Malware Removal Forums

Help with hijack this log very much appreciated

davidwood156 · 2006-06-11T18:24:22+00:00

Hi, Have been suffering from an infection from runsrv32.exe, plus lots of other annoying malware. I have run spybot, adaware, smitfraudfix and ewido anti-malware 3.5 and think I have managed to get rid of most of the problems. I would be very grateful if one of you knowledgable chaps from this forum could interpret my hijack this log to see if i've missed anything. Thanks in advance Dave. Logfile of HijackThis v1.99.1 Scan saved at 19:11:23, on 11/06/2006 Platform: Windows XP SP1 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\System32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\System32\nvraidservice.exe C:\Program Files\Common Files\Real\Update_OB\realsched.exe C:\WINDOWS\SOUNDMAN

37 min read

davidwood156

June 16, 2006, 3:08 PM UTC

Hi Askey 127

I've been reluctant to install sp2 as a couple of friends have had problems afterwards.
Might give it a try and see how it goes though.

Thanks again
Dave.

askey127

June 16, 2006, 4:08 PM UTC

davidwood156,

There are all kinds of problems if SP2 is installed in a machine which already has malware infections! ..and who knows what condition the friends' machines were in when they tried it?

I would install it now while you are confident of your machine condition.
Good Luck with it.
askey127

'KotaGuy

July 3, 2006, 4:57 AM UTC

This topic is now closed. If you wish it reopened, please send us an email to 'admin at malwareremoval.com' with a link to your thread.

You can help support this site from this link :
Donations For Malware Removal

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.