PDA

View Full Version : Rookie needs some spyware help!



DustBust
2007-07-30, 02:47
I'm new to spyware and need help removing a few problems.

I've run ad-aware and spybot S&D and have removed most of the issues on my comp.

However, 4 problems remain:
Command Service
Drive Cleaner 2006
Smitfraud-C.CoreService
Virtumonde

Here is the HJT Log, although I've never dealt with this and don't know what it means.


Command Service: Settings (Registry key, fixing failed)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService

Command Service: Settings (Registry key, fixing failed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService

Command Service: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\cmdService

DriveCleaner 2006: Program directory (Directory, fixing failed)
C:\Documents and Settings\All Users\Application Data\SalesMonitor\

DriveCleaner 2006: Program directory (Directory, fixing failed)
C:\Documents and Settings\All Users\Application Data\SalesMonitor\Data\

Smitfraud-C.CoreService: Settings (Registry key, fixing failed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\core

Smitfraud-C.CoreService: Settings (Registry key, fixed)
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\core

Smitfraud-C.CoreService: Data (File, fixing failed)
C:\WINDOWS\system32\drivers\core.cache.dsk

Smitfraud-C.CoreService: System file (File, fixing failed)
C:\WINDOWS\system32\drivers\core.sys

Virtumonde: Settings (Registry key, fixed)
HKEY_USERS\S-1-5-21-3269197944-3473674317-185426884-1009\Software\Microsoft\aldd


--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2007-07-26 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2007-05-23 advcheck.dll (1.5.3.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2007-01-02 Tools.dll (2.0.1.0)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2007-07-25 Includes\Cookies.sbi (*)
2007-07-25 Includes\Dialer.sbi (*)
2007-07-25 Includes\DialerC.sbi (*)
2007-07-11 Includes\Hijackers.sbi (*)
2007-07-25 Includes\HijackersC.sbi (*)
2007-07-25 Includes\Keyloggers.sbi (*)
2007-07-25 Includes\KeyloggersC.sbi (*)
2004-11-29 Includes\LSP.sbi
2007-07-25 Includes\Malware.sbi (*)
2007-07-25 Includes\MalwareC.sbi (*)
2007-07-11 Includes\PUPS.sbi (*)
2007-07-25 Includes\PUPSC.sbi (*)
2007-07-25 Includes\Revision.sbi (*)
2007-05-30 Includes\Security.sbi (*)
2007-07-25 Includes\SecurityC.sbi (*)
2007-07-11 Includes\Spybots.sbi (*)
2007-07-25 Includes\SpybotsC.sbi (*)
2005-02-16 Includes\Tracks.uti
2007-07-25 Includes\Trojans.sbi (*)
2007-07-25 Includes\TrojansC.sbi (*)
2007-06-06 Plugins\TCPIPAddress.dll

Thanx in advance to all your help.

tashi
2007-07-30, 04:03
Hello.

Looks like you got a little lost and missed each forums sticky topics. ;)

This is the malware removal forum and the procedure is here: "BEFORE you POST"(READ this Procedure before Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Questions regarding Spybot-S&D support can be asked here: http://forums.spybot.info/forumdisplay.php?f=4 But no HJT logs are to be posted in that forum.

Copy and paste the logs requested into this topic, and a helper will assist you as soon as available.


Cheers.

tashi
2007-08-06, 23:36
This topic has been moved to archives.

If you need the thread re-opened, please send me a private message (pm) and provide a link.

Applies only to the original poster, anyone else with similar problems please start your own topic.