Search:

After researching similar problems. I've decided to throw in the towel and reformat. Thanks for looking.

Please delete.

My computer has been hijacked. In the process of transferring vital files from the infected machine to a clean machine, my flash drive was also infected for a time. I was able to use Malwarebytes on...

Nothing that I can tell.

Thanks for all your help and your prompt replies!

Nevermind, I used Run -> cmd to delete it.

I can't see C:\WINDOWS\Downloaded Program Files\Eikev.dll in its folder.

I have already set Windows Explorer to view all hidden files and Windows Search does not detect the file either.

Any...

Yes, but I do not need it. Everything in that folder can be deleted.

C:\WINDOWS\Downloaded Program Files\Eikev.dll

a-squared 4.0.0.73 2008.12.27 Riskware.AdWare.Win32.Agent!IK
AhnLab-V3 2008.12.25.0 2008.12.27 -
AntiVir 7.9.0.45 2008.12.26 ADSPY/Agent.R...

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7 REPORT
Saturday, December 27, 2008
Operating System: Microsoft Windows XP Home Edition...

I did not copy it correctly, here's the second try.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:18:11, on 2008-12-26
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet...

Here's the requested logs, thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:09:24, on 2008-12-25
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Here are the logs as requested. Thanks.


ComboFix 08-12-24.01 - Owner 2008-12-25 7:14:51.3 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.936.1.2052.18.735.447 [GMT 8:00]
执行位置:...

ComboFix 08-12-23.01 - Owner 2008-12-24 21:28:47.2 - FAT32x86
Microsoft Windows XP Home Edition 5.1.2600.3.936.1.2052.18.735.463 [GMT 8:00]
执行位置: c:\documents and settings\Owner\桌面\ComboFix.exe
....

Acdsee 5.0 正式迷你中文版
Adobe Acrobat 5.0
Adobe Flash Player 10 Plugin
Adobe Flash Player 9 ActiveX
Adobe Flash Player ActiveX
Adobe Photoshop 7.0 中文版
Adobe Reader 7.0 - Chinese Simplified
ArcSoft...

Here's the new HJT log.

Thanks

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:37:16, on 2008-12-24
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00...

Rising is the name of the antivirus program on this computer. For reasons unknown to me (because the program is largely in Chinese) I was unable to temporarily disable its monitoring or close it from...

Here are the requested logs. Again I apologize, some of the headings and file names are in Chinese because of the Chinese OS.

ComboFix 08-12-23.01 - Owner 2008-12-24 6:49:26.1 - FAT32x86...

Here's the new log as specified.

Thanks so much.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:39:51, on 2008-12-23
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet...

Hello:

I have a Virtumonde and Vundo problem on a family member's computer. I am posting from China and some of the file names are in Chinese. I don't think this will be a problem, but please let...

I noticed that my CPU is running at 100% all the time, with nine svchost.exe processes running.

Here's the ComboFix log:


ComboFix 07-09-18.4 - "Mr. Tang" 2007-09-18 14:37:48.1 - NTFSx86 ...

Hi

I deleted the file and noticed some differences. I used to be unable to watch streaming divx video, the audio would be fine, but the video would lock. That problem has now disappeared.
...

Here's the F-secure log:

Scanning Report
Sunday, September 16, 2007 13:24:53 - 23:33:31

Computer name: DAVID
Scanning type: Scan system for viruses, rootkits, spyware
Target: C:\
Result: 17...

Hello. For the past few days my computer has been locking up when I am online. I have no popups or other obvious hijacks but my firewall is popping up with strange stuff. Please take a look at my HJT...

I deleted everything you told me, there doesn't seem to be anymore evident problems. Thanks!

Here's the new HJT
Thanks!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:48:14 AM, on 7/21/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2...

The Second Part:


C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application...

Here's the first part of the Kaspersky Log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, July 21, 2007 11:43:34 AM...

Here's the new HJT log:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:19:39 PM, on 7/20/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2...

Here's the new HJT logfile. Thanks.


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:17:43 PM, on 7/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00...

I ran ComboFix a yesterday while waiting and I ran HJT again.

Here is the new HJT:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:13:47 PM, on 7/18/2007
Platform: Windows XP SP2...

It seems I was infected by Virtumonde and WinAntiSpyware 2007 and other stuff. I ran eTrust Antivirus Web Scanner but could not find an option to save a log so I will just post the HJT log. Thanks...

Hi

Everything seems to run better. I used to have nslookup.exe freeze on me after awhile every time I booted up. But now it seems to be fine. I also had a box pop up every time i booted up saying...

Here's the Kaspersky log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, June 17, 2007 10:43:42 PM
Operating System:...

Here's the HijackThis log:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 10:45:43 PM, on 6/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running...

Kaspersky log:

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Sunday, June 17, 2007 5:31:02 PM
Operating System: Microsoft...

HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 5:33:17 PM, on 6/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:...

Here's the HiJackThis log:

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 9:13:51 PM, on 6/16/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running...

Here's the ComboFix:

ComboFix 07-06-13.3 - C:\Documents and Settings\Mr. Tang.DAVID\Desktop\ComboFix.exe
"Mr. Tang" - 2007-06-16 21:11:43 - Service Pack 2 NTFS


((((((((((((((((((((((((( ...

Here is the ComboFix log:

ComboFix 07-06-13.3 - C:\Documents and Settings\Mr. Tang.DAVID\Desktop\ComboFix.exe
"Mr. Tang" - 2007-06-16 18:41:15 - Service Pack 2 NTFS

...

Hello

I was online when a one of those "online virus scanning" software installed itself I deleted it and my sophos popped up with a bunch of viruses. I ran Spybot and removed stuff the best I...