Logfile of HijackThis v1.99.1
i know exactly how I got infected and today I am going to have my IT dept install content protect so I dont have the ability to endulge in this activity any longer. please help.
I ran Symantec Anti Virus, SpyBot S&D, Ad-Aware, and Microsoft antiSpyware, deleted after scans then restarted my computer. then i ran Hijack and here are my results, can you please help me?
Here is day two, I am still dealing with hijacking and wondering if I should take a crack at figuring it out by myself, but I am afraid that I will mess something up, please help me out.
Please Oh Please Oh Please help me, NS.
Are you using Inhoster hosting company
and also is the the hmoe page you want. http://www.smartparts.com
Please set your system to show
all files;
please see here if you're unsure how to do this.
Close all programs leaving only HijackThis running. Place a check against each of the following,
R3 - URLSearchHook: (no name) - _{00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file)
Click on Fix Checked when finished and exit HijackThis.
Reboot into Safe Mode: please
see here if you are not sure how to do this.
Using Windows Explorer, locate the following files/folders, and delete them:
C:\WINDOWS\System32\yaemu.exe
Exit Explorer, and reboot as normal afterwards.
Post back a fresh HijackThis log and we will take another look.
I am going to have my IT dept install content protect so I dont have the ability to endulge in this activity any longer
Did they tell you to update your windows?
Here is the most current log file after my I.T. dept has fixed my hijack, do you see anything wrong?
Close all programs leaving only HijackThis running. Place a check against each of the following, O2 - BHO: (no name) - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - (no file)
Hello Little Eagle,
Here are the directions for creating a zip file For Windows XP:
Using Windows Explorer, locate the first file you want to zip.
Right click on the file and select Send To and Compressed (zipped) Folder.
Please Zip the file and send it
here
Last log looks clean.
Please follow a few tips to remain malware free:
Make sure you keep your Windows OS current by visiting
Windows update
occasionaly to download and install any critical updates and service packs. With out these you are leaving the backdoor open.
Also download, install and keep updated- Antivirus Software (and use only one):
Free for home users:
avast! 4 Home Edition Download AVG free version 7.0 AVG free version v6.0 updates ended 12/31/04 AntiVir Personal Edition Adjust your browser settings: Change your(active x) settings in IE. With IE open go to tools, internet options, security tab. Click on the internet globe, then custom level. Set the first option "download signed active x controls" to prompt, the next two to disable. Read more:
Internet Explorer Privacy & Security Settings Working with Internet Explorer 6 Security
Many exploits are directed at Internet Explorer, you dont have to use it. Try a different browser:
Like Firefox ,
And Thunderbird for controling spam in your e-mail. Install a firewall. A firewall will control what comes in from the internet and what leaves your computer to the internet. A firewall will also alert you when a application trys to connect to the internet from your computer, this is a good way to catch crapware or trojans, trying to connect out bound from your computer- whats that and why does it need a internet connection? You can deny it access it until more investigation is done. Zone Alarm is a free and easy to use firewall, that will provide in and outbound protection. Microsoft XP firewall only provides inbound protection, but is not as robust as third party firewalls, Be sure to run only >one< firewall.If you use another, be sure to disable XP's built in firewall.A inexpensive NAT hardware router with SPI (firewall)would be even better,along with a software firewall.
Zone Alarm Kerio Personal Firewall Outpost Firewall Download, install and update before using: (if these are constantly finding malware, then you need to make some changes)
Ad-Aware SE Personal edition Spybot Search and destroy
Becarful with spyware "removers and scanners"– there are many
"rogue/suspect" programs that "claim to remove" spyware.
Other programs to consider:
SpywareBlaster IE-SPYAD
AntiTrojan software to fill in the gap:
a2 free Ewido Security Suite
Trojan Hunter (30 day trial version) Learn More:
Tony's article So how did I get infected in the first place?
How to Secure (and Keep Secure) My (New) Computer(s) Home Computer Security Wilders Security Advisors Watch what you download, and where you download it from.
Many programs come bundled with "extra" crapware you may not want. Make sure you know what it is you will be downloading and installing. Visit the makers website, learn more about the program, Does the program you want come bundled with other "3rd party" programs? What do the 3rd party programs do? Will they deliver ads? Track your surfing habits?.You may be installing more than you think, Read the EULA agreement, you know that paragraph of stuff you "agree to" before the software installs? Stay away from warez and crack sites. Becarful what you download from file sharing networks.If you are not sure, scan it with your Antivirus app. A small file (in KB) is probably not what you think it is. Some p2p clients also install 3rd party stuff you probably dont want.
If you need this topic reopened, please request this by sending an email to us at the following link
(Click for address)
Include your post user name and detail why you need it reopened with a valid link to your post."Reopen" will be deleted without being looked at.
To help keep you clean follow the recommendations in Tony's article here:
So how did I get infected in the first place?
