computer trojan/hacked?

dezz99

thanks

i restarted in safe mode downloaded the latest malware version, ran a full scan (it wouldnt let me view the log though)

and it found 6 threats, i removed them

i ran hitman, it didnt detect anything.

i have now logged into windows and it is letting me on the internet, so all appears fine now!

but it that enoug, or should i do anything else?

i cant think how it got there, as i really dont use that machine for surfing and if i do, i never download anything on that machine?

it is hard wired with this pc, making a network, is it possible that the virus came through here and got onto there?

this pc has kapersky, that pc has nothing....

thanks for all the help anyway really appreciate it, cant thank you enough!

RussJK

Nice work. If you post a Hijackthis log from normal mode, it'll show a bit more compared to the ones from safe mode.

Feel free to do some scans for your own peace of mind, e.g. Kaspersky, Dr Web, Eset online scan:
http://support.kaspersky.com/downloads/utils/tdsskiller.exe
https://www.freedrweb.com/download+cureit/gr/?lng=en
http://www.eset.com/us/download/free-antivirus-utilities
but don't worry about posting results unless you think there's more there.

closed

having no virus scanner doesn't help

http://www.avast.com/free-antivirus-download

dezz99

RussJK wrote: »

Nice work. If you post a Hijackthis log from normal mode, it'll show a bit more compared to the ones from safe mode.

Feel free to do some scans for your own peace of mind, e.g. Kaspersky, Dr Web, Eset online scan:
http://support.kaspersky.com/downloads/utils/tdsskiller.exe
https://www.freedrweb.com/download+cureit/gr/?lng=en
http://www.eset.com/us/download/free-antivirus-utilities
but don't worry about posting results unless you think there's more there.

cheers here is the log from the full scan:

Malwarebytes' Anti-Malware 1.51.0.1200
https://www.malwarebytes.org

Database version: 6705

Windows 5.1.2600 Service Pack 3 (Safe Mode)
Internet Explorer 8.0.6001.18702

12/07/2011 19:26:32
mbam-log-2011-07-12 (19-26-18).txt

Scan type: Quick scan
Objects scanned: 138089
Time elapsed: 6 minute(s), 27 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 2
Registry Data Items Infected: 1
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Security Protection (Trojan.FakeAlert) -> Value: Security Protection -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Value: ForceClassicControlPanel -> No action taken.

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (PUM.Hijack.StartMenu) -> Bad: (0) Good: (1) -> No action taken.

Folders Infected:
(No malicious items detected)

Files Infected:
c:\documents and settings\all users\application data\defender.exe (Trojan.FakeAlert) -> No action taken.

RussJK

That was the QUICK scan you did in Safe mode. Double check the 'LOGS' tab in Malwarebytes for the newest log, and double check that it's the correct one.

You really need to clean those detections in Malwarebytes if you haven't by now... "-> No action taken."

Also please run Hijackthis, scan and save a log, and post that log.