lgoncalves

Members
  • Content Count

    38
  • Joined

  • Last visited

Everything posted by lgoncalves

  1. Hi Chuck, thanks for your help. I have run Adwcleaner and junkware cleaner and I attached the logs. Malwarebytes did not find anything. However, after I run adwcleaner I could not connect to any network anymore. In wireless mode the PC detect the access point, but it did not get any IP address. When I check on network and sharing center the ethernet port did not get IP address. I think I have to make system restore. Please help. AdwCleanerS0.txt JRT.txt Malware.txt
  2. Hi, my wife installed some program to download music and after that constantly pop ups open when I click anywhere on chrome and firefox. Please I need some help to clean it up, because malwarebytes antimalware scan did not find anything.
  3. Hi, Below is the log from hijackthis. Please help because my PC is too slow. I have got Windows XP Logfile of Trend Micro HijackThis v2.0.4 Scan saved at 11:18:51 PM, on 3/10/2011 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Intel\Wireless\Bin\EvtEng.exe C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe C:\W
  4. Hi, My PC gets extremely slow and I could not work on it until I kill firefox process or acrobat process. There is a svchost.exe process that eats all memory and the PC stops responding. I would like some help on this issue
  5. Hi, I have run ComboFix /u and Combofix was uninstalled. Now the PC is running good, and I have installed Avira as Antivirus. It found a trojan in System Volume folder (File is A0005777.exe) However I was searching on Internet the about "sfc /scnanow" event. I have got a I386 folder in "c:\windows" and I have checked in registry the source path and it is OK. I have copied the I386 folder to C:\, i have changed the source path to "c:\", but I have got the same message. I think it is something wrong about service pack folder. What can I do? Best regards
  6. Hi Sarah, I could not find my windows installation CD. When I have run sfc /scannow showed that it will be needed copy some files to dll cache. I would like if you could recommend any good antivirus an any good firewall, because I uninstalled the original antivirus. Now I can log in windows, but I am worried about the missing files that it were detected. Thanks a lot for your help. Following the combofixlog: ComboFix 09-01-19.05 - Yamileth_Dominguez 2009-01-20 23:06:54.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.543 [GMT -4.5:30] Running from: c:\documents a
  7. Hi, Thanks if you can help me. I have got a malware, because my PC is slow. I could see process that I did not see in the past. I have tried with avast and malware bytes, but it is still there. Following is the hijackthis logÑ Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 08:08:52 p.m., on 12/01/2009 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe
  8. Hi Sarah, Give me a couple of days, because I am on a job trip. Thank you very much
  9. Hi, Sorry for the uploads. Here is the combofix.log: ComboFix 09-01-05.05 - Yamileth_Dominguez 2009-01-06 16:41:16.2 - NTFSx86 NETWORK Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1014.760 [GMT -4.5:30] Running from: c:\documents and settings\Yamileth_Dominguez\Desktop\ComboFix.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . c:\windows\system32\userinit.exe . . . is infected!! . ((((((((((((((((((((((((( Files Created from 2008-12-06 to 2009-01-06 ))))))))))))))))))))))))))))))) . 2009-01-02 10:40 . 2009-
  10. Hi Sarahw, Happy new year! Following the activities I have run, according to your recommendations: - Run Hijackthis and fix check the entries - Run killbox.exe. I tried twice delete on reboot both file paths, but I think it failed. I never found "C:\autorun.exe" neither before nor after (I think is hidden) and "c:\windows\wt" is still there. Attached you will find the hijackthis log and killbox.exe log. I have tried log in but it happens the same gets me back off. I have just log in safe mode. Thanks kb.txt hijackthis.txt
  11. Hi, The Spybot, Search and Destroy is uninstalled. However, in register section of log I could see registry entries about spybot. Attached is the fresh hijasckthis.log. Thanks again hijackthis.txt
  12. Hi Sarahw, I have run combofix tool as guide says; only one difference: when it finished, it asked for reboot and the computer restarted automatically. Attached you will find the Combofix.txt log. I cannot still log in windows xp. Thanks in advance ComboFix.txt
  13. Hi, I am running windows xp s 2 and I got on a web page << removed site >> and my computer got a virus that I could not remove. In addition, when I start the computer and I try to log in, the program gets me back to logon screen, something like a loop logon/logoff. I can just log on in safe mode and I have run hijackthis. The log is following: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 7:46:52 PM, on 12/21/2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Safe mode with network support Running processes: C:\WI