Need help with a Virus?

2 thoughts on “Need help with a Virus?”

1. Rahul says:

   February 3, 2010 at 8:06 am

   Try kaspersky internet security.

2. Blondie says:

   February 3, 2010 at 8:06 am

   Bad or potentially dangerous processes are flagged red.
   Logfile of Trend Micro HijackThis v2.0.2
   Scan saved at 5:08:17 PM, on 9/12/2009

   Running processes:
   C:\WINDOWS\System32\smss.exe
   C:\WINDOWS\system32\winlogon.exe
   C:\WINDOWS\system32\services.exe
   C:\WINDOWS\system32\lsass.exe
   C:\WINDOWS\system32\svchost.exe
   C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
   C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
   C:\WINDOWS\System32\svchost.exe
   C:\Program Files\Ahead\InCD\InCDsrv.exe
   C:\WINDOWS\system32\spoolsv.exe
   C:\WINDOWS\Explorer.EXE
   C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
   C:\WINDOWS\mHotkey.exe
   C:\Program Files\Analog Devices\Core\smax4pnp.exe
   C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
   C:\WINDOWS\system32\ctfmon.exe
   C:\WINDOWS\eHome\ehRecvr.exe
   C:\WINDOWS\eHome\ehSched.exe
   C:\Program Files\Common Files\LightScribe\LSSrvc.exe
   C:\WINDOWS\system32\nvsvc32.exe
   C:\WINDOWS\system32\dllhost.exe
   C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
   C:\WINDOWS\system32\wuauclt.exe
   C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

   R1 – HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
   R0 – HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
   R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
   R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
   R1 – HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
   R0 – HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
   O2 – BHO: AcroIEHelperStub – {18DF081C-E8AD-4283-A596-FA578C2EBDC3} – C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper…
   O2 – BHO: BitComet ClickCapture – {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} – C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.1…
   O2 – BHO: (no name) – {5C255C8A-E604-49b4-9D64-90988571CECB} – (no file)
   O2 – BHO: Windows Live Sign-in Helper – {9030D464-4C02-4ABF-8ECC-5164760863C6} – C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
   O3 – Toolbar: BitDefender Toolbar – {381FFDE8-2394-4f90-B10D-FC6124A40F8C} – C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
   O4 – HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
   O4 – HKLM\..\Run: [CHotkey] mHotkey.exe
   O4 – HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
   O4 – HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
   O4 – HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
   O4 – HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
   O4 – HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes’ Anti-Malware\mbam.exe" /runcleanupscript
   O4 – HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
   O4 – HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
   O9 – Extra button: BitComet – {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} – res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.7.1… (file missing)
   O9 – Extra button: (no name) – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
   O9 – Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 – {e2e2dd38-d088-4134-82b7-f2ba38496583} – C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
   O9 – Extra button: Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
   O9 – Extra ‘Tools’ menuitem: Windows Messenger – {FB5F1910-F110-11d2-BB9E-00C04F795683} – C:\Program Files\Messenger\msmsgs.exe
   O16 – DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} – http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
   O23 – Service: BitDefender Arrakis Server (Arrakis3) – Unknown owner – C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
   O23 – Service: InCD Helper (InCDsrv) – Nero AG – C:\Program Files\Ahead\InCD\InCDsrv.exe
   O23 – Service: LightScribeService Direct Disc Labeling Service (LightScribeService) – Hewlett-Packard Company – C:\Program Files\Common Files\LightScribe\LSSrvc.exe
   O23 – Service: BitDefender Desktop Update Service (LIVESRV) – BitDefender SRL – C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
   O23 – Service:

   I posted your log on the analyzer site, nothing was in red.

Comments are closed.