Command Service

[Black_Knyght]

I was advised by LonnyRJones that I should post my log here, as there seems to something of concern on it other than Command Service. Can someone please advise me what else is wrong ?

[LonnyRJones]

Hello

Start Hijackthis and place a check next to these items If there.
F2 - REG:system.ini: UserInit=userinit.exe
O4 - HKLM\..\Run: [dmseq.exe] C:\WINNT\system32\dmseq.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{7CE97ECC-FB64-4530-A6D9-631A14858B84}: NameServer = 85.255.113.133,85.255.112.96
O17 - HKLM\System\CCS\Services\Tcpip\..\{EED8A0D4-0906-4D31-A932-18101511F405}: NameServer = 85.255.113.133,85.255.112.96
O17 - HKLM\System\CCS\Services\Tcpip\..\{F4338975-3202-4404-9008-804AE5964673}: NameServer = 85.255.113.133,85.255.112.96

optional >
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
====================================
Hit fix checked and close Hijackthis.
Restart the PC
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Post a fresh hijackthis log please, be sure to mention any current problems.

Note: If there are connection problems >
Before doing this write down all the settings, Note that not all system/setups even have these settings, While some connection service's will require them.
(These instruction's are basicly for home users.)
In the windows control panel. If you are using Windows XP's Category View, select the Network and Internet Connections category otherwise double click on Network Connections. Then right click on your default connection, usually local area connection for cable and dsl, and left click on properties. Double-click on the Internet Protocol (TCP/IP) item and select the radio dial that says Obtain DNS servers automatically
Press OK twice to get out of the properties screen and reboot if it asks.
That option might not be avaiable one some systems

Also: Download and run blacklite
F-Secure Blacklight: http://www.f-secure.com/blacklight/try.shtml
click > scan then > next, next again then exit
there will be a new txt near blacklite. post it please.
Do not rename any files yet

[Black_Knyght]

I'll do as you suggest, but I'm curious as to what it is you're concerned with. Just as a FYI, so I have some clue what's happened here. Thanx.

[tashi]

Black_Knyght, are you still with us?

[tashi]

This topic will be archived.
If you need it re-opened please send a message to myself or a malware removal helper with a link to this thread.

I will let Lonny know you are back.

Cheers. tashi

[Black_Knyght]

I ran "Blacklite" as suggested, and here are the results. I cannot seem to find Hijackthis again, so is it possible that you could post a link to it for me ?

[LonnyRJones]

Black_Knyght Hi

First Make a new folder, example C:\AntiSpyWare
and download/Save HijackThis, to that new folder.
This is necessary to ensure you have backups should anything go wrong
http://www.merijn.org/files/HijackThis.exe
Double click HijackThis.exe, Hit None of the above, just start the program.
Hit Scan When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log somewhere, and please show us its contents.

[tashi]

Last call Black_Knyght then final archive. ;)

[tashi]

Hello, this topic will now be archived to prevent others with similar issues posting in it.