View Single Post
  #4 (permalink)  
Old 23-06-2009, 08:08 PM
Neal's Avatar
Neal Neal is offline
Senior Member
 
Join Date: Sep 2005
Posts: 5,524
Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!Neal is a D-A-L Rockstar!
Re: SystemSecurity and others, HJT log included

If you do not have an antivirus program you should not be on the internet without one, so here is a free and really good one:

Download FREE antivirus software - avast! Home Edition

From add/remove program look and see if these are there and uninstall please:

Viewpoint Manager etc.
eAcceleration Product Manager etc.
StopSign Update Manager etc.


REBOOT

Run hijackthis and click on "scan system only" button and put checks next to these:


R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - (no file)

O4 - HKUS\S-1-5-18\..\Run: [DelayShred] "C:\Program Files\McAfee\MSHR\ShrCL.EXE" /P1 /q C:\Users\Bridget\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\9VO51MM3\TCODE_~1.SH! C:\Users\Bridget\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\U4FT74JN\AIM_UA~2.SH! (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DelayShred] "C:\Program Files\McAfee\MSHR\ShrCL.EXE" /P1 /q C:\Users\Bridget\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\9VO51MM3\TCODE_~1.SH! C:\Users\Bridget\AppData\Local\MICROS~1\Windows\TE MPOR~1\Content.IE5\U4FT74JN\AIM_UA~2.SH! (User 'Default user')

O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)

O23 - Service: eAcceleration Notification Service (eac_notifysvc) - eAcceleration Corp - C:\Program Files\eAcceleration\Framework\eac_svc.exe
O23 - Service: eAcceleration Product Manager Service (eac_productsvc) - eAcceleration Corp - C:\Program Files\eAcceleration\Framework\eac_productsvc.exe
O23 - Service: McAfee Real-time Scanner (McShield) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe (file missing)
O23 - Service: McAfee SystemGuards (McSysmon) - Unknown owner - C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe (file missing)
O23 - Service: StopSign Update Manager - Unknown owner - C:\Program Files\Common Files\eAcceleration\eacsvc.exe (file missing)
O23 - Service: Viewpoint Manager Service - Unknown owner - C:\Program Files\Viewpoint\Common\ViewpointService.exe (file missing)



Please close ALL browser windows (including this one).

Everything closed out but hijackthis and click on "fix checked"



Now reboot into safe mode by tapping your F8 key upon restart and safe mode screen appears, select safe mode and press enter.


Navigate to these files or folders using Windows Explorer (OR Start -> Search) and delete (if present):


DELETE FOLDERS

C:\Program Files\McAfee
C:\Program Files\eAcceleration
C:\Program Files\Viewpoint

Then reboot back to normal mode and post a new hijackthis log and tell me what is going on now please.
__________________
Stalking and killing Spyware

Have we helped you? Please consider a donation to help keep D-A-L free. Click on donate below



MALWARE: READ FIRST Procedures:
|_ SpyBot V1.5 _|_ HijackThis Log __V2.0.2 _|




ASAP: promoting a high standard and quality of security support no matter where you seek help.

Reply With Quote