Jump to content

Change Mode

Indrid_Cold

Trusted Malware Techs
  • Content Count

    16
  • Joined

  • Last visited

About Indrid_Cold

  • Rank
    Member

Contact Methods

  • Website URL
    http://
  • ICQ
    0

Previous Fields

  • Teams:
    Nothing Selected
  1. Wonderful news Doug! I am not familiar with CounterSpy, but after doing a little looking, I notice it has been given some rave reviews. Thank you for a new weapon to wield during battle. Best, IC -
  2. Thank you for the kind thoughts DougH. You are most welcome. It was my pleasure. To reduce the potential for spyware infection in the future, I recommend installing the following free products SpywareBlaster: It will prevent spyware from being installed and consumes no system resources. SpywareBlaster SpyWareGuard: It offers realtime protection from spyware installation attempts. SpywareGuard IE/Spyad: It places over 4000 websites and domains in your IE's restricted zone. IE-SPYAD I would also recommend that you read this thread written by Expert Tony Klein. So how
  3. These entries have shown up in your previous logs. These entries are just a matter of preference. You can change your start page to any URL you desire any time you desire. This is a Spybot BHO. The file 'SDHelper.dll' should be listed. If this was just a CutnPaste error no problem. If the file is now missing in your log, uninstall Spybot and reinstall it to fix. Go ahead and fix this entry. If you want this entry gone, I would suggest looking in Add/Remove Programs first before fixing with HJT. I would again suggest you look to remove these entries through Add/Remove Progra
  4. Hi Doug. Unsure why you are listing some of these entries from the log. The last log you posted is clean as a hound's tooth. At this point I can only assume you may have some process/es running that are taking up cycles. If they are bad, none of the security apps we/you have run are identifying them. My advice would be to carefully look over what processes are running on the PC. Google them and if you find no information on the file or the only hits that show up are in the malware forums, they are most likely bad. Here is a tool that may offer some assistance. Find out detail
  5. I will do my best to address your concerns. I would recommend that you hold off with any updates until you are clean. Let's see how things progress after removing those Trojans in the mwav log. Though I can understand your inital suspicion, my guess would be this is nothing more sinister then a coincidental hardware failure. You may find these links enlighting. Castlecops McAfee Those .js files are JScript While that does not mean that they are malware, they can be. You may want to Google those and if you find they are bad, remove them. If you are denied access, they may be r
  6. You are most welcome DougH Let's turn over a few more rocks to see what else we may find. - Download eScan's mwav application HERE *Launch mwav *Select all local drives *Scan all files *Click 'scan' When it has completed, what was found will be displayed in the lower pane. Highlight it, press CTRL C and then paste it here.
  7. Except for a few minor entries that log looks good. You mentioned having uninstalled NetZero so I have included a few leftovers entries to clean up. Place a check mark for these entries. R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-us7.hpwis.com/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-us7.hpwis.com/ O8 - Extra context menu item: Display All Images with Full Quality - res://C:\Program Files\NetZero\qsacc\appres.dll/228 O8 - Extra context menu item: Display Image with Full Quality - res://C:\Program Fi
  8. Harmless. That is the Internet Explorer Radio Bar. Also harmless. Software Publisher's Description MarketBrowser allows investors to monitor and analyze their most important investments at a glance from a convenient PC desktop toolbar. Track every individual stock, mutual fund or an index; pivot to stock research sources on the Web; quickly run studies like moving averages, spreads and oscillators; chart and manipulate economic data. O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) Again harmless. Real.com button. Known bug in HJT where it will
×
×
  • Create New...