hi all,
Avast is now taking ages to scan the hard drive, it found Win:32Spyware-gen[Trj] and Win32:Banker-EPQ[Trj] Ad aware on the other hand has found a win32 trojan agent and removed it, on restarting its still slow and after a rescan of adaware the same virus popped up.
this time I want to do it the proper way and check the logs before using combofix.
Logfile of Trend Micro HijackThis v2.0.2
Running processes:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exePartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\Program Files\PartyGaming\PartyPoker\RunApp.exehttp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab http://go.microsoft.com/fwlink/?linkid=39204 http://javadl.sun.com/webapps/download/AutoDL?BundleId=27986 #Id_String1 .6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
–
DrWebCureIt
Any help with this would be great thanks a lot.
Tom
system
July 6, 2009, 11:06pm
4
Hi all I noticed that rundll.exe is also written as RUNDLL.EXE does this matter?
Tarq57
July 6, 2009, 11:54pm
5
I’m not trained in the analysis of HJT logs, but can you post the full filenames and paths of each of the files removed/quarantined by Avast and AdAware.
Windows Service Pack 3 has been available for over a year and contains several Critical Security updates plus performance improvements you need to start Internet Explorer then go to Tools then Windows Update and download all of the available updates.
Also you should enable Automatic Updates or at least be notified that Updates are available.
Go to Control Panel then Automatic Updates then select Automatic (recommended) or at least Notify me but don’t automatically download or install them.
Install User Profile Hive Cleanup Service to help with slow log off and unreconciled profile problems:http://www.microsoft.com/DOWNLOADS/details.aspx?familyid=1B286E6D-8912-4E18-B570-42470E2F3582&displaylang=en
Ad-Aware has not kept up with the times and is a waste of hard disk space.
Run Secunia Online Software Inspector to find other vulnerable applications:http://secunia.com/vulnerability_scanning/online
Sorry the hijack… but, YoKenny, is there any similar tool to Vista?
system
July 7, 2009, 12:43pm
8
Vista and Windows 7 already has User Profile Hive Cleanup Service installed called User Profile Service
This service is responsible for loading and unloading user profiles. If this service is stopped or disabled, users will no longer be able to successfully logon or logoff, applications may have problems getting to users’ data, and components registered to receive profile event notifications will not receive them.
system
July 7, 2009, 12:47pm
9
And he got a disk clean up too if you click in propriety of the current disk drive you select.
Living and learning… Thanks.
system
July 7, 2009, 1:33pm
11
What the heck are you talking about?
I don’t think you have mush (much) education and you need to pay more attention in English class that is if you do go to school.
@Tech Global Warming ?
It’s global, not local ;D
system
July 7, 2009, 1:41pm
13
Go to your Computer then select the C: right click on it then you should see where you see the disk space a tool that they offer for clean up no needed file. Im really good at english by the way. For sure its not my first language and i can say if you can understand me now a day its a great thing. No to be arrogant but i hate when some 1 say im bad at english so please try to avoid this way of me.
Thank you very mush.
Mr.Agent