Internet connection gone slow :( HIJACK THIS LOG INCLUDED!

blaque*angel

Windows update installing, Also I have updated Anti-Malwares

You guys are just great!

blaque*angel

3488 Is the database, is that OK?

blaque*angel

How do i delete the torrent thing? i cant see it in the control panel/programs thing!

aliEnRIK

blaque*angel wrote: »

3488 Is the database, is that OK?

yes, make sure you run a FULL scan

blaque*angel

aliEnRIK wrote: »

yes, make sure you run a FULL scan

I did, there was one malicious item.



i'm not sure why avast wont download..

aliEnRIK

Please open malwarebytes and goto LOGS and post the WHOLE of the last log

cliffski

If your brother installed bit-torrent, you have no way of being sure he didn't downlaod all kinds of dodgy stuff. By definition, torrented (pirated) programs are not guarnateed to be legit, and can often be full of malware and viruses.
If this was my PC, I'd wipe it and reinstall windows from scratch. You will never be 100% sure otherwise.
Never let any program run on your PC unless you know its legit,. and where it came from. In other words, avoid stuff from bit-torrent sites...
I could repackage a program or video game trivially to include something that sniffs out your banking details or other account passwords, this stuff is easy to do, and its rife

blaque*angel

Malwarebytes' Anti-Malware 1.43
Database version: 3488
Windows 6.0.6001 Service Pack 1
Internet Explorer 8.0.6001.18865
03/01/2010 20:58:16
mbam-log-2010-01-03 (20-58-16).txt
Scan type: Full Scan (C:\|D:\|F:\|S:\|)
Objects scanned: 257296
Time elapsed: 1 hour(s), 46 minute(s), 26 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Windows\System32\drivers\fqgdqwr.sys (Rootkit.Agent) -> Quarantined and deleted successfully.

blaque*angel

Malwarebytes' Anti-Malware 1.43
Database version: 3488
Windows 6.0.6001 Service Pack 1
Internet Explorer 7.0.6001.18000
03/01/2010 19:02:48
mbam-log-2010-01-03 (19-02-48).txt
Scan type: Quick Scan
Objects scanned: 112452
Time elapsed: 7 minute(s), 29 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 3
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 5
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{4a7c84e2-e95c-43c6-8dd3-03abcd0eb60e} (Adware.SmartShopper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3cc3d8fe-f0e0-4dd1-a69a-8c56bcc7bebf} (Adware.SmartShopper) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3cc3d8fe-f0e0-4dd1-a69a-8c56bcc7bec0} (Adware.SmartShopper) -> Quarantined and deleted successfully.
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90b8b761-df2b-48ac-bbe0-bcc03a819b3b} (Adware.Zango) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Program Files\Mozilla Firefox\plugins\npclntax_ZangoSA.dll (Adware.Seekmo) -> Quarantined and deleted successfully.
C:\Windows\system32\Drivers\fqgdqwr.sys (Rootkit.Agent) -> Quarantined and deleted successfully.
C:\Users\Guest\AppData\Local\Temp\Low\6b390aa6.exe (Spyware.Passwords) -> Quarantined and deleted successfully.
C:\Users\Resha\AppData\Local\Temp\Low\~TM76F1.tmp (Trojan.Hiloti) -> Quarantined and deleted successfully.
C:\Users\Resha\AppData\Local\Temp\Low\~TM7712.tmp (Spyware.Passwords) -> Quarantined and deleted successfully.

basmic

Did Spybot find anything?