Post Your HijackThis logs here

[oddjob]

@sport29883 ...

Looks like SUPERAntiSpyware and SDFix have done what they are programmed to do. The HJT log is now almost completely clean.

Open HJT again ... click on scan and put tick/checkmarks next to these entries IF they are still present .....

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

O2 - BHO: (no name) - {1A7D1F06-E55C-4A9E-94A0-D4B2377A6023} - (no file)

O21 - SSODL: adsnv - {8F61586C-5D1B-4c76-BB3A-3B88F96A18B0} - C:\WINDOWS\system32\adsnv.dll (file missing)

Remember to close ALL open browser windows - including this one - before clicking on "Fix Checked" at the foot of the HJT window.


Check to make sure this file (in BOLD) is gone ....

C:\WINDOWS\system32\adsnv.dll


If it is still on your computer delete it and immediately empty your recycle bin.

Once you have done that turn your system restore back on and create a new SR point so you have something to fall back on if things go awry again.

Also remember to make SR points on a regular basis.

More on System Restore ...

http://www.microsoft.com/windowsxp/u...w_03may19.mspx


Always remember …. HJT is creaking with age. It doesn't see all malware. Far from it. Malware can easily hide from HJT. You must keep a watch on your computer and report any unusual happenings.


What may have lead up to your infection and help keep your computer free of malware …

http://www.castlecops.com/t7736-So_h...rst_place.html

http://www.help2go.com/Tutorials/Pro...Hijackers.html

http://www.techsupportforum.com/secu...do-i-need.html

There is a little duplication/crossover but all these tutorials are well worth reading.

Make sure you only ever have ONE antivirus and ONE firewall in operation at any time and also make sure they are kept fully up to date.

Don’t forget to keep Superantispyware updated and use it to scan/disinfect your computer from time to time.


If you do suffer an infection again you should run first Ccleaner to clean out your system. Get Ccleaner here but ensure you install it WITHOUT the optional Yahoo Toolbar download (untick/uncheck the bottom box of the “install” options after downloading) …

http://www.ccleaner.com/


Also run through this before posting another HijackThis log …

http://www.help2go.com/Tutorials/Pro...Hijackers.html


Best wishes.


OJ

[sport29883]

Hey OJ,

Really really appreciate it. I was happy to clean up my computer without having it formatted.

Best wishes,

HK

[oddjob]

Glad it all worked out for you.


OJ

[chodirin]

hello , pls help me. i was found any spayware in my system try. its sometimes show up, but sometimes hidden byself. below my log file.

[chicgeek]

Hi Folks,

Newly restored (to manufacturer's settings) Toshiba here, which a hunk of unneeded processes. Help me clean them out!

Laura

[dknygirl]

Hi there:

Attached is my hijackthis log. Please review and let me know that I need to delete. My FireFox no longer runs and I'm def worried that I have a virus

Thanks!
dknygirl

[witchdocda]

Um... lol .. attached is my hijackthis file.. i never really noticed how much i had running.. pls review

[oddjob]

To chodirin, chicgeek, dknygirl, witchdocda

Sorry but I'm not round here much at the moment as I have issues going on in my life that need my undivided attention.


If you are on XP, and you want to start cleaning out your computers, first make sure you have at least Service Pack 1A running. Download it from here if need be .....

http://www.microsoft.com/windowsxp/d...1/default.mspx

Choose the 'Network Installation' link to download the standalone version. Save it to your desktop and then double click the file to begin the installation.




Now, again if you are on XP, download, install and run these programs in normal mode. Let them fix anything they find........

Superantispyware > http://www.superantispyware.com/

Dr Web > http://freedrweb.com/

AVG Anti Spyware > http://free.grisoft.com/doc/5390/us/frt/0?prd=asf

TrojanHunter > http://www.misec.net/


Finally do this .....

Download SDFix from here and save it to your desktop …….

http://downloads.andymanchesta.com/R...ools/SDFix.exe

Please then reboot your computer in Safe Mode by doing the following ……

• Restart your computer
• After hearing your computer beep once during startup, but before the Windows icon appears, tap the F8 key continually;
• Instead of Windows loading as normal, a menu with options should appear;
• Select the first option, to run Windows in Safe Mode, then press "Enter".
• Choose your usual account.

In Safe Mode, right click the SDFix.zip folder and choose Extract All ……

• Open the extracted folder and double click RunThis.bat to start the script.
• Type Y to begin the script.
• It will remove the Trojan Services then make some repairs to the registry and prompt you to press any key to Reboot.
• Press any Key and it will restart the PC.
• Your system will take longer that normal to restart as the Fixtool will be running and removing files.
• When the desktop loads the Fixtool will complete the removal and display Finished, then press any key to end the script and load your desktop icons.
• Finally save the SDFix folder on your desktop in case an advisor needs to see it at some stage.


Hopefully that will sort out most problems but, if you still have troubles, you can post back here with an update.

However, please don't wait for me to reply.

If no-one else here offers to help I suggest you post for help in an expert HJT forum such as BleepingComputer, PCPitstop, Geeks2Go, Icrontic or Castlecops (Google to find them).


Sorry.


OJ

[witchdocda]

its cool bro... life happens.. i wasn't having any problems i was just curious ..

[chodirin]

never mind oddjob. thanks for ur advice.

[SBS]

I know.

[Tommmeh]

what is this "hijack this" thing?

[oddjob]

It is a diagnostic tool that helps analysts find out what may be wrong with a PC (Trojans, viruses, spyware and so on) and fix it. More here ......

http://en.wikipedia.org/wiki/HijackThis



TIP >> if you think you may be infected with a virus, Trojan or other malware use Malwarebytes' Anti-Malware first .....

http://www.malwarebytes.org/mbam.php


Download, install, update definitions then scan the computer. Let it fix whatever it finds to be definitely bad.

If trouble persists you should load HijackThis, run a system scan and post the resulting logfile here.

Someone will advise you on the next steps after that.


OJ