you can easily find it. (take notice of where you save it so you can find it later).
This bdcan.txt file will actually contain HTML code that we can easily view later while reviewing your log. All we have to do is rename the file to bdscan.html.

If you do not follow these step, you will have an incorrect log or worse a log summary which is useless to us.

Post the bdscan.txt file as an Attachment.
[SIZE=1]Thanks To Chaslang For The Bitdefender Guide!
[/SIZE]
=====

The BitDefender scan will take a little while.

Next post please add:
BitDefender log
Fresh HijackThis log

Tell me about the Virgin Broadband Advisor
__________________
.
.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #13  
Old 17th Nov 2007, 07:34 AM
No Avatar
Member Group
 
lolli_pop is offline
 
Join Date: 2nd May 2007
Last Online: 13th Nov 2008 08:50 AM
Posts: 45
iTrader: (0)
lolli_pop is on a distinguished road
Default Virus

Hey, sorry I didn't get back to you. I tried getting back on the site after deleting those things you said but it kept saying that this website server was taking too long to load.

The anti-virus you're talking about is Virgin Antivirus, and I kept it on the computer because I like AVG but my sister likes Virgin so she put both on.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote
  #14  
Old 17th Nov 2007, 08:42 AM
evilfantasy's Avatar
Moderator Group
Intel ATi
evilfantasy is online now
Send a message via Yahoo to evilfantasy
 
Join Date: 15th Jul 2007
Last Online: Today 10:34 AM
Posts: 5,334
iTrader: (0)
evilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond reputeevilfantasy has a reputation beyond repute
Default Virus

Running two AVs is counter productive. You two need to decide on one and remove the other.

What about the logs.

BitDefender log
Fresh HijackThis log
__________________
.
.
Digg this postDel.icio.us this postReddit this post Stumble this postFacebook this post
Reply With Quote

Please support this forum, donate towards our running costs.
Reply

Thread Tools
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Virus or not? ct122592 Virus, Spyware & Security 4 2nd Jul 2008 06:35 PM
A pop-up virus durial666 Virus, Spyware & Security 1 31st Jan 2008 07:24 AM
How can I get help for a virus that has Patricia L Virus, Spyware & Security 7 20th Jun 2007 11:32 AM
Virus? carpious Virus, Spyware & Security 12 6th May 2007 08:49 AM
avg virus scanner: when i delete a file from the virus... tell me all!!! Virus, Spyware & Security 1 19th Mar 2007 11:45 AM


Copyright ©2006 - 2008 Computer Juice.

Powered by vBulletin® Copyright ©2000 - 2008 Jelsoft Enterprises Ltd. SEO by vBSEO ©2008, Crawlability, Inc.