HijackThis log

Question

Logfile of HijackThis v1.99.1Scan saved at 9:41:57, on 25/10/2005Platform: Windows 2000 SP3 (WinNT 5.00.2195)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes:C:\WINNT\System32\smss.exeC:\WINNT\system32\winlogon.exeC:\WINNT\system32\services.exeC:\WINNT\system32\lsass.exeC:\Program Files\Aventail\Connect\as32svc.exeC:\WINNT\system32\svchost.exeC:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeC:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINNT\system32\spoolsv.exeC:\Program Files\Symantec AntiVirus\DefWatch.exeC:\WINNT\System32\svchost.exeC:\Program Files\C4ebreg\isamsmt.exec:\sdwork\issimsvc.exeC:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeC:\WINNT\system32egsvc.exeC:\WINNT\system32\MSTask.exeC:\Program Files\Analog Devices\SoundMAX\SMAgent.exeC:\Program Files\Symantec AntiVirus\Rtvscan.exeC:\WINNT\system32\ZoneLabs\vsmon.exeC:\WINNT\System32\WBEM\WinMgmt.exeC:\Program Files\TightVNC\WinVNC.exeC:\WINNT\System32\mspmspsv.exeC:\WINNT\system32\svchost.exeC:\WINNT\Explorer.EXEC:\Program Files\Analog Devices\SoundMAX\Smtray.exeC:\WINNT\system32\igfxtray.exeC:\WINNT\system32\hkcmd.exeC:\progra~1\c4ebreg\c4ebreg.exeC:\WINNT\system32\ICO.EXEC:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeC:\Program Files\QuickTime\qttask.exeC:\WINNT\system32undll32.exeC:\Program Files\Common Files\Symantec Shared\ccApp.exeC:\PROGRA~1\SYMANT~1\VPTray.exeC:\progra~1\c4ebreg\isamtray.exeC:\Program Files\Type Pilot\TypePlt.exeC:\Program Files\Zone Labs\Integrity Client\iclient.exeC:\Program Files\IBM\NotesBuddy\NotesBuddy.exeC:\CCMS\ccms.exeC:\WINNT\system32
otepad.exeC:\Program Files\Citrix\ICA Client\Wfcrun32.exeC:\PROGRA~1\Citrix\ICACLI~1\WFICA32.EXEC:\WINNT\System32\SCardSvr.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Internet Explorer\iexplore.exeC:\PROGRA~1\Citrix\ICACLI~1\WFICA32.EXEC:\HJT\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w3.ccmc.au.ibm.com/search/Query.jspR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\System32\blank.htmR1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/R3 - Default URLSearchHook is missingO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet
ewdotnet6_90.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocxO4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUpO4 - HKLM\..\Run: [WinVNC] 'C:\Program Files\TightVNC\WinVNC.exe' -servicehelperO4 - HKLM\..\Run: [ISSI EZUpdate Service] 'c:\sdwork\issimsvc.exe'O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logonO4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exeO4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exeO4 - HKLM\..\Run: [C4EBReg] 'C:\progra~1\c4ebreg\c4ebreg.exe' /qO4 - HKLM\..\Run: [ISAM SMT Service] 'C:\Program Files\C4ebreg\isamsmt.exe'O4 - HKLM\..\Run: [Bginfo] c:\winnt\system32\bginfo.exe c:\winnt\system32\standard.bgi /timer:0O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXEO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeO4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottimeO4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -sO4 - HKLM\..\Run: [defergui] c:\sdwork\defergui.exeO4 - HKLM\..\Run: [ccApp] 'C:\Program Files\Common Files\Symantec Shared\ccApp.exe'O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exeO4 - HKLM\..\Run: [ISAMTray] 'C:\progra~1\c4ebreg\isamtray.exe'O4 - HKLM\..\Run: [NI.UWFX5LP_0001_0802] '\Kedb58b\ADMIN$\Downloaded Program Files\UWFX5LP_0001_0802NetInstaller.exe'O4 - HKCU\..\Run: [Type Pilot] 'C:\Program Files\Type Pilot\TypePlt.exe'O4 - Global Startup: IBM Community Tools.lnk = C:\Program Files\IBM\IBM Community Tools\IBM Community Tools.exeO4 - Global Startup: Integrity Client.lnk = C:\Program Files\Zone Labs\Integrity Client\iclient.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO4 - Global Startup: ShortKeys 2.lnk = C:\Program Files\ShortKeys2\shortkey.exeO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dllO9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dllO9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dllO10 - Unknown file in Winsock LSP: c:\program files\aventail\connect\asdns.dllO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO10 - Hijacked Internet access by New.NetO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO16 - DPF: {2C52AF58-B9B1-11D5-9DF6-00508B755B44} (AXClientUtil2 Control) - http://www.smartforce.com/v2.1/applications/liveplay/Activex/AXClientUtil.cabO16 - DPF: {9519B2A2-6592-4E41-8290-D0298459270C} (LNWebAssist Class) - http://w3.ibm.com/bluepages/scripts/lnwebassist.cabO16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westpac.com.au/wtoa/wtOtherAccounts/portfoliomanagerwt.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{58BD6B0F-CC68-43D1-8ED4-E274238BABEF}: Domain = au.ibm.comO17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = au.ibm.com,ibm.comO17 - HKLM\System\CS1\Services\Tcpip\..\{58BD6B0F-CC68-43D1-8ED4-E274238BABEF}: Domain = au.ibm.comO17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = au.ibm.com,ibm.comO17 - HKLM\System\CS2\Services\Tcpip\..\{58BD6B0F-CC68-43D1-8ED4-E274238BABEF}: Domain = au.ibm.comO17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = au.ibm.com,ibm.comO20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dllO20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dllO23 - Service: Aventail Connect (As32Svc) - Aventail Corporation - C:\Program Files\Aventail\Connect\as32svc.exeO23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeO23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exeO23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exeO23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exeO23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exeO23 - Service: ISAM SMT Service (ISAMsmt) - IBM Global Services - C:\Program Files\C4ebreg\isamsmt.exeO23 - Service: ISSI EZUpdate (ISSIMon) - IBM Global Services - c:\sdwork\issimsvc.exeO23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exeO23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exeO23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exeO23 - Service: TrcBoot - Unknown owner - C:\WINNT\System32\drivers	rcboot.exeO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINNT\system32\ZoneLabs\vsmon.exeO23 - Service: VNC Server (winvnc) - Unknown owner - C:\Program Files\TightVNC\WinVNC.exe' -service (file missing)

DeANThology · Answer

just noticed this reading back through my post: O4 - HKLM\..\Run: [NI.UWFX5LP_0001_0802] '\Kedb58b\ADMIN$\Downloaded Program Files\UWFX5LP_0001_0802NetInstaller.exe' removing this fix the prob?

ky331 · Answer

you didn't identify 'the prob' you were referring to.... in fact, i believe your log may have more than one problem.   the line you indicated is the WinFixer Installer.  yes, let's try to remove it.   run HiJackThis.  place a check-mark in the box in front of the line:   O4 - HKLM\..\Run: [NI.UWFX5LP_0001_0802] '\Kedb58b\ADMIN$\Downloaded Program Files\UWFX5LP_0001_0802NetInstaller.exe' click on FIX CHECKED.   close Hjt.  reboot.  and then generate/post your latest HJT log.  Be sure to let us know if there's any difference [Note:  If HJT 'chokes' on the fix, or this line comes back after you reboot, you can try doing the fix in SAFE MODE] Message Edited by ky331 on 10-24-2005 11:53 PM

DeANThology · Answer

Rebooted, and HJT:   Logfile of HijackThis v1.99.1 Scan saved at 1:55:21, on 25/10/2005 Platform: Windows 2000 SP3 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\Program Files\Aventail\Connect\as32svc.exe C:\WINNT\system32\svchost.exe C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe C:\WINNT\system32\spoolsv.exe C:\Program Files\Symantec AntiVirus\DefWatch.exe C:\WINNT\System32\svchost.exe C:\Program Files\C4ebreg\isamsmt.exe c:\sdwork\issimsvc.exe C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe C:\WINNT\system32egsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\Program Files\Symantec AntiVirus\Rtvscan.exe C:\WINNT\system32\ZoneLabs\vsmon.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\Program Files\TightVNC\WinVNC.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\Analog Devices\SoundMAX\Smtray.exe C:\WINNT\system32\igfxtray.exe C:\WINNT\system32\hkcmd.exe C:\progra~1\c4ebreg\c4ebreg.exe C:\WINNT\system32\ICO.EXE C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe C:\Program Files\QuickTime\qttask.exe C:\WINNT\system32undll32.exe C:\Program Files\Common Files\Symantec Shared\ccApp.exe C:\PROGRA~1\SYMANT~1\VPTray.exe C:\progra~1\c4ebreg\isamtray.exe C:\Program Files\Type Pilot\TypePlt.exe C:\Program Files\Zone Labs\Integrity Client\iclient.exe C:\CCMS\ccms.exe C:\WINNT\system32
otepad.exe C:\Program Files\IBM\NotesBuddy\NotesBuddy.exe C:\Program Files\Citrix\ICA Client\Wfcrun32.exe C:\PROGRA~1\Citrix\ICACLI~1\WFICA32.EXE C:\WINNT\System32\SCardSvr.exe C:\PROGRA~1\Citrix\ICACLI~1\WFICA32.EXE C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Internet Explorer\iexplore.exe C:\HJT\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://w3.ccmc.au.ibm.com/search/Query.jsp R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\System32\blank.htm R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/ R3 - Default URLSearchHook is missing O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet
ewdotnet6_90.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp O4 - HKLM\..\Run: [WinVNC] 'C:\Program Files\TightVNC\WinVNC.exe' -servicehelper O4 - HKLM\..\Run: [ISSI EZUpdate Service] 'c:\sdwork\issimsvc.exe' O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\Smtray.exe O4 - HKLM\..\Run: [IgfxTray] C:\WINNT\system32\igfxtray.exe O4 - HKLM\..\Run: [HotKeysCmds] C:\WINNT\system32\hkcmd.exe O4 - HKLM\..\Run: [C4EBReg] 'C:\progra~1\c4ebreg\c4ebreg.exe' /q O4 - HKLM\..\Run: [ISAM SMT Service] 'C:\Program Files\C4ebreg\isamsmt.exe' O4 - HKLM\..\Run: [Bginfo] c:\winnt\system32\bginfo.exe c:\winnt\system32\standard.bgi /timer:0 O4 - HKLM\..\Run: [Mouse Suite 98 Daemon] ICO.EXE O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exe O4 - HKLM\..\Run: [QuickTime Task] 'C:\Program Files\QuickTime\qttask.exe' -atboottime O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s O4 - HKLM\..\Run: [defergui] c:\sdwork\defergui.exe O4 - HKLM\..\Run: [ccApp] 'C:\Program Files\Common Files\Symantec Shared\ccApp.exe' O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SYMANT~1\VPTray.exe O4 - HKLM\..\Run: [ISAMTray] 'C:\progra~1\c4ebreg\isamtray.exe' O4 - HKCU\..\Run: [Type Pilot] 'C:\Program Files\Type Pilot\TypePlt.exe' O4 - Global Startup: IBM Community Tools.lnk = C:\Program Files\IBM\IBM Community Tools\IBM Community Tools.exe O4 - Global Startup: Integrity Client.lnk = C:\Program Files\Zone Labs\Integrity Client\iclient.exe O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE O4 - Global Startup: ShortKeys 2.lnk = C:\Program Files\ShortKeys2\shortkey.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINNT\System32\msjava.dll O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINNT\System32\Shdocvw.dll O10 - Unknown file in Winsock LSP: c:\program files\aventail\connect\asdns.dll O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll O16 - DPF: {2C52AF58-B9B1-11D5-9DF6-00508B755B44} (AXClientUtil2 Control) - http://www.smartforce.com/v2.1/applications/liveplay/Activex/AXClientUtil.cab O16 - DPF: {9519B2A2-6592-4E41-8290-D0298459270C} (LNWebAssist Class) - http://w3.ibm.com/bluepages/scripts/lnwebassist.cab O16 - DPF: {EA1B8527-E422-4909-825A-70BE0694F18E} (PortfolioManagerWT ProfileManager Class) - https://online.westpac.com.au/wtoa/wtOtherAccounts/portfoliomanagerwt.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{58BD6B0F-CC68-43D1-8ED4-E274238BABEF}: Domain = au.ibm.com O17 - HKLM\System\CS1\Services\Tcpip\Parameters: SearchList = au.ibm.com,ibm.com O17 - HKLM\System\CS1\Services\Tcpip\..\{58BD6B0F-CC68-43D1-8ED4-E274238BABEF}: Domain = au.ibm.com O17 - HKLM\System\CS2\Services\Tcpip\Parameters: SearchList = au.ibm.com,ibm.com O17 - HKLM\System\CS2\Services\Tcpip\..\{58BD6B0F-CC68-43D1-8ED4-E274238BABEF}: Domain = au.ibm.com O17 - HKLM\System\CCS\Services\Tcpip\Parameters: SearchList = au.ibm.com,ibm.com O20 - Winlogon Notify: igfxcui - C:\WINNT\SYSTEM32\igfxsrvc.dll O20 - Winlogon Notify: NavLogon - C:\WINNT\system32\NavLogon.dll O23 - Service: Aventail Connect (As32Svc) - Aventail Corporation - C:\Program Files\Aventail\Connect\as32svc.exe O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec AntiVirus\DefWatch.exe O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: ISAM SMT Service (ISAMsmt) - IBM Global Services - C:\Program Files\C4ebreg\isamsmt.exe O23 - Service: ISSI EZUpdate (ISSIMon) - IBM Global Services - c:\sdwork\issimsvc.exe O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec AntiVirus\SavRoam.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec AntiVirus\Rtvscan.exe O23 - Service: TrcBoot - Unknown owner - C:\WINNT\System32\drivers	rcboot.exe O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs Inc. - C:\WINNT\system32\ZoneLabs\vsmon.exe O23 - Service: VNC Server (winvnc) - Unknown owner - C:\Program Files\TightVNC\WinVNC.exe' -service (file missing)   the 'prob' was just WinFixer opening on every login, didn't cause any performance issues or anything as I killed the process immediately everytime, but i just wanted to get rid of it properly...what other issues can you see from my log?   and thanks very much for your help!

DeANThology · Answer

Also forgot to mention, upon reboot WinFixer did not load up, although this has happened previously a couple of times randomly, but least its not in the HJT list now

ky331 · Answer

as you noted, the installer no longer appears in your log. so, unless you get "re-infected", the WinFixer aspect should be fixed now.

at this point...i'm gonna ask someone else to step-in, to help you with additional problems (if any) that you might still have. it's been hectic around here, so it may take a few days... please be patient.

good luck.

ky331 · Answer

I see that significant time has passed, and that no one has "shown up" to do the follow-up on your log :smileysad: I apologize for this oversight.

in all likelihood, you may have implemented significant changes since you posted your last log here... meaning that the log, as posted above, probably no-longer reflects the current state of your system.

if you're experiencing any problems that you're aware of, or if you'd just like to request an overall "check-up" again, please start a NEW thread, generate your latest HJT log, and post it there.

Accordingly, this thread will now be considered "closed", and will not be monitored for future replies.

wishing you good luck.

Virus & Spyware

HijackThis log

Was this post helpful?