#1
Member
Profile: Join Date: Jul 2008
Posts: 34
Computer Experience:
[InActive] system alert malware threats
Hi there, RAM : 446 MB (17% free)SP3 (WinNT 5.01.2600)http://go.microsoft.com/fwlink/?LinkId=69157 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=54896 http://go.microsoft.com/fwlink/?LinkId=69157 http://www.expresstoolie.com/redirect.php (file missing)http://www.expresstoolie.com/redirect.php (file missing)http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab http://www.update.microsoft.com/micr...?1219071396812 http://h20270.www2.hp.com/ediags/gmn...tDetection.cab http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab http://fpdownload2.macromedia.com/ge...sh/swflash.cab HD ---- C:\WINDOWS\$NtUninstallKB957097$HD ---- C:\WINDOWS\$NtUninstallKB954459$HD ---- C:\WINDOWS\$NtUninstallKB955069$HD ---- C:\WINDOWS\$NtUninstallKB958644$HD ---- C:\WINDOWS\$NtUninstallKB956803$HD ---- C:\WINDOWS\$NtUninstallKB956391$HD ---- C:\WINDOWS\$NtUninstallKB957095$HD ---- C:\WINDOWS\$NtUninstallKB954211$HD ---- C:\WINDOWS\$NtUninstallKB956841$HD ---- C:\WINDOWS\$NtUninstallKB938464$HD ---- C:\WINDOWS\$NtUninstallKB954154_WM11$AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-08-11 39424]PCI Fast Ethernet Adapter Driver for NDIS51; C:\WINDOWS\system32\DRIVERS\sisnicxp.sys [2004-11-05 32768]SP2 (KB936181)-->MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}PCI Fast Ethernet Adapter Driver-->C:\WINDOWS\SiS\900\Uninst.exeJS ;.JSE;.WSF;.WSH
Didn't find the information you thought to find?Similar Threads
#2
Malware Analyst
Profile: Join Date: Nov 2008
Location: Illinois USA
Posts: 294
Computer Experience:
Please temporarily disable real-time protection applications as they may interfere with running some of the programs needed to eradicate infections. Check the list in How To Temporarily Disable Your Anti-virus, Firewall And Anti-malware Programs SmitfraudFix (by S!Ri)Safe Mode :When the machine first starts again, tap the F8 key repeatedly before Windows starts
You are presented with a Windows XP Advanced Options menu.
Select the option for Safe Mode using the arrow keys.
Press Enter to boot into Safe Mode.
SmitfraudFix smitfraudfix.cmd Clean by typing 2 and press Enter (Deletes infected files)Y (yes) and hit Enter in order to remove the Desktop background and clean registry keys associated with the infection. Y (yes) and hit Enter to restore a clean file. fgfRandom's System Information Tool (RSIT) C:\rapport.txt , and the new RSIT Log.txt in your reply.
Last edited by Aaflac; 4th December 2008 at 17:29 .
#3
Member
Profile: Join Date: Jul 2008
Posts: 34
Computer Experience:
new RSIT log
I also removed avg and installed avast! as avg would no longer update.RAM : 446 MB (22% free)SP3 (WinNT 5.01.2600)http://www.andrewtrojner.ca/ http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab http://www.update.microsoft.com/micr...?1219071396812 http://h20270.www2.hp.com/ediags/gmn...tDetection.cab http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab http://fpdownload2.macromedia.com/ge...sh/swflash.cab HD ---- C:\WINDOWS\$NtUninstallKB957097$HD ---- C:\WINDOWS\$NtUninstallKB954459$HD ---- C:\WINDOWS\$NtUninstallKB955069$AMD Processor Driver; C:\WINDOWS\system32\DRIVERS\AmdK8.sys [2004-08-11 39424]PCI Fast Ethernet Adapter Driver for NDIS51; C:\WINDOWS\system32\DRIVERS\sisnicxp.sys [2004-11-05 32768]
#4
Member
Profile: Join Date: Jul 2008
Posts: 34
Computer Experience:
SmitFraudFix report
SmitFraudFix v2.381
#5
Malware Analyst
Profile: Join Date: Nov 2008
Location: Illinois USA
Posts: 294
Computer Experience:
Looks as if the SimtfraudFix Display Customize Desktop Web tab My current home page HijackThis Fix checked AskBarDis Smitfraudfix report, and a new HijackThis log in your reply.
All times are GMT +1. The time now is 20:05 .
isabled:Internet Explorer"
