Thread: Big time virus/malware

Delete all the [no file] and [file missing] entries, and read what I have next to the other entries in bold... I know it's not much help, but it's something.

Originally Posted by Kal El

Here's the log from my scan, anybody see anything that could be causing my problem? I've ran like 5 or 6 virus scans and still have the same problem. The spyware and anti-virus scans did pick shit up, but that was gone since the first scans.

log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 4:46:48 PM, on 11/30/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal


O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: (no name) - {FB21A27F-0ADC-46CA-8C37-6BAFB6E8E251} - (no file)

O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)

O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\Stephen\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing) Delete because it's pointing to a long gone file

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe May be infected... Google brings up numerous accounts; don't delete just yet

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe Same here, there shouldn't be two instances...

O20 - Winlogon Notify: winbjv32 - C:\WINDOWS\SYSTEM32\winbjv32.dll Infected. Run HijackThis in safe mode again and remove this. However, it may respawn if it's what I think it is.

O21 - SSODL: incestuously - {03413bf7-e34c-445b-bfc0-a2b127255871} - (no file)

O22 - SharedTaskScheduler: g322 - {A4F94C0C-54A7-4DB1-9AF3-B22E63D00322} - (no file)

O22 - SharedTaskScheduler: {03413bf7-e34c-445b-bfc0-a2b127255871} - incestuously - (no file)

O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing) Did you uninstall this program?

O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - C:\Program Files\Common Files\LightScribe\LSSrvc.exe You can probably disable this through msconfig if you don't use Lightscribe; wasted cycles

O23 - Service: MaxBackServiceInt - Unknown owner - C:\Program Files\Maxtor\Maxtor Backup\MaxBackServiceInt.exe (file missing)

O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)

I would still suggest Combofix if you can get it. I can Rapidshare that to you too if you'd like.