Jump to content


  • Content Count

  • Joined

  • Last visited

About Nunis

  • Rank
    New Member

Previous Fields

  • System Specifications:
    HP Compaq nx9420 Intel T2400 1.83GHz 1GB RAM WinXP Pro SP2
  1. What was the point of simply copying my thread (title, intro, and all) and then just post your own log file? Wouldn't it be more helpful to someone trying to help you if you actually put down which antivirus / spyware removal tools you've used, and not just copy mine?
  2. Thanks again, pskelley. You're an absolute lifesaver. The Symantec leftover is probably from a previous installation of Norton that came with my computer when my company bought it. Thanks for the extra info as well. I'll be sure to read it through. I normally know what I am doing when it comes to the Internet (I work as a webmaster and web developer) but I have no idea how that malware got on there. I do know I owe you a pint though. Have a good weekend and thanks again!
  3. Well, what do you know, it finished just in time. Here are the logs. Malwarebytes' Anti-Malware Malwarebytes' Anti-Malware 1.19 Database version: 920 Windows 5.1.2600 Service Pack 2 16:53:13 2008-07-04 mbam-log-7-4-2008 (16-53-13).txt Scan type: Full Scan (C:\|D:\|) Objects scanned: 172912 Time elapsed: 47 minute(s), 2 second(s) Memory Processes Infected: 0 Memory Modules Infected: 0 Registry Keys Infected: 0 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 0 Memory Processes Infected: (No malicious items detect
  4. - I have removed SmitFraudFix now. - As for Notepad++, that is an actual application which I have installed. There's nothing suspicious about it. It's basically an extended version of Notepad, which I use for coding. - I then ran HJT again and did a "system scan only" and then checked iifeCstt.dll and "fixed this". It removed the file I believe. - ATF Cleaner instructions followed too. That all went fine. - Now I'm scanning with Malwarebytes' Anti-Malware. It's been going for about 10 minutes already, and I expect it will take some time. However, this is my work comput
  5. First of all, thanks again for your help, don't worry about someone else posting in this topic, and I apologise for quoting your post... Now, I've done what you said. I have removed all localhost entries from the rapport.txt file, and below is the output. Also, from just clicking around Explorer and IE now, it appears the problem is gone. If that is indeed the case, I don't even know how to thank you. If this is fixed, you've saved me hours and hours of backing up and reinstalling my entire OS. Ps. I did "Restore Trusted Zone", although I am not entirely sure what that does. And I
  6. Thank you, pskelley. I have done exactly as you said, and here's the rapport.txt output. SmitFraudFix v2.328 Scan done at 9:44:57,40, 2008-07-04 Run from C:\Documents and Settings\Administrat”r\Skrivbord\SmitfraudFix OS: Microsoft Windows XP [Version 5.1.2600] - Windows_NT The filesystem type is NTFS Fix run in normal mode »»»»»»»»»»»»»»»»»»»»»»»» Process C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Syste
  7. Hi everyone. I have been lucky enough to escape most viruses, but now I have a Trojan and I'm out of ideas. I'm sure you've seen the message before. When I open IE (which I normally never use) or open ANY folder in Explorer, I get a popup warning which reads: "Attention [name]! Some dangerous viruses detected in your system. Microsoft Windows XP files corrupted. This may lead to the destruction of important files in C:\WINDOWS. Download protection software now! Click OK to download the antispyware. (Recommended)" And then two buttons. No matter what I click, I am taken to a fak
  • Create New...