Support Forums › Categories › Virus Protection, Removals, and HJT Team › Virus Removal, Hijack This Logs, and Support
I'm Infected

Thread Closed 
Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Threaded Mode
I'm Infected
Kutmustakurt Offline
Learner
*
Posts: 26
Threads: 6
Joined: Oct 2009
Reputation: 5
#11
10-20-2009, 03:07 AM
Sorry for interrupting.


Please run HijackThis, click Do a system scan only, and place a check next to the following line(s) if present:

Quote:F2 - REGConfusedystem.ini: UserInit=c:\windows\system32\userinit.exe

O4 - HKUS\S-1-5-18\..\Run: [SYS32DLL] SYS32DLL (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [SYS32DLL] SYS32DLL (User 'Default user')


Then, close all other open windows and click Fix Checked. Reboot.

We need to do a quick check on a file.
  • Go to Jotti.
  • Click Upload.
  • Copy and paste the exact file name in bold:
    • c:\windows\system32\userinit.exe
  • Click Submit.
  • Copy and paste back the results once Jotti has finished scanning the file.



Update MBAM to latest updates and perform a full system scan.

Post a fresh HJT log and MBAM log for your helper.
Find
Skawke Away
MeowDesu
****
Posts: 251
Threads: 17
Joined: Oct 2009
Reputation: 3
#12
10-20-2009, 03:42 PM
(10-20-2009, 03:07 AM)Kutmustakurt Wrote: Sorry for interrupting.


Please run HijackThis, click Do a system scan only, and place a check next to the following line(s) if present:

Then, close all other open windows and click Fix Checked. Reboot.

We need to do a quick check on a file.
  • Go to Jotti.
  • Click Upload.
  • Copy and paste the exact file name in bold:
    • c:\windows\system32\userinit.exe
  • Click Submit.
  • Copy and paste back the results once Jotti has finished scanning the file.



Update MBAM to latest updates and perform a full system scan.

Post a fresh HJT log and MBAM log for your helper.

Finally! I was hoping one of the HJT helpers would come here, lol. I'm not experienced enough to do this.
Free File hosting, includes direct linking, and free 1000 MB of space!
http://meowdesu.com
Find
Soldier of Fortune Offline
Learner
*
Posts: 34
Threads: 1
Joined: Oct 2009
Reputation: 7
#13
10-25-2009, 08:37 AM (This post was last modified: 10-25-2009, 08:38 AM by Soldier of Fortune.)
(10-20-2009, 03:42 PM)HaruhiSuzumiya Wrote: Finally! I was hoping one of the HJT helpers would come here, lol. I'm not experienced enough to do this.

Then don't post in this section until you finish your training. There aren't many cases to solve in here, so let kutmustakurt do them when he feels like doing it.

HJT section isn't even official on this forum yet, so nothing you do is a must-do.
Guys, sorry for interrupting xD
Find
Mia Offline
Java Programmer
***
Posts: 100
Threads: 22
Joined: Oct 2009
Reputation: 3
#14
10-25-2009, 08:43 AM
(10-19-2009, 08:45 AM)[V]VenDetta Wrote: If it still isnt removed then just format ur whole computer that will be the best option

And all of those 'precious' files are just junk that you would like to dump off of your computer.
Website Find
Thread Closed 


Possibly Related Threads…
Thread Author Replies Views Last Post
  I am Infected Give some good suggestions heartylover 11 3,935 03-12-2015, 03:19 AM
Last Post: TobyCordova
  Infected - Can't Start System Restore srcstcbstrd 2 1,512 08-17-2014, 11:39 PM
Last Post: Autopost
  [Think You're Infected?! LOOK HERE] Infested Cleaner [White Hat Heper] Infested Terran 11 4,571 02-08-2012, 08:39 PM
Last Post: AceInfinity
  Help. Infected with Adware.Toolbar.Dealio Resistance 3 3,495 11-27-2011, 11:47 AM
Last Post: Resistance
  i may be infected can you analyze this otl log please helpplease 6 2,715 11-23-2011, 08:58 PM
Last Post: Brandenx781

Forum Jump:


Users browsing this thread: 1 Guest(s)