Results 1 to 2 of 2

Thread: S&D report shows serious 'hijack' attempt?

  1. #1
    Junior Member
    Join Date
    Sep 2010
    Posts
    3

    Exclamation S&D report shows serious 'hijack' attempt?

    Think I'm in real trouble!
    My recent Spybot S&D log showed this scary stuff!

    14/09/2010 23:16:42 Encountered and terminated Armageddon in C:\Program Files\Java\jre6\bin\java.exe!
    14/09/2010 23:17:16 Denied (based on user decision) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") added in System Startup user entry!
    14/09/2010 23:17:52 Denied (based on user decision) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") added in System Startup user entry!
    14/09/2010 23:17:53 Denied (based on user blacklist) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") added in System Startup user entry!
    14/09/2010 23:17:54 Denied (based on user blacklist) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") added in System Startup user entry!
    etc, etc,
    etc, etc
    The bits in red repeat over and over again, must be a thousand times or more, the numbers (time) running in complete sequence!!

    15/09/2010 Denied (based on user blacklist) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") added in System Startup user entry!
    etc, etc
    15/09/2010 Denied (based on user blacklist) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") added in System Startup user entry!

    The sequence changes to this..

    15/09/2010 23:59:25 (based on ) value "{D9AA6FEA-404B-5DD1-7DF7-0DC26329ED54}" (new data: ""C:\Documents and Settings\...\Application Data\Osqai\waev.exe"") in System Startup user entry!

    Before I go into too much detail, I want you to know that I have DDS and ERUNT ready as instructed.
    I know you are an amazing team and if anyone can help here, it's you!
    Do you think you can help me please?

  2. #2
    Member of Team Spybot tashi's Avatar
    Join Date
    Oct 2005
    Location
    USA
    Posts
    30,955

    Default

    Hello MadMaxine,
    Quote Originally Posted by MadMaxine View Post
    Before I go into too much detail, I want you to know that I have DDS and ERUNT ready as instructed.
    When the tool finishes, it will open 2 reports, DDS.txt and attach.txt
    Copy/Paste the contents of 'DDS.txt' into your post.
    'attach.txt' should be zipped using Windows native zip utility and attached to your post. Compress and uncompress files (zip files)
    "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance)

    Please start a new topic, provide the logs as so and a volunteer analyst will advise you when available.

    Best regards.
    Microsoft MVP Reconnect 2018-
    Windows Insider MVP 2016-2018
    Microsoft Consumer Security MVP 2006-2016

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •