Home > Hijackthis Log > Hijackthis Log; Regarding W32.alcra.b

Hijackthis Log; Regarding W32.alcra.b

Infected By W32.alcra.b Started by elzosim , Dec 01 2005 10:38 PM This topic is locked 6 replies to this topic #1 elzosim elzosim Members 18 posts OFFLINE Local time:04:20 For information on the program click here.We ask that you post publicly so people with similar questions may benefit from the conversation.Was your question answered? With the help of this automatic analyzer you are able to get some additional support. AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! his comment is here

Then copy and paste the results back here. ___________________________________________________________ http://www.getfirefox.net JenyFur99 2 posts Forum MembersPosted 11 years, 80 days ago Hi, Im not sure what happened but I logged on today Read here for info on how to tighten your security. http://www.computing.net/security/wwwboard/forum/18005.html is about your problem. Everyone else please begin a New Topic.

AdAware Personal: http://www.lavasoft.de/ Use these programs to regularly scan your system for and remove many forms of spyware/malware. Mark it as an accepted solution!I am not a Comcast employee.Was your question answered?Mark it as a solution! 0 Kudos Posted by johnd ‎01-20-2006 09:07 PM Valued Contributor View All Member My computer is slow---My Blog---Follow me on Twitter.My help is ALWAYS FREE, but if you want to donate to help me continue my fight against malware -- click here!Asking for help

Check this link for an independent comparison of several anti-spyware programs: http://www.spywarewarrior.com/asw-test-guide.htm 10. Please then paste the contents of the text file to this thread, along with a new HijackThis log. Click "Yes" at the "Delete on Reboot" prompt. Cookiegal, Mar 25, 2006 #15 Sponsor This thread has been Locked and is not open to further replies.

Obviously, Spybot and Adaware aren't the cure-all. Check Turn off System Restore. WIndows Sharing Problem, Please help Translate © 2017 Advanced PC Media LLC, all rights reserved. http://www.hijackthis.de/ Service & Support HijackThis.de Supportforum Deutsch | English Forospyware.com (Spanish) www.forospyware.com Malwarecrypt.com www.malwarecrypt.com Computerhilfen www.computerhilfen.com Log file Show the visitors ratings © 2004 - 2017

I really appreciate the help I received from the forum. by weng27 / April 5, 2006 9:03 PM PDT In reply to: (NT) Please report back afterwards. Click "OK". You can obtain more information here: http://www.microsoft.com/technet/security/...s/mbsahome.mspx 2.

Here are a few notes to get you started, though:1.) Hijacked browser...delete all instances:* prosearching.com entries* as.starware.com* savewealth.com* mywebsearch.com* elitemediagroup.net2.) Nasty programs...fire at will:* C:\WINDOWS\win3209284286969.exe* C:\WINDOWS\gsjdtlzA.exe* C:\WINDOWS\system32\m4po0e73eh.dll* C:\WINDOWS\system32\FreezeScreenSaver.exe3.) C:\Program Files\winupdates\winupdates.exe / Everyone else please begin a New Topic. 0 Back to Virus, Spyware, Malware Removal · Next Unread Topic → Similar Topics 0 user(s) are reading this topic 0 members, 0 guests, In this case, if it's bad, it blocks automatically.Here are some links how to configure it properly:http://www.firewall-net.com/en/norton/config.phphttp://service1.symantec.com/SUPPORT/nip.n...=&osv=&osv_lvl=http://www.garykessler.net/library/is_nis.htmlBut as you said, the alerts started since you updated to SP2 and yes, this Username Forum Password I've forgotten my password Remember me This is not recommended for shared computers Sign in anonymously Don't add me to the active users list Privacy Policy

Browse

After the update finishes (the status bar at the bottom will display "Update successful"), click on the "Scanner" button in the left menu, then click on the "Start" button. this content Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site. Lily Back to top #6 miekiemoes miekiemoes Malware Killer Dog Malware Response Team 19,420 posts OFFLINE Gender:Female Location:Belgium Local time:10:20 PM Posted 08 December 2005 - 08:15 PM There are When you run Ewido for the first time, you will get a warning "Database could not be found!".

Click the System Restore tab. Click Apply and then click OK. AntispywareScanners---Antivirus Scanners---Firewalls---Online Scanners---Prevention---Help! weblink by John.Wilkinson / April 6, 2006 1:50 PM PDT In reply to: ok whats next...

If you need this topic reopened, please contact a staff member. files, apart from a couple of files that are undefined) and they are getting repaired and backed up by Norton. Please help!

Thanks again. 0 Kudos Posted by CajunTek ‎01-21-2006 11:26 AM Security Expert View All Member Since: ‎10-07-2003 Posts: 20,976 Message 7 of 7 (182 Views) Re: Browser Hijacked / Virus -

No, create an account now. Is there another page I can go to download? Return to Forum Home Latest Posts Wireless Nuisance Windows 7 On-screen keyboard HP envy printer AVAST - bcuengine.dll Issue New built Windows 10 Upgrade UAC Access Wireless icon yellow triangle My Here is my Hijacklog...Logfile of HijackThis v1.99.1Scan saved at 12:04:48 PM, on 8/13/2005Platform: Windows XP SP1 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exec:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exeC:\WINDOWS\System32\alg.exec:\Program Files\Norton AntiVirus\navapsvc.exeC:\WINDOWS\System32\nvsvc32.exeC:\Program Files\Softex\OmniPass\Omniserv.exeC:\Program Files\Softex\OmniPass\OPXPApp.exeC:\WINDOWS\Explorer.EXEC:\windows\system\hpsysdrv.exeC:\WINDOWS\System32\hkcmd.exeC:\HP\KBD\KBD.EXEC:\Program

I can find them all in the corresponding Norton's folder.Their original location was the Portal folder, which is inside the Quarantine folder of Norton Antivirus.The thing is that this W32.Alcra.B keeps As for NIS, it seems that I need to uninstall it now that SP2 is on. Register a free account to unlock additional features at BleepingComputer.com Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. http://intracom2008.com/hijackthis-log/hijackthis-log-request.html Windows Update: http://windowsupdate.microsoft.com/ If you have Word, Excel, Outlook or other Office programs installed.

Back to top #3 elzosim elzosim Topic Starter Members 18 posts OFFLINE Local time:04:20 PM Posted 08 December 2005 - 10:01 AM Hello and thanks so much for your response!I When installing, under "Additional Options" uncheck "Install background guard" and "Install scan via context menu". 2. For information on the program click here.We ask that you post publicly so people with similar questions may benefit from the conversation.Was your question answered? Spybot S&D: http://security.kolla.de/index.php?lang=en&page=download c.

Anyone else with a similar problem, please start a new thread. Terms of Service - Privacy Policy - Contact Please click here if you are not redirected within a few seconds.