Unsolved

This post is more than 5 years old

56 Posts

533

September 12th, 2009 10:00

Cant Get A HJT LOG

Just when I thought some of my issues were gone, they are back.  I was receiving a permissions issue with my AV, IE, or any exe file.  I was able to see that in my permissions, Systems was excluded.  My AV, McAfee, still wont scan so I was able to load AVG and complete scans and updates.  I will be going with AVG going forward and have since removed McAfee.

My curent issues are as follows:

1.  IE will load to my homepage, MSN, but when I do a web search I receive an error that there was an issue with the Internet connection.  But when I type in a URL, the website loads with out issue.

2.  AVG will not scan now, but if I reinstall, I can get 1 scan.  Then it stops running again.

3.  When launching iTunes I received a message that a program is not available, TuneUp Media.  I discovered this is a third party program that I would not have installed.  I beleive this has been corected but not sure as I am not on that computer until I can get some assistance.

4.  I am unable to obtain a HJT log.  I have taken the following steps to attempt to get the HJT log:

1.  Copied HJT from a clean computer and loaded on the effected machine.  HJT would run and when it came to create the log, the program would shut down.

2.  Copied HJT in Safe mode and obtained the same event above.

3.  Renamed HJT on the clean computer and copied to the effected machine and received the same message.

Please let me know if there is an alternative or other steps that I could take.

Thanks.

Jon

3 Apprentice

 • 

20.5K Posts

September 12th, 2009 11:00

It sounds as if you have an infection that is suppressing .exe files. See if you can download exe_fix and save it to your desktop

Double click on exe_fix.com to run it.

Type the number 1 at the prompt and allow the tool to run
Following that, try to rerun HijackThis in order to get a log output.

If that does not work try to download DDS and save it to your desktop.

  • Disable any script blocking protection
  • Double click dds.scr to run the tool.
  • When done, DDS.txt will open.
  • Click Yes at the next prompt for Optional Scan.
  • Save both reports to your desktop.

Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. (In your case it may already be disabled.) Run the scan, enable your A/V (if possible) and reconnect to the internet. Information on A/V control HERE.

There is a chance that you may need to attach some files once a helper gets into your fix. Currently that option is unavailable here and is being worked on. Just so you do not have to wait longer, I suggest posting your log(s) at SpywareHammer.There are instructions HERE for posting at SpywareHammer. The site has many Microsoft MVP's on staff and helpers there may be able to assist you sooner than we can here.


Please include the contents of the following logs by copying and pasting the text of each into a new topic at SpywareHammer or a forum of your choice from Trend Micro's list* (below)

DDS.txt
Attach.txt

When you post your log(s) at SpywareHammer. Please include a link to this topic. If you are still unable to produce a log, include that information when you post at the other forum.

Additional forums that offer malware removal can be found at this link in the recommended sites section on the left side of this page:

* http://hjt-data.trendmicro.com/hjt/analyzethis/index.php

Please post at only ONE so you do not tie up two or more helpers working on the same issue. Thank you for your patience and understanding.

 

56 Posts

September 13th, 2009 18:00

Well it looks like the Exe.Fix ran successfully based on the log, however HJT would still not create a log. 

I was able to install the DDS and run it, but it closed shortly after the instructuions, the same as HJT without creating a log.  I have posted a request on Spywarehammer forum site with all the details and a link to this post.  I will await a resoponse from that forum.

Thanks for your help Bugbatter.

Top