What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

[Closed] need help to sort out my computer! gah

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
My computer's all virused up and i'm not sure with what. This is the log i got off hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:44:40, on 29/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
C:\Program Files\Common Files\AOL\1229762181\ee\AOLSoftware.exe
C:\Program Files\COMODO\Firewall\cfp.exe
C:\WINDOWS\svcho.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\AOL 9.0\aoltray.exe
C:\Program Files\AOL Companion\companion.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
c:\program files\common files\aol\1229762181\ee\services\antiSpywareApp\ver2_0_12\AOLSP Scheduler.exe
c:\program files\common files\aol\1229762181\ee\aolsoftware.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a;…&pf=desktop
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.bt.net/digitaldemo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=localhost:7070
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;
F2 - REG:system.ini: Shell=
O2 - BHO: (no name) - {001B00AE-7860-4251-AB09-F5084B6016EC} - (no file)
O2 - BHO: (no name) - {051C4D78-98FA-4B6D-ADF3-79904CC8B7AF} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {09EABA3C-397E-4F2C-8840-5AD3D8BDDFDB} - (no file)
O2 - BHO: (no name) - {0C8A0741-B54F-4CFA-85F8-494662FE8E41} - (no file)
O2 - BHO: (no name) - {0EDF10DE-12F8-44B7-83F4-E2AFEEDC0183} - (no file)
O2 - BHO: (no name) - {1CE272AD-E408-451E-A08B-B0048D907B33} - (no file)
O2 - BHO: (no name) - {1E1949F7-B16A-47EA-85B2-A89939417F61} - (no file)
O2 - BHO: (no name) - {1EF042BE-1F1F-44AC-B301-E6E794691394} - (no file)
O2 - BHO: (no name) - {1F0DB968-B499-4C0F-84A7-A5D30660E822} - (no file)
O2 - BHO: (no name) - {216187C0-423C-4123-908E-7246D86886A0} - (no file)
O2 - BHO: (no name) - {216D8D75-DEE0-499F-8F87-DDE12FE03DF8} - (no file)
O2 - BHO: (no name) - {27BD3C51-BC2E-49E0-9C6B-F0D0D010CE80} - (no file)
O2 - BHO: (no name) - {2FC7A6B7-EFAA-4AFC-989D-02310398F83A} - (no file)
O2 - BHO: (no name) - {303B270C-AA0A-4DE6-91A7-FD452C9631DC} - (no file)
O2 - BHO: (no name) - {3081BC85-2BB3-4238-BB8E-0D5F930892C3} - (no file)
O2 - BHO: (no name) - {33A4125A-0E9E-4959-B46E-A34689E8DD73} - (no file)
O2 - BHO: (no name) - {340DA371-C36E-4C98-85B4-3A29C3A5A0F9} - (no file)
O2 - BHO: (no name) - {350A958B-8897-4FA6-BA8E-C0202CD3F30E} - (no file)
O2 - BHO: (no name) - {35A71AF0-50BA-4074-93E6-6F097384689F} - (no file)
O2 - BHO: (no name) - {36B0CE3B-2389-48E4-92E4-00ED8579DC74} - (no file)
O2 - BHO: (no name) - {3B31C0ED-586A-408E-9CF3-D12DCD23376E} - (no file)
O2 - BHO: (no name) - {40167E6E-9DF0-423B-9094-9578D043C432} - (no file)
O2 - BHO: (no name) - {444B7843-A646-4525-A5E7-6F4CD7CE0628} - (no file)
O2 - BHO: (no name) - {46AAF4BD-32DD-4E49-91B8-33B70119D9AC} - (no file)
O2 - BHO: (no name) - {46CB60B7-610C-4A58-9E1A-32B16F37B211} - (no file)
O2 - BHO: (no name) - {511512CB-CFAC-49E0-BD1D-F5DF656A1C8A} - (no file)
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {538DF27D-F49D-40B1-9644-A696C2071B78} - (no file)
O2 - BHO: (no name) - {5817FDBD-3462-4B7B-9E8A-7842189010BE} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {633808CA-C1BE-4EA7-9279-1C8282BF07FF} - (no file)
O2 - BHO: (no name) - {67520427-1A9C-44CE-A679-BAC8122D8746} - (no file)
O2 - BHO: (no name) - {690E9E38-8FDB-48C7-8CD1-534E73F2666B} - (no file)
O2 - BHO: (no name) - {69432058-704F-4E6E-B1A4-493C1F3723F3} - C:\WINDOWS\system32\mlJArsRK.dll (file missing)
O2 - BHO: (no name) - {6EF9FD7C-C8B9-4F63-9271-26015961B294} - (no file)
O2 - BHO: (no name) - {74ED29C2-3B04-491F-B00E-3B1383159E91} - (no file)
O2 - BHO: (no name) - {75E0D66C-5620-4BCF-9962-AA78188164EC} - (no file)
O2 - BHO: (no name) - {765402F7-A14D-4279-88A8-EE51096F18D3} - (no file)
O2 - BHO: (no name) - {7A1F6839-AA47-4EF9-A879-E83E6AABB99A} - (no file)
O2 - BHO: (no name) - {7A4C7266-E6EF-4361-8A86-696BD89C7239} - (no file)
O2 - BHO: {39f1a33c-e12f-2159-40a4-fa8051052118} - {81125015-08af-4a04-9512-f21ec33a1f93} - C:\WINDOWS\system32\yzussd.dll
O2 - BHO: (no name) - {841FDACB-8EC2-4512-A9A7-51E090448A11} - (no file)
O2 - BHO: (no name) - {882F2FE5-61B3-4765-845A-485582732E33} - (no file)
O2 - BHO: (no name) - {887A2277-9875-4300-90B0-E56D56791EC3} - (no file)
O2 - BHO: (no name) - {8EDC0272-3960-41BC-91BF-1E3B32615FF0} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {90BE6A4A-895D-46D4-9051-6EE6465390DC} - (no file)
O2 - BHO: (no name) - {9731BF4D-69EA-46F8-9F1E-8AAEA2EDB36E} - (no file)
O2 - BHO: (no name) - {979C9B28-D9DD-45D2-A910-642990B3DACD} - (no file)
O2 - BHO: (no name) - {9C2F459E-AA22-4CD2-B56D-E3D8878117A5} - (no file)
O2 - BHO: (no name) - {9DA61E8E-66C6-4576-8B9D-DCB3EAAF13C2} - (no file)
O2 - BHO: (no name) - {A0584506-0BC5-4623-8702-83E1EB3934D9} - (no file)
O2 - BHO: (no name) - {A0A17DFB-BD47-4618-B187-1A0E1B799EA9} - (no file)
O2 - BHO: (no name) - {A19120DB-8D7D-4BF2-A126-6C58DEEB04AD} - (no file)
O2 - BHO: (no name) - {A230C57E-46FE-4278-88DC-FFC3F296F16C} - (no file)
O2 - BHO: (no name) - {A3081139-B6D2-4DF3-B460-7DC729729457} - (no file)
O2 - BHO: (no name) - {A377CB11-8F15-4DAE-BB3E-ABBD65B1002D} - (no file)
O2 - BHO: (no name) - {A5C775ED-DFA0-417F-A84D-1850A3484F9E} - (no file)
O2 - BHO: (no name) - {A7788911-F6E2-42A1-BEEC-739001DDC8FD} - (no file)
O2 - BHO: (no name) - {A9F1B5BD-99CB-4280-AD15-F59808DE8FAF} - (no file)
O2 - BHO: (no name) - {AC10C684-C169-469F-8F8E-D057CD5FD0B9} - (no file)
O2 - BHO: (no name) - {AF912E8A-CA9E-4A9F-AA86-190C6AE9CFDE} - (no file)
O2 - BHO: (no name) - {B1387124-3580-4FC6-B866-3090489DEE59} - (no file)
O2 - BHO: (no name) - {B23E8909-C3F4-43F7-833A-9403598D6066} - (no file)
O2 - BHO: (no name) - {B309E0DF-A0FB-4391-8DD4-AF1F901AB0C3} - (no file)
O2 - BHO: (no name) - {B324C745-5811-40DF-962D-4BBCE6031155} - (no file)
O2 - BHO: (no name) - {B4672FFB-E4C6-40E2-9013-F8EDAB6F3B89} - (no file)
O2 - BHO: (no name) - {B4AA5C1C-31B4-472C-8B69-1415FC0F9AA4} - (no file)
O2 - BHO: (no name) - {B7F1CA51-A658-4824-8034-538C96E86BE8} - (no file)
O2 - BHO: (no name) - {BB4531ED-E666-4F13-B0D1-BFFAB935B300} - (no file)
O2 - BHO: (no name) - {C85B854A-A280-4B4C-8D36-2D8E3B83F591} - (no file)
O2 - BHO: (no name) - {CF2038DD-3204-4FD1-9AD1-C2B532E42779} - (no file)
O2 - BHO: (no name) - {D1AAECDA-9484-4226-B7E3-B2D718B3D076} - (no file)
O2 - BHO: (no name) - {D32943BD-A447-45DC-9F0A-27FF4E826B30} - (no file)
O2 - BHO: (no name) - {D701BC89-4050-49FC-A78B-933E976411BC} - (no file)
O2 - BHO: (no name) - {D9C33BF9-5318-4B94-9DBC-B6F1F3BB585E} - (no file)
O2 - BHO: (no name) - {DAB439E3-70F7-492A-9E1A-D3612E066DB5} - (no file)
O2 - BHO: (no name) - {DB135C85-892F-44FF-B5BC-25F3CE421C85} - (no file)
O2 - BHO: (no name) - {DBD21D7E-DCD3-477B-B6A7-06123403BC48} - (no file)
O2 - BHO: (no name) - {DDAF548A-4E81-4FF6-A5C7-BF5CA6721465} - (no file)
O2 - BHO: (no name) - {DFA0C81E-4192-4B00-8541-01D024C20998} - (no file)
O2 - BHO: (no name) - {E0E5477E-5B2E-4566-A967-52A27FF39768} - (no file)
O2 - BHO: (no name) - {E21D36C8-AC9B-4A98-8084-8E71BB61B123} - (no file)
O2 - BHO: (no name) - {E5DC1D5C-BC91-459A-85B3-97F481B05B5A} - (no file)
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: (no name) - {EAFAFB62-C6FF-4B95-A0C0-756A17327F48} - (no file)
O2 - BHO: (no name) - {F1A449AC-5AC7-4B4D-BD32-DCCB6BE57F89} - (no file)
O2 - BHO: (no name) - {FF715C15-D67C-4CC2-A66D-69426256129F} - (no file)
O3 - Toolbar: HP view - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: (no name) - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - (no file)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Common Files\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Common Files\AOL\1229762181\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [Ddoga] rundll32.exe "C:\WINDOWS\azukatikun.dll",e
O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
O4 - HKLM\..\Run: [a0fa9d1c] rundll32.exe "C:\WINDOWS\system32\smooroaa.dll",b
O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [SpybotSnD] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\RunOnce: [SpybotDeletingB2047] command /c del "C:\WINDOWS\system32\KRsrAJlm.ini"
O4 - HKCU\..\Policies\Explorer\Run: [svcho] C:\WINDOWS\svcho.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O4 - Global Startup: AOL 9.0 Tray Icon.lnk = C:\Program Files\AOL 9.0\aoltray.exe
O4 - Global Startup: AOL Companion.lnk = C:\Program Files\AOL Companion\companion.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: &AOL Toolbar search - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/EN-GB/a-UNO1/GAME_UNO1.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe…nt.cab56907.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: qifzhn.dll tphjhj.dll dqgwzt.dll qxyudf.dll jjagcy.dll kccmff.dll rfkxuo.dll iuwcfx.dll hufmhz.dll cimdja.dll yzussd.dll C:\WINDOWS\system32\guard32.dll
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - C:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe

–
End of file - 16501 bytes
Post #2
Hi,

Please do the following:

STEP #1

Please download DDS and save it to your desktop.
  • Disable any script blocking protection
  • Double click dds.pif to run the tool.
  • When done, two DDS.txt's will open.
  • Save both reports to your desktop.
—————————————————
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.



STEP #2


Download the GMER Rootkit Scanner. Unzip it to your Desktop.
Before scanning, make sure all other running programs are closed and no other actions like a scheduled antivirus scan will occur while the scan is being performed. Do not use your computer for anything else during the scan.
Double-click gmer.exe. The program will begin to run.
**Caution**
These types of scans can produce false positives. Do NOT take any action on any "<— ROOKIT" entries unless advised!
If possible rootkit activity is found, you will be asked if you would like to perform a full scan.
  • Click NO
  • In the right panel, you will see a bunch of boxes that have been checked … leave everything checked and ensure the Show all box is un-checked.
  • Now click the Scan button.
    Once the scan is complete, you may receive another notice about rootkit activity.
  • Click OK.
  • GMER will produce a log. Click on the [Save..] button, and in the File name area, type in "GMER.txt"
  • Save it where you can easily find it, such as your desktop.

Post the contents of GMER.txt in your next reply.


Please describe how your computer is behaving at the moment, listing any symptoms and problems that you are experiencing.

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI