We’d like to remind Forumites to please avoid political debate on the Forum.

This is to keep it a safe and useful space for MoneySaving discussions. Threads that are – or become – political in nature may be removed in line with the Forum’s rules. Thank you for your understanding.

📨 Have you signed up to the Forum's new Email Digest yet? Get a selection of trending threads sent straight to your inbox daily, weekly or monthly!

Might have a avirus

23n1th
23n1th Posts: 1,523 Forumite
edited 14 February 2010 at 1:20AM in Techie Stuff
Firefox downloaded something onto my computer while I was on a review site. Thought I would get Malwarebytes to get rid of it but it crashed whilst deleting/quarantining it. Did full scan with Superantispyware portable and IOBit 360 portable but nothing found scanned with MSE and nothing found. Cant post a hijack log for some reason.
«1

Comments

  • busenbust
    busenbust Posts: 4,782 Forumite
    Firefox downloaded something onto my computer while I was on a review site.

    Firefox downloaded? - or you downloaded;)
  • busenbust
    busenbust Posts: 4,782 Forumite
    Will a system restore help you? Might return you to a previous clean state.
  • 23n1th
    23n1th Posts: 1,523 Forumite
    Restarted MalwareBytes and the files is in the quarantine section so deleted it. Have no idea why I'm unable to post a hijackthis log. Seems clean.
  • aliEnRIK
    aliEnRIK Posts: 17,741
    Part of the Furniture Combo Breaker
    Forumite
    RIGHT click hijack this and whilst pressing the SHIFT key and select RUN AS
    This should then allow you to copy and paste the notepad file

    Please open malwarebytes and goto LOGS and post the WHOLE of the last log
    :idea:
  • 23n1th
    23n1th Posts: 1,523 Forumite
    I'm unable to paste these logs apparently the URL doesn't support it.
  • fiddiwebb
    fiddiwebb Posts: 1,806 Forumite
    23n1th wrote: »
    I'm unable to paste these logs apparently the URL doesn't support it.

    Which URL?

    Just copy & paste the log file into your next message.
  • aliEnRIK
    aliEnRIK Posts: 17,741
    Part of the Furniture Combo Breaker
    Forumite
    As above, Ive no clue what your trying to do (Paste it as a link??)

    Simply copy and paste as a new post on this thread
    :idea:
  • 1. Open logfile.txt in notepad
    2. Select and copy all of the text
    3. Paste it into the Quick Reply bar
    4. Post
    5. ???????????
    6. PROFIT!
  • 23n1th
    23n1th Posts: 1,523 Forumite
    edited 25 February 2010 at 12:57AM
    Here it is finally, sorry for the delay was away with work. I'm not sure what was wrong with the page before kept saying the URL didnt support it.

    Logfile of Trend Micro HijackThis v2.0.3 (BETA)
    Scan saved at 20:20:14, on 21/02/2010
    Platform: Unknown Windows (WinNT 6.01.3504)
    MSIE: Internet Explorer v8.00 (8.00.7600.16385)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskhost.exe
    C:\Windows\system32\Dwm.exe
    C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe
    C:\Program Files\Alwil Software\Avast5\AvastUI.exe
    C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPENH.EXE
    C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
    C:\PROGRAM FILES\LAUNCH MANAGER\LMANAGER.EXE
    C:\PROGRAM FILES\REALTEK\AUDIO\HDA\RTHDVCPL.EXE
    C:\Windows\system32\ctfmon.exe
    C:\Windows\Explorer.exe
    C:\Users\Home\Desktop\HiJackThis.exe
    C:\Windows\system32\SearchFilterHost.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O4 - HKLM\..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe -expressboot
    O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
    O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
    O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
    O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
    O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
    O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe

    --
    End of file - 3196 bytes
  • 23n1th
    23n1th Posts: 1,523 Forumite
    1. Open logfile.txt in notepad
    2. Select and copy all of the text
    3. Paste it into the Quick Reply bar
    4. Post
    5. ???????????
    6. PROFIT!

    What does that mean.
This discussion has been closed.
★ ★ ★ Meet your Ambassadors

🚀 Getting Started

Hi new member!

Our Getting Started Guide will help you get the most out of the Forum

Categories

  • All Categories
  • 355.8K Banking & Borrowing
  • 254.9K Reduce Debt & Boost Income
  • 456.2K Spending & Discounts
  • 248.3K Work, Benefits & Business
  • 605.9K Mortgages, Homes & Bills
  • 179K Life & Family
  • 263.7K Travel & Transport
  • 1.5M Hobbies & Leisure
  • 16.2K Discuss & Feedback
  • 37.7K Read-Only Boards

Is this how you want to be seen?

We see you are using a default avatar. It takes only a few seconds to pick a picture.