Hijack This Log Analysis Required - Please!

Hmmmmmmmmmm not much in there.

Try a scan at panda >>>> http://www.pandasoftware.com/activescan/co…n_principal.htm

Then download ccleaner from the link below and use it to clean out all your temp folders, ie cookies, files and offline files.

http://www.majorgeeks.com/download4191.html

All done. What next?

Still having the same issues?

Learned here in the classroom >>> http://forums.tomcoyote.org/index.php?showtopic=1421

Please download and scan your system with trojan hunter, it is free for 30 days. Make sure that you update it and let it clean what it finds, also let me know if it is unable to clean something, specifically the path.

http://www.trojanhunter.com/

trojan hunter fund no new problems.

what should i do next?

Have you tried a system repair with the os disk?

no, what's the procedure?

go to Start, then Run, then type (no quotes) "sfc /scannow". That's the system file checker, it verifies all files and replaces any with errors.

Scan with MicroWorld again and post the results from the bottom box please.

here it is: File C:\WINDOWS\System32\bmcza.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02500000.VBN infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02500002.VBN infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02500004.VBN infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02500006.VBN infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02500008.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0250000A.VBN infected by "Trojan.Java.ClassLoader.o" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0250000C.VBN infected by "Trojan.Java.Shiwow" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000000.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000002.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04000003.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140000.VBN infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\04140002.VBN infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05140000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00004.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00005.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06E40000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07200000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\07200001.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\083C0000.VBN infected by "Trojan.Java.ClassLoader.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\08640000.VBN infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09180000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09180001.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300000.VBN infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300002.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09300004.VBN infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\096C0000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\096C0001.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09BC0000.VBN infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09BC0002.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\09CC0000.VBN infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A040000.VBN infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A640000.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A640002.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A640004.VBN infected by "Trojan.Java.ClassLoader.f" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A640006.VBN infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0A640008.VBN infected by "Trojan.Java.ClassLoader.Dummy.e" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0AE00000.VBN infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B100000.VBN infected by "Trojan.Java.ClassLoader.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B100002.VBN infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B100004.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B100006.VBN infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B100008.VBN infected by "TrojanDownloader.Java.OpenConnection.l" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B10000A.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B10000B.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B10000D.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B10000E.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0B340000.VBN infected by "Trojan.JS.Scob.a" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0BE40000.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0BE40001.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0BE40003.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0BE40004.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0C840000.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D340000.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D340002.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D340004.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D340006.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D9C0000.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D9C0002.VBN infected by "Exploit.Java.Bytverify" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D9C0004.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D9C0006.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0D9C0008.VBN infected by "TrojanClicker.JS.Gen" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0DC80000.VBN infected by "Trojan.Win32.Scagent.j" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0DC80001.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0E600000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0E600001.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0EF40000.VBN infected by "TrojanDownloader.Java.OpenConnection.b" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F280000.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F280002.VBN infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F800000.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F800001.VBN infected by "Trojan.Win32.Scagent.h" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F880000.VBN infected by "Trojan.Java.ClassLoader.i" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0F880002.VBN infected by "Trojan.Java.ClassLoader.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0FC40000.VBN infected by "Trojan.Java.Needy.c" Virus. Action Taken: No Action Taken. File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\0FC40002.VBN infected by "Trojan.Java.ClassLoader.b" Virus. Action Taken: No Action Taken. File C:\Program Files\Overnet\incoming\software\FS2004 scenery - FSGenesis USA, Hawaii (10m terrain mesh).rar tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\Program Files\Yahoo!\Companion\ycomp5_0_2_7.dll infected by "not-a-virus:AdWare.Toolbar.Yahoo" Virus. Action Taken: No Action Taken. File C:\Program Files\Yahoo!\YPSR\Quarantine\20050118214410.zip infected by "not-a-virus:AdWare.ShopAtHome.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP1\A0000335.dll infected by "not-a-virus:AdWare.ToolBar.STIEBar.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP1\A0000376.EXE infected by "not-a-virus:AdWare.Toolbar.MyWay.b" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP12\A0003557.DLL infected by "not-a-virus:AdWare.ToolBar.MyWay.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP14\A0003848.dll infected by "Trojan.Win32.Agent.q" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP14\A0003849.vxd infected by "not-a-virus:AdWare.BargainBuddy.n" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP14\A0003850.dll infected by "Trojan-Proxy.Win32.Agent.df" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP14\A0003851.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP14\A0003852.exe tagged as not-a-virus:RiskWare.Dialer.gen. No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP5\A0000748.exe infected by "not-a-virus:AdWare.Sahat.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP6\A0000866.EXE infected by "Trojan-Downloader.Win32.TSUpdate.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP6\A0000871.exe infected by "not-a-virus:AdWare.ToolBar.STIEBar.a" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP6\A0000881.exe infected by "Trojan-Downloader.Win32.TSUpdate.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP6\A0000883.exe infected by "Trojan-Downloader.Win32.TSUpdate.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP6\A0001051.exe infected by "not-a-virus:AdWare.WinAD.f" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP7\A0001120.exe tagged as not-a-virus:RiskWare.Tool.ServiceRunner.f. No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP7\A0002265.dll infected by "not-a-virus:AdWare.WinAD.i" Virus. Action Taken: No Action Taken. File C:\System Volume Information\_restore{106CD0F5-52E3-4FB3-97C9-044E400D7A9F}\RP7\A0002266.exe infected by "not-a-virus:AdWare.WinAD.f" Virus. Action Taken: No Action Taken. File C:\temp\sahagent.exe infected by "not-a-virus:AdWare.Sahat.h" Virus. Action Taken: No Action Taken. File C:\WINDOWS\Downloaded Program Files\WinServAdX.dll infected by "not-a-virus:AdWare.WinAD.f" Virus. Action Taken: No Action Taken. File C:\WINDOWS\system32\bmcza.dll infected by "not-a-virus:AdWare.JS.OneMoreSearch.a" Virus. Action Taken: No Action Taken. File F:\Backup of Armada Feb 13 2003\Program Files\NetMeeting\Received Files\EBD.CAB tagged as not-a-virus:Tool.DOS.Restart. No Action Taken. File F:\Backup of LTE 5400 Mar 13 2003\WIN98\WIN98_66.CAB tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken. File F:\Backup of LTE 5400 Mar 13 2003\WINDOWS\UNINCDRW.exe tagged as not-a-virus:Tool.Win32.Reboot. No Action Taken.

Not as bad as it looks as most of those are in your system restore or quarantined so cant hurt you right now but we will need to clean tehm out when we are done.

You can delete these files

C:\WINDOWS\System32\bmcza.dll
C:\temp\sahagent.exe
C:\WINDOWS\Downloaded Program Files\WinServAdX.dll

Reboot, how is it running now.