zbestwun2001
6 Gallium

Re: hijackthis log file...stil have problems with Dr. watson

Hi
I have compared the last log that you posted and this current log against each other.

In just 1 day you have picked up more spyware that I can see is running.

Let me ask you this, who all uses this system?

I can shut down that new spyware I see most likely but I don't see anything that refers to Dr. Watson's app. Have we gone into the control panel and just checked if it is still in the Add/Remove Programs folder?

Run HiJackThis then:

1. Click "Config..."
2. Click "Misc Tools"
3. Click "Open Process manager"

-

Next, while holding down the CTRL key, locate (if present) and click on (highlight) each of the following:

C:\WINDOWS\system32\gah95on6.exe
C:\WINDOWS\system32\msedpb.exe

Now double-check and make sure that only those item(s) above are highlighted, then click "Kill process". Now, click "Refresh", check again, and repeat this step if any remain.



Run HiJackThis and click "Scan", then check(tick) the following, if present:

C:\WINDOWS\system32\gah95on6.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bumc.bu.edu/Dept/Home.aspx?DepartmentID=385
O4 - HKLM\..\Run: [Windows AdStatus] C:\Program Files\Windows AdStatus\WinStat.exe
O4 - HKLM\..\Run: [gah95on6] C:\WINDOWS\system32\gah95on6.exe
O4 - HKCU\..\Run: [msmc] C:\WINDOWS\system32\msedpb.exe

Now with all windows closed except your HJT program hit the FIX button.

Let me know how it goes,

Steve

FORMAT PROVIDED BY MIDNIGHT STAR WITH THANKS.

Message Edited by zbestwun2001 on 02-05-2005 03:17 PM

 

Dell Forum Member Since 2004 but not an employee of Dell

If this answers your question, click
  Yes  

0 Kudos