Unsolved

This post is more than 5 years old

60 Posts

1834

September 3rd, 2007 18:00

Hijack this error window.. I have been infected. Cannot do complete log scan.

Someone has logged on to my aol account and changed my profile to some porn site picture with links. They were being cute I guess.
So, I ran spy sweeper free scan and there were two Trojans detected I could only delete them at that time because I didn't have a pass key for spy sweeper. Then I got a pass key from my roommate and ran the scan again. Now, the Trojans aren't showing up anymore.

I cannot run a complete hijack this log without an error window popping up. I have published a photo at the following link to show the error message that is preventing the full hijack this log..

http://richardcrigger.com/problem


Someone has created a way to prevent me from detecting there presence
with hijack this.


I have tried to edit the file myself several times, but it wouldn't allow me to save the change...

Message Edited by rbanything on 09-03-2007 02:09 PM

3.3K Posts

September 4th, 2007 22:00

Do you have Spybot Search and Destroy on board? If so, look to see if you have employed the Lock the "Hosts" file feature. To do this, open Spybot Search and Destroy. From the menu at the top, click Mode then select "Advanced". Now you should see additional items available in the left pane column of menu options. Click the Tools button from that column. When the tools menu opens, click the IE tweaks button. Remove the check from the box titled "Lock Hosts file read-only as protection against hijackers". Close Spybot Search and Destroy and try to run your hjt scan again. Post that log. Thanks!

60 Posts

September 5th, 2007 02:00

thanks.. But, my boxes were not checked at all.... I went into IE tweaks and no boxes were checked...

3.3K Posts

September 5th, 2007 13:00

open HijackThis and click Open the MiscTools section. Click Open Uninstall Manager then click the Open Add/Remove Software list. Make sure Show updates (at the top) is checked then close the Add or Remove Programs window. Return to Hijackthis and click the Save list button. Save the list to your Desktop and post that list back here in this thread. Thanks!

60 Posts

September 5th, 2007 17:00

ABBYY FineReader 6.0 Sprint
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Creative Suite 2
Adobe Flash Player 9 ActiveX
Adobe Help Center 1.0
Adobe Reader 7.0.8
Adobe Stock Photos 1.0
Adobe SVG Viewer 3.0
AOL Uninstaller (Choose which Products to Remove)
AOLIcon
AVG 7.5
Broadcom Management Programs
Conexant HDA D110 MDC V.92 Modem
Digital Content Portal
Digital Line Detect
FileZilla (remove only)
Filzip 3.06
Hijackthis 1.99.1
HP Image Zone 4.5
HP Photosmart Cameras 4.5
Intel(R) Graphics Media Accelerator Driver
J2SE Runtime Environment 5.0 Update 6
Java(TM) 6 Update 2
Lexmark 2400 Series
Macromedia Contribute 3.11
Macromedia Dreamweaver 8
Macromedia Extension Manager
Macromedia Fireworks 8
Macromedia Flash 8
Macromedia Flash 8 Video Encoder
Macromedia Flash Player 8
Macromedia Flash Player 8 Plugin
MCU
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft Expression Web
Microsoft Expression Web
Microsoft Expression Web MUI (English)
Microsoft Office Outlook 2003 with Business Contact Manager Update
Microsoft Office Professional Edition 2003
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proofing (English) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Small Business Edition 2003
Microsoft Plus! Digital Media Edition Installer
Microsoft Plus! Photo Story 2 LE
Microsoft SQL Server Desktop Engine (MICROSOFTSMLBIZ)
Modem Helper
Mozilla Firefox (2.0.0.3)
Mozilla Firefox (2.0.0.6)
MSXML 4.0 SP2 (KB927978)
MSXML 4.0 SP2 (KB936181)
NetWaiting
Otto
RealPlayer Basic
Roxio Creator Audio
Roxio Creator Copy
Roxio Creator Data
Roxio Creator DE
Roxio Creator Tools
Roxio Drag-to-Disc
Roxio Express Labeler
Roxio Update Manager
RTC Client API v1.2
SearchAssist
Security Update for CAPICOM (KB931906)
Security Update for CAPICOM (KB931906)
Security Update for Office 2007 (KB934062)
Security Update for the 2007 Microsoft Office System (KB936960)
SigmaTel Audio
Sonic Activation Module
Sonic Encoders
Spy Sweeper
Spybot - Search & Destroy 1.4
Suite Specific
Symantec KB-DocID:2003093015493306
Synaptics Pointing Device Driver
Tablet
Update for Office 2007 (KB932080)
Update for Office 2007 (KB934391)
Update for Office 2007 (KB934393)
User's Guides
Viewpoint Media Player
WAMP5 1.7.2
Windows Media Player 10
Windows Media Player Firefox Plugin

3.3K Posts

September 5th, 2007 22:00

Uninstall the following software:
Hijackthis 1.99.1
J2SE Runtime Environment 5.0 Update 6
SearchAssist
Symantec KB-DocID:2003093015493306
Viewpoint Media Player


Click start-->control panel-->add/remove programs...scroll down the list to locate the program names and click Remove.

What do you use this for?:
FileZilla

Click HERE to download HijackThis.

Click the Download button then select Installer.
Double click on the HJTInstall.exe then click "Install". It will be installed by default here:
C:\Program Files\Trend Micro\HijackThis
...and A shortcut to the application will also be placed on your Desktop.

The program will open automatically after installation...just close it for now.

You can double click the icon that was placed on the Desktop to run subsequent hijackthis scans or you can use the icon inside the folder.

The folder HijackThis is where you will find the HJT logs that you save. When you use the application to remove anything, you will also find the backup copies made by HJT inside this folder.

Download SDFix and save it to your Desktop.

Double click SDFix.exe and the files will be extracted to %systemdrive%
(Drive that contains the Windows Directory, typically C:\SDFix)

Reboot the computer into Safe mode.
  • Open the extracted SDFix folder and double click RunThis.bat to start the script.
  • Type Y to begin the cleanup process.
  • Any Trojan Services and Registry Entries that it finds will be removed then you will be prompted to Reboot.
  • Press any Key and it will restart the PC.
  • When the PC restarts the Fixtool will run again and complete the removal process then display Finished, press any key to end the script and load your desktop icons.
  • Once the desktop icons load the SDFix report will open and a copy of the report will be saved in the SDFix folder as Report.txt
  • (Report.txt will also be copied automatically to your Clipboard and ready for posting back in the forum).
  • Finally paste the contents of the Report.txt back here along with a fresh HijackThis log.

60 Posts

September 6th, 2007 13:00

the blue screen just flashes and there is no place to type y to start....

3.3K Posts

September 6th, 2007 18:00

The entire blue dos window keeps flashing? ...or is it just the cursor that is flashing? All you need to do is type, there is no place you need to look or navigate to while that dos window is open, just type the letter "y" exactly as the instruction states, and sdfix will take it away.

60 Posts

September 6th, 2007 19:00

the window shows up for a second then disappears...

3.3K Posts

September 7th, 2007 00:00

Please Click Here to perform a free virus/spyware/security scan at TrendMicro.
  • Click on the Launch HouseCall Free Scan button on the right. Wait for the page to load then follow the prompts to download and install any active X controls that would be necessary to perform the scan.
  • At the "Configure scan settings" window, put a check in the box next to "My Computer". Make sure there is a check in the boxes "Scan for Spyware", and "Check Security Vulnerabilities" then click the Scan Now button on the lower right corner.
  • When the scan completes, if anything was found, you will be presented with a list of the offending files. Click to "Remove All".
When finished, please reboot the computer. Post back your results. Thanks!
No Events found!

Top