i have bought a new computer recently, it occus virus problem, when i log in the windows , i can't click to execute any destop icon ,even the start botton also out of work, i decide to reinstall new windows and here is my HJT log file,
Logfile of HijackThis v1.99.1 Scan saved at 17:04:02, on 2006-5-30 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
If You have another computer or know one who have a computer, please download these two files, burn then to a cd or put them on a USB pen/stick. Install them on the "sick" computer.
come again, thank for your reply,i have done what u said but can't find any virus, but now it still occus the problem: when i move the mouse on any icon on desktop every thing disappear! but in the safe mode my computer work properly, and here is my logfile
Logfile of HijackThis v1.99.1 Scan saved at 13:05:01, on 2006-5-31 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
thank for your comment, i still wonder why every time i turn on the computer, when i look in my Task Manager and in the application tab i see NTService.exe is running , i try to end task it , but when i restart my pc, NTService.exe is the same running. and here is my hijack this log file: Logfile of HijackThis v1.97.7 Scan saved at 10:20:55, on 2006-6-6 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
2.Unzip it in a permanent folder of your choice, such as C:\HJT\. To create this specific folder on your hard drive: Double click the 'My Computer' icon on your desktop, then under the category hard disk drives: double click Local Disk:, then select file->New -> Folder and name it HJT. Alternatively,you may navigate to the directory of your choice, create a new folder in the same way, and save it there.
3.Next right-click on the HijackThis! Zip file and 'extract all' to the new folder you just created.
To obtain your Reference HijackThis Log:
1.Double click the HijackThis.exe inside to folder to run the program.
2.Choose the "Do a system scan and save a log file." option to perform your scan.
3.HijackThis will analyze your system, and automatically open a notepad textfile containing the HijackThis log when the scan is finished.
Open the text files containing the logs with a text editor and click Edit -> Select All, followed by Edit -> Copy. From within the browser window and with the message body text box selected, click Edit -> Paste.
Post fresh hijackthislog
Regards - Touch
Please start your own thread by clicking the new topic button. Do NOT post your problem in someone elses thread.
back again, while I'm scanning spyware with Ad-ware personal, it indicate my pc was infected by spyware named: " Adware.huacisou " , i have try to delete many time but it can make sence, and Ad-ware alert that it can't delect the following files
hi now in my LAN i have infected by W32.Rontokbro.X@mm which have been detected by Norton Anti virus, i try to scan it but the Norton still alert that virus, and here are my 3 pc's log file in the LAN:
---------------------------- pc1 ---------------------------- Logfile of HijackThis v1.99.1 Scan saved at 9:25:29 AM, on 6/17/2006 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000)
------------------------------------ pc2 ------------------------------------- Logfile of HijackThis v1.99.1 Scan saved at 9:34:15 AM, on 6/17/2006 Platform: Windows XP (WinNT 5.01.2600) MSIE: Unable to get Internet Explorer version!
Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\ntvdm.exe C:\WINDOWS\system32\ntvdm.exe C:\Documents and Settings\Administrator\Local Settings\Temp\Temporary Directory 1 for hijackthis.zip\HijackThis.exe
------------------------ pc3 ------------------------ Logfile of HijackThis v1.99.1 Scan saved at 10:38:32 PM, on 6/16/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it.
close the program
Download and install: http://www.filehippo.com/download_ccleaner/ For a basic version of CCleaner with no Yahoo Toolbar, select the second or third install option as follows: Even if you selected Option 2 or 3, if you do not want the Yahoo Toolbar installed: Uncheck "Add CCleaner Yahoo! Toolbar", as it is checked by default during CCleaner Setup
Install it using the Standard Install option. (You will be asked for your e-mail address, it is safe to give it. If you receive alerts from your firewall, allow all activities for Spy Sweeper) You will be prompted to check for updated definitions, please do so. (This may take several minutes)
Please print out or copy this page to Notepad as you will be in Safe Mode and unable to refer to this page.
Reboot into Safe Mode by tapping F8 after the BIOS has loaded. The Windows Advanced Options Menu appears. Ensure that the Safe mode option is selected. Press Enter. The computer then begins to start in Safe mode.
Open Ccleaner.
1. Before first use, check under Options, Advanced, and UNCHECK "Only delete files in Windows Temp folder older than 48 hours". 2. A pop up box will appear advising this process will permanently delete files from your system. 3. Then select the items you wish to clean up. In the Windows Tab: Clean all entries in the "Internet Explorer". If you prefer to keep your cookies, uncheck the Cookies entry. Deleting cookies will require re-entry of user names and passwords on next visit to sites that require users log in. Clean all the entries in the "Windows Explorer" section. Clean all entries in the "System" section. Clean all entries in the "Advanced" section. Clean any others that you choose.
In the Applications Tab: Clean all (optionally, except cookies) in the Firefox/Mozilla section if you use it. Clean all in the Opera section if you use it. Clean Sun Java in the Internet Section. Clean any others that you choose. 4. Then click the "Run Cleaner" button and it will scan and clean your system. Click exit.
Run Spysweeper: Click on "Options > Sweep Options" and check "Sweep all Folders on Selected drives". Check "Local Disc C". Under What to Sweep: check all of the boxes except Sweep Contents of Compressed Files and do not Sweep Systemrestore Folder.
Click on Sweep and allow it to fully scan your system.
When the sweep has finished, click "Remove". Click "Select All" and then "Next". From 'Results', select the Session Log tab. Click Save to File and save the log somewhere convenient.
Exit Spy Sweeper.
Start Superantispyware/rightclick on the black/yellow bug in tray.
Hit - Scan Your Computer - button
Click on the drive(s) you want to scan. Put a check in - Perform Complete Scan, then next
it will scan now. When scan have finished, put a checkmark with all items it found. Next, after cleaning, let it Reboot
Next go to Start- Search and scrolldown using the scroll bar on the right. Go down to More advanced options and click. Be sure the first three boxes are selected: Search System folders Search Hidden Files and folders Search SubFolders And Find: superantispyware log
Post these log along with fresh hijackthis logs
Regards - Touch
Please start your own thread by clicking the new topic button. Do NOT post your problem in someone elses thread.
Currently it is Saturday, November 22, 2008 8:38 PM (GMT +1) There are a total of 64.077 posts in 15.840 threads. In the last 3 days there were 26 new threads and 166 reply posts. View Active Threads
Who's Online
This forum has 27202 registered members. Please welcome our newest member, wowzer77. 47 Guest(s), 0 Registered Member(s) are currently online. Details
anyone can find my problem , please help
|