Home > Hijackthis Log > Hijackthis Log - Constant Popups

Hijackthis Log - Constant Popups

If there's anything that you do not understand, kindly ask your questions before proceeding. That's what the forums are here for. Use your up arrow key to highlight SafeMode then hit enter.5. Jump to content Resolved Malware Removal Logs Existing user? get redirected here

Without this update, you're wide open to re-infection, and we're both just wasting our time.Click HEREApply the update, reboot, run new scan with HijackThis and post the log back here.Regards, 0 Please re-enable javascript to access full functionality. Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dllO9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO9 - Extra 'Tools' All Activity Home Malware Removal Help Malware Removal for Windows Resolved Malware Removal Logs Your Pc Protector - constant popups Privacy Policy Contact Us Back to Top Malwarebytes Community Software by

Several functions may not work. This is normal. Thanks! -- HijackThis Clone ------------------------------------------------------------ Emulating logfile of Trend Micro HijackThis v2.0.2 Scan saved at 2007-11-04 19:52:58 Platform: Windows XP Service Pack 2 (5.01.2600) MSIE: Internet Explorer (7.00.6000.16544) Boot mode: Normal In this case, VundoFix will run on reboot, simply follow the above instructions starting from "Click the Scan for Vundo button" when VundoFix appears upon rebooting. 0 #5 StephinAL Posted 30

All rights reserved. If you need this topic reopened, please request this by sending me a PM with the address of the thread. Panda Activescan got killed partway through so no report from them. RUNDLL error, constant pop-ups...hijack this log inside Started by StephinAL , Aug 24 2007 09:52 AM Please log in to reply #1 StephinAL Posted 24 August 2007 - 09:52 AM StephinAL

Post that log in your next reply. --------------------------------------------------------------------------------------------- FYI - IE-Spyad works with IE7. Windows Internal Firewall is disabled. If you have any future malware related issues please start a new topic. Antivirus *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}============== Running Processes ===============C:\WINDOWS\system32\savedump.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\Alwil Software\Avast5\AvastSvc.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\RTHDCPL.EXEC:\WINDOWS\system32\igfxtray.exesvchost.exeC:\WINDOWS\system32\igfxsrvc.exeC:\Program Files\Elantech\ETDCtrl.exeC:\Program Files\Elantech\ETDDect.exeC:\Program Files\EeePC\ACPI\AsTray.exeC:\Program Files\EeePC\ACPI\AsAcpiSvr.exeC:\Program Files\EeePC\ACPI\AsEPCMon.exeC:\PROGRA~1\ALWILS~1\Avast5\avastUI.exeC:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exeC:\WINDOWS\system32\igfxext.exeC:\Program Files\Palm, Inc\novacom\x86\novacomd.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\ASUS\EeePC\Super Hybrid Engine\SuperHybridEngine.exeC:\Program Files\OpenSSH\bin\cygrunsrv.exeC:\Program Files\SpoonProxy\spserv.exeC:\Program Files\SpoonProxy\proxy.exeC:\WINDOWS\system32\svchost.exe -k

Malware Problem - constant pop-ups (HiJackThis log included) Started by Kevin926, Apr 16 2006 12:11 PM This topic is locked 2 replies to this topic #1 Kevin926 Kevin926 Member New Member Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO1 - Hosts: www.bns3.netO1 - Hosts: www.bns4.netO1 - Hosts: www.bns5.netO1 - Hosts: www.bns6.netO1 - Hosts: www.bns7.netO1 - Hosts: www.bns8.netO1 - JackTs Log file: ... Make sure it is set to Instant Notification, then click Subscribe.

Click on the "Unzip" button to install. Reboot afterwards (important).After reboot, post the malwarebytes log together with a new HijackThislog.In case you're having problems with above instructions, let me know. This is a discussion on Hijackthis Log - Constant Popups, Can't Delete pmkjj.dll, Help? Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2010-2-7 40384]R3 avast!

The first step in this process is to apply Service Pack 1a for Windows XP. Get More Info scanning hidden files ... As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged C:\WINDOWS\system32\winLogon.exe ...

Processor OS CPU Device Imaging Display Processor Application System Networking Malware Disclaimer Feedback Jump to content Sign In Create Account Search Advanced Search section: This topic Forums Members Help Files Username or email: I've forgotten my password Forum Password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Community Forum Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 6:33:04 PM, on 11/8/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe http://cgmguide.com/hijackthis-log/hijackthis-log-from-krc-hijackthis-analyzer.php Cheers and Happy Computing!

or read our Welcome Guide to learn how to use this site. Go to -> Run -> paste in the following single line command & click OK "%userprofile%\desktop\combofix.exe" /killall Follow the prompts. This is normal.

Sign In Use Facebook Use Twitter Use Windows Live Register now!

Here's the latest Hijackthis log... If not, first click on Check All. Logfile of Trend Micro HijackThis v2.0.2Scan saved at 3:58:08 PM, on 11/23/2008Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16735)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Lavasoft\Ad-Aware\aawservice.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Trend Micro\BM\TMBMSRV.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\nvsvc32.exeC:\WINDOWS\System32\svchost.exeC:\Program Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dllO4 - HKLM\..\Run: [BCMSMMSG] BCMSMMSG.exeO4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"O4 - HKLM\..\Run: [WatchDog] C:\Program Files\mobile PhoneTools\WatchDog.exeO4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUNO4 - HKLM\..\Run:

Logfile of jackTs v1.99.1 ... IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dllO2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.0\coIEPlg.dllO2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dllO2 - Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exeO23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exeO23 - Service: Palm Novacom (NovacomD) - Unknown owner - C:\Program Files\Palm, Inc\novacom\x86\novacomd.exeO23 - this page View Answer Related Questions Cpu Motherboard : Windows 7 64 Bit And Ram I got Windows 7 64 bit and used 2 gigs for ram, 1 gig for windows xp emulation,

many times i've inserted no Virus pendrive but it shows "same Virus" in those pendrives also. ... To find out what programs need to be updated, please run the Secunia Software Inspector Scan.Happy Surfing again! Please help.Logfile of Trend Micro HijackThis v2.0.2Scan saved at 4:34:43 PM, on 2/12/2008Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v7.00 (7.00.6000.16608)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Windows Defender\MsMpEng.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSvcHst.exeC:\Program Files\Lavasoft\Ad-Aware User Name Remember Me?

I inadvertently ran some malicious software - Doh! The symptoms are constant popups with IE7, a new ad pops up with every new web address I visit. Kaspersky is on my main pc and I'd welcome any advice you might have on most appropriate (efficient) yet effective security for a netbook. If it gives you an intro screen, just choose 'Do a system scan and save a logfile'. 2.

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:50:18 PM, on 11/6/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16544) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe OT I do not respond to PM's requesting help. If you no longer require any help could you let me no please, so this topic can be closed.My name is Syler, I will be helping you to solve your Malware Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2010-2-7 40384]R2 NovacomD;Palm Novacom;c:\program files\palm, inc\novacom\x86\novacomd.exe [2009-7-2 30720]R2 OpenSSHd;OpenSSH Server;c:\program files\openssh\bin\cygrunsrv.exe [2004-4-18 36864]R2 spserv;SpoonProxy;c:\program files\spoonproxy\spserv.exe [2001-7-1 61440]R3 avast!

It will create a folder named OTScanIt2 on your desktop.Note: You must be logged on to the system with an account that has Administrator privileges to run this program.Close ALL OTHER Password Site Map Posting Help Register Rules Today's Posts Search Site Map Home Forum Rules Members List Contact Us Community Links Pictures & Albums Members List Search Forums Show Threads Register now! The symptoms are constant popups Thread Tools Search this Thread 11-04-2007, 09:03 PM #1 SheldonN Registered Member Join Date: Nov 2007 Posts: 11 OS: Win XP SP2

Sign In Sign In Remember me Not recommended on shared computers Sign in anonymously Sign In Forgot your password? Help With Hijackthis Log?