Hello there, I have already followed the instructions in the "Before posting a log" thread, here is my HijackThis! log:
Logfile of HijackThis v1.99.1 Scan saved at 5:32:02 PM, on 8/30/2007 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
If the tool fails to launch from the Desktop, please move SmitfraudFix.exe directly to the root of the system drive (normally C:), and launch from there.
Please print out or copy this page to Notepadas you will be in Safe Mode and unable to refer to this page.
Reboot your computer in Safe Mode (before the Windows icon appears, tap the F8 key continually)
Double-click on SmitfraudFix.exe Select option #2 - Clean by typing 2 and press "Enter" to delete infected files.
You will be prompted : "Registry cleaning - Do you want to clean the registry ?"; answer "Yes" by typing Y and press "Enter" in order to remove the Desktop background and clean registry keys associated with the infection.
The tool will now check if wininet.dll is infected. You may be prompted to replace the infected file (if found); answer "Yes" by typing Y and press "Enter".
The tool may need to restart your computer to finish the cleaning process; if it doesn't, please restart it into Normal Windows. A text file will appear onscreen, with results from the cleaning process; please copy/paste the content of that report into your next reply. The report can also be found at the root of the system drive, normallyC:\rapport.txt
Post a fresh hijackthis logwith rapport txt, and tell how your computer are behaving
process.exe is detected by some antivirus programs as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.
Do NOT post your problem in someone elses thread.
Start a new topic so that it may receive proper attention.
Logfile of HijackThis v1.99.1 Scan saved at 12:06:34 AM, on 9/1/2007 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
My computer seems to be working all right, except right-clicking on the desktop still gives the context menu for a web page, rather than for the desktop.
Scan done at 23:59:33.10, Fri 08/31/2007 Run from C:\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in safe mode
»»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Before SmitFraudFix !!!Attention, following keys are not inevitably infected!!!
SrchSTS.exe by S!Ri Search SharedTaskScheduler's .dll
I don't know if this will help, but I occasionally (usually on startup) get the error "File not found", with one of the the directories that were removed by the cleanup. In addition, I've run CCleaner a couple of times since then and it isn't picking up anything related, either in the registry or on the hard drive.
Since I couldn't get into the Display Properties dialog box by right-clicking on the Desktop, I went through the Control Panel to get there instead. After I opened it, I clicked on the "Desktop" tab, and then clicked the "Customize Desktop..." button at the bottom. This popped up a new dialog box (Desktop Items) with the tab "Web". Clicking on that, what do I find listed and check marked but... you guessed it... Privacy Protection (which is the name that pesky webpage was masquerading under). Deleting that entry, OKing out of the Desktop Items dialog box, and Applying the changes from the Display Properties dialog box got me back the normal desktop, with a close-to-normal right-click menu (at least, I can get to Display Properties by right-clicking now...).
Currently it is Thursday, November 20, 2008 8:56 PM (GMT +1) There are a total of 63.944 posts in 15.822 threads. In the last 3 days there were 33 new threads and 162 reply posts. View Active Threads
Who's Online
This forum has 27179 registered members. Please welcome our newest member, Ruud Smit. 53 Guest(s), 1 Registered Member(s) are currently online. Details Ruud Smit
|