O4 - Global Startup: Cisco Systems VPN Client.lnk = C:\Program Files\Cisco Systems\VPN Client\vpngui.exe O4 - HKCU\.\Run: C:\DOCUME~1\WILKER~1\LOCALS~1\Temp\winlogin.exe O4 - HKCU\.\Run: C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\.\Run: "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\.\Run: "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\.\Run: rundll32.exe "C:\WINDOWS\atejifoh.dll",e O4 - HKLM\.\Run: rundll32.exe "C:\WINDOWS\Hbawe.dll",e O4 - HKLM\.\Run: C:\DOCUME~1\WILKER~1\LOCALS~1\Temp\winlogin.exe O4 - HKLM\.\Run: "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\.\Run: C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\.\Run: C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN O4 - HKLM\.\Run: "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\.\Run: "C:\Program Files\Dell\MediaDirect\PCMService.exe" O4 - HKLM\.\Run: "C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe" O4 - HKLM\.\Run: C:\WINDOWS\system32\KADxMain.exe O4 - HKLM\.\Run: C:\Program Files\Dell\QuickSet\quickset.exe O4 - HKLM\.\Run: RUNDL元2.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\.\Run: rundll32.exe nvHotkey.dll,Start O4 - HKLM\.\Run: RUNDL元2.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\.\Run: C:\Program Files\DellTPad\Apoint.exe R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostį2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = //en_us?hl=en&client=dell-usuk&channel=us-smb&ibd=6080408 MSIE: Internet Explorer v6.00 SP3 (.5512)Ĭ:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exeĬ:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exeĬ:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exeĬ:\PROGRA~1\MI6841~1\MSSQL$~1\binn\sqlservr.exeĬ:\Program Files\Dell Support Center\bin\sprtsvc.exeĬ:\PROGRA~1\MI6841~1\MSSQL$~1\binn\sqlagent.exeĬ:\Program Files\Java\jre1.6.0_07\bin\jusched.exeĬ:\Program Files\Dell\QuickSet\quickset.exeĬ:\Program Files\Dell\MediaDirect\PCMService.exeĬ:\Program Files\Brother\Brmfcmon\BrMfcWnd.exeĬ:\Program Files\Brother\ControlCenter3\brccMCtl.exeĬ:\Program Files\Dell Support Center\bin\sprtcmd.exeĬ:\Program Files\ESET\ESET NOD32 Antivirus\egui.exeĬ:\Program Files\Brother\Brmfcmon\BrMfimon.exeĬ:\Program Files\Digital Line Detect\DLG.exeĬ:\Program Files\Logitech\SetPoint\SetPoint.exeĬ:\Program Files\PGP Corporation\PGP Desktop\PGPtray.exeĬ:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqlmangr.exeĬ:\Program Files\Windows Desktop Search\WindowsSearch.exeĬ:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXEĬ:\Program Files\Malwarebytes' Anti-Malware\mbam.exeĬ:\Program Files\HiJackThis\HiJackThis.exe
#HP 5590 SCANNER HPQKYGRP.EXE NOT FOUND FULL#
Subsequent Malwarebytes Full scan log showed cleaned item Initial Malwarebytes Quick scan log showing cleaned itemsģ.
I am not comfortable that the machine has been completely cleared of the infection and would appreciate it if someone could take a look at the following logs and provide guidance.Ģ. I should add that the machine has been disconnected from the Internet for the full time since I first downloaded MalwareBytes and changed AntiVirus tools from McAfee to NOD32. There have been no further notices from NOD32 of attempts to infect in the last 24 hours. I have since gotten clean scans with no errors reported from both MalwareBytes and NOD32. I reran MalwareBytes in the full scan mode and one additional item was cleaned. At this point I noticed that MalwareBytes also has a full scan mode. I let the box sit for a while and was rewarded with notices of NOD32 capturing and blocking attempts by one or more rogue processes on the machine to reinstall the infection. This was followed by reruns of MalwareBytes and NOD32 that reported no problems. I then followed with a full virus scan using NOD32 which also found and cleaned a number of items. The first MalwareBytes "Quick scan" found and cleaned a number of items. Following the instructions in the "You Must Read This Before Posting" post, I have performed several runs of the MalwareBytes Anti-Malware tool and the NOD32 antivirus tool.
I am having some difficulty with one or more Trojans that have infected my system.
0 kommentar(er)
