Login  Malware Removal & HijackThis Logs |
| |
 Search | |
| | Thread Tools |
24-Dec-2006, 11:52 AM
#1 | |||||
| Solved: Anything wrong? |
| |
26-Dec-2006, 07:47 PM
#2 | |||||
| Hello there, welcome to TSG.  Due to the status of some of the files you have on your computer, I strongly recommend that you do the following immediately. Disconnect the infected computer from the internet until the computer can be cleaned. From a clean computer, change your online passwords-- for email, for banks, eBay, forums etc.... Do not change passwords or do any transactions while using the infected computer because the attacker may get the new passwords and transaction information. You have been infected at some point with a backdoor trojan. Have a read here: http://www.sophos.com/security/analyses/w32rbotfnt.html Start HijackThis, close all open windows leaving only HijackThis running. Place a check against each of the following if still present: O23 - Service: Microsoft Star Window Service - Unknown owner - C:\WINDOWS\system32\dllcache\starwin32.exe (file missing) Click on Fix Checked when finished and exit HijackThis. Make sure your Internet Explorer is closed when you click Fix Checked! Open hijackthis, click 'config' (bottom right) Choose the tab 'misc Tools' on top. Choose 'delete a file on reboot' In the field, copy and paste next: C:\WINDOWS\system32\dllcache\starwin32.exe Click open. Hijackthis will tell you that this file will be deleted on next reboot and if you want to reboot now. When asked if you want to reboot now, say Yes. Please click on start > run > and type: sc delete "Microsoft Star Window Service" Hit enter and let the DOS windows open and close. This is normal. Please perform this online scan: Kaspersky Webscan Read the Requirements and Privacy statement, then select "Accept" A dialogue box will appearing asking "Do you want to install this software?" Name: kavwebscan_unicode.cab Select "Install" to download the ActiveX controls that allows ActiveScan to run. When the download is complete it will say ready, click "Next" Select a target to scan: Click on "My Computer" When the scan is complete choose to save the results as "Save as Text" Post the Kaspersky scan results in your next reply, along with a new Hijackthis log. David |
27-Dec-2006, 06:56 AM
#4 | |||||
| |
27-Dec-2006, 07:43 AM
#6 | |||||
| How is the PC running now, we successfully got rid of that infection. I see a clean Hijackthis log now. |
27-Dec-2006, 07:53 AM
#8 | |||||
| You're most welcome! Follow this list and your potential for being infected again will be reduced dramatically. Use an Anti Virus Software - * It is very important that your computer has an anti-virus software running on your machine. * This alone can save you a lot of trouble with malware in the future. See this link for a listing of some on line & their stand-alone anti virus programs: * Click here for more information on -> Computer Safety On line - Anti-Virus * I would recommend Grisoft's AVG or AVAST. * These are the more secure and better ones. Update your Anti Virus Software - It is imperitive that you update your Anti virus software at least once a week (Even more if you wish). If you do not update your anti virus software then it will not be able to catch any of the new variants that may come out. Use a Firewall - * I can not stress how important it is that you use a Firewall on your computer. * Without a firewall your computer is susceptible to being hacked and taken over. * Simply using a Firewall in its default configuration can lower your risk greatly. * For an article on Firewalls and a listing of some available ones see the link below: * Click here for more information on -> Computer Safety On line - Software Firewalls * I would recommend ZoneAlarm as a firewall as it's easy to use. Visit Microsoft's Windows Update Site Frequently - * It is important that you visit http://www.windowsupdate.com regularly. * This will ensure your computer has always the latest security updates available installed on your computer. * If there are new updates to install, install them immediately, reboot your computer, and revisit the site until there are no more critical updates. Next, if they're not already present, I would recommend the download and installation of some or all of the following programs (all free), and the updating of them regularly Install Spybot© - Search and Destroy- Install and download Spybot - Search and Destroy with its TeaTimer option. * This will provide real-time spyware & hijacker protection on your computer alongside your virus protection. * You should also scan your computer with program on a regular basis just as you would an anti virus software. * A tutorial on installing & using this product can be found here: * Click here for more info -->Instructions for - Spybot S & D and Ad-aware Install Lavasofts© Ad-Aware - Install and download Ad-Aware. * You should also scan your computer with the program on a regular basis just as you would an anti virus software in conjunction with Spybot. * A tutorial on installing & using this product can be found here: * Click here for more info -->Instructions for - Spybot S & D and Ad-aware Install Javacools© SpywareBlaster - * SpywareBlaster will added a large list of programs and sites into your Internet Explorer and Firefox settings and that will protect you from running and downloading known malicious programs. * A article on anti-malware products with links for this program and others can be found here: * Click here for more info -->Computer Safety on line - Anti-Malware Update all these programs regularly - Make sure you update all the programs I have listed regularly. Without regular updates you WILL NOT be protected when new malicious programs are released. If you have any addition questions just ask... David |
| 
techguy.org/529189 |
| Smart Search |
Find your solution! |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
| Thread Tools | |
| |
| You Are Using:  |
Advertisements do not imply our endorsement of that product or service. All times are GMT -5. The time now is 04:43 PM. Copyright © 1996 - 2010 TechGuy, Inc. All rights reserved. Powered by vBulletin, Copyright © 2000 - 2010, Jelsoft Enterprises Ltd. |  |
