There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
 
Tag Cloud
audio avg avg 8 bios boot browser bsod computer cpu crash css dell desktop driver dvd email error excel explorer firefox firefox 3 freeze game graphics hard drive hardware help please hijackthis hjt install internet internet explorer itunes javascript lan laptop malware missing monitor msn network networking openoffice outlook outlook 2003 outlook express php popups problem problems router seo slow sound sp3 spyware startup trojan usb video virtumonde virus vista vundo windows windows vista windows xp winxp wireless word
Malware Removal & HijackThis Logs
Search
Search in:
 
Advanced Search
Tech Support Guy Forums > Security & Malware Removal > Malware Removal & HijackThis Logs >
Solved: Hijack this log!


HELLO AND WELCOME! Before you can post your question, you'll have to register -- it's completely free! Click here to join today! We highly recommend that you print a copy of our Guide for New Members. Enjoy!

 
Thread Tools
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
26-Apr-2008, 08:23 PM #16
THat didn't work either... Sometimes on startup AVG still tries to do a complete scan for sumthing about hosts file ......
Could u plesase help me with my browser problem???
When i fully load an online video such as Youtube and i might accidently click "back" or something, when i come back to the video I have to reload it again... This becomes REALLY frustrating especially when its a long video... This never used to happen before but suddenly this problem appeared.
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
26-Apr-2008, 09:01 PM #17
I uninstalled AVG and now i have figured out that the "other" anti -virus program is Avast! which i had a LONG time ago... how do i get rid of it??? Ive tried using the Avast uninstall utility AND i've also tried to install the Exact same version and uninstall it but that didn't work...

Help! loading online videos is still a problem for me...

Last edited by Mucknie : 26-Apr-2008 09:42 PM.
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
27-Apr-2008, 01:11 PM #18
I don't see anything related to Avast in your HJT log.
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
27-Apr-2008, 09:07 PM #19
thats weird... it clearly states under the Anti-Virus tab that Avast! Anti-Virus is protecting me..

I've tried everything....reinstalling, then uninstalling & also The Avast! uninstall utility... none of them work.... Any other ideas???
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
28-Apr-2008, 10:24 AM #20
Download OTScanIt.exe to your Desktop and double-click on it to extract the files. It will create a folder named OTScanIt on your desktop.
  1. Close any open browsers.
  2. If your Real protection or Antivirus intervenes with OTScanIt, allow it to run.
  3. Open the OTScanit folder and double-click on OTScanit.exe to start the program.
  4. In the Drivers section select Non-Microsoft
  5. In the Additional Scans section select Evnt
  6. Now click the Run Scan button on the toolbar.
  7. The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes.
  8. When the scan is complete Notepad will open with the report file loaded in it.
  9. Save that notepad file


Please post the resulting log here as an attachment.
  • Click on the orange Post a Reply! button
  • scroll down to Manage Attachments
  • Click in the box that says Upload File from your Computer
  • Click the Browse... button and find the file then click open
  • Click the Upload button
  • Wait until you see Current Attachment and your file name
  • Click on Close this window
  • Then submit the reply.
__________________
Microsoft MVP/Windows - Consumer Security


If we have helped you, please consider making a donation to TSG!
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
30-Apr-2008, 02:57 PM #21
I received a reply e-mail, what happened?
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
01-May-2008, 04:57 AM #22
i don't know, it won't let me attach, when i do on the manage attachments popup, i upload the file and i see "Otscan Log" under current attachments yet when i click close this window the file's gone...

Should i try emailing it to you or something, i can't post it because its WAY too big, or should i post the log in parts, but that might be really confusing...
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
01-May-2008, 11:34 AM #23
OK, I sent you my e-mail addy.
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
02-May-2008, 03:39 AM #24
Hey

I sent it, so i hope u got it!!!
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
02-May-2008, 03:41 AM #25
BTW a random file called "thumbs.db" appeared on my desktop what should i do??
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
02-May-2008, 01:53 PM #26
I did not get the e-mail. Check the address again and try sending again.

thumbs.db is created when you view pictures say from a camera or other and use thumbnail view. Once the pictures are closed you can delete the file.
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
03-May-2008, 09:34 PM #27
Yes i got it:

It should be attachted
!!!!
Attached Files
File Type: txt OTScanIt.Txt (480.1 KB, 10 views)
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
04-May-2008, 01:22 PM #28
Start OTScanIt. Copy/Paste the information in the Code box below into the pane where it says "Paste fix here" and then click the Run Fix button.


Code:
[Kill Explorer]
[Unregister Dlls]
[Win32 Services - Non-Microsoft Only]
YY -> (OKAYW) OKAYW [Win32_Own | Disabled | Stopped] -> %SystemDrive%\DOCUME~1\Fung\LOCALS~1\Temp\OKAYW.exe
[Files/Folders - Created Within 30 days]
NY -> 13 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp
NY -> 5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp
[Files/Folders - Modified Within 30 days]
NY -> 13 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp
NY -> 1000051.exe -> C:\Documents and Settings\Fung\Local Settings\temp\1000051.exe
NY -> 2 C:\Documents and Settings\Fung\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Fung\Local Settings\temp\*.tmp
NY -> ceiyesky24A146A.dll -> C:\Documents and Settings\Fung\Local Settings\temp\ceiyesky24A146A.dll
NY -> 2 C:\Documents and Settings\Fung\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Fung\Local Settings\temp\*.tmp
NY -> 2 C:\Documents and Settings\Fung\Local Settings\temp\*.tmp files -> C:\Documents and Settings\Fung\Local Settings\temp\*.tmp
[Empty Temp Folders]
[Start Explorer]
[Reboot]

The fix should only take a very short time. When the fix is completed a message box will popup telling you that it is finished. CLick the Ok button and Notepad will open with a log of actions taken during the fix. Post that information back here along with a new Hijackthis log.

I will review the information when it comes back in.

Also let me know of any problems you encountered performing the steps above or any continuing problems you are still having with the computer.
__________________
Microsoft MVP/Windows - Consumer Security


If we have helped you, please consider making a donation to TSG!
Mucknie's Avatar
Member with 71 posts.
 
Join Date: Dec 2007
05-May-2008, 07:17 AM #29
I've posted both...
Attached Files
File Type: log Otscan.log (7.2 KB, 7 views)
File Type: log hijackthis.log (7.5 KB, 8 views)
cybertech's Avatar
Computer Specs
Moderator with 56,053 posts.
 
Join Date: Apr 2002
Location: Washington State
05-May-2008, 01:16 PM #30
Right click on HJT again, Run as Administratorm, and put a check in the following:

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

Close all applications and browser windows before you click "fix checked".


Looks fine. How is it running now? Any problems?
Closed Thread


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are Off
Refbacks are Off

You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 04:40 AM.
Copyright © 1996 - 2008 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.
Search Engine Optimization by vBSEO 3.1.0
Powered by Cermak Technologies, Inc.