Computer Forum - PC Hardware, Software Forums  

Go Back   Computer Forum - PC Hardware, Software Forums > Networking and Security Zone > Computer Security, Viruses and Spyware
Register Members List Calendar Search Today's Posts Mark Forums Read

Computer Security, Viruses and Spyware Matters covering firewalls, virus scanners, spyware scanners and any other security concerns.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 27/01/06, 04:34
Cyos Cyos is offline
Newbie
 
Join Date: Jan 2006
Posts: 1
Cyos is an unknown quantity at this point
Need anti-virus help ASAP!

According to AVG Free edition, I have a Virus. This seems logical, as my computer has been acting very slow. According to AVG, the offending file is "javainstaller.jar-5aa0b436-550ca9f9.zip". Here is my complete Hijack This log:
Logfile of HijackThis v1.99.1
Scan saved at 9:02:50 PM, on 1/26/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido anti-malware\ewidoctrl.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Digital Media Reader\shwiconem.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe
C:\program files\steam\steam.exe
C:\Program Files\Common Files\InstallShield\UpdateService\agent.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Common Files\Logitech\WebColct\WebColct.exe
C:\Program Files\HijackThis\HijackThis.exe
C:\Program Files\Yahoo!\WidgetEngine\UnixUtils\bin\zsh.exe
C:\WINDOWS\system32\netstat.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.emachines.com/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.emachines.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Recguard] %WINDIR%\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [Reminder] %WINDIR%\Creator\Remind_XP.exe
O4 - HKLM\..\Run: [SunKistEM] C:\Program Files\Digital Media Reader\shwiconem.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [SSBkgdUpdate] C:\Program Files\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe -Embedding -boot
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\WidgetEngine\YahooWidgetEngine.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
O23 - Service: Sony SPTI Service for DVE (ICDSPTSV) - Sony Corporation - C:\WINDOWS\system32\IcdSptSv.exe
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: PrismXL - New Boundary Technologies, Inc. - C:\Program Files\Common Files\New Boundary\PrismXL\PRISMXL.SYS
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe



Please help ASAP! My computer is very important to me, and I do not have ANY backup of my files whatsoever!
Reply With Quote
  #2 (permalink)  
Old 27/01/06, 17:12
Jason Jason is offline
Super Moderator
 
Join Date: Oct 2005
Location: Ireland
Posts: 615
Jason is an unknown quantity at this point
Re: Need anti-virus help ASAP!

Have you tried deleting the file using AVG or manually?
Reply With Quote
  #3 (permalink)  
Old 24/03/06, 09:27
sbowler sbowler is offline
Enthusiast
 
Join Date: Mar 2006
Posts: 16
sbowler is an unknown quantity at this point
Re: Need anti-virus help ASAP!

Always, always, always, do I need to go on. BACKUP FILES
__________________
&quot;What we do in life, echoes in eternity&quot;<br />AMD Athlon 2600 1.9Ghz<br />768Mb RAM Radeon 9250 128mb Graphics<br />1 X80Gb 1X 250Gb Hard drives<br />DVD Rom &amp; DVD Rewriter drives<br /><br />XP Home SP2 McAfee firewall antivirus<br />Winpatrol ? Spybot S&amp;D 1 Noisy case fan<br />http://www.freewebs.com/sbowler579/index.htm
Reply With Quote
  #4 (permalink)  
Old 12/02/08, 17:47
fsb101@shaw.ca fsb101@shaw.ca is offline
Newbie
 
Join Date: Feb 2008
Posts: 1
fsb101@shaw.ca is an unknown quantity at this point
Cool Avast Home

I'm a certified tech and have a good deal of knowledge of antivirus and firewalls. I've found to insytall avast home (a free Program found at Free antivirus - avast! 4 Home Edition Download ) It has a pre-boot scan option that scans your computer before any thing is loaded into memory. I have found this program Is all I've used. Zonealarm used to provide a free firewall also but I don't think it's available for free anymore. Anyway Between this and the online scans is the simplest and easiest way to protect and service your pc. Be sure to save the set-up package and then install so you can always uninstall and reinstall when you run into this problem.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT +1. The time now is 10:48.


| Laptop Computer Reviews | Earn Cashback on Computer Shopping in UK | Cheap Broadband Bundles

Powered by vBulletin® Version 3.6.7
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0
Content Relevant URLs by vBSEO 3.0.0