Hijack this report

bevan840

I've deleted the first

bevan840

when i enter the last 2, it says the file doesn't exist, do i want to create one

bevan840

starting drweb again, do i want express or complete? theres more things on the express one

aliEnRIK

Running ccleaner should remove any temp files. (I asked for manual removal first to make sure they were gone)

Dr web ~ COMPLETE (complete is everything, unlike express)

aliEnRIK

bevan840 wrote: »

if scammers do get the details and I somehow manage to fix the laptop, can they still have access to what they have?

You asked for a worst case scenario which is what I gave you. I doubt you have a keylogger or similar so I wouldnt panic about it.
I WOULD change all passwords for banking etc though Using a 'clean' computer)
If you wanted to be really safe then the obvious thing to do would be to cancel your debit/credit card and get a replacement

bevan840

Will using the discs clear everything? Clear the hard drive, etc or does the drweb need doing before I use them? I cant stay awake much longer unfortunately, I am extremely grateful for your help tonight

aliEnRIK

So long as you select to FULL FORMAT the hardrives, then thats all thats needed. Then you install the operating system. Then the drivers, then security software

Id go to bed myself if I could, unfortunately I have to stay up till about 8 in the morning

bevan840

Ouch, you can't go to bed? That would be why you were up this time of the night when I had problems with my old PC then. Will keep this thread on my PC while working on DH's tomorrow, once I have the discs at least, if not, I've got some work ahead of me haven't I

bevan840

He can't find the discs!

bevan840

DH couldn't find the discs, I checked if Windows 7 would work on it, it said yes, installed and it's working same as my other PC. I done another Hijackthis report if someone can look at it? It's just to doubly make sure there is nothing left on this pc. Scanned with the new AVG, doing Malwarebytes next. There shouldn't be anything on here as it was a new install, I just wanted to check

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:21:56, on 27/02/2010
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVG\AVG9\avgtray.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG9\avgssie.dll
O2 - BHO: AVG Security Toolbar BHO - {A3BC75A2-1F87-4686-AA43-5347D756017C} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O3 - Toolbar: AVG Security Toolbar - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - C:\Program Files\AVG\AVG9\Toolbar\IEToolbar.dll
O4 - HKLM\..\Run: [AVG9_TRAY] C:\PROGRA~1\AVG\AVG9\avgtray.exe
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O13 - Gopher Prefix:
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG9\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free E-mail Scanner (avg9emc) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgemc.exe
O23 - Service: AVG Free WatchDog (avg9wd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG9\avgwdsvc.exe

--
End of file - 2895 bytes